This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft File: Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json) Hash identifier: Fc+oU4S4VEZIGpiDB9At1tDu2E9G8T/2+tuYOoUiCkg= Subject key identifier: 78:C5:FB:B8:75:B3:28:56:02:0A:F6:D8:89:FC:8B:FB:51:F4:E3:A3 Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C Certificate issuer: /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c Certificate serial: 019AF1648DB27040975B7FC216C9DED50401 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft Manifest number: 10A5 Signing time: Sat 06 Dec 2025 02:01:30 +0000 Manifest this update: Sat 06 Dec 2025 02:01:30 +0000 Manifest next update: Sun 07 Dec 2025 02:01:30 +0000 Files and hashes: 1: AMpnzyhYQ7V0ivkPgxFinozh8t8.roa (hash: 8o30akyQRir0f8xUZavCnmMHTgJGbLRFq1/OxwOyPiY=) 2: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: zd9tEw1NkMLJzp9shkYb1huiNvr/za+4xkNgNeCm1CE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:8d:b2:70:40:97:5b:7f:c2:16:c9:de:d5:04:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c Validity Not Before: Dec 6 02:01:30 2025 GMT Not After : Dec 7 02:01:30 2025 GMT Subject: CN=78c5fbb875b32856020af6d889fc8bfb51f4e3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c0:28:41:95:d8:da:ba:e0:5d:39:19:07:2a: 68:bb:32:8f:37:32:32:34:9f:ee:35:73:5f:1e:6c: f4:15:f6:77:7f:94:7c:9e:88:00:c1:80:49:e0:bf: bb:bc:34:2d:af:75:51:62:f4:68:4d:0f:41:15:5c: c4:92:ba:90:db:3c:a8:ea:d6:dc:90:8c:97:2d:20: cf:35:58:61:a4:38:ed:fe:d7:92:53:ef:b4:15:4b: 09:b0:74:21:05:81:27:20:f2:1a:91:9d:7c:e2:b0: b8:8f:c7:26:45:08:f8:02:9a:af:0a:f2:9c:01:2b: 36:83:0e:af:74:62:5f:4e:7f:0a:37:23:49:2c:23: 2b:0c:93:7c:7d:c4:d2:31:93:06:aa:6a:eb:b7:64: 1e:39:ef:3e:85:f5:35:dc:0c:31:e9:aa:f1:db:1d: 1e:82:fb:49:bd:88:06:16:6b:dc:8d:f1:3b:01:dc: cc:b4:55:05:df:97:38:9b:2c:46:fe:bf:40:7d:6c: ae:47:f6:7f:54:4b:33:b5:03:eb:a5:fa:4a:73:46: 27:31:50:7e:dd:fb:2c:60:b2:db:2a:77:64:e5:da: 14:43:1c:7b:24:8d:e5:30:58:0c:cc:17:34:4d:9c: 0e:47:34:57:aa:29:44:83:a6:d6:b6:9d:9e:63:df: 6a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C5:FB:B8:75:B3:28:56:02:0A:F6:D8:89:FC:8B:FB:51:F4:E3:A3 X509v3 Authority Key Identifier: keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:22:96:13:c8:69:6d:35:86:75:4a:5d:52:3a:ad:bf:2a:94: 5e:84:eb:05:91:93:a1:ff:33:05:ef:42:61:aa:be:cc:d3:c8: b2:19:43:eb:0c:e4:91:1e:36:ed:9a:e1:e2:16:d4:29:cb:28: c5:ec:5b:31:72:fb:23:5b:7f:ef:a1:ce:f1:2f:e3:c2:07:b0: 55:e9:db:82:a8:2d:27:ae:7f:88:2e:19:33:ea:ea:3e:2c:a4: 63:cf:af:e0:e8:53:9e:95:39:03:43:64:f7:64:37:d6:f7:ed: c8:7e:ed:b8:05:60:82:14:ea:da:14:53:2f:5a:ee:06:34:9a: e8:49:d1:05:2a:c2:c2:aa:c7:14:0d:86:e3:32:81:18:64:f9: 20:52:cc:64:0b:8f:66:12:75:d6:be:f1:cf:f8:70:a5:a6:8d: b9:fe:1b:d3:0a:63:e8:6d:3a:35:9b:81:17:b6:ac:f0:6b:f8: 14:55:4b:bd:c8:89:13:8d:e4:62:7b:3c:38:b9:5a:99:99:16: 35:c9:16:93:cb:22:49:54:f9:c6:b2:bd:bb:3b:b5:28:97:46: 1c:30:35:2f:64:ca:15:06:42:a8:e4:ac:4e:49:f7:0b:85:07: ba:45:d3:14:ca:bb:8e:67:bd:fb:29:de:d4:47:b0:fd:11:d5: b2:92:55:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZI2ycECXW3/CFsne1QQBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTdhNmFmYjIxYmIxNDg3NDJmNjE1NWQxYTM5YWZjOGZj N2U3OWMwHhcNMjUxMjA2MDIwMTMwWhcNMjUxMjA3MDIwMTMwWjAzMTEwLwYDVQQD Eyg3OGM1ZmJiODc1YjMyODU2MDIwYWY2ZDg4OWZjOGJmYjUxZjRlM2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsAoQZXY2rrgXTkZBypouzKPNzIy NJ/uNXNfHmz0FfZ3f5R8nogAwYBJ4L+7vDQtr3VRYvRoTQ9BFVzEkrqQ2zyo6tbc kIyXLSDPNVhhpDjt/teSU++0FUsJsHQhBYEnIPIakZ184rC4j8cmRQj4ApqvCvKc ASs2gw6vdGJfTn8KNyNJLCMrDJN8fcTSMZMGqmrrt2QeOe8+hfU13Awx6arx2x0e gvtJvYgGFmvcjfE7AdzMtFUF35c4myxG/r9AfWyuR/Z/VEsztQPrpfpKc0YnMVB+ 3fssYLLbKndk5doUQxx7JI3lMFgMzBc0TZwORzRXqilEg6bWtp2eY99qsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjF+7h1syhWAgr22In8i/tR9OOjMB8GA1UdIwQY MBaAFB6npq+yG7FIdC9hVdGjmvyPx+ecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGIt ZjM2Y2Q4NzkwYjBhLzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGItZjM2Y2Q4NzkwYjBh LzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCKWE8hp bTWGdUpdUjqtvyqUXoTrBZGTof8zBe9CYaq+zNPIshlD6wzkkR427Zrh4hbUKcso xexbMXL7I1t/76HO8S/jwgewVenbgqgtJ65/iC4ZM+rqPiykY8+v4OhTnpU5A0Nk 92Q31vftyH7tuAVgghTq2hRTL1ruBjSa6EnRBSrCwqrHFA2G4zKBGGT5IFLMZAuP ZhJ11r7xz/hwpaaNuf4b0wpj6G06NZuBF7as8Gv4FFVLvciJE43kYns8OLlamZkW NckWk8siSVT5xrK9uzu1KJdGHDA1L2TKFQZCqOSsTkn3C4UHukXTFMq7jme9+yne 1Eew/RHVspJV9w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:19:42 2025 by rpki-client