This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft File: _HlIirThrA9L1GfStNNiHGsY7qA.mft (raw, json) Hash identifier: b+bizuqwrKD0XjZKHzcklt927DkIozdddlbSiNlD2Vo= Subject key identifier: 56:69:1A:EF:C2:6F:FA:C7:52:B4:C5:16:44:93:FC:CA:F2:9A:A8:80 Authority key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0 Certificate issuer: /CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0 Certificate serial: 019AF352CF287DC3F8EF720C554FD0AB1C52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 11:01:21 +0000 Manifest this update: Sat 06 Dec 2025 11:01:21 +0000 Manifest next update: Sun 07 Dec 2025 11:01:21 +0000 Files and hashes: 1: Fxxp-LRkqvfLrMmhXHpze09Zypk.roa (hash: VeSras0PkAsQ1iWlGxVtQbCw1RAH/pLCo7L2bleBamo=) 2: _HlIirThrA9L1GfStNNiHGsY7qA.crl (hash: EpmSY7w3/Qs1/eg8Kgc+cqx2JVzHk1IA625YO0iP7MI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:cf:28:7d:c3:f8:ef:72:0c:55:4f:d0:ab:1c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0 Validity Not Before: Dec 6 11:01:21 2025 GMT Not After : Dec 7 11:01:21 2025 GMT Subject: CN=56691aefc26ffac752b4c5164493fccaf29aa880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:14:99:0e:b8:b1:5f:b6:23:a2:35:f4:92:50: 72:03:5a:c2:72:01:bf:36:86:81:28:5c:49:a9:cb: ef:4c:10:20:2d:6c:43:f7:9e:b8:57:0f:cb:f2:38: b7:d3:55:93:c3:d8:3c:43:e5:24:31:d9:27:b7:df: 8d:3c:1c:f6:83:81:fd:5d:c8:0c:7c:d9:b0:00:93: 1f:30:39:22:62:0d:fb:c5:38:1c:9d:df:da:10:7c: 52:3b:9a:db:9c:e7:4f:ee:f2:47:e3:14:b6:ee:ad: 8f:d2:54:64:78:e3:52:ed:53:aa:a6:4e:2d:f3:82: 30:52:f5:c2:64:c1:4a:14:4d:5c:0a:60:bd:cf:65: c0:33:f5:22:89:67:e1:00:1a:02:76:50:6c:60:a8: 95:d4:e4:48:d3:5a:45:93:f9:ba:3d:1c:71:6f:98: 6c:ca:09:45:e2:d8:49:2a:12:70:01:37:4d:70:21: 0b:de:07:7e:ee:ad:ee:0b:d5:c0:6c:ce:e8:55:38: 73:44:85:cd:e0:9f:31:c7:b6:43:96:25:9f:3e:29: 39:af:95:98:87:7a:99:9b:97:68:66:81:48:4b:ad: 85:c3:e8:2d:f3:4b:39:b0:43:e9:5a:b0:d8:95:e5: 14:73:c3:38:71:2d:73:87:c7:f2:8b:48:c7:31:9a: 28:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:69:1A:EF:C2:6F:FA:C7:52:B4:C5:16:44:93:FC:CA:F2:9A:A8:80 X509v3 Authority Key Identifier: keyid:FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ec:70:04:83:e3:ab:84:c6:3a:8d:ad:54:4c:6b:fc:f1:eb: d7:87:5d:65:9b:61:6c:a2:6b:37:4f:55:d3:fc:d2:53:d4:67: a0:00:0f:b1:5c:29:b9:3c:a5:54:7c:28:b3:fa:10:1a:11:7c: e1:56:55:51:06:3e:3d:f1:7e:3b:0f:55:4c:35:63:c3:9a:74: 97:4d:ef:aa:d0:16:2b:1f:16:ec:f2:61:a6:3c:99:44:05:ca: 01:e5:b3:ff:79:96:18:65:98:a3:f8:a7:82:65:31:ba:12:7f: 3f:41:1b:22:11:3a:ec:cd:59:ad:af:3a:c1:02:31:19:10:f8: 6d:91:3d:9f:f6:e5:c1:ca:c5:ee:e7:3e:1f:62:b4:e9:ce:d9: 0f:62:b7:ed:3f:c7:67:c0:8c:fa:93:db:1b:32:40:27:c9:71: 55:18:2d:95:84:11:8e:67:dc:b6:2d:1d:86:02:8e:ad:d5:00: cb:b2:10:c8:37:0e:48:4a:ca:5d:14:bc:8c:87:23:30:0a:95: 7c:25:64:c6:10:ed:94:47:ae:c1:c4:8e:68:d8:38:f9:b9:eb: 59:0f:0d:a8:c0:37:b9:ec:91:7f:aa:9b:af:1b:66:36:b0:19: ac:79:ce:60:8e:da:da:99:28:7e:fe:af:41:e1:d2:30:3b:a6: 25:f1:6b:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUs8ofcP473IMVU/QqxxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNzk0ODhhYjRlMWFjMGY0YmQ0NjdkMmI0ZDM2MjFjNmIx OGVlYTAwHhcNMjUxMjA2MTEwMTIxWhcNMjUxMjA3MTEwMTIxWjAzMTEwLwYDVQQD Eyg1NjY5MWFlZmMyNmZmYWM3NTJiNGM1MTY0NDkzZmNjYWYyOWFhODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hSZDrixX7YjojX0klByA1rCcgG/ NoaBKFxJqcvvTBAgLWxD9564Vw/L8ji301WTw9g8Q+UkMdknt9+NPBz2g4H9XcgM fNmwAJMfMDkiYg37xTgcnd/aEHxSO5rbnOdP7vJH4xS27q2P0lRkeONS7VOqpk4t 84IwUvXCZMFKFE1cCmC9z2XAM/UiiWfhABoCdlBsYKiV1ORI01pFk/m6PRxxb5hs yglF4thJKhJwATdNcCEL3gd+7q3uC9XAbM7oVThzRIXN4J8xx7ZDliWfPik5r5WY h3qZm5doZoFIS62Fw+gt80s5sEPpWrDYleUUc8M4cS1zh8fyi0jHMZooXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZpGu/Cb/rHUrTFFkST/MrymqiAMB8GA1UdIwQY MBaAFPx5SIq04awPS9Rn0rTTYhxrGO6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0hsSWlyVGhyQTlMMUdmU3ROTmlIR3NZN3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hOTBkYmYtODZkNi00OGNlLThhNmMt ODZhYTAwZTEzNzQ2LzEvX0hsSWlyVGhyQTlMMUdmU3ROTmlIR3NZN3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hOTBkYmYtODZkNi00OGNlLThhNmMtODZhYTAwZTEzNzQ2 LzEvX0hsSWlyVGhyQTlMMUdmU3ROTmlIR3NZN3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+xwBIPj q4TGOo2tVExr/PHr14ddZZthbKJrN09V0/zSU9RnoAAPsVwpuTylVHwos/oQGhF8 4VZVUQY+PfF+Ow9VTDVjw5p0l03vqtAWKx8W7PJhpjyZRAXKAeWz/3mWGGWYo/in gmUxuhJ/P0EbIhE67M1Zra86wQIxGRD4bZE9n/blwcrF7uc+H2K06c7ZD2K37T/H Z8CM+pPbGzJAJ8lxVRgtlYQRjmfcti0dhgKOrdUAy7IQyDcOSErKXRS8jIcjMAqV fCVkxhDtlEeuwcSOaNg4+bnrWQ8NqMA3ueyRf6qbrxtmNrAZrHnOYI7a2pkofv6v QeHSMDumJfFrFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:05 2025 by rpki-client