This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft File: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft (raw, json) Hash identifier: RToC+A8hlHX2odHgrHmzS8oFv9Yt6bnlRzFnVgza6fc= Subject key identifier: 2A:09:A2:61:12:08:25:CC:D8:8F:DF:40:1A:2E:EE:F0:18:99:E2:49 Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76 Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376 Certificate serial: 019AF088A57DF470010707EDFB23D1FC5A79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft Manifest number: 1034 Signing time: Fri 05 Dec 2025 22:01:18 +0000 Manifest this update: Fri 05 Dec 2025 22:01:18 +0000 Manifest next update: Sat 06 Dec 2025 22:01:18 +0000 Files and hashes: 1: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl (hash: NpA9V9o1q92gtpVv0kFO8PwHUEU+tMSyB4nRfuw+D3A=) 2: zzXnyaTo4BATrc17RusBD7eE0wM.roa (hash: 6905vDk9E6YCZ2ECcGKQ29E/7xlB0Pspqzs3gX2rnWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:a5:7d:f4:70:01:07:07:ed:fb:23:d1:fc:5a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376 Validity Not Before: Dec 5 22:01:18 2025 GMT Not After : Dec 6 22:01:18 2025 GMT Subject: CN=2a09a261120825ccd88fdf401a2eeef01899e249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:17:be:18:db:f5:1d:f0:bf:b6:22:44:f1:4d: 6b:a9:8f:80:a4:06:04:c3:c9:79:66:c9:b7:c2:5d: b1:bd:7f:8b:7c:58:be:4e:20:71:49:92:3e:7d:3c: 2f:59:2a:59:87:a0:4a:b1:ac:94:1c:7f:8b:4b:8b: 5d:43:e7:6c:d0:ad:a5:6a:8a:3c:e5:43:dc:50:cb: f4:55:80:e1:84:27:d6:55:2c:81:2e:18:b2:89:bd: 14:21:a2:d2:7d:9c:c1:76:3c:8a:9e:b5:ef:23:17: 26:7d:3f:95:43:95:6c:18:b2:9d:51:31:cc:fc:a1: 00:0d:8d:95:a9:9d:f0:00:0f:6a:9e:27:3e:2b:97: 9f:6d:f6:16:02:06:59:b9:7e:22:34:fe:ef:66:ee: 22:b2:28:58:0a:3c:fd:45:c8:15:62:d2:51:b0:f3: 04:27:f4:dd:59:b8:6f:ec:a2:3e:67:4e:60:3b:be: f5:27:57:c8:b2:24:f8:34:27:16:52:a9:46:50:41: 07:bb:39:c6:62:ea:76:f4:d3:bd:9f:9b:0f:35:5e: c7:04:04:0b:e1:fa:66:6b:3c:2e:89:6f:a2:17:f2: 1c:78:a3:4c:e0:74:8c:bc:74:e5:69:82:c4:dc:93: b9:94:63:9f:35:81:b4:af:3a:9b:56:05:db:b1:be: 79:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:09:A2:61:12:08:25:CC:D8:8F:DF:40:1A:2E:EE:F0:18:99:E2:49 X509v3 Authority Key Identifier: keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:07:1f:db:b7:be:c4:ac:40:7b:47:b0:20:8d:d4:fe:67:5c: 92:6f:5f:01:fd:69:0b:f3:7a:dc:0b:cb:82:cf:d0:18:a0:29: a2:a8:7d:52:f3:0b:d3:ea:c1:ce:7d:30:a7:3e:4f:e2:88:48: 42:1b:37:cc:27:79:d0:72:b6:ce:5d:23:f7:4e:0d:18:8f:d3: 4a:a5:75:2d:3f:d5:ec:9c:c5:27:77:59:7f:8b:65:89:74:32: 8c:ef:52:62:02:5f:2e:9f:df:20:cc:36:dd:51:08:f0:44:d7: f1:a4:f6:e5:b8:4c:6e:7f:ef:98:7c:08:66:e4:19:7a:fa:70: fd:fc:eb:1f:3b:b7:ca:f3:e8:d0:9e:6d:ff:73:36:bd:fd:00: 09:03:91:a6:ca:a0:17:e7:5d:d0:6e:f4:fb:07:c6:57:e6:49: f5:e0:0d:29:51:e0:97:f1:fc:2b:ef:44:24:4e:f9:c1:46:dd: 23:f9:30:b6:d2:36:1b:15:6b:b8:a3:30:d7:f8:1b:3b:a7:f9: 0b:73:8f:e9:88:75:0a:33:dd:e5:1f:95:a6:8e:7c:71:7e:6f: 7d:16:44:c6:65:00:94:c1:e3:85:b1:09:00:13:7e:40:97:34: bf:88:ba:f8:d7:21:97:aa:8b:c3:09:f0:39:58:2f:95:8c:a0: 8a:71:cc:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiKV99HABBwft+yPR/Fp5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MDBhYWYxM2Q0ZGU5Yzk1YjYzNzU5YWQxODYzNmFiYzhl MjYzNzYwHhcNMjUxMjA1MjIwMTE4WhcNMjUxMjA2MjIwMTE4WjAzMTEwLwYDVQQD EygyYTA5YTI2MTEyMDgyNWNjZDg4ZmRmNDAxYTJlZWVmMDE4OTllMjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xe+GNv1HfC/tiJE8U1rqY+ApAYE w8l5Zsm3wl2xvX+LfFi+TiBxSZI+fTwvWSpZh6BKsayUHH+LS4tdQ+ds0K2laoo8 5UPcUMv0VYDhhCfWVSyBLhiyib0UIaLSfZzBdjyKnrXvIxcmfT+VQ5VsGLKdUTHM /KEADY2VqZ3wAA9qnic+K5efbfYWAgZZuX4iNP7vZu4isihYCjz9RcgVYtJRsPME J/TdWbhv7KI+Z05gO771J1fIsiT4NCcWUqlGUEEHuznGYup29NO9n5sPNV7HBAQL 4fpmazwuiW+iF/IceKNM4HSMvHTlaYLE3JO5lGOfNYG0rzqbVgXbsb55qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoJomESCCXM2I/fQBou7vAYmeJJMB8GA1UdIwQY MBaAFIYAqvE9TenJW2N1mtGGNqvI4mN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iN2QyMGUtMzNiYy00YjIzLWExOTgt MjI0NGZkNjE4NWQzLzEvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iN2QyMGUtMzNiYy00YjIzLWExOTgtMjI0NGZkNjE4NWQz LzEvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAcf27e+ xKxAe0ewII3U/mdckm9fAf1pC/N63AvLgs/QGKApoqh9UvML0+rBzn0wpz5P4ohI Qhs3zCd50HK2zl0j904NGI/TSqV1LT/V7JzFJ3dZf4tliXQyjO9SYgJfLp/fIMw2 3VEI8ETX8aT25bhMbn/vmHwIZuQZevpw/fzrHzu3yvPo0J5t/3M2vf0ACQORpsqg F+dd0G70+wfGV+ZJ9eANKVHgl/H8K+9EJE75wUbdI/kwttI2GxVruKMw1/gbO6f5 C3OP6Yh1CjPd5R+Vpo58cX5vfRZExmUAlMHjhbEJABN+QJc0v4i6+Nchl6qLwwnw OVgvlYyginHMNw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:15 2025 by rpki-client