This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft File: HgKySJ9HE5YtEFESslJ264HxrJA.mft (raw, json) Hash identifier: +ouvxHsHT6zw9zQQ5cwud2OrqgJPwOcAg/3IfXEZ9sQ= Subject key identifier: D7:6A:F1:72:1A:AC:11:37:34:3C:C2:12:32:34:D7:05:70:D5:73:BB Authority key identifier: 1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90 Certificate issuer: /CN=1e02b2489f4713962d105112b25276eb81f1ac90 Certificate serial: 019AF27739CB308B230BC90F4E1517750400 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 07:01:31 +0000 Manifest this update: Sat 06 Dec 2025 07:01:31 +0000 Manifest next update: Sun 07 Dec 2025 07:01:31 +0000 Files and hashes: 1: 9V85HLFbpWnoHuwfi3uBdYCY9ZM.roa (hash: sWuFEcVAMiwExmVPdpvYCkHmeYDgX5Tn0zMIqcTEx/4=) 2: HgKySJ9HE5YtEFESslJ264HxrJA.crl (hash: hcgPdCJp7j7ww5q9A45Lp9nR0OpNZ2cpNvdHPq+vU8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:39:cb:30:8b:23:0b:c9:0f:4e:15:17:75:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e02b2489f4713962d105112b25276eb81f1ac90 Validity Not Before: Dec 6 07:01:31 2025 GMT Not After : Dec 7 07:01:31 2025 GMT Subject: CN=d76af1721aac1137343cc2123234d70570d573bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:97:3c:8e:15:11:d9:4f:a1:2f:7a:7c:ee:36: ad:b7:f0:f6:80:49:f5:38:a8:eb:ff:7e:36:95:10: 50:d6:24:6b:79:9a:c8:fd:05:83:f0:70:a6:e5:8d: a0:e8:1b:07:6c:2d:51:4a:25:26:47:10:36:e2:2c: 73:53:e9:36:d5:69:de:d6:c3:23:be:c4:42:28:b6: c8:a2:2b:87:8f:68:05:58:ad:d6:51:39:0b:d1:57: ed:19:62:02:be:49:0b:50:ab:5c:63:22:ae:b3:83: 54:e8:88:6c:c8:3f:f7:c4:ff:ac:b7:4c:3e:10:ac: 9c:cd:ab:05:6c:43:56:75:f7:9a:5d:cc:9f:cd:b8: 1a:d6:6a:0a:66:97:85:c3:5e:25:51:7c:86:46:3a: a8:05:a1:9f:a3:64:19:dc:50:77:8e:81:ed:ba:ee: 0c:e0:e6:74:bf:65:f8:b2:c8:79:8d:8d:81:7a:2b: 07:20:ca:2c:a5:52:7a:49:75:54:f6:7e:0c:87:a9: 7e:0d:12:ad:fc:2e:4c:9e:61:16:3c:d9:37:b3:41: c2:a7:83:a8:75:18:13:2d:55:a9:2c:e4:a2:2b:61: 14:68:b3:99:50:bb:a6:5a:d9:df:2f:ac:a6:f1:84: 43:7f:f3:f7:1f:61:66:0b:51:45:93:f7:ea:9d:4c: af:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6A:F1:72:1A:AC:11:37:34:3C:C2:12:32:34:D7:05:70:D5:73:BB X509v3 Authority Key Identifier: keyid:1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:46:b1:0d:ed:11:8b:40:16:d1:9f:93:ec:af:c4:5e:8e:b8: 17:1f:0e:e5:68:89:eb:52:26:ec:fc:9d:9a:c9:ea:e0:d3:0f: 26:ef:a8:01:fd:ba:fe:0a:a3:21:4e:51:ad:bf:d8:fd:c7:28: a3:86:21:3a:fd:f2:83:1e:74:77:68:87:d1:f6:70:99:77:7d: b6:ae:fa:c2:a8:f0:3d:f1:ed:96:ca:e0:d7:49:28:86:51:41: 1d:a6:28:63:af:72:26:e9:4a:b6:87:cf:6f:46:ba:9f:0e:fe: ba:f2:77:11:4b:d8:d6:06:5b:13:e8:87:34:fc:26:6e:7f:59: 05:76:a0:0e:97:40:e8:07:51:23:39:28:a1:d9:e6:6c:46:74: 8c:76:68:ce:ae:5b:f9:1b:1d:29:6f:cb:45:67:8a:f4:a0:96: 4d:13:3b:5b:90:9a:f4:a9:23:22:4c:b1:3f:ca:ce:93:9a:74: 55:4b:4d:3f:ad:51:ca:6d:80:3d:08:b8:4e:40:86:9b:72:93: 01:5e:a6:6f:6b:4b:fe:b8:4d:3d:d3:ed:c8:a9:6b:14:32:b3: 69:c7:b9:1f:1b:a3:0b:a3:07:42:5a:e0:f4:21:03:b0:c4:2f: a9:02:8d:24:4c:79:f2:63:14:4f:1f:d1:ca:7d:68:48:d0:54: f6:52:d3:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydznLMIsjC8kPThUXdQQAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMDJiMjQ4OWY0NzEzOTYyZDEwNTExMmIyNTI3NmViODFm MWFjOTAwHhcNMjUxMjA2MDcwMTMxWhcNMjUxMjA3MDcwMTMxWjAzMTEwLwYDVQQD EyhkNzZhZjE3MjFhYWMxMTM3MzQzY2MyMTIzMjM0ZDcwNTcwZDU3M2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopc8jhUR2U+hL3p87jatt/D2gEn1 OKjr/342lRBQ1iRreZrI/QWD8HCm5Y2g6BsHbC1RSiUmRxA24ixzU+k21Wne1sMj vsRCKLbIoiuHj2gFWK3WUTkL0VftGWICvkkLUKtcYyKus4NU6IhsyD/3xP+st0w+ EKyczasFbENWdfeaXcyfzbga1moKZpeFw14lUXyGRjqoBaGfo2QZ3FB3joHtuu4M 4OZ0v2X4ssh5jY2BeisHIMospVJ6SXVU9n4Mh6l+DRKt/C5MnmEWPNk3s0HCp4Oo dRgTLVWpLOSiK2EUaLOZULumWtnfL6ym8YRDf/P3H2FmC1FFk/fqnUyvCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdq8XIarBE3NDzCEjI01wVw1XO7MB8GA1UdIwQY MBaAFB4CskifRxOWLRBRErJSduuB8ayQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGdLeVNKOUhFNVl0RUZFU3NsSjI2NEh4ckpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jMGEzMjYtODhlMS00MmI0LTlkNTYt MDkyMWQxYmJmMzQ5LzEvSGdLeVNKOUhFNVl0RUZFU3NsSjI2NEh4ckpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9jMGEzMjYtODhlMS00MmI0LTlkNTYtMDkyMWQxYmJmMzQ5 LzEvSGdLeVNKOUhFNVl0RUZFU3NsSjI2NEh4ckpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkaxDe0R i0AW0Z+T7K/EXo64Fx8O5WiJ61Im7Pydmsnq4NMPJu+oAf26/gqjIU5Rrb/Y/cco o4YhOv3ygx50d2iH0fZwmXd9tq76wqjwPfHtlsrg10kohlFBHaYoY69yJulKtofP b0a6nw7+uvJ3EUvY1gZbE+iHNPwmbn9ZBXagDpdA6AdRIzkoodnmbEZ0jHZozq5b +RsdKW/LRWeK9KCWTRM7W5Ca9KkjIkyxP8rOk5p0VUtNP61Rym2APQi4TkCGm3KT AV6mb2tL/rhNPdPtyKlrFDKzace5HxujC6MHQlrg9CEDsMQvqQKNJEx58mMUTx/R yn1oSNBU9lLTxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:51 2025 by rpki-client