This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft File: HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft (raw, json) Hash identifier: Hy3MlYDObGSxnkvMtFdANu+lsarewEbrU+FVPodjG9g= Subject key identifier: 5F:38:EC:46:07:35:96:FB:9D:0B:4D:FF:C7:8F:60:66:83:D0:74:48 Authority key identifier: 1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93 Certificate issuer: /CN=1eaa87c6f8e320c93da9162250dac558c871dc93 Certificate serial: 019AF12EB5423ECAFF981477608F947EC5FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl (hash: QajyMsiQAsF5YPca/LS8QQPXppM/FDx5PVL+WIi3+xU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b5:42:3e:ca:ff:98:14:77:60:8f:94:7e:c5:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaa87c6f8e320c93da9162250dac558c871dc93 Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=5f38ec46073596fb9d0b4dffc78f606683d07448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:dc:db:2d:2f:56:ef:f0:88:1f:c3:b0:0c: b4:54:99:c1:d5:a5:80:3c:55:50:dc:87:34:29:65: f9:b8:10:95:c5:ad:9f:d0:e3:85:4f:9d:4b:89:68: 79:08:d9:25:be:cb:a4:ec:ae:b2:08:12:2f:e2:46: 72:df:f0:20:f1:32:34:8e:f4:ad:00:53:9b:95:9d: 5f:df:ca:f2:4b:61:c1:b0:ee:9d:e1:5c:fe:eb:0a: ff:1d:25:9a:3a:4a:30:4f:64:c5:84:8a:8f:f0:8d: bb:69:c6:d6:14:0b:64:bc:c5:bb:db:b2:16:24:0a: 07:c7:92:7a:62:ec:8e:1c:ca:ae:17:ae:5c:0b:1c: d9:67:4f:10:8d:94:f3:20:e4:fe:37:ec:ec:49:28: e7:2a:d3:71:8c:2e:09:63:74:c6:ef:d7:ac:a9:6b: 63:19:d9:1a:5b:a0:71:02:20:63:d9:fa:94:35:20: a8:a1:a3:43:e0:8c:d9:19:9c:69:d1:81:94:68:67: 7c:e9:eb:eb:aa:17:07:0a:01:1d:ac:f0:af:29:f3: 1d:d3:f4:5e:bf:58:56:6e:7b:cd:f7:a6:bd:96:67: 41:88:f4:8b:51:ae:36:f9:52:5e:a9:b1:2e:3b:db: 96:ce:9d:a4:12:d5:ef:8d:de:69:85:63:49:b3:d0: 0e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:38:EC:46:07:35:96:FB:9D:0B:4D:FF:C7:8F:60:66:83:D0:74:48 X509v3 Authority Key Identifier: keyid:1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:21:07:05:5a:50:4b:86:6f:dd:e9:7e:2b:2c:98:0f:2c:ef: f0:e5:df:32:65:47:b4:c9:43:ca:42:22:b6:f7:52:ae:2e:52: b7:81:c6:67:31:d8:89:d1:39:fd:16:5a:d5:f6:cf:2d:e4:e1: 2f:7d:e0:40:a3:79:5f:c9:43:ed:02:a7:4d:2d:3d:c3:a4:ad: c6:ae:e8:d0:7d:a3:65:30:ea:82:bb:e1:af:d7:74:54:35:c5: 53:40:8c:23:ad:cc:3d:87:88:be:2d:eb:f8:09:f7:0a:1d:fa: 39:5c:f5:6e:2d:cb:7c:01:84:a7:b6:c2:83:ac:0a:94:56:dd: e9:71:6f:c5:9c:df:66:2b:82:ff:92:8d:68:90:58:a4:03:10: 5a:82:44:5f:79:8e:c9:5f:73:13:9e:ae:bf:da:27:ee:94:21: be:fd:60:bb:d1:d5:1b:91:ab:15:78:da:b6:60:d1:c5:2b:d9: 76:7f:cf:b5:1b:1a:88:f2:63:73:fc:a2:ca:fd:e7:76:4e:51: 72:b7:c3:ab:70:fe:cd:2e:0c:3c:2e:19:88:10:b4:dd:41:9a: 1c:16:5d:7d:43:f9:74:87:78:38:c9:e4:a2:13:c3:6b:7f:9f: 04:19:c8:62:9b:9a:e1:a0:8a:00:74:06:38:2f:71:f2:65:4d: de:38:88:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrVCPsr/mBR3YI+UfsX7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWE4N2M2ZjhlMzIwYzkzZGE5MTYyMjUwZGFjNTU4Yzg3 MWRjOTMwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD Eyg1ZjM4ZWM0NjA3MzU5NmZiOWQwYjRkZmZjNzhmNjA2NjgzZDA3NDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfbc2y0vVu/wiB/DsAy0VJnB1aWA PFVQ3Ic0KWX5uBCVxa2f0OOFT51LiWh5CNklvsuk7K6yCBIv4kZy3/Ag8TI0jvSt AFOblZ1f38ryS2HBsO6d4Vz+6wr/HSWaOkowT2TFhIqP8I27acbWFAtkvMW727IW JAoHx5J6YuyOHMquF65cCxzZZ08QjZTzIOT+N+zsSSjnKtNxjC4JY3TG79esqWtj GdkaW6BxAiBj2fqUNSCooaND4IzZGZxp0YGUaGd86evrqhcHCgEdrPCvKfMd0/Re v1hWbnvN96a9lmdBiPSLUa42+VJeqbEuO9uWzp2kEtXvjd5phWNJs9AO8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF847EYHNZb7nQtN/8ePYGaD0HRIMB8GA1UdIwQY MBaAFB6qh8b44yDJPakWIlDaxVjIcdyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYTljNDYtMGI0Zi00OGE2LTg5OWUt MWFmNTY4ZDg5MDhhLzEvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lYTljNDYtMGI0Zi00OGE2LTg5OWUtMWFmNTY4ZDg5MDhh LzEvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiEHBVpQ S4Zv3el+KyyYDyzv8OXfMmVHtMlDykIitvdSri5St4HGZzHYidE5/RZa1fbPLeTh L33gQKN5X8lD7QKnTS09w6Stxq7o0H2jZTDqgrvhr9d0VDXFU0CMI63MPYeIvi3r +An3Ch36OVz1bi3LfAGEp7bCg6wKlFbd6XFvxZzfZiuC/5KNaJBYpAMQWoJEX3mO yV9zE56uv9on7pQhvv1gu9HVG5GrFXjatmDRxSvZdn/PtRsaiPJjc/yiyv3ndk5R crfDq3D+zS4MPC4ZiBC03UGaHBZdfUP5dId4OMnkohPDa3+fBBnIYpua4aCKAHQG OC9x8mVN3jiI0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:41 2025 by rpki-client