This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft File: HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json) Hash identifier: VL4R5vay9xK2hxcn9e3qkjaR5+cf+a3ciiqkQV7euWc= Subject key identifier: 51:CD:47:31:FC:BC:05:DD:08:C1:6A:73:FE:E9:D6:2F:54:17:E8:CB Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C Certificate issuer: /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c Certificate serial: 019AF12DE95DEF8FEC6608812496B70E3D9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft Manifest number: 16BB Signing time: Sat 06 Dec 2025 01:01:49 +0000 Manifest this update: Sat 06 Dec 2025 01:01:49 +0000 Manifest next update: Sun 07 Dec 2025 01:01:49 +0000 Files and hashes: 1: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: odp1QPHLAbs7+Pt51kVfpwd8HbaJT1p7QSWlmgO2EXY=) 2: bDOy4M4R57nj8_Sff5gfBKz-LP0.roa (hash: vm1SQ0etoIa7LbOonRtmj5Ah0LoPLSlL7NdxQSQ76i0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e9:5d:ef:8f:ec:66:08:81:24:96:b7:0e:3d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c Validity Not Before: Dec 6 01:01:49 2025 GMT Not After : Dec 7 01:01:49 2025 GMT Subject: CN=51cd4731fcbc05dd08c16a73fee9d62f5417e8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:d0:ce:43:ae:c0:c2:79:74:7f:ee:45:24: 99:68:8f:b4:12:e5:8b:28:61:81:cd:19:80:a9:1f: f4:a2:71:04:ae:a7:e3:36:b3:e4:85:2c:e4:f3:39: 44:49:25:b6:61:79:92:85:e3:c1:a7:e8:fd:83:d4: 4a:7a:76:a1:1a:8c:ee:c6:e2:40:3d:29:54:16:a8: 76:28:eb:79:eb:47:d4:8f:74:5a:14:c2:97:12:14: 3a:1d:e5:30:3b:58:e2:f0:1a:37:f3:9d:2e:eb:7f: b0:1a:63:c6:d7:07:6d:27:58:0e:70:b3:12:cf:63: 3a:89:f6:9b:e2:80:29:82:52:82:74:08:0e:69:d2: 7b:1e:d7:7c:73:59:44:e3:d9:db:81:2d:38:32:ef: c8:a0:28:7a:68:fd:ef:dc:3c:e5:47:a0:7f:97:33: 1d:47:5c:78:ba:3e:67:e8:a1:0c:38:88:da:15:45: 2b:6c:82:5d:d5:a3:4d:a6:bf:b8:85:8d:fa:03:d7: 63:72:d4:07:78:98:fe:05:ab:44:26:af:aa:00:cd: 56:c6:9b:8d:07:8c:08:f0:13:54:46:80:71:6c:00: 80:bd:18:a8:b7:e0:c2:9f:0f:5c:eb:c9:69:90:af: d6:76:70:bf:a9:b8:1a:45:e7:60:a3:da:4d:69:23: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CD:47:31:FC:BC:05:DD:08:C1:6A:73:FE:E9:D6:2F:54:17:E8:CB X509v3 Authority Key Identifier: keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d5:50:cc:dd:4a:26:35:0d:70:b8:32:da:6e:42:d1:96:97: b3:bf:cb:98:86:d2:8e:1a:cb:ed:1b:c9:26:27:24:be:e7:65: f9:a0:94:1c:e6:ec:4a:c7:7f:cb:6a:13:52:95:b1:35:70:81: 73:b9:33:c8:e6:99:6c:47:b4:de:a6:17:c8:ed:fa:d4:cf:6b: 28:a2:66:3b:6e:9d:3f:c0:c9:38:e1:22:4b:69:41:54:c0:f5: 42:02:53:50:0c:86:72:60:b8:2c:90:7f:8d:5d:b1:44:4c:28: 26:dc:a8:06:5f:b5:f0:04:f7:be:1f:4a:24:7f:0f:55:a9:46: 84:2a:ec:e8:4c:a3:ae:3e:47:f4:e1:0c:e6:1d:4f:f6:5c:80: 84:8f:22:4e:6b:b1:8e:83:cb:2f:aa:a3:b6:e1:7b:0a:d1:aa: c0:d1:04:f2:7a:4d:82:8d:19:8f:44:11:3a:ba:ef:59:29:37: 4f:8c:38:26:42:e3:d1:a4:d9:ec:e6:08:e4:72:16:60:d6:f2: 51:dc:93:a5:97:fc:08:46:78:8a:66:c7:23:08:b5:76:2b:96: 8a:ce:0f:83:aa:af:b9:62:f5:36:da:bd:2b:b0:03:83:6d:dc: fb:f1:71:ae:be:78:19:d8:97:c1:84:ed:af:b9:c8:2c:97:86: 63:29:d4:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeld74/sZgiBJJa3Dj2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMmFjMTI0NmEyZTBlYTk3YTBjMjI5NWI3M2RkYmUwMDZk MGVkMmMwHhcNMjUxMjA2MDEwMTQ5WhcNMjUxMjA3MDEwMTQ5WjAzMTEwLwYDVQQD Eyg1MWNkNDczMWZjYmMwNWRkMDhjMTZhNzNmZWU5ZDYyZjU0MTdlOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSnQzkOuwMJ5dH/uRSSZaI+0EuWL KGGBzRmAqR/0onEErqfjNrPkhSzk8zlESSW2YXmShePBp+j9g9RKenahGozuxuJA PSlUFqh2KOt560fUj3RaFMKXEhQ6HeUwO1ji8Bo3850u63+wGmPG1wdtJ1gOcLMS z2M6ifab4oApglKCdAgOadJ7Htd8c1lE49nbgS04Mu/IoCh6aP3v3DzlR6B/lzMd R1x4uj5n6KEMOIjaFUUrbIJd1aNNpr+4hY36A9djctQHeJj+BatEJq+qAM1WxpuN B4wI8BNURoBxbACAvRiot+DCnw9c68lpkK/WdnC/qbgaRedgo9pNaSOY9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHNRzH8vAXdCMFqc/7p1i9UF+jLMB8GA1UdIwQY MBaAFBwqwSRqLg6pegwilbc92+AG0O0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wZGU3ZTEtYmY3Zi00MzRmLTk1OTEt OGQ0NmUwOWRmOWYzLzEvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8wZGU3ZTEtYmY3Zi00MzRmLTk1OTEtOGQ0NmUwOWRmOWYz LzEvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANVQzN1K JjUNcLgy2m5C0ZaXs7/LmIbSjhrL7RvJJickvudl+aCUHObsSsd/y2oTUpWxNXCB c7kzyOaZbEe03qYXyO361M9rKKJmO26dP8DJOOEiS2lBVMD1QgJTUAyGcmC4LJB/ jV2xREwoJtyoBl+18AT3vh9KJH8PValGhCrs6Eyjrj5H9OEM5h1P9lyAhI8iTmux joPLL6qjtuF7CtGqwNEE8npNgo0Zj0QROrrvWSk3T4w4JkLj0aTZ7OYI5HIWYNby UdyTpZf8CEZ4imbHIwi1diuWis4Pg6qvuWL1Ntq9K7ADg23c+/Fxrr54GdiXwYTt r7nILJeGYynUMA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:19 2025 by rpki-client