This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json) Hash identifier: VNAOWxQ2/xYGbSSPw8hDvmppFzXhNiixCaYYjLUDCzk= Subject key identifier: C6:26:ED:26:E1:0B:B3:9B:30:AB:A7:39:A5:0E:48:98:78:2A:56:09 Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b Certificate serial: 019AF31BFF13566433BFDF91EC9B648E640F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft Manifest number: 0840 Signing time: Sat 06 Dec 2025 10:01:29 +0000 Manifest this update: Sat 06 Dec 2025 10:01:29 +0000 Manifest next update: Sun 07 Dec 2025 10:01:29 +0000 Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: hOZtUco0pQsUx1lmSZT+5JTmMmEykZY8BA4Sz7zMFkM=) 2: zBo_iKzjdrZH1koNuXflz2DEVFo.roa (hash: oSU216GFvs9sVu0bzYiGAj3iuq0J8sZNKxXjgiMItjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ff:13:56:64:33:bf:df:91:ec:9b:64:8e:64:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b Validity Not Before: Dec 6 10:01:29 2025 GMT Not After : Dec 7 10:01:29 2025 GMT Subject: CN=c626ed26e10bb39b30aba739a50e4898782a5609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1f:ba:66:34:ac:dc:5f:d9:b1:c4:3a:77:82: 5c:33:08:7f:4a:28:4c:62:29:4a:1d:25:1f:95:9a: 89:00:b6:fc:51:ca:63:37:64:42:e8:2e:60:43:e1: 8f:3f:bc:f8:05:b9:6b:9c:37:76:62:d5:bb:98:92: 76:2c:d9:49:87:a2:f2:8d:8c:e8:15:47:eb:c7:f0: de:1c:07:12:56:28:93:19:eb:38:06:ff:85:fd:15: 66:33:51:41:f9:27:2c:ca:9c:f0:86:73:9b:11:fb: 33:39:2d:7f:1f:36:fc:f6:d4:e2:13:ef:9c:8d:78: b5:47:28:6a:87:4d:2d:48:03:44:b5:7e:94:91:a0: 1d:24:ce:63:b0:65:fd:b0:06:82:34:f2:25:d6:d9: bb:21:79:10:f7:44:53:81:02:cf:41:e1:26:85:45: 71:fb:0f:5b:45:00:f4:44:11:c6:c4:0c:7b:55:c9: a0:6c:57:9d:91:d8:d1:55:e5:c9:b8:14:3f:a2:5e: e8:20:1c:60:ec:19:a0:fd:f6:cc:e3:b6:fa:b0:25: 1c:d5:b2:eb:fc:47:c0:c0:a6:7c:e6:95:c0:7a:75: e7:c2:25:70:6e:47:8d:50:17:12:5f:21:5d:04:45: 4a:2e:af:af:e3:ad:2d:76:6a:e0:0d:3c:ac:2e:55: aa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:26:ED:26:E1:0B:B3:9B:30:AB:A7:39:A5:0E:48:98:78:2A:56:09 X509v3 Authority Key Identifier: keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:54:cf:7f:59:18:ba:3c:7b:b3:de:2c:24:33:66:d7:45:d9: 43:0e:03:b4:b1:af:14:4c:9f:a8:06:29:84:bd:4c:48:92:ae: 71:d2:92:52:ac:8d:b7:a3:84:cf:a9:e8:e1:6c:ad:ff:52:bb: 9c:77:4d:59:f6:9b:57:fa:fd:f8:ba:84:4d:99:f0:4b:1f:ef: 61:08:e8:d1:1d:d6:50:9c:64:3d:86:08:32:40:f7:10:28:ad: f8:17:7f:72:0c:dd:3e:79:c2:c2:df:5a:35:f2:bd:2d:3e:83: 1d:e8:11:36:67:6a:97:1e:9b:a8:8b:7d:86:be:4c:29:e6:9d: 73:6e:61:a4:34:9a:88:22:1c:67:6a:bb:4f:02:ff:3b:b6:f7: c5:bf:46:63:ad:0d:b4:cd:93:98:28:6a:2a:07:b0:9d:53:31: cc:25:45:76:62:c7:9e:86:d4:37:9f:b1:05:f3:03:c1:24:b1: c9:07:37:e4:7c:e8:71:b0:33:07:bd:35:b7:1c:e8:c1:8d:96: fd:0f:5c:79:db:30:98:74:15:38:1c:c6:fb:f7:bc:aa:6c:93: 0f:81:c4:42:cb:7a:67:f4:3f:a8:43:a5:ac:92:53:3a:2a:7f: fd:d8:d8:f5:17:d2:23:ee:31:57:1f:83:67:90:96:15:01:29: 66:7c:af:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/8TVmQzv9+R7JtkjmQPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMmQzNzU1YTM1MDFiOWNiMGQ1ZWJhYTQ5OWU1ZWExNDli Y2YwOGIwHhcNMjUxMjA2MTAwMTI5WhcNMjUxMjA3MTAwMTI5WjAzMTEwLwYDVQQD EyhjNjI2ZWQyNmUxMGJiMzliMzBhYmE3MzlhNTBlNDg5ODc4MmE1NjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B+6ZjSs3F/ZscQ6d4JcMwh/SihM YilKHSUflZqJALb8UcpjN2RC6C5gQ+GPP7z4BblrnDd2YtW7mJJ2LNlJh6LyjYzo FUfrx/DeHAcSViiTGes4Bv+F/RVmM1FB+ScsypzwhnObEfszOS1/Hzb89tTiE++c jXi1Ryhqh00tSANEtX6UkaAdJM5jsGX9sAaCNPIl1tm7IXkQ90RTgQLPQeEmhUVx +w9bRQD0RBHGxAx7VcmgbFedkdjRVeXJuBQ/ol7oIBxg7Bmg/fbM47b6sCUc1bLr /EfAwKZ85pXAenXnwiVwbkeNUBcSXyFdBEVKLq+v460tdmrgDTysLlWqgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYm7SbhC7ObMKunOaUOSJh4KlYJMB8GA1UdIwQY MBaAFBwtN1WjUBucsNXrqkmeXqFJvPCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82N2M2MDUtMDEwZi00NTkyLWE5MTkt OWVjZTBiMjU2NThlLzEvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC82N2M2MDUtMDEwZi00NTkyLWE5MTktOWVjZTBiMjU2NThl LzEvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFTPf1kY ujx7s94sJDNm10XZQw4DtLGvFEyfqAYphL1MSJKucdKSUqyNt6OEz6no4Wyt/1K7 nHdNWfabV/r9+LqETZnwSx/vYQjo0R3WUJxkPYYIMkD3ECit+Bd/cgzdPnnCwt9a NfK9LT6DHegRNmdqlx6bqIt9hr5MKeadc25hpDSaiCIcZ2q7TwL/O7b3xb9GY60N tM2TmChqKgewnVMxzCVFdmLHnobUN5+xBfMDwSSxyQc35HzocbAzB701txzowY2W /Q9cedswmHQVOBzG+/e8qmyTD4HEQst6Z/Q/qEOlrJJTOip//djY9RfSI+4xVx+D Z5CWFQEpZnyv4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:53 2025 by rpki-client