This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft File: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json) Hash identifier: M/vnxeeogSuQHH4SxL4W8Se3I82wZghIKOA7R4aX9xw= Subject key identifier: C2:67:D8:60:DE:6A:BE:C7:ED:C0:37:CF:A5:8E:97:A3:33:5C:AA:C4 Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c Certificate serial: 019AF50A1773AC8112E1F971BA83CE24EA06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:01:10 +0000 Manifest this update: Sat 06 Dec 2025 19:01:10 +0000 Manifest next update: Sun 07 Dec 2025 19:01:10 +0000 Files and hashes: 1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: q+GyEmDqyI8qg8iYTW3o2QUC3OXuXGHmmH76gByFzKo=) 2: zWwWyLKfCmRpNmwFBTvojnygc1I.roa (hash: rn4lqHeH4XjZAogo04iFGrMuS15xr6iivrKPmjp5V94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:17:73:ac:81:12:e1:f9:71:ba:83:ce:24:ea:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c Validity Not Before: Dec 6 19:01:10 2025 GMT Not After : Dec 7 19:01:10 2025 GMT Subject: CN=c267d860de6abec7edc037cfa58e97a3335caac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9d:3b:bb:f5:04:c3:3a:2c:42:07:76:3d:6d: 42:f3:fe:dc:49:fd:0e:c8:d2:92:d5:da:6e:8e:99: cf:86:ff:87:01:2e:1f:59:53:5b:7e:71:ee:b0:28: 73:7b:23:3e:f6:f4:c4:cb:11:f6:ab:4e:61:c9:2a: 70:17:85:49:56:5d:9a:bb:9e:6f:e7:b1:3e:dc:cb: d6:5c:53:6b:16:05:78:02:5f:bf:d3:b7:9d:b5:57: bb:dd:86:45:6a:5a:ae:2f:a4:82:81:85:d8:0f:9b: 06:2e:fa:d6:84:0c:8e:d7:42:4c:71:60:ff:9f:eb: c9:3c:d4:c3:c4:1c:6f:38:d4:8b:93:7e:16:7a:10: 05:cd:9b:ad:06:57:61:72:c8:d4:5e:9f:e5:73:c2: 16:47:56:c5:92:27:bb:c7:ce:e0:35:9a:29:99:02: 7a:db:a5:9e:e1:3d:dd:8e:fd:04:8a:7b:87:bf:e6: 2f:f7:22:ce:fd:99:a7:b4:29:b6:7e:f8:51:9e:a0: cb:2d:f7:20:09:55:2c:74:40:a1:86:95:a2:b1:0c: 61:fe:ec:51:42:13:74:a0:6e:2e:94:e8:3a:da:28: 35:cf:ce:87:d6:18:a0:3d:a1:54:f2:95:b8:ba:69: 0a:57:2b:ee:52:e0:1d:c2:14:b8:14:d6:67:ac:b7: 25:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:67:D8:60:DE:6A:BE:C7:ED:C0:37:CF:A5:8E:97:A3:33:5C:AA:C4 X509v3 Authority Key Identifier: keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:6c:8e:f6:68:24:c1:10:5d:4c:19:00:dc:13:90:d9:c9:4b: e8:85:8a:cf:ea:d8:7a:f5:81:a1:28:49:4a:cb:28:06:74:6a: 3d:93:ff:e3:b9:69:4f:17:49:bf:b2:0a:f1:56:42:5a:db:a9: 01:dc:43:58:3e:0b:7c:75:de:30:58:6d:b7:cb:b3:0a:7f:9c: ba:21:12:7e:0a:10:13:2f:2c:a1:d7:4c:70:75:81:08:ee:76: fe:34:3e:0d:94:f4:ee:7d:58:9a:e0:e6:c8:4d:63:d2:ed:ec: c5:8e:84:fb:9e:c8:0b:0d:78:6f:5a:ba:11:72:3d:60:95:0d: 83:f5:a4:23:45:ed:eb:e4:2f:3b:ee:37:5d:43:be:54:4b:b4: e9:68:c9:71:14:39:2f:e4:78:b9:4f:8a:89:ad:39:15:14:9c: 9e:8c:07:93:0d:fa:06:f7:f0:5e:95:27:db:ac:01:57:a6:ff: 03:13:9b:b4:6b:80:45:ed:9e:32:f6:e3:7b:a9:a3:1a:21:12: c6:f2:e4:39:dd:3c:00:b5:33:2d:d2:ba:af:3e:c3:f1:55:28: 54:57:34:2f:30:ea:59:19:c3:06:cc:c4:5d:31:1c:60:3e:01: 73:68:6b:c2:0c:24:6e:5d:f6:5d:cc:91:68:27:46:7e:3f:ce: db:fa:f5:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ChdzrIES4flxuoPOJOoGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYWUxYTI2OTY3ZGZlMjg3ZWI2MDI3NDllYzJjNmYwNWFm YmI1N2MwHhcNMjUxMjA2MTkwMTEwWhcNMjUxMjA3MTkwMTEwWjAzMTEwLwYDVQQD EyhjMjY3ZDg2MGRlNmFiZWM3ZWRjMDM3Y2ZhNThlOTdhMzMzNWNhYWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk507u/UEwzosQgd2PW1C8/7cSf0O yNKS1dpujpnPhv+HAS4fWVNbfnHusChzeyM+9vTEyxH2q05hySpwF4VJVl2au55v 57E+3MvWXFNrFgV4Al+/07edtVe73YZFalquL6SCgYXYD5sGLvrWhAyO10JMcWD/ n+vJPNTDxBxvONSLk34WehAFzZutBldhcsjUXp/lc8IWR1bFkie7x87gNZopmQJ6 26We4T3djv0EinuHv+Yv9yLO/ZmntCm2fvhRnqDLLfcgCVUsdEChhpWisQxh/uxR QhN0oG4ulOg62ig1z86H1higPaFU8pW4umkKVyvuUuAdwhS4FNZnrLclRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJn2GDear7H7cA3z6WOl6MzXKrEMB8GA1UdIwQY MBaAFByuGiaWff4ofrYCdJ7CxvBa+7V8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEs0YUpwWjlfaWgtdGdKMG5zTEc4RnI3dFh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMWI1MDAtMzRhNi00MjBhLWFhNDQt NzQ5OTA1YzMyN2IxLzEvSEs0YUpwWjlfaWgtdGdKMG5zTEc4RnI3dFh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMWI1MDAtMzRhNi00MjBhLWFhNDQtNzQ5OTA1YzMyN2Ix LzEvSEs0YUpwWjlfaWgtdGdKMG5zTEc4RnI3dFh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWyO9mgk wRBdTBkA3BOQ2clL6IWKz+rYevWBoShJSssoBnRqPZP/47lpTxdJv7IK8VZCWtup AdxDWD4LfHXeMFhtt8uzCn+cuiESfgoQEy8soddMcHWBCO52/jQ+DZT07n1YmuDm yE1j0u3sxY6E+57ICw14b1q6EXI9YJUNg/WkI0Xt6+QvO+43XUO+VEu06WjJcRQ5 L+R4uU+Kia05FRScnowHkw36BvfwXpUn26wBV6b/AxObtGuARe2eMvbje6mjGiES xvLkOd08ALUzLdK6rz7D8VUoVFc0LzDqWRnDBszEXTEcYD4Bc2hrwgwkbl32XcyR aCdGfj/O2/r19A== -----END CERTIFICATE-----Generated at Sun Dec 7 03:09:04 2025 by rpki-client