This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft File: HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft (raw, json) Hash identifier: vuHjDtYYJeNn2WioL6Il80H1lHrWIv6sGOu26f8sV0Y= Subject key identifier: 10:C3:3F:00:C9:A6:25:0C:0E:A2:D6:A7:16:BD:01:03:94:BC:FC:97 Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d Certificate serial: 019AF19B50D70A32C4C97A2547C5627C07F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft Manifest number: 0E45 Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl (hash: nW6eO+hdmvL7TT/CKugi+kxTG72FnHUV4FiVCbxhP5Y=) 2: obxxCWwwodKEQItq-LvA1UofY7E.roa (hash: EDnG/ruD1T9KRKhZcI5dsIBjNgSOpQ6QRSsT8ooYu6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:50:d7:0a:32:c4:c9:7a:25:47:c5:62:7c:07:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=10c33f00c9a6250c0ea2d6a716bd010394bcfc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4d:f4:62:1d:bc:52:7a:d5:64:38:a1:79:56: 8e:05:61:84:80:a7:a8:57:63:ea:2a:08:6a:62:05: 30:15:8e:08:f0:86:d8:ce:63:f0:82:d3:fe:2e:4d: 64:db:7e:c4:a5:5e:97:74:d1:22:9c:b7:50:d6:71: d0:ba:d1:5b:39:ba:ee:f4:fb:6f:11:6a:04:43:4c: d6:0f:dd:2c:06:c7:91:ef:6e:53:60:58:bb:67:9b: 5b:ef:a9:4a:11:11:0a:84:ea:79:e8:99:10:cb:4f: 7b:d4:f2:79:d0:1f:67:d6:6f:db:02:f8:88:24:79: 11:63:9b:b9:ca:6b:fc:8a:e0:dd:ed:73:e9:f8:06: 69:4b:ca:5e:d8:f4:ea:34:61:16:fa:57:06:e8:78: d9:45:45:ee:a6:72:e3:86:d7:e9:f5:dc:ae:47:e4: 8e:09:04:2d:50:52:fb:2b:c8:fe:55:f6:f9:61:5b: 92:c2:3d:53:a2:d0:80:35:e9:c0:82:93:c0:ec:7b: ee:0b:2c:ee:75:d5:7f:cf:0e:2b:20:2a:a7:8e:ed: c8:f0:6c:97:02:9d:c3:52:db:d7:24:73:28:49:5f: 4c:3f:1e:af:70:28:e8:80:fd:df:e1:35:b9:85:1e: 3e:8d:30:27:c7:4b:e0:0c:8e:01:c6:e2:32:d7:f0: d5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C3:3F:00:C9:A6:25:0C:0E:A2:D6:A7:16:BD:01:03:94:BC:FC:97 X509v3 Authority Key Identifier: keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a2:3a:1d:27:a2:a2:53:b4:24:6c:e9:37:55:ce:e0:b2:e7: ec:f7:75:d1:78:0c:f0:67:93:50:9e:6f:05:3e:57:e8:e0:c2: ab:c0:26:3e:70:54:2c:27:f5:b6:2d:49:25:c6:0f:c8:72:12: 8d:ee:f2:64:ab:ac:05:3f:67:78:39:7c:07:57:a9:0d:a8:17: 08:9a:92:ef:5b:98:90:e5:6e:63:f3:de:5f:c0:0a:0e:1a:d5: 25:49:15:36:85:4a:a5:64:30:cd:9c:d7:69:6a:75:92:a1:dd: a0:fb:71:e2:34:98:ee:2e:cc:3a:9a:d2:b9:77:67:00:f2:34: ef:db:cd:ba:b6:ec:d0:53:e1:0e:b6:58:77:0c:99:53:27:5e: fe:5f:26:c0:4b:d4:49:b8:d5:43:7b:0f:f9:66:38:6e:73:fb: 34:ec:c9:8f:e3:45:21:c0:a6:cd:d5:fb:c7:71:8e:0f:c2:3d: 5b:5a:98:b9:e6:d2:97:ef:b2:90:02:50:4e:53:af:51:0e:12: 53:75:b4:66:32:ef:74:8b:ef:f1:e8:88:80:26:e2:86:52:26: 4b:35:0e:48:5e:82:2b:52:0b:81:6c:94:bc:20:4e:2b:fc:98: 97:c9:ea:11:77:50:42:8f:d8:ab:a4:59:10:5a:20:6f:f4:1c: e3:3e:fe:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1DXCjLEyXolR8VifAf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNDBhYjQwZTUzODYwODcxMjUwZTliYWM0ZTE2MzMzOTcx MDU5NWQwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD EygxMGMzM2YwMGM5YTYyNTBjMGVhMmQ2YTcxNmJkMDEwMzk0YmNmYzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7k30Yh28UnrVZDiheVaOBWGEgKeo V2PqKghqYgUwFY4I8IbYzmPwgtP+Lk1k237EpV6XdNEinLdQ1nHQutFbObru9Ptv EWoEQ0zWD90sBseR725TYFi7Z5tb76lKEREKhOp56JkQy0971PJ50B9n1m/bAviI JHkRY5u5ymv8iuDd7XPp+AZpS8pe2PTqNGEW+lcG6HjZRUXupnLjhtfp9dyuR+SO CQQtUFL7K8j+Vfb5YVuSwj1TotCANenAgpPA7HvuCyzuddV/zw4rICqnju3I8GyX Ap3DUtvXJHMoSV9MPx6vcCjogP3f4TW5hR4+jTAnx0vgDI4BxuIy1/DVnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDDPwDJpiUMDqLWpxa9AQOUvPyXMB8GA1UdIwQY MBaAFB5Aq0DlOGCHElDpusThYzOXEFldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMt N2Y4NjZkYWE1NDY0LzEvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMtN2Y4NjZkYWE1NDY0 LzEvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6I6HSei olO0JGzpN1XO4LLn7Pd10XgM8GeTUJ5vBT5X6ODCq8AmPnBULCf1ti1JJcYPyHIS je7yZKusBT9neDl8B1epDagXCJqS71uYkOVuY/PeX8AKDhrVJUkVNoVKpWQwzZzX aWp1kqHdoPtx4jSY7i7MOprSuXdnAPI079vNurbs0FPhDrZYdwyZUyde/l8mwEvU SbjVQ3sP+WY4bnP7NOzJj+NFIcCmzdX7x3GOD8I9W1qYuebSl++ykAJQTlOvUQ4S U3W0ZjLvdIvv8eiIgCbihlImSzUOSF6CK1ILgWyUvCBOK/yYl8nqEXdQQo/Yq6RZ EFogb/Qc4z7+vw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:11 2025 by rpki-client