This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json) Hash identifier: SQv14n7raF6srrTBCUdXYKOAwDDzD1T5EnyDKnuZwtA= Subject key identifier: 96:FB:DD:F7:2B:96:25:6E:D8:CE:62:F3:A5:E0:56:F6:6B:C7:90:47 Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b Certificate serial: 019AF50B0F250C9D8A5855F8E725D2582380 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft Manifest number: 06B1 Signing time: Sat 06 Dec 2025 19:02:13 +0000 Manifest this update: Sat 06 Dec 2025 19:02:13 +0000 Manifest next update: Sun 07 Dec 2025 19:02:13 +0000 Files and hashes: 1: 1-i_f4gNCAnPwT26M-00faBCZ1ec.roa (hash: rf9DtMiWGOZOoz1U+iRouParfUgOp6ltk1lTfbvhGLM=) 2: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: gZyqk1Gm6N7bfucGJAWiLVtmN2jgjo6GovgBYzRrxHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:0f:25:0c:9d:8a:58:55:f8:e7:25:d2:58:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b Validity Not Before: Dec 6 19:02:13 2025 GMT Not After : Dec 7 19:02:13 2025 GMT Subject: CN=96fbddf72b96256ed8ce62f3a5e056f66bc79047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bd:bd:17:2c:0c:4e:f5:66:e7:e3:90:2c:21: a6:01:b5:5d:f4:84:16:46:3c:79:8f:38:0c:37:36: 6a:84:1c:9f:2f:dd:f1:98:a5:11:da:ac:31:be:47: 19:c6:b5:6f:b7:3b:32:eb:43:be:43:81:2a:cd:2c: 97:55:e2:55:ff:c7:55:bb:f0:78:92:66:b6:b9:0c: 63:f4:fb:e8:8f:de:22:df:2e:4c:22:d2:a4:cb:aa: 67:a7:80:a1:c2:33:5b:9f:88:cf:8b:4d:d3:aa:c0: 3b:97:9c:9c:6d:c2:b2:02:85:8c:c9:d9:a1:2e:93: f3:8e:c6:7f:4e:43:29:d9:a5:ee:54:24:0b:a3:30: a1:3b:46:60:33:e3:7a:9c:b9:57:34:a1:e2:5b:77: e1:a9:15:c4:7d:da:88:1c:82:b5:fa:8e:91:5a:4d: f1:2b:53:c9:ce:6e:ca:64:4b:18:14:2a:06:21:d9: d1:0e:c4:85:88:6c:02:1e:e2:47:9f:ce:7a:eb:59: b2:51:96:2b:1a:f5:0a:db:57:7b:43:8c:e2:22:0b: 2d:d4:e2:76:ce:3f:96:6a:eb:39:83:6d:75:6d:ce: 26:a5:7e:78:d0:43:85:91:45:68:d2:96:a3:3a:80: e0:b2:53:3e:b2:a3:61:81:ad:47:7a:7e:3c:ae:c7: f9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FB:DD:F7:2B:96:25:6E:D8:CE:62:F3:A5:E0:56:F6:6B:C7:90:47 X509v3 Authority Key Identifier: keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:85:c0:32:da:44:bc:20:7b:04:e0:aa:e3:96:37:75:2d:43: 07:c9:ff:50:f0:6c:1e:8e:6f:99:05:b7:58:ed:39:5d:3f:2a: 61:fd:ed:46:bb:25:09:7f:12:1e:df:f2:a2:94:f4:16:86:15: c1:5d:38:9e:63:22:15:62:a3:58:dd:df:33:33:55:35:08:06: 0c:57:7b:44:cb:59:c5:48:cf:e9:14:20:79:0d:b6:bf:a4:62: 69:7f:33:14:89:a1:ce:4a:2f:ff:cd:4b:49:65:0c:08:9d:15: ae:a9:e7:b9:9e:6a:89:c9:67:61:90:48:71:ff:36:60:ae:e0: f0:20:48:ce:b5:49:17:df:47:45:06:d8:e4:10:19:08:82:a1: b6:aa:ee:1a:2e:46:1c:33:57:38:2b:7d:b5:e2:8d:d4:ca:aa: 80:15:ec:f4:6b:59:28:cf:21:84:20:f0:83:2f:df:16:04:46: d7:ec:f5:6a:34:6e:10:8d:29:c0:f7:8e:d7:2b:4f:cc:21:41: 02:e4:cf:60:43:dc:de:ac:d6:ad:f4:35:c3:8d:7b:9e:0e:53: a1:c5:65:41:dd:73:67:20:09:65:3f:b1:c7:d2:58:21:45:11: 96:cf:e0:e5:68:70:a3:9d:f3:68:88:8c:2a:87:f6:21:2c:98: db:20:d7:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cw8lDJ2KWFX45yXSWCOAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZWIzZmFhODM4ODU0OWI1NWNiM2YzYWJkNGM2YzE1MTA2 Y2Y1M2IwHhcNMjUxMjA2MTkwMjEzWhcNMjUxMjA3MTkwMjEzWjAzMTEwLwYDVQQD Eyg5NmZiZGRmNzJiOTYyNTZlZDhjZTYyZjNhNWUwNTZmNjZiYzc5MDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr29FywMTvVm5+OQLCGmAbVd9IQW Rjx5jzgMNzZqhByfL93xmKUR2qwxvkcZxrVvtzsy60O+Q4EqzSyXVeJV/8dVu/B4 kma2uQxj9Pvoj94i3y5MItKky6pnp4ChwjNbn4jPi03TqsA7l5ycbcKyAoWMydmh LpPzjsZ/TkMp2aXuVCQLozChO0ZgM+N6nLlXNKHiW3fhqRXEfdqIHIK1+o6RWk3x K1PJzm7KZEsYFCoGIdnRDsSFiGwCHuJHn85661myUZYrGvUK21d7Q4ziIgst1OJ2 zj+Waus5g211bc4mpX540EOFkUVo0pajOoDgslM+sqNhga1Hen48rsf5FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJb73fcrliVu2M5i86XgVvZrx5BHMB8GA1UdIwQY MBaAFB3rP6qDiFSbVcs/Or1MbBUQbPU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82YzQxMzEtMzY1Yy00YzE0LTllMGIt NTAyYTk1N2ZkYWY4LzEvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS82YzQxMzEtMzY1Yy00YzE0LTllMGItNTAyYTk1N2ZkYWY4 LzEvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4XAMtpE vCB7BOCq45Y3dS1DB8n/UPBsHo5vmQW3WO05XT8qYf3tRrslCX8SHt/yopT0FoYV wV04nmMiFWKjWN3fMzNVNQgGDFd7RMtZxUjP6RQgeQ22v6RiaX8zFImhzkov/81L SWUMCJ0VrqnnuZ5qiclnYZBIcf82YK7g8CBIzrVJF99HRQbY5BAZCIKhtqruGi5G HDNXOCt9teKN1MqqgBXs9GtZKM8hhCDwgy/fFgRG1+z1ajRuEI0pwPeO1ytPzCFB AuTPYEPc3qzWrfQ1w417ng5TocVlQd1zZyAJZT+xx9JYIUURls/g5Whwo53zaIiM Kof2ISyY2yDXGw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:48:10 2025 by rpki-client