This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft File: hNHcYT105sMty5gUzhJr1htSqqc.mft (raw, json) Hash identifier: tz3LBmrCw7pSFkAitKn+Yk54B9Ei+0n5fojpkdviq5g= Subject key identifier: 1F:66:15:48:2C:88:A6:9D:B9:85:AA:1B:25:01:F8:EA:4B:CD:B5:C9 Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7 Certificate issuer: /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7 Certificate serial: 019AF1D1A90484B484DF93F5FF192C514BA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: hNHcYT105sMty5gUzhJr1htSqqc.crl (hash: CtS+2kqnymK5oRUGAx0OUvRhm787I2rLLh/+h1RsqFo=) 2: qsewLApSJANcPGT3dklt2zSF2HU.roa (hash: bPAVtg7OfBYMMJkAVdTPdE+2AmcR0ogISjqN5CtNEqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a9:04:84:b4:84:df:93:f5:ff:19:2c:51:4b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7 Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=1f6615482c88a69db985aa1b2501f8ea4bcdb5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:98:77:f5:b5:73:fb:a3:43:51:4e:95:9f: 43:dc:2c:2c:38:49:15:14:32:4a:f8:25:d0:73:4b: ab:57:89:e6:e1:8f:46:8b:c3:58:2d:91:9a:d4:b9: fc:23:08:b1:6d:ee:f1:8e:6f:8c:0c:34:cf:b5:9a: 30:f6:d0:8f:93:e6:0d:79:90:d9:bd:6b:d2:09:a0: 2d:44:e2:b4:5a:4c:e2:6a:d2:e0:90:bd:73:bb:71: fb:ce:26:9f:a2:88:66:75:d7:47:8b:aa:6d:c2:a3: 6b:e2:6b:95:40:06:49:22:7d:c3:98:0d:bf:f3:d5: 49:9e:6e:e3:52:ca:36:55:31:c6:2b:1d:2b:e3:35: d5:97:e4:e7:6a:28:e7:f3:aa:cd:16:4b:cc:4d:59: 8e:65:1d:b8:45:f4:87:86:a2:ba:5f:91:ca:77:23: f4:31:fc:5b:92:cb:b3:7e:c5:20:c7:07:f2:83:79: 81:df:8d:63:59:ad:e0:b3:27:86:c6:9b:b8:c9:5c: cf:7c:3e:37:39:0b:cf:bb:63:89:e0:19:cd:fb:e7: 74:9b:d2:50:94:65:1f:b8:86:81:1d:69:c4:58:40: c0:3e:d7:b0:f6:f5:5b:a0:d0:a5:a6:67:58:bf:db: 08:b9:60:89:13:63:d7:f9:1c:4a:58:a7:6e:7c:9f: 10:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:66:15:48:2C:88:A6:9D:B9:85:AA:1B:25:01:F8:EA:4B:CD:B5:C9 X509v3 Authority Key Identifier: keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a6:fc:e9:e3:fd:a9:88:21:ed:f9:2b:81:94:f8:06:9c:c1: 0e:a6:eb:e8:7f:ac:a3:91:94:34:f4:fe:94:0a:80:97:e4:4d: a6:e2:9a:fd:a0:b7:0f:b5:f5:f2:59:8a:e0:a6:91:1d:e4:a4: ff:7a:7a:79:81:9e:9c:ae:67:ed:1d:8a:68:14:c6:4f:e4:af: 57:71:40:5c:9e:42:c0:7e:dd:8b:10:e3:e2:c9:73:c1:4c:6e: 51:bb:3e:2e:06:95:5b:97:f2:a8:e4:b2:af:fd:3f:4f:33:f6: 15:f6:c2:c4:9d:d6:85:53:38:41:bb:d2:db:bb:3f:b8:0b:79: 8d:75:59:c4:48:7c:4f:2b:d1:e1:66:a3:3b:a8:97:53:da:a6: 85:4d:f5:af:06:39:43:be:47:e9:64:3e:82:c4:31:f6:1a:ed: da:bc:5a:9f:f4:ea:68:22:fd:e5:b7:62:51:f9:94:41:a1:e9: 62:41:97:7f:ef:0e:4b:bf:b1:97:c7:70:1b:c2:0e:fb:89:e4: 81:ae:f5:91:31:7f:1f:04:a6:d3:cf:be:11:1c:be:ee:70:79: cb:92:34:27:e7:92:3d:9b:d0:74:f0:23:3b:66:26:72:2a:db: 3b:a7:58:4f:53:8a:20:59:c3:f9:78:7a:b2:9a:14:9c:c2:8e: 68:c3:bc:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0akEhLSE35P1/xksUUupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZDFkYzYxM2Q3NGU2YzMyZGNiOTgxNGNlMTI2YmQ2MWI1 MmFhYTcwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD EygxZjY2MTU0ODJjODhhNjlkYjk4NWFhMWIyNTAxZjhlYTRiY2RiNWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVaYd/W1c/ujQ1FOlZ9D3CwsOEkV FDJK+CXQc0urV4nm4Y9Gi8NYLZGa1Ln8Iwixbe7xjm+MDDTPtZow9tCPk+YNeZDZ vWvSCaAtROK0WkziatLgkL1zu3H7ziafoohmdddHi6ptwqNr4muVQAZJIn3DmA2/ 89VJnm7jUso2VTHGKx0r4zXVl+Tnaijn86rNFkvMTVmOZR24RfSHhqK6X5HKdyP0 MfxbksuzfsUgxwfyg3mB341jWa3gsyeGxpu4yVzPfD43OQvPu2OJ4BnN++d0m9JQ lGUfuIaBHWnEWEDAPtew9vVboNClpmdYv9sIuWCJE2PX+RxKWKdufJ8QvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9mFUgsiKaduYWqGyUB+OpLzbXJMB8GA1UdIwQY MBaAFITR3GE9dObDLcuYFM4Sa9YbUqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80ZTAyMDEtNGEwNC00MTVmLWE1ZjIt ZjIxYjY2ZGU5YjU2LzEvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy80ZTAyMDEtNGEwNC00MTVmLWE1ZjItZjIxYjY2ZGU5YjU2 LzEvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6b86eP9 qYgh7fkrgZT4BpzBDqbr6H+so5GUNPT+lAqAl+RNpuKa/aC3D7X18lmK4KaRHeSk /3p6eYGenK5n7R2KaBTGT+SvV3FAXJ5CwH7dixDj4slzwUxuUbs+LgaVW5fyqOSy r/0/TzP2FfbCxJ3WhVM4QbvS27s/uAt5jXVZxEh8TyvR4WajO6iXU9qmhU31rwY5 Q75H6WQ+gsQx9hrt2rxan/TqaCL95bdiUfmUQaHpYkGXf+8OS7+xl8dwG8IO+4nk ga71kTF/HwSm08++ERy+7nB5y5I0J+eSPZvQdPAjO2YmcirbO6dYT1OKIFnD+Xh6 spoUnMKOaMO8nw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:44 2025 by rpki-client