This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json) Hash identifier: +ql/gJ8Dpf/jRZ6cbh4fqDB0ZCQDrlQx38wbL+1S5D8= Subject key identifier: C8:83:7E:A6:8C:3E:FE:C4:9F:78:23:BB:40:8E:A7:8E:0C:C1:E6:55 Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6 Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6 Certificate serial: 019AF208EF27925C2BF56AE5B6E28A632D45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft Manifest number: 137C Signing time: Sat 06 Dec 2025 05:01:03 +0000 Manifest this update: Sat 06 Dec 2025 05:01:03 +0000 Manifest next update: Sun 07 Dec 2025 05:01:03 +0000 Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: +0BCuMDqUv8tg6Kj1hHRl0ssCR751dYn9R2QqIaKxzE=) 2: m1rDa4mFSS7DgxLKEUuhg1KKIME.roa (hash: P+gAWygPgYFKaEAocSrD9brqA8mxvT8s5Q0PR3R+oc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ef:27:92:5c:2b:f5:6a:e5:b6:e2:8a:63:2d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6 Validity Not Before: Dec 6 05:01:03 2025 GMT Not After : Dec 7 05:01:03 2025 GMT Subject: CN=c8837ea68c3efec49f7823bb408ea78e0cc1e655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:3e:16:65:b2:03:ea:1b:95:2e:ea:94:f7: cf:92:cd:7c:61:a9:0d:94:1a:21:17:94:b3:66:6a: 2d:ba:e7:58:e0:08:0a:d4:f0:da:96:58:c8:11:49: c8:5b:9c:98:10:05:7e:4c:0a:83:c5:91:57:ed:0b: 2e:4c:a5:f5:3f:fa:7a:ef:3b:92:40:16:e8:b6:fa: 7b:06:93:66:dc:ad:c2:01:46:31:ce:dd:bc:df:8d: ef:ed:66:aa:30:af:46:a5:8d:85:61:4f:fa:19:7b: 31:97:b8:2f:a6:a0:14:09:d5:6b:f4:9c:e6:4d:36: 0f:ba:78:2b:6f:18:39:1d:29:b2:82:0f:17:08:2b: 8c:0a:04:1f:ee:f7:09:4a:7b:d6:d1:32:7a:56:fa: 72:26:99:bf:76:e1:b8:9a:9d:26:51:4e:6b:83:27: 54:8c:24:72:16:7d:c4:bd:cd:6e:5f:51:8b:86:89: fa:fe:f6:22:d0:66:eb:8c:54:31:2f:35:8d:ba:76: bf:1d:45:ea:75:ac:f9:de:5b:77:d4:da:2a:4f:4e: e9:ba:df:f7:07:b1:a9:a1:f3:d6:26:d7:94:be:d6: d6:6b:45:bd:7e:70:54:57:b9:83:f7:cf:eb:86:79: 46:db:ce:a8:02:dc:c6:2a:44:96:db:9c:0a:7c:87: fc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:83:7E:A6:8C:3E:FE:C4:9F:78:23:BB:40:8E:A7:8E:0C:C1:E6:55 X509v3 Authority Key Identifier: keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:eb:70:59:b8:bb:94:d5:0d:dc:1b:cf:c7:22:55:ef:09:66: c2:a4:89:c4:04:21:c9:b9:7b:fc:16:30:5a:69:25:6d:ed:3f: 09:a4:4f:19:09:ca:cf:07:04:52:37:c7:32:c6:46:66:46:4b: f7:1f:84:1c:53:15:0d:7a:a8:b9:45:a5:41:68:d3:0c:f5:de: 1b:fe:26:6f:cc:44:1e:f3:23:e4:0b:0a:ac:d8:b7:d3:a1:0e: 5b:ac:8d:13:88:5f:fe:b9:77:17:6b:b5:19:96:77:9b:5a:e0: 9b:2e:fa:b5:b4:66:96:22:29:2b:b4:df:93:0f:0d:07:13:bc: f4:c3:53:f0:d5:9b:69:48:19:54:cc:3c:bf:43:31:49:22:bf: 89:6a:a3:f7:db:57:ca:65:f5:ba:63:84:dc:e8:fe:bc:1d:a6: 5b:46:2c:39:e9:ad:84:0d:9e:d1:f9:f8:37:20:97:cf:83:61: f1:0f:3d:a8:85:31:21:6c:c0:2e:3b:b0:05:41:10:c2:b5:5e: 2e:b9:2b:4a:6c:3f:61:f0:13:59:71:52:54:89:92:1a:7f:ed: bf:c8:8b:5d:30:1e:41:5d:0f:03:65:cb:1b:5f:8c:fd:7e:4f: 3b:ff:15:c0:eb:62:5c:fe:68:2e:74:6e:b2:de:b9:f3:a6:21: 99:5e:71:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCO8nklwr9WrltuKKYy1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNmZkMjk3Zjk1NTMxZmViODJjOTY0ZmQ2N2Y2Yzk0MzIw OTM4ZjYwHhcNMjUxMjA2MDUwMTAzWhcNMjUxMjA3MDUwMTAzWjAzMTEwLwYDVQQD EyhjODgzN2VhNjhjM2VmZWM0OWY3ODIzYmI0MDhlYTc4ZTBjYzFlNjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubo+FmWyA+oblS7qlPfPks18YakN lBohF5SzZmotuudY4AgK1PDalljIEUnIW5yYEAV+TAqDxZFX7QsuTKX1P/p67zuS QBbotvp7BpNm3K3CAUYxzt28343v7WaqMK9GpY2FYU/6GXsxl7gvpqAUCdVr9Jzm TTYPungrbxg5HSmygg8XCCuMCgQf7vcJSnvW0TJ6VvpyJpm/duG4mp0mUU5rgydU jCRyFn3Evc1uX1GLhon6/vYi0GbrjFQxLzWNuna/HUXqdaz53lt31NoqT07put/3 B7GpofPWJteUvtbWa0W9fnBUV7mD98/rhnlG286oAtzGKkSW25wKfIf8DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiDfqaMPv7En3gju0COp44MweZVMB8GA1UdIwQY MBaAFBxv0pf5VTH+uCyWT9Z/bJQyCTj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81YmQyNmMtYmJjZS00MGMwLTg5ZDct ZWY3OGE4YTc2MDZjLzEvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi81YmQyNmMtYmJjZS00MGMwLTg5ZDctZWY3OGE4YTc2MDZj LzEvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQetwWbi7 lNUN3BvPxyJV7wlmwqSJxAQhybl7/BYwWmklbe0/CaRPGQnKzwcEUjfHMsZGZkZL 9x+EHFMVDXqouUWlQWjTDPXeG/4mb8xEHvMj5AsKrNi306EOW6yNE4hf/rl3F2u1 GZZ3m1rgmy76tbRmliIpK7Tfkw8NBxO89MNT8NWbaUgZVMw8v0MxSSK/iWqj99tX ymX1umOE3Oj+vB2mW0YsOemthA2e0fn4NyCXz4Nh8Q89qIUxIWzALjuwBUEQwrVe LrkrSmw/YfATWXFSVImSGn/tv8iLXTAeQV0PA2XLG1+M/X5PO/8VwOtiXP5oLnRu st6586YhmV5xNg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:24 2025 by rpki-client