This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft File: HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft (raw, json) Hash identifier: 1eQ1AKgG4zOqWFOoZ02XOdELy+8roOYSdVNxm8Uzl7A= Subject key identifier: 1C:16:71:A1:FF:D1:4A:B3:C8:52:C5:8D:A3:21:C3:92:7B:EB:7E:46 Authority key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F Certificate issuer: /CN=1c39d57936dd2d1521443e68dadd9d0949cde33f Certificate serial: 019AF3529FFD0ECCFD6E65DB49640BB40429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 11:01:09 +0000 Manifest this update: Sat 06 Dec 2025 11:01:09 +0000 Manifest next update: Sun 07 Dec 2025 11:01:09 +0000 Files and hashes: 1: HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl (hash: sA6ZhzdCZiFeFjnPe6illVihB+9AdrW2hPH6pXCzbLQ=) 2: S8E-qbm1BXEqIdetmmA1nZNgj7U.roa (hash: 3uwA4cyu+agvPaXd967UOebPOsNVk53AsWpnmfz8XsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:9f:fd:0e:cc:fd:6e:65:db:49:64:0b:b4:04:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f Validity Not Before: Dec 6 11:01:09 2025 GMT Not After : Dec 7 11:01:09 2025 GMT Subject: CN=1c1671a1ffd14ab3c852c58da321c3927beb7e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5f:5b:2b:0e:6d:eb:fd:ec:b9:90:03:de:95: 07:d9:64:01:3a:ec:21:74:24:26:16:ff:f4:8f:fc: 24:19:03:74:13:17:8b:a7:21:07:72:db:3c:4d:82: c1:76:0d:89:7f:7e:91:6f:91:65:e2:bb:bd:f4:f7: 8d:b1:c6:9a:e5:d4:92:ef:b4:fe:f3:3c:e9:dd:1c: e5:ee:45:76:0f:f0:90:8f:14:01:8a:65:06:b6:22: 40:e8:b7:73:59:ad:c4:71:35:c1:8d:4f:3c:72:9f: d0:c3:9d:0e:b8:9d:b9:06:f6:af:79:c5:62:29:b6: 25:7a:72:f6:d8:1d:be:f6:0e:7f:f9:ca:8a:f6:af: 12:69:d3:3f:41:24:f7:f6:d5:78:83:13:4c:5d:e0: 8b:c8:fe:6a:16:1d:62:45:4c:67:f2:53:69:29:62: f3:52:b4:61:5a:38:7a:cf:05:c8:6c:e6:bb:3b:89: f0:9d:ee:66:51:3c:50:73:9e:19:6a:59:99:05:0f: fa:96:35:ec:f8:18:b4:0c:01:92:e3:fb:99:18:5f: 81:7c:14:71:59:8d:b6:f3:b3:07:c9:6e:1a:a7:8f: f3:72:20:ea:0c:f5:43:8b:68:d0:b1:58:26:54:5f: 72:1f:97:4e:c0:0f:ac:a0:4c:e1:09:32:9c:8c:c2: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:16:71:A1:FF:D1:4A:B3:C8:52:C5:8D:A3:21:C3:92:7B:EB:7E:46 X509v3 Authority Key Identifier: keyid:1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a7:3e:ed:b4:c9:6f:f0:d6:6e:72:c0:a3:72:fa:41:3f:60: 80:4b:33:82:85:a1:e2:07:50:f2:5c:48:6d:c2:f2:9a:9a:d7: 01:f0:00:03:67:0b:30:a6:95:d5:ef:81:c7:4a:93:56:c4:92: 99:99:2f:4a:b3:b2:92:28:93:f8:91:52:a4:27:c4:f6:4c:b1: 3c:03:cd:26:5a:24:b2:94:7c:e8:8b:9d:8c:81:8c:da:d5:51: 57:63:ce:6b:67:f1:c0:35:3c:8a:2c:e4:56:13:24:71:76:5c: fd:3d:62:ff:52:82:24:49:db:d9:5b:41:cc:44:fc:bd:5f:2e: 66:8e:b8:c5:0a:f6:5d:9c:ec:ad:35:b2:f4:7c:9b:82:79:d1: 19:54:4b:9b:6f:4e:f2:39:a4:ae:43:e0:9b:77:1a:f3:b5:23: 63:3d:e6:7e:73:8c:8a:dd:a2:0a:64:27:b9:d3:da:09:3c:ef: 05:80:61:5e:0f:a6:06:23:5d:02:a5:26:34:1f:e8:34:29:50: d3:d7:4b:59:45:e0:1f:17:38:7a:6e:9d:98:f8:f3:05:c4:3e: f7:c4:44:99:0b:0f:eb:12:a2:7b:82:1d:00:e9:4a:39:a6:d1: 3c:54:2d:ef:ee:d5:ac:ac:31:46:50:ae:dc:02:01:80:ce:67: 23:10:c3:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUp/9Dsz9bmXbSWQLtAQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMzlkNTc5MzZkZDJkMTUyMTQ0M2U2OGRhZGQ5ZDA5NDlj ZGUzM2YwHhcNMjUxMjA2MTEwMTA5WhcNMjUxMjA3MTEwMTA5WjAzMTEwLwYDVQQD EygxYzE2NzFhMWZmZDE0YWIzYzg1MmM1OGRhMzIxYzM5MjdiZWI3ZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA419bKw5t6/3suZAD3pUH2WQBOuwh dCQmFv/0j/wkGQN0ExeLpyEHcts8TYLBdg2Jf36Rb5Fl4ru99PeNscaa5dSS77T+ 8zzp3Rzl7kV2D/CQjxQBimUGtiJA6LdzWa3EcTXBjU88cp/Qw50OuJ25BvavecVi KbYlenL22B2+9g5/+cqK9q8SadM/QST39tV4gxNMXeCLyP5qFh1iRUxn8lNpKWLz UrRhWjh6zwXIbOa7O4nwne5mUTxQc54ZalmZBQ/6ljXs+Bi0DAGS4/uZGF+BfBRx WY2287MHyW4ap4/zciDqDPVDi2jQsVgmVF9yH5dOwA+soEzhCTKcjMKVYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwWcaH/0UqzyFLFjaMhw5J7635GMB8GA1UdIwQY MBaAFBw51Xk23S0VIUQ+aNrdnQlJzeM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSERuVmVUYmRMUlVoUkQ1bzJ0MmRDVW5ONHo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kMzg1NmYtMDI5Yy00NDZhLWFlN2Qt ZDdjNWRhN2MxNjc2LzEvSERuVmVUYmRMUlVoUkQ1bzJ0MmRDVW5ONHo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kMzg1NmYtMDI5Yy00NDZhLWFlN2QtZDdjNWRhN2MxNjc2 LzEvSERuVmVUYmRMUlVoUkQ1bzJ0MmRDVW5ONHo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkac+7bTJ b/DWbnLAo3L6QT9ggEszgoWh4gdQ8lxIbcLymprXAfAAA2cLMKaV1e+Bx0qTVsSS mZkvSrOykiiT+JFSpCfE9kyxPAPNJlokspR86IudjIGM2tVRV2POa2fxwDU8iizk VhMkcXZc/T1i/1KCJEnb2VtBzET8vV8uZo64xQr2XZzsrTWy9HybgnnRGVRLm29O 8jmkrkPgm3ca87UjYz3mfnOMit2iCmQnudPaCTzvBYBhXg+mBiNdAqUmNB/oNClQ 09dLWUXgHxc4em6dmPjzBcQ+98REmQsP6xKie4IdAOlKOabRPFQt7+7VrKwxRlCu 3AIBgM5nIxDD4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:15 2025 by rpki-client