This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json) Hash identifier: Y9ed3ap23k8+G8FjYwCKejM3zuwKgO4E6GwPMPDEqdo= Subject key identifier: 82:4F:15:F2:ED:44:0E:7F:36:C6:EE:D2:D9:66:D4:E2:39:5E:4D:75 Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db Certificate serial: 019AF0BF03DAD6A2E5F4217EF34E8DA19858 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 23:00:41 +0000 Manifest this update: Fri 05 Dec 2025 23:00:41 +0000 Manifest next update: Sat 06 Dec 2025 23:00:41 +0000 Files and hashes: 1: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: uDMDiBIptcgRMtaU/sA/VflPxM0SSSJqfUXL/v5CI+I=) 2: eNFG-PCCE4y-AFcmWiHx3RyG7nQ.roa (hash: UjvYsBltNXDFlhfaOzku1vtdcH3iWC+A6hFXawcbjCc=) 3: hRJ0dFuJTo0f67z5A3zupA3p9Eg.roa (hash: DEPtmvNaAFnv4bw8oxA9ykREwTuLcaBuOAc2e9nbKqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:03:da:d6:a2:e5:f4:21:7e:f3:4e:8d:a1:98:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db Validity Not Before: Dec 5 23:00:41 2025 GMT Not After : Dec 6 23:00:41 2025 GMT Subject: CN=824f15f2ed440e7f36c6eed2d966d4e2395e4d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5a:9c:99:38:99:33:67:27:93:97:f7:13:64: c2:0c:8c:76:36:59:01:ad:e6:e3:7c:df:12:08:45: b8:a1:f3:aa:27:85:02:9c:23:6e:13:5f:62:40:28: d4:70:06:c7:78:2d:33:1f:89:12:35:cf:bd:f5:29: 1c:72:e3:2c:66:f2:b7:c0:37:88:e9:1a:c6:74:97: 4d:75:dd:6e:18:d4:bc:bf:64:2a:06:88:59:4a:3c: 87:21:9b:ba:65:05:1e:19:3f:24:15:59:8c:03:a4: a0:f0:c1:a1:c2:38:19:2b:dd:e5:4d:f2:bc:c6:a6: 99:63:9f:ef:d1:c2:51:71:6b:cd:59:fc:b4:60:92: 84:3a:95:d5:0d:c5:68:d2:21:ae:d8:d7:d5:3e:8a: f6:fc:c1:a7:2b:1c:50:0e:d5:80:66:6b:5f:63:62: 75:89:d7:57:9d:ac:87:e7:53:11:8b:4a:55:a9:50: 83:24:c3:ef:6d:6c:4c:44:e7:3b:0c:50:d6:17:77: d8:34:4a:af:9d:cc:92:49:ed:f1:22:2a:d9:67:83: 4b:4b:62:d5:3e:37:b7:f0:63:b7:58:f9:5b:3c:d8: bf:eb:92:a9:fd:57:bf:18:5e:95:32:de:94:2e:54: 3f:76:d3:12:19:51:12:e5:6c:63:09:a0:40:c4:3f: 73:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4F:15:F2:ED:44:0E:7F:36:C6:EE:D2:D9:66:D4:E2:39:5E:4D:75 X509v3 Authority Key Identifier: keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b9:15:6a:19:71:1d:4d:74:2e:9c:db:93:30:fc:ee:0d:b9: 74:41:8f:ae:47:58:12:64:06:f1:69:88:a6:53:78:1c:8d:5f: d8:c4:cc:70:e1:7b:46:e8:09:c2:2c:27:91:0b:5a:3e:48:75: 12:07:10:bc:56:27:42:88:2b:01:b4:ce:de:33:9d:ee:98:9e: aa:1a:3a:89:c9:13:b4:c9:b6:d5:c1:7f:74:b4:01:ad:f5:d7: 84:0d:00:6b:88:db:a5:50:6d:55:45:39:4f:a1:de:7d:04:6a: 7c:da:e9:11:15:67:f8:1c:4d:e7:74:52:f0:e3:47:22:fb:fb: b7:d4:b2:15:41:1e:69:3f:80:f8:c1:dc:5e:58:4d:59:88:6f: 33:6a:d6:c4:5d:83:46:3d:2a:1d:6e:cc:51:a6:60:a5:c5:c0: ac:9c:4c:72:53:6c:e7:44:00:6b:df:93:5a:be:10:b5:17:25: 66:54:af:a1:a3:fa:72:9d:7f:5e:ae:25:f7:d8:1c:0e:c1:1f: a2:c9:4f:11:57:2f:3f:c7:f7:fa:74:6d:e6:d3:f0:c5:66:e5: 72:60:34:ec:89:af:7a:1d:16:ed:f3:d7:a4:59:9a:4b:20:9d: 76:d8:05:d2:89:12:29:c0:63:97:f8:05:61:52:7a:0e:c2:97: fb:03:fd:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwPa1qLl9CF+806NoZhYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYzc1MjIzMjFjMjNkMTY5ZWQzMzJmZjQ5ODc5Y2NjMjQ1 MTcyZGIwHhcNMjUxMjA1MjMwMDQxWhcNMjUxMjA2MjMwMDQxWjAzMTEwLwYDVQQD Eyg4MjRmMTVmMmVkNDQwZTdmMzZjNmVlZDJkOTY2ZDRlMjM5NWU0ZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1qcmTiZM2cnk5f3E2TCDIx2NlkB rebjfN8SCEW4ofOqJ4UCnCNuE19iQCjUcAbHeC0zH4kSNc+99SkccuMsZvK3wDeI 6RrGdJdNdd1uGNS8v2QqBohZSjyHIZu6ZQUeGT8kFVmMA6Sg8MGhwjgZK93lTfK8 xqaZY5/v0cJRcWvNWfy0YJKEOpXVDcVo0iGu2NfVPor2/MGnKxxQDtWAZmtfY2J1 iddXnayH51MRi0pVqVCDJMPvbWxMROc7DFDWF3fYNEqvncySSe3xIirZZ4NLS2LV Pje38GO3WPlbPNi/65Kp/Ve/GF6VMt6ULlQ/dtMSGVES5WxjCaBAxD9zhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJPFfLtRA5/Nsbu0tlm1OI5Xk11MB8GA1UdIwQY MBaAFB3HUiMhwj0WntMy/0mHnMwkUXLbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGNkU0l5SENQUmFlMHpMX1NZZWN6Q1JSY3RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81MjBkMDQtZTkxMi00ZjQ2LWE5ZTYt NzA1NTM5M2Y3NWZlLzEvSGNkU0l5SENQUmFlMHpMX1NZZWN6Q1JSY3RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi81MjBkMDQtZTkxMi00ZjQ2LWE5ZTYtNzA1NTM5M2Y3NWZl LzEvSGNkU0l5SENQUmFlMHpMX1NZZWN6Q1JSY3RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbkVahlx HU10LpzbkzD87g25dEGPrkdYEmQG8WmIplN4HI1f2MTMcOF7RugJwiwnkQtaPkh1 EgcQvFYnQogrAbTO3jOd7pieqho6ickTtMm21cF/dLQBrfXXhA0Aa4jbpVBtVUU5 T6HefQRqfNrpERVn+BxN53RS8ONHIvv7t9SyFUEeaT+A+MHcXlhNWYhvM2rWxF2D Rj0qHW7MUaZgpcXArJxMclNs50QAa9+TWr4QtRclZlSvoaP6cp1/Xq4l99gcDsEf oslPEVcvP8f3+nRt5tPwxWblcmA07Imveh0W7fPXpFmaSyCddtgF0okSKcBjl/gF YVJ6DsKX+wP9Pg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:34 2025 by rpki-client