This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft File: HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft (raw, json) Hash identifier: mXbPL9x47arZegVzQlV7IjMzQiN2VFHC+atAqDXHQek= Subject key identifier: 9D:81:2D:E0:4A:8C:25:DE:25:58:C9:BE:07:9A:95:04:A7:AC:9C:DC Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34 Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34 Certificate serial: 019AF3F7B2035CE37FB53E7CA704A0401D9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 14:01:27 +0000 Manifest this update: Sat 06 Dec 2025 14:01:27 +0000 Manifest next update: Sun 07 Dec 2025 14:01:27 +0000 Files and hashes: 1: HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl (hash: FXHqojSQsU2YWW8V2KKtkD/1AcZq7eIzeepFDn8dRdE=) 2: HKyKcuG2QNZXVCZbzlsSYd8S3kw.roa (hash: WsComY/xpr7CRKjl1OS19nvkdUYgY57xLKmt+FoyLxs=) 3: NMYTYXjVSSW_zjS5UcL1_MJYMhw.roa (hash: sb8TB9OQXYjgHET+s0jEt1SW4MRtm0F3nj4wUyz73j8=) 4: OL6AoyvltIWrfared4b30q9zkxI.roa (hash: BCZJFaW2H8wcaghHXjKzyZLLD5xoj/h4op/UrSZpM4s=) 5: cdvkytGTuhzfI_n3jlQrgir1LVg.roa (hash: bDSSCJ1WplO8Ib0UIaI2qA5CZAt1v6VMlLCWW3FIaSk=) 6: jLAxUa8xvZ_xtGFLN3MZzH02ngY.roa (hash: 2KcY9b/rNpgICtwXDDn50o8m8wTGL/9zVFvIOuzYcZI=) 7: jwz6PrQFhFvB8Ouuwat3y2nONuA.roa (hash: TxTry85XsPky+PSHHeTZJCkAX90hbYBwkf2e2x38QSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b2:03:5c:e3:7f:b5:3e:7c:a7:04:a0:40:1d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34 Validity Not Before: Dec 6 14:01:27 2025 GMT Not After : Dec 7 14:01:27 2025 GMT Subject: CN=9d812de04a8c25de2558c9be079a9504a7ac9cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e6:37:88:1f:ee:63:7c:4c:5b:78:c5:e4:ba: 43:67:62:be:46:39:55:20:34:0a:d2:72:c1:e2:2a: 2f:30:b5:14:20:56:53:a2:73:57:bb:c5:a3:51:18: d0:d0:83:1e:1c:ee:1b:37:2e:24:9d:03:df:82:57: 2a:5a:a2:c4:a2:14:0a:6e:7e:9f:57:54:5f:87:f6: 9f:59:a5:f0:6b:e6:5c:56:09:c1:3d:99:6d:af:28: fe:d7:03:f7:c4:49:13:bb:42:88:8f:a8:90:7a:6c: 5d:5a:c3:2f:3f:82:1a:18:1c:1a:62:f3:27:f2:43: 42:9a:36:7a:c9:02:84:83:88:3f:9c:06:88:cd:0c: bb:20:58:4d:ab:b3:ba:e5:5a:38:ac:58:10:cf:3f: 89:04:5d:46:99:74:43:43:9b:f6:4e:94:f8:e0:71: 97:ec:7f:f0:5e:58:30:0b:a2:87:52:d0:6a:c3:81: 3d:25:22:74:55:0f:45:80:ca:eb:ad:da:c2:d4:b2: fc:98:53:ab:e8:0d:73:bf:69:be:d7:5e:8e:ee:65: 8b:c7:0b:55:d1:92:ba:c3:13:4b:71:7f:99:5b:30: 04:9e:0f:f9:a9:26:c0:cd:bc:f7:78:90:10:53:ef: 7a:ea:71:40:5b:b4:93:16:f7:ca:a4:a5:81:f7:74: b9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:81:2D:E0:4A:8C:25:DE:25:58:C9:BE:07:9A:95:04:A7:AC:9C:DC X509v3 Authority Key Identifier: keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:73:e8:06:e2:0e:ee:0c:9e:ec:ba:55:25:bf:f4:3f:1d:04: 01:7c:63:8b:3d:61:98:24:27:7a:72:bb:bc:fa:e0:55:3e:3a: af:41:56:52:77:76:65:0c:78:19:ba:dc:b5:80:6a:93:d9:c2: d1:55:65:d3:1a:c7:88:ca:d4:c4:0c:5e:d8:3a:4a:88:59:ff: 67:f2:b4:ca:b8:1a:35:ae:0b:fd:f9:2e:7f:e0:75:2b:a7:a7: ce:01:64:8f:fb:92:dd:75:81:14:a1:de:58:6d:d0:7c:e6:68: db:87:74:be:ac:8d:e2:b3:7d:93:5f:4e:f8:c7:86:97:ed:45: 40:d0:34:12:2b:6e:10:da:b9:32:14:b6:3e:bc:d8:e6:d8:eb: fa:79:f1:aa:89:a8:da:e5:18:32:86:ee:79:39:06:d1:8d:68: b7:e6:07:f0:e1:0e:46:b2:72:6e:0b:e1:0d:82:3c:a5:d2:e5: 96:46:73:41:19:86:49:dc:85:64:b0:40:94:80:ca:0f:b2:ff: 50:c5:a4:bf:07:ef:1a:bc:f7:75:8c:a5:45:53:fb:42:49:cd: aa:41:4e:e1:c3:d9:d0:07:b1:45:8a:2c:fa:bd:85:1e:b9:61: 2d:f9:c8:47:ea:f3:fb:5e:58:95:c4:a6:a8:c2:a8:65:fb:3d: 36:a9:a3:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97IDXON/tT58pwSgQB2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMzkwYmZmNjVkY2VkY2E4MTNkN2ExMGQ3ZWMzMjhjMmY2 ZWFjMzQwHhcNMjUxMjA2MTQwMTI3WhcNMjUxMjA3MTQwMTI3WjAzMTEwLwYDVQQD Eyg5ZDgxMmRlMDRhOGMyNWRlMjU1OGM5YmUwNzlhOTUwNGE3YWM5Y2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eY3iB/uY3xMW3jF5LpDZ2K+RjlV IDQK0nLB4iovMLUUIFZTonNXu8WjURjQ0IMeHO4bNy4knQPfglcqWqLEohQKbn6f V1Rfh/afWaXwa+ZcVgnBPZltryj+1wP3xEkTu0KIj6iQemxdWsMvP4IaGBwaYvMn 8kNCmjZ6yQKEg4g/nAaIzQy7IFhNq7O65Vo4rFgQzz+JBF1GmXRDQ5v2TpT44HGX 7H/wXlgwC6KHUtBqw4E9JSJ0VQ9FgMrrrdrC1LL8mFOr6A1zv2m+116O7mWLxwtV 0ZK6wxNLcX+ZWzAEng/5qSbAzbz3eJAQU+966nFAW7STFvfKpKWB93S57QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2BLeBKjCXeJVjJvgealQSnrJzcMB8GA1UdIwQY MBaAFBw5C/9l3O3KgT16ENfsMowvbqw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTIt YTk3NjVlZGM3OTVjLzEvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTItYTk3NjVlZGM3OTVj LzEvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnPoBuIO 7gye7LpVJb/0Px0EAXxjiz1hmCQnenK7vPrgVT46r0FWUnd2ZQx4GbrctYBqk9nC 0VVl0xrHiMrUxAxe2DpKiFn/Z/K0yrgaNa4L/fkuf+B1K6enzgFkj/uS3XWBFKHe WG3QfOZo24d0vqyN4rN9k19O+MeGl+1FQNA0EituENq5MhS2PrzY5tjr+nnxqomo 2uUYMobueTkG0Y1ot+YH8OEORrJybgvhDYI8pdLllkZzQRmGSdyFZLBAlIDKD7L/ UMWkvwfvGrz3dYylRVP7QknNqkFO4cPZ0AexRYos+r2FHrlhLfnIR+rz+15YlcSm qMKoZfs9NqmjMg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:54 2025 by rpki-client