This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft File: HQXcdA9vS7W8SwM4fptHUwhQdDw.mft (raw, json) Hash identifier: vOdhBWItyERnsZwomnjfvmDWh2VAsZX8ODVHFwhV224= Subject key identifier: 19:54:2D:0A:BB:F7:54:6B:D9:EC:74:98:98:B0:CA:49:A8:C3:6A:3A Authority key identifier: 1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C Certificate issuer: /CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c Certificate serial: 019AF42E667C3DFECB24B6C8FB656ABEB36C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft Manifest number: 11 Signing time: Sat 06 Dec 2025 15:01:12 +0000 Manifest this update: Sat 06 Dec 2025 15:01:12 +0000 Manifest next update: Sun 07 Dec 2025 15:01:12 +0000 Files and hashes: 1: 1-G0EJ3RxyGrfpOewrxyNUksn-_s.roa (hash: tsw4bxcurhO+Kj73Cy+Fcmen52mveN4PcUB84BuL1BY=) 2: HQXcdA9vS7W8SwM4fptHUwhQdDw.crl (hash: zL9uaGS9/T4jrvbXm1gVlFEDjXJBNEg1pQuiddl3QbI=) 3: r93z9Jq8KCMy95hIpMR2wPfgXIg.roa (hash: QV/odSgO66kvDHRkk8MAxym1rf6ROxdaLHUmKl3Yctk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:66:7c:3d:fe:cb:24:b6:c8:fb:65:6a:be:b3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c Validity Not Before: Dec 6 15:01:12 2025 GMT Not After : Dec 7 15:01:12 2025 GMT Subject: CN=19542d0abbf7546bd9ec749898b0ca49a8c36a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1b:5b:1f:17:6b:5c:6a:29:ae:e0:f0:fa:eb: 5b:06:1a:c2:9c:6f:13:ef:a9:27:20:d6:5e:63:33: cb:9b:ca:0c:18:ff:f4:c2:75:13:ca:f1:72:9f:30: fb:59:56:38:19:67:99:92:ab:c6:02:32:9a:62:81: 90:92:75:11:48:70:8d:37:ff:dc:74:77:b3:3f:6e: 61:7c:d0:b8:b2:2c:66:03:5f:68:16:fe:1e:f3:54: 9a:b1:62:c4:51:ee:6e:d7:45:d9:6b:bf:1c:00:9e: 6d:d0:b2:d1:7e:1f:ac:aa:86:96:23:f7:0b:a0:29: 97:d0:7b:14:ea:01:6b:36:b4:19:60:6f:36:7f:ac: 5e:2b:ef:00:92:67:29:bb:bd:c2:e8:bc:25:44:69: 86:e5:aa:e1:3e:78:13:c3:c9:4f:bc:be:03:d3:79: cc:ad:3f:39:05:43:7a:05:93:6c:7a:41:05:39:cb: 39:d7:ad:5d:97:6f:30:f4:89:5c:4f:97:b8:18:69: 4e:d7:8c:17:07:26:a1:35:01:46:72:ec:9b:23:02: a1:c8:ee:0a:33:ca:3a:8d:04:d1:23:fe:14:67:fe: ad:52:58:a6:a5:c1:ad:00:b7:8e:88:94:6b:d0:40: 20:71:21:e4:4d:ec:68:06:d1:83:44:20:de:79:fb: ca:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:54:2D:0A:BB:F7:54:6B:D9:EC:74:98:98:B0:CA:49:A8:C3:6A:3A X509v3 Authority Key Identifier: keyid:1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4a:17:ad:b6:90:fa:b7:46:87:80:00:24:4a:cf:4a:a6:24: b1:a7:b6:d8:9b:9d:fe:e6:29:39:2a:0b:8f:6e:8a:c8:6c:77: ce:af:44:02:86:fe:fe:c4:89:47:2c:63:c6:d7:04:6a:52:90: f1:f6:32:e8:c0:a4:46:fa:48:13:0c:7f:59:78:96:30:ce:27: 79:48:65:dd:0e:3c:79:ac:72:44:8a:a9:5c:9e:ea:67:3c:44: ef:1a:7c:f6:04:62:a2:46:32:ff:16:94:aa:5b:df:d7:e1:28: 04:26:9d:b1:60:e6:26:41:3c:82:0a:f7:a6:41:23:00:53:17: 40:46:46:d7:2d:e0:58:af:9e:1c:ad:09:40:a4:86:50:9b:e3: e6:13:22:50:e4:20:b4:a9:ea:7e:34:8d:0c:eb:e3:ac:0f:05: 28:31:19:e2:40:c3:38:9b:d5:cd:c4:c5:8b:20:48:09:78:23: 6c:fa:ae:f1:e6:24:5a:ca:10:ca:8f:e7:50:f6:48:9b:21:dd: 2c:fe:5e:ad:ed:59:46:7a:ac:51:0c:6a:b6:a1:2b:6b:19:60: 3c:a0:82:38:f3:ed:3b:1b:1b:7e:34:2d:ec:4f:d2:f8:97:21: f6:39:bc:a0:a7:da:33:6d:3b:e5:1f:90:95:cd:28:32:56:e5: de:7f:16:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LmZ8Pf7LJLbI+2VqvrNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDVkYzc0MGY2ZjRiYjViYzRiMDMzODdlOWI0NzUzMDg1 MDc0M2MwHhcNMjUxMjA2MTUwMTEyWhcNMjUxMjA3MTUwMTEyWjAzMTEwLwYDVQQD EygxOTU0MmQwYWJiZjc1NDZiZDllYzc0OTg5OGIwY2E0OWE4YzM2YTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0htbHxdrXGopruDw+utbBhrCnG8T 76knINZeYzPLm8oMGP/0wnUTyvFynzD7WVY4GWeZkqvGAjKaYoGQknURSHCNN//c dHezP25hfNC4sixmA19oFv4e81SasWLEUe5u10XZa78cAJ5t0LLRfh+sqoaWI/cL oCmX0HsU6gFrNrQZYG82f6xeK+8Akmcpu73C6LwlRGmG5arhPngTw8lPvL4D03nM rT85BUN6BZNsekEFOcs5161dl28w9IlcT5e4GGlO14wXByahNQFGcuybIwKhyO4K M8o6jQTRI/4UZ/6tUlimpcGtALeOiJRr0EAgcSHkTexoBtGDRCDeefvKmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlULQq791Rr2ex0mJiwykmow2o6MB8GA1UdIwQY MBaAFB0F3HQPb0u1vEsDOH6bR1MIUHQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFYY2RBOXZTN1c4U3dNNGZwdEhVd2hRZER3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wNGU0YzYtMzM0OS00YWVkLTg4YmMt NWVlNTM0ZmRiMzliLzEvSFFYY2RBOXZTN1c4U3dNNGZwdEhVd2hRZER3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8wNGU0YzYtMzM0OS00YWVkLTg4YmMtNWVlNTM0ZmRiMzli LzEvSFFYY2RBOXZTN1c4U3dNNGZwdEhVd2hRZER3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUoXrbaQ +rdGh4AAJErPSqYksae22Jud/uYpOSoLj26KyGx3zq9EAob+/sSJRyxjxtcEalKQ 8fYy6MCkRvpIEwx/WXiWMM4neUhl3Q48eaxyRIqpXJ7qZzxE7xp89gRiokYy/xaU qlvf1+EoBCadsWDmJkE8ggr3pkEjAFMXQEZG1y3gWK+eHK0JQKSGUJvj5hMiUOQg tKnqfjSNDOvjrA8FKDEZ4kDDOJvVzcTFiyBICXgjbPqu8eYkWsoQyo/nUPZImyHd LP5ere1ZRnqsUQxqtqEraxlgPKCCOPPtOxsbfjQt7E/S+Jch9jm8oKfaM2075R+Q lc0oMlbl3n8WHw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:47 2025 by rpki-client