This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft File: HqzGEKc4PxkkhnIDC9mkR80JQck.mft (raw, json) Hash identifier: TvC3xggRKYIHVC1otNU/WTcGhZcklNvsf8jgzzDUOBg= Subject key identifier: EE:09:07:53:97:8C:33:60:21:DE:0B:D9:13:32:F5:46:8C:B8:24:A6 Authority key identifier: 1E:AC:C6:10:A7:38:3F:19:24:86:72:03:0B:D9:A4:47:CD:09:41:C9 Certificate issuer: /CN=1eacc610a7383f19248672030bd9a447cd0941c9 Certificate serial: 019AF1D25BE155B036955B227064EA4D1703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft Manifest number: 87 Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: HqzGEKc4PxkkhnIDC9mkR80JQck.crl (hash: EzL4q4cHDX1zEIZfu5EPaGE/+ixBy1gVPB21hewIqEM=) 2: NN7HcWfwho6Wg205AV2VgvpmbLU.roa (hash: +KCs1tl2HUeqWBjr2lOeJY8VcQb8CSyBUASdC9OhN/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.crl rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5b:e1:55:b0:36:95:5b:22:70:64:ea:4d:17:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eacc610a7383f19248672030bd9a447cd0941c9 Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=ee090753978c336021de0bd91332f5468cb824a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:28:84:0f:0a:1c:3f:01:cf:23:14:d8:6e: 56:2e:f2:f4:fb:01:cb:18:ad:a0:cd:a9:4f:13:a7: fa:74:20:ae:c9:b7:2d:3b:82:34:03:8c:e8:31:e4: 5c:8e:5f:40:09:59:67:60:02:b2:8d:e1:0d:40:69: 1e:c2:c4:6b:1b:3b:ce:09:d0:f1:1d:f0:63:76:62: e4:3d:e1:a8:9b:13:7e:50:96:10:fa:f2:9a:a0:ae: 5a:e5:86:11:9f:cd:6c:c1:74:70:12:eb:52:a1:2d: 34:ee:ed:43:8f:c6:d6:2e:97:52:f5:10:75:44:32: 8e:01:cf:4b:5d:5d:2c:fc:36:c0:57:85:e7:39:d6: 38:2e:f4:95:ca:40:00:bc:21:48:7a:21:69:1a:3a: fd:b5:4a:13:72:32:f2:19:8d:ed:7f:13:06:03:25: c4:3b:25:02:1a:4f:f8:30:cc:b9:ac:8d:c7:fd:45: c6:fc:2a:f1:2f:ba:02:cc:63:db:15:5c:a3:a9:6b: 86:3d:4b:4c:b3:41:05:df:88:e0:0e:d1:d9:e6:2d: 01:0d:24:b1:39:62:2d:6b:73:3b:47:18:0c:3f:78: 3f:4f:e9:87:36:da:53:cc:2a:05:fd:49:dc:90:5c: df:3c:b7:da:06:ee:c2:bc:e4:63:a2:63:fe:83:db: bf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:09:07:53:97:8C:33:60:21:DE:0B:D9:13:32:F5:46:8C:B8:24:A6 X509v3 Authority Key Identifier: keyid:1E:AC:C6:10:A7:38:3F:19:24:86:72:03:0B:D9:A4:47:CD:09:41:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:90:1e:c1:ce:63:6d:1d:5e:4c:ff:9b:fc:0a:d5:40:a3:44: 3d:2f:ba:1a:2a:3d:33:ba:dc:a0:67:75:66:d0:1b:87:45:42: 30:2b:fd:8f:41:51:52:31:59:0d:dd:5e:90:a5:85:f0:f1:b8: f7:6b:55:f7:95:ce:f5:d0:88:80:42:2c:3b:9f:c0:5c:fc:42: 04:5b:5e:3a:fd:6d:2b:23:32:c3:b7:f2:ff:d9:44:ca:d6:61: a2:ac:f1:cb:ea:12:59:49:db:5e:90:ba:05:24:22:32:40:61: d8:b3:6b:51:97:02:e0:f0:ed:99:f8:5b:6c:7d:30:14:2d:12: 14:ec:d2:2a:fa:bb:5c:b8:d1:5f:2d:d7:db:a5:fd:4f:2f:18: 14:fb:5f:85:fc:8c:5d:53:43:48:1d:f5:47:33:d4:a3:89:e2: e2:55:dc:ee:e3:55:ac:0b:87:16:29:80:a6:b7:f9:a6:ae:9d: 6b:2e:01:1a:42:e0:8b:89:4e:58:1a:c1:13:58:cc:50:26:3b: e1:7d:bb:ce:37:20:79:6c:f6:f1:96:9a:c6:5b:46:12:5c:da: 74:1a:69:d7:75:f0:0d:ea:56:14:e7:f5:86:89:fd:88:ed:86: e8:04:f7:ee:43:90:55:1e:fe:7f:05:5f:41:b7:7d:ec:b5:ee: e6:c8:5a:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lvhVbA2lVsicGTqTRcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWNjNjEwYTczODNmMTkyNDg2NzIwMzBiZDlhNDQ3Y2Qw OTQxYzkwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD EyhlZTA5MDc1Mzk3OGMzMzYwMjFkZTBiZDkxMzMyZjU0NjhjYjgyNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1toohA8KHD8BzyMU2G5WLvL0+wHL GK2gzalPE6f6dCCuybctO4I0A4zoMeRcjl9ACVlnYAKyjeENQGkewsRrGzvOCdDx HfBjdmLkPeGomxN+UJYQ+vKaoK5a5YYRn81swXRwEutSoS007u1Dj8bWLpdS9RB1 RDKOAc9LXV0s/DbAV4XnOdY4LvSVykAAvCFIeiFpGjr9tUoTcjLyGY3tfxMGAyXE OyUCGk/4MMy5rI3H/UXG/CrxL7oCzGPbFVyjqWuGPUtMs0EF34jgDtHZ5i0BDSSx OWIta3M7RxgMP3g/T+mHNtpTzCoF/UnckFzfPLfaBu7CvORjomP+g9u/2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4JB1OXjDNgId4L2RMy9UaMuCSmMB8GA1UdIwQY MBaAFB6sxhCnOD8ZJIZyAwvZpEfNCUHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHF6R0VLYzRQeGtraG5JREM5bWtSODBKUWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC83ZjNkMjktNDE4ZS00MTM2LThiNTIt ZmU1MDI1OTkzNjllLzEvSHF6R0VLYzRQeGtraG5JREM5bWtSODBKUWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC83ZjNkMjktNDE4ZS00MTM2LThiNTItZmU1MDI1OTkzNjll LzEvSHF6R0VLYzRQeGtraG5JREM5bWtSODBKUWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1pAewc5j bR1eTP+b/ArVQKNEPS+6Gio9M7rcoGd1ZtAbh0VCMCv9j0FRUjFZDd1ekKWF8PG4 92tV95XO9dCIgEIsO5/AXPxCBFteOv1tKyMyw7fy/9lEytZhoqzxy+oSWUnbXpC6 BSQiMkBh2LNrUZcC4PDtmfhbbH0wFC0SFOzSKvq7XLjRXy3X26X9Ty8YFPtfhfyM XVNDSB31RzPUo4ni4lXc7uNVrAuHFimAprf5pq6day4BGkLgi4lOWBrBE1jMUCY7 4X27zjcgeWz28ZaaxltGElzadBpp13XwDepWFOf1hon9iO2G6AT37kOQVR7+fwVf Qbd97LXu5sha3g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:02 2025 by rpki-client