This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json) Hash identifier: d+2LDSLPVC2xr2mqzH5WVc3pXK0tUrcy6sOUbr4lW5w= Subject key identifier: DF:BE:31:0B:4D:45:E5:DB:F4:3A:4A:F9:1D:CD:4F:60:DC:2C:85:A7 Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a Certificate serial: 019AF31B8F30310B652A97FA71BD0303AB42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:00 +0000 Manifest this update: Sat 06 Dec 2025 10:01:00 +0000 Manifest next update: Sun 07 Dec 2025 10:01:00 +0000 Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: HWnRxgWCexiLBsZo3gdvwLQWJdksHd2japLpqZZ0C4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8f:30:31:0b:65:2a:97:fa:71:bd:03:03:ab:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a Validity Not Before: Dec 6 10:01:00 2025 GMT Not After : Dec 7 10:01:00 2025 GMT Subject: CN=dfbe310b4d45e5dbf43a4af91dcd4f60dc2c85a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:11:f0:de:95:50:66:80:de:37:83:d7:2f:8b: 9f:71:0b:b6:0f:75:26:a1:1b:f1:19:b8:06:89:fd: 54:12:d3:d5:cc:91:1c:44:9d:32:8f:6d:e5:f7:ca: 29:bb:89:cd:e6:1b:0c:73:a1:13:b7:3e:7e:c7:6f: 0d:d8:40:53:d2:d1:f0:5a:7b:e6:01:01:b7:f7:86: 26:27:ec:bf:58:f3:1f:f3:02:b1:0c:1e:56:68:9f: 84:a3:34:61:8e:08:46:0a:42:2f:41:ae:8b:5f:b8: 3a:ac:47:ee:46:38:15:1e:a4:67:e4:70:3f:f9:e0: 41:60:9f:3c:a2:fb:11:10:36:d3:2a:70:66:b8:94: 71:a5:b4:b0:c5:78:7c:07:85:d3:6e:23:5e:af:ec: 7c:e3:ee:b8:5c:10:de:22:84:bf:9f:f3:fd:e4:ed: 21:e0:55:c0:92:a6:bd:77:6e:a1:54:c4:cb:9d:fa: 53:43:ce:56:d0:0b:6d:46:d1:d6:57:e6:cc:09:4b: d2:86:50:f1:b4:49:55:fd:3e:a6:37:c3:d8:46:1e: 43:a1:04:39:af:b0:a6:32:68:66:77:05:1d:64:00: 3e:ea:db:a2:6d:6f:c2:c2:ff:0c:aa:1e:d3:ce:29: 9c:51:8b:7e:a4:24:5b:47:56:00:88:ff:32:85:6f: 6c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BE:31:0B:4D:45:E5:DB:F4:3A:4A:F9:1D:CD:4F:60:DC:2C:85:A7 X509v3 Authority Key Identifier: keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:36:fc:5c:b3:99:09:19:53:c2:61:36:3c:83:01:a1:2a:11: 1d:d0:c1:a7:7a:cc:cc:99:2b:05:f5:0b:e9:f5:a4:d5:62:af: eb:be:72:35:fa:17:0f:f5:64:ce:ae:69:83:fa:e7:95:40:5e: fd:51:99:45:5c:1b:a9:e9:fa:26:d1:03:de:c2:67:cf:ea:24: 1f:55:da:7b:6d:66:bc:89:dd:26:79:0c:64:67:c1:12:67:42: 18:1c:41:0d:1c:e9:f1:dc:bc:71:1d:6e:98:1c:57:9e:02:8f: da:cd:f7:21:9c:e8:a7:94:39:94:11:1f:95:f6:4e:1d:a8:8c: 13:d0:e8:64:66:d2:4b:e5:9f:50:32:05:aa:85:cc:c5:f1:7a: a6:65:04:94:d5:e5:e5:2d:24:d1:a0:f1:d6:20:48:f9:4e:22: 3f:e3:81:0a:bd:7a:39:60:78:c8:47:8a:9c:73:25:37:4a:34: 21:d5:62:ea:d4:f4:8d:81:2e:43:2c:8b:62:1e:9c:1e:ed:07: 37:17:df:ae:ba:42:aa:45:c6:87:8b:97:b0:c9:4e:9e:1c:b8: 57:b9:e5:5b:4b:09:01:08:4d:0a:cd:14:a5:e0:c4:a3:e2:ce: 1f:12:45:11:89:bc:b3:24:af:07:6b:99:01:6c:09:98:c8:d5: 67:d7:bc:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG48wMQtlKpf6cb0DA6tCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1Y2Y5MTBhOTQ0NDllYTIzYWFjNmM0MDlhMDU4NDliZWRh NWUyNGEwHhcNMjUxMjA2MTAwMTAwWhcNMjUxMjA3MTAwMTAwWjAzMTEwLwYDVQQD EyhkZmJlMzEwYjRkNDVlNWRiZjQzYTRhZjkxZGNkNGY2MGRjMmM4NWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RHw3pVQZoDeN4PXL4ufcQu2D3Um oRvxGbgGif1UEtPVzJEcRJ0yj23l98opu4nN5hsMc6ETtz5+x28N2EBT0tHwWnvm AQG394YmJ+y/WPMf8wKxDB5WaJ+EozRhjghGCkIvQa6LX7g6rEfuRjgVHqRn5HA/ +eBBYJ88ovsREDbTKnBmuJRxpbSwxXh8B4XTbiNer+x84+64XBDeIoS/n/P95O0h 4FXAkqa9d26hVMTLnfpTQ85W0AttRtHWV+bMCUvShlDxtElV/T6mN8PYRh5DoQQ5 r7CmMmhmdwUdZAA+6tuibW/Cwv8Mqh7TzimcUYt+pCRbR1YAiP8yhW9sLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN++MQtNReXb9DpK+R3NT2DcLIWnMB8GA1UdIwQY MBaAFIXPkQqURJ6iOqxsQJoFhJvtpeJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZDNhNGMtNjUxZi00NDk4LThjMjIt NTUyZjAyY2JjMDBlLzEvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZDNhNGMtNjUxZi00NDk4LThjMjItNTUyZjAyY2JjMDBl LzEvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojb8XLOZ CRlTwmE2PIMBoSoRHdDBp3rMzJkrBfUL6fWk1WKv675yNfoXD/Vkzq5pg/rnlUBe /VGZRVwbqen6JtED3sJnz+okH1Xae21mvIndJnkMZGfBEmdCGBxBDRzp8dy8cR1u mBxXngKP2s33IZzop5Q5lBEflfZOHaiME9DoZGbSS+WfUDIFqoXMxfF6pmUElNXl 5S0k0aDx1iBI+U4iP+OBCr16OWB4yEeKnHMlN0o0IdVi6tT0jYEuQyyLYh6cHu0H NxffrrpCqkXGh4uXsMlOnhy4V7nlW0sJAQhNCs0UpeDEo+LOHxJFEYm8sySvB2uZ AWwJmMjVZ9e8Dg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:25:24 2025 by rpki-client