This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft File: HgUGRdac54HkkMDzxJle5tTmB4s.mft (raw, json) Hash identifier: nVNIicRmnvkt9eekLND3o/QcmjVdg0ihppwvOR+sll8= Subject key identifier: D2:0B:FC:0E:26:C1:8D:23:C8:7C:60:4E:A2:49:1D:4A:82:7B:47:04 Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b Certificate serial: 019AF19ADF8230095CB254B565835692E4DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft Manifest number: 093B Signing time: Sat 06 Dec 2025 03:00:50 +0000 Manifest this update: Sat 06 Dec 2025 03:00:50 +0000 Manifest next update: Sun 07 Dec 2025 03:00:50 +0000 Files and hashes: 1: Cng8TcnIXSMG5gaf3EVbnwwbQjk.roa (hash: SlPAu0/v+q9AU8NTLPmY4PB0nlmzfGz86P4I7oW5+Ns=) 2: HgUGRdac54HkkMDzxJle5tTmB4s.crl (hash: 7NTufqe2HL7c9E6thXcoPCdrEM1JUA59O5a7kE5giWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:df:82:30:09:5c:b2:54:b5:65:83:56:92:e4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b Validity Not Before: Dec 6 03:00:50 2025 GMT Not After : Dec 7 03:00:50 2025 GMT Subject: CN=d20bfc0e26c18d23c87c604ea2491d4a827b4704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:d3:6f:39:36:d9:d9:e0:19:61:e2:ea:0f: 98:7d:d0:f6:ac:7e:7d:c4:f5:29:63:91:47:66:66: 60:b9:24:59:54:b1:ee:7c:e1:96:4c:d7:4d:95:df: 9f:76:35:ee:b3:27:b2:4c:bc:9a:de:74:f3:66:12: 23:53:31:9a:45:32:3b:d1:62:93:98:c4:19:2a:83: 76:33:18:59:15:7b:3a:bc:19:ea:59:f7:64:ba:7c: a1:53:5d:2c:f3:5d:e3:20:57:c5:82:d8:a1:8b:28: ad:a3:6a:73:38:96:69:28:72:3b:b3:cb:3b:42:44: 15:09:5f:10:38:fe:ba:6d:a1:13:5d:55:9d:c0:34: 6b:3f:66:cf:92:16:a1:fc:cb:07:47:75:47:30:d8: a3:b3:f3:8c:78:48:21:87:b9:77:6f:d5:47:7f:b6: ec:f4:ee:b1:5e:a0:3e:24:7d:fb:87:86:15:99:5a: 33:78:b7:8a:1e:78:9a:47:4b:c2:c3:f5:d9:b3:7a: e7:c9:4d:f8:af:93:ee:a8:c3:3d:c6:e3:06:26:df: b8:25:fd:c2:bf:c3:08:20:cb:e9:f5:14:19:09:e5: 97:01:b4:43:85:5f:fd:bf:8d:bf:5b:b7:2e:83:24: e0:ac:93:0b:37:bc:d6:50:10:2d:ea:6f:a7:ca:10: 1b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0B:FC:0E:26:C1:8D:23:C8:7C:60:4E:A2:49:1D:4A:82:7B:47:04 X509v3 Authority Key Identifier: keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:33:55:c1:ae:c4:4a:43:49:a4:a5:e8:78:88:0c:c3:36:c3: a8:11:76:4e:7d:a1:23:70:41:61:33:38:55:1e:fb:38:03:b9: 3d:e1:47:1d:ba:e5:dc:04:d3:2c:df:92:6e:94:e5:09:d8:40: af:05:1d:86:64:70:18:ea:59:b7:82:68:5c:37:a5:de:44:05: 19:a2:6a:80:6b:2b:a4:f5:3f:5f:d6:8e:93:b9:4f:6f:5e:cd: a8:6c:cd:90:51:58:6a:81:8e:d9:84:ce:83:73:81:24:08:1d: e7:5b:d2:e9:c9:eb:e3:2d:03:83:98:37:28:7f:d0:7e:82:8f: 64:58:96:61:fc:e6:31:81:87:33:68:a1:e9:58:60:ae:0e:91: 25:c1:4f:da:c8:50:36:76:19:a8:d2:c6:f9:dd:63:45:e2:6d: b6:55:88:37:a4:60:5b:3d:e2:5f:2b:e6:6f:94:56:cf:dd:18: a0:4d:b7:9d:b2:b4:2f:e7:e0:92:20:c0:f9:c1:70:18:af:bf: 8c:bb:1c:86:b2:28:22:3f:07:1f:22:fd:74:f0:5c:41:13:13: 98:14:c9:3e:9d:6d:f5:43:12:33:7f:ac:55:b3:c1:70:56:8f: 16:92:90:7b:2d:c8:69:87:b4:6f:72:28:8a:b0:3a:59:be:46: 99:0e:2d:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmt+CMAlcslS1ZYNWkuTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMDUwNjQ1ZDY5Y2U3ODFlNDkwYzBmM2M0OTk1ZWU2ZDRl NjA3OGIwHhcNMjUxMjA2MDMwMDUwWhcNMjUxMjA3MDMwMDUwWjAzMTEwLwYDVQQD EyhkMjBiZmMwZTI2YzE4ZDIzYzg3YzYwNGVhMjQ5MWQ0YTgyN2I0NzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0rTbzk22dngGWHi6g+YfdD2rH59 xPUpY5FHZmZguSRZVLHufOGWTNdNld+fdjXusyeyTLya3nTzZhIjUzGaRTI70WKT mMQZKoN2MxhZFXs6vBnqWfdkunyhU10s813jIFfFgtihiyito2pzOJZpKHI7s8s7 QkQVCV8QOP66baETXVWdwDRrP2bPkhah/MsHR3VHMNijs/OMeEghh7l3b9VHf7bs 9O6xXqA+JH37h4YVmVozeLeKHniaR0vCw/XZs3rnyU34r5PuqMM9xuMGJt+4Jf3C v8MIIMvp9RQZCeWXAbRDhV/9v42/W7cugyTgrJMLN7zWUBAt6m+nyhAbbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIL/A4mwY0jyHxgTqJJHUqCe0cEMB8GA1UdIwQY MBaAFB4FBkXWnOeB5JDA88SZXubU5geLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGdVR1JkYWM1NEhra01EenhKbGU1dFRtQjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jYjNhZjAtMDU2ZC00Mjc3LWE2ZGEt MjI3YTg2YzQ3MmNlLzEvSGdVR1JkYWM1NEhra01EenhKbGU1dFRtQjRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9jYjNhZjAtMDU2ZC00Mjc3LWE2ZGEtMjI3YTg2YzQ3MmNl LzEvSGdVR1JkYWM1NEhra01EenhKbGU1dFRtQjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTNVwa7E SkNJpKXoeIgMwzbDqBF2Tn2hI3BBYTM4VR77OAO5PeFHHbrl3ATTLN+SbpTlCdhA rwUdhmRwGOpZt4JoXDel3kQFGaJqgGsrpPU/X9aOk7lPb17NqGzNkFFYaoGO2YTO g3OBJAgd51vS6cnr4y0Dg5g3KH/QfoKPZFiWYfzmMYGHM2ih6Vhgrg6RJcFP2shQ NnYZqNLG+d1jReJttlWIN6RgWz3iXyvmb5RWz90YoE23nbK0L+fgkiDA+cFwGK+/ jLschrIoIj8HHyL9dPBcQRMTmBTJPp1t9UMSM3+sVbPBcFaPFpKQey3IaYe0b3Io irA6Wb5GmQ4tQA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:21 2025 by rpki-client