This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json) Hash identifier: +9VyJu5bhNeC2CrK11OJpY/wX+7vKlm8LpZJMvpc68M= Subject key identifier: 21:7A:72:C1:FA:4B:E6:2B:AF:65:9E:08:96:C0:5E:A6:CE:34:2A:13 Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f Certificate serial: 019AF19B389219A3988D4BA7046F81DE1E85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft Manifest number: 1497 Signing time: Sat 06 Dec 2025 03:01:12 +0000 Manifest this update: Sat 06 Dec 2025 03:01:12 +0000 Manifest next update: Sun 07 Dec 2025 03:01:12 +0000 Files and hashes: 1: BYVEd7xc3EBzXbLQU0wScv8W8vM.roa (hash: eCnXcs4Xd2N+nO1T0PH3Iw+HOsHQZJC8Zr12UJP7ABo=) 2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: Sla6CZ4IiPRhgaqSSvjWJw/lAxmgUlxkwVjdSsC2lg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:38:92:19:a3:98:8d:4b:a7:04:6f:81:de:1e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f Validity Not Before: Dec 6 03:01:12 2025 GMT Not After : Dec 7 03:01:12 2025 GMT Subject: CN=217a72c1fa4be62baf659e0896c05ea6ce342a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:02:59:6b:4a:0c:62:d3:1f:2a:94:aa:bf: 2e:cf:17:11:2d:74:b0:ff:06:b2:3c:97:45:ae:4d: db:9d:bb:e8:64:3b:23:69:e3:8c:ac:53:be:d9:65: 3e:c9:0f:f8:61:d8:40:8f:fd:45:da:50:e0:dd:b2: 56:06:b4:36:9e:08:bf:11:40:d5:f4:bc:7c:9c:4a: 96:d5:08:95:64:94:1e:0f:11:11:b3:b8:17:22:41: 3b:3e:32:63:74:84:ef:26:fa:86:03:d9:34:66:2a: 5c:f8:4d:5c:96:a8:b0:44:6e:6d:8a:6d:e6:c5:4e: 95:a3:95:e1:0f:bc:84:4c:11:cb:75:7c:db:2d:1c: 3e:b3:c5:99:62:9a:ad:ca:5c:22:9b:17:3e:e4:99: 3a:6a:0b:ea:bf:23:26:8c:dd:d2:fc:90:fd:8b:a0: b9:96:a7:9d:c3:a1:be:90:a6:96:e2:6b:23:6a:6f: 64:fc:9c:22:70:6c:ae:74:73:5c:8b:70:63:5f:17: 99:17:a8:36:41:8d:31:54:97:ee:c9:78:c5:fa:8c: 0b:4a:0d:e7:5f:53:31:d8:ad:7c:39:68:b9:42:89: fb:90:13:a0:2e:cd:62:5d:1d:33:b3:05:81:32:54: 6a:ed:e3:b6:4f:ae:86:07:e2:a0:4e:f8:13:8f:7e: 0c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7A:72:C1:FA:4B:E6:2B:AF:65:9E:08:96:C0:5E:A6:CE:34:2A:13 X509v3 Authority Key Identifier: keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:eb:ae:26:51:ac:4e:f2:3a:48:37:30:b5:41:ad:b1:0b:91: 67:cf:e5:07:da:3d:d8:60:e9:8b:fe:a8:bb:ed:4b:ef:4a:36: 9a:85:1b:07:7f:21:52:d0:22:d2:fb:b2:0d:e8:29:7b:1f:63: d0:04:f0:23:63:e2:e0:a4:56:34:a6:34:dd:c2:5a:db:64:08: 47:a1:a4:4c:32:e2:21:64:c2:39:f9:7f:3c:0c:b6:ec:de:d4: 3f:3f:20:05:83:db:04:87:0d:18:ba:03:74:15:82:f7:f5:d7: a6:40:c1:c0:a1:94:85:fa:33:9f:fd:79:ba:02:ab:8f:64:67: 7c:40:21:e6:a7:12:bf:3c:60:f3:ca:6f:ca:ea:d9:9b:3a:1b: 7b:25:5b:dd:ce:01:43:98:55:c7:1c:e5:00:8b:02:46:03:7b: 8f:94:63:b9:70:61:2d:50:ce:e7:32:80:ec:35:e3:cb:87:39: 91:59:d2:40:c4:9c:af:e4:c9:61:0f:a4:7d:e7:22:a0:ec:96: 21:73:42:02:12:13:23:6d:d4:f6:ea:5e:cd:20:de:2e:cc:de: 97:4f:13:ae:37:a4:38:a6:c0:c6:2d:d4:b4:5b:19:1d:ce:52: a1:56:a7:16:2c:4e:5a:bf:01:f5:a4:e8:0b:76:1b:67:42:72: 72:6c:62:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmziSGaOYjUunBG+B3h6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YzQxMTJlZmM5YmVkODQ3NjFkMzY3OGI4N2M0ODM5NDhk MmE3MmYwHhcNMjUxMjA2MDMwMTEyWhcNMjUxMjA3MDMwMTEyWjAzMTEwLwYDVQQD EygyMTdhNzJjMWZhNGJlNjJiYWY2NTllMDg5NmMwNWVhNmNlMzQyYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9MCWWtKDGLTHyqUqr8uzxcRLXSw /wayPJdFrk3bnbvoZDsjaeOMrFO+2WU+yQ/4YdhAj/1F2lDg3bJWBrQ2ngi/EUDV 9Lx8nEqW1QiVZJQeDxERs7gXIkE7PjJjdITvJvqGA9k0Zipc+E1clqiwRG5tim3m xU6Vo5XhD7yETBHLdXzbLRw+s8WZYpqtylwimxc+5Jk6agvqvyMmjN3S/JD9i6C5 lqedw6G+kKaW4msjam9k/JwicGyudHNci3BjXxeZF6g2QY0xVJfuyXjF+owLSg3n X1Mx2K18OWi5Qon7kBOgLs1iXR0zswWBMlRq7eO2T66GB+KgTvgTj34MOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCF6csH6S+Yrr2WeCJbAXqbONCoTMB8GA1UdIwQY MBaAFIbEES78m+2Edh02eLh8SDlI0qcvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NWViZGEtYzJjNy00YzI3LTk1ZDQt MDBiOTZkNzRkOGIwLzEvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC80NWViZGEtYzJjNy00YzI3LTk1ZDQtMDBiOTZkNzRkOGIw LzEvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduuuJlGs TvI6SDcwtUGtsQuRZ8/lB9o92GDpi/6ou+1L70o2moUbB38hUtAi0vuyDegpex9j 0ATwI2Pi4KRWNKY03cJa22QIR6GkTDLiIWTCOfl/PAy27N7UPz8gBYPbBIcNGLoD dBWC9/XXpkDBwKGUhfozn/15ugKrj2RnfEAh5qcSvzxg88pvyurZmzobeyVb3c4B Q5hVxxzlAIsCRgN7j5RjuXBhLVDO5zKA7DXjy4c5kVnSQMScr+TJYQ+kfecioOyW IXNCAhITI23U9upezSDeLszel08TrjekOKbAxi3UtFsZHc5SoVanFixOWr8B9aTo C3YbZ0Jycmxiaw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:15 2025 by rpki-client