This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json) Hash identifier: yjGyc6j1nMBkOLB1Nd+uZmBrW86e4FX160pZbXoocnw= Subject key identifier: 5D:9D:9A:A6:E9:C9:8A:D6:9F:A2:F8:C7:1B:B2:4C:77:47:9A:59:77 Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Certificate serial: 019AF49C52362AE818363A42C10AC617CEE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:01:16 +0000 Manifest this update: Sat 06 Dec 2025 17:01:16 +0000 Manifest next update: Sun 07 Dec 2025 17:01:16 +0000 Files and hashes: 1: 1WUnRPC7TQDCpNLBGqvpavEUfIY.roa (hash: 9QvvOYrRTeWxJPVmSD6bFU7GJTKQU/1G/slvGit4Jc8=) 2: RNRuwUDah5HvDqZL8fLpyHsOiSQ.roa (hash: IBeeTINphPH0VAeRRmwtztVgI3ETdvS9ro285LvOBzI=) 3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: DFrvFDpfx58vmjZdW2wEGsxhMEx2ywt+Yd2xa45XV6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:52:36:2a:e8:18:36:3a:42:c1:0a:c6:17:ce:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Validity Not Before: Dec 6 17:01:16 2025 GMT Not After : Dec 7 17:01:16 2025 GMT Subject: CN=5d9d9aa6e9c98ad69fa2f8c71bb24c77479a5977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:86:ac:7c:e9:13:05:6d:09:46:ed:d3:67:c2: 09:d7:c0:f9:69:99:aa:82:8c:14:d1:bb:98:bf:ab: fd:c1:36:b5:67:41:e6:3b:9c:d9:0d:f2:10:53:f1: 49:e9:f1:90:99:45:5e:28:8c:d0:df:e0:63:28:b4: b5:fa:e8:4c:4b:d7:75:58:ea:8b:ec:0e:9a:4d:d7: c8:84:6b:1e:1f:75:eb:c9:71:47:49:c8:b0:1e:57: 63:e5:77:24:8e:3a:97:0a:65:f9:a6:9c:83:42:7a: 77:1e:2e:8d:17:88:3e:c0:ca:28:17:9d:b0:65:84: 89:00:5e:64:21:b9:da:06:cb:7f:32:ed:a5:74:64: a1:21:55:9a:aa:04:d5:3a:67:07:32:2f:f5:81:7b: ff:a1:1e:f8:0e:58:df:62:2d:58:c5:d2:08:10:6f: 75:0c:b6:ad:ab:e1:0a:57:2f:e1:40:8f:4a:a0:2f: 1e:c1:f9:75:d5:b6:8e:05:c6:f0:ae:27:3d:5d:d2: 8c:31:94:59:f0:ff:30:2c:81:e6:ff:ac:75:98:48: f1:d7:31:8f:55:5f:ae:79:45:04:bf:24:42:14:66: 2d:33:af:c0:a0:ca:55:9c:2c:15:c8:5c:ea:59:68: 51:34:15:64:c9:30:31:80:65:22:93:00:4c:da:23: f9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9D:9A:A6:E9:C9:8A:D6:9F:A2:F8:C7:1B:B2:4C:77:47:9A:59:77 X509v3 Authority Key Identifier: keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:75:58:af:86:ee:bc:8e:b8:44:3d:f8:d7:19:fd:0d:3a:ce: 6f:83:45:19:ab:13:46:07:25:5c:ef:0f:5b:72:f8:d3:a8:5f: eb:17:cd:c5:ac:a3:43:68:74:33:ea:7d:75:22:8e:4f:fc:93: e5:18:4d:42:24:7f:40:d2:8c:f2:40:41:03:bf:e1:2f:35:f7: 9f:86:5a:b9:35:94:bc:51:2a:f6:ca:8b:2d:56:ae:90:3b:62: d3:72:f3:37:90:5d:d9:0e:b8:01:05:8f:58:6f:59:9e:3e:50: 2e:17:b3:09:c7:26:3a:b6:1e:93:cf:27:ef:32:24:2d:2a:1a: 07:41:b6:e2:dd:ec:a2:9d:45:de:2c:b3:65:6f:bf:c3:e1:d9: ac:8c:2b:d4:df:d0:6b:75:88:d5:e2:cb:40:da:e9:c1:f4:ba: 81:45:e0:ed:f0:51:fa:c7:1f:11:9d:df:ae:ac:68:1e:5b:10: ac:90:4f:05:ae:c3:83:91:ab:e9:ee:a2:77:60:c7:96:bd:63: 6f:f2:79:21:df:67:ec:fe:3c:75:32:68:c3:fd:65:51:c2:1c: 49:95:85:4e:7c:4f:4d:23:14:b1:36:4e:4b:30:3f:5d:9f:04: 0f:e9:2e:a0:30:1c:61:1e:39:e5:4b:f8:e0:6f:0f:60:83:f2: 4c:c3:ee:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nFI2KugYNjpCwQrGF87hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh ZDJmMDkwHhcNMjUxMjA2MTcwMTE2WhcNMjUxMjA3MTcwMTE2WjAzMTEwLwYDVQQD Eyg1ZDlkOWFhNmU5Yzk4YWQ2OWZhMmY4YzcxYmIyNGM3NzQ3OWE1OTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54asfOkTBW0JRu3TZ8IJ18D5aZmq gowU0buYv6v9wTa1Z0HmO5zZDfIQU/FJ6fGQmUVeKIzQ3+BjKLS1+uhMS9d1WOqL 7A6aTdfIhGseH3XryXFHSciwHldj5XckjjqXCmX5ppyDQnp3Hi6NF4g+wMooF52w ZYSJAF5kIbnaBst/Mu2ldGShIVWaqgTVOmcHMi/1gXv/oR74DljfYi1YxdIIEG91 DLatq+EKVy/hQI9KoC8ewfl11baOBcbwric9XdKMMZRZ8P8wLIHm/6x1mEjx1zGP VV+ueUUEvyRCFGYtM6/AoMpVnCwVyFzqWWhRNBVkyTAxgGUikwBM2iP5mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2dmqbpyYrWn6L4xxuyTHdHmll3MB8GA1UdIwQY MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt MDZhNDk5NjhjMmQzLzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXVYr4bu vI64RD341xn9DTrOb4NFGasTRgclXO8PW3L406hf6xfNxayjQ2h0M+p9dSKOT/yT 5RhNQiR/QNKM8kBBA7/hLzX3n4ZauTWUvFEq9sqLLVaukDti03LzN5Bd2Q64AQWP WG9Znj5QLhezCccmOrYek88n7zIkLSoaB0G24t3sop1F3iyzZW+/w+HZrIwr1N/Q a3WI1eLLQNrpwfS6gUXg7fBR+scfEZ3frqxoHlsQrJBPBa7Dg5Gr6e6id2DHlr1j b/J5Id9n7P48dTJow/1lUcIcSZWFTnxPTSMUsTZOSzA/XZ8ED+kuoDAcYR455Uv4 4G8PYIPyTMPuEw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:43 2025 by rpki-client