This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft File: HcKeV0nukcWjOujjC33J__OV_-Y.mft (raw, json) Hash identifier: ApRBhRGNXjlsMf6I/IEFh9xig/9iATA3aPu9+ckjHJ4= Subject key identifier: 82:82:93:01:B6:62:FE:A8:12:1B:39:BF:20:24:1E:A5:F1:11:56:63 Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6 Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6 Certificate serial: 019AF50B73E874AF5FEFD6305CECDBA61413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:02:39 +0000 Manifest this update: Sat 06 Dec 2025 19:02:39 +0000 Manifest next update: Sun 07 Dec 2025 19:02:39 +0000 Files and hashes: 1: HcKeV0nukcWjOujjC33J__OV_-Y.crl (hash: yDJtL2VAdMRk3jXwV6sPNGppHho1lVl1jLUHQoYJDpE=) 2: z6MmCrjG_M-ly3NSz9op9zn2Kp8.roa (hash: RhWaGG++pr/cOsZo3DpIE+m6eX6qqpoZxRcmwUA1c6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:73:e8:74:af:5f:ef:d6:30:5c:ec:db:a6:14:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6 Validity Not Before: Dec 6 19:02:39 2025 GMT Not After : Dec 7 19:02:39 2025 GMT Subject: CN=82829301b662fea8121b39bf20241ea5f1115663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:ca:30:01:ce:9b:12:40:ac:88:6e:b0:de: 9e:43:9c:9f:c9:fe:ce:08:a6:10:b0:5a:01:88:12: 62:a0:01:da:ad:df:b1:b2:ae:bd:19:ad:39:d4:e3: eb:f9:81:8d:42:e6:e2:a7:a6:e2:33:38:8b:13:7a: 02:f3:08:9a:d8:da:61:52:20:76:75:4d:ea:47:4c: fa:86:40:c1:a7:ad:67:7c:98:7f:b6:a3:3e:b6:8d: 4e:ad:05:4f:8a:68:22:44:ee:ce:24:45:98:08:bf: eb:ee:58:ac:c1:e1:de:a2:70:44:2c:fa:3d:a0:df: 0c:db:c0:47:a3:3e:36:88:70:a0:e5:13:12:1e:9e: 67:58:92:76:20:ac:7c:a7:c1:41:85:a2:c6:8a:0a: 30:d0:f1:fd:32:6f:8a:73:dc:a3:69:de:3e:16:e7: c1:4b:b1:94:6a:a4:4d:90:b3:26:02:c5:41:7a:96: c5:7b:18:4a:07:28:54:30:5d:db:81:2c:e1:18:78: de:84:d3:52:c3:88:2a:46:42:16:6a:27:b2:59:bb: 5d:3f:af:4f:1e:6d:0c:c0:a8:d8:2b:a7:3b:c8:bc: ef:d8:86:09:64:9d:28:5c:4a:8f:0a:80:b7:86:b2: bb:40:c2:d6:5e:f7:d7:bc:87:13:52:31:96:db:b0: b0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:82:93:01:B6:62:FE:A8:12:1B:39:BF:20:24:1E:A5:F1:11:56:63 X509v3 Authority Key Identifier: keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:ae:84:72:4b:3e:23:66:1a:bf:c8:95:22:72:07:f2:ee:eb: b3:91:fe:cc:4d:ba:20:36:fa:dd:a6:89:8d:72:d1:12:03:55: a2:f5:e2:65:1a:b7:74:f1:9b:ce:00:89:6a:20:be:bc:84:f9: 3a:c6:a4:3d:ce:29:7f:8f:b6:f5:fb:d5:33:bb:57:a3:80:39: 93:17:31:d2:99:0a:79:4d:f7:b9:f4:97:c6:75:23:b0:46:a6: dd:49:60:7b:21:1e:de:df:f0:5c:b2:73:74:55:f1:0e:08:04: 78:60:66:e2:7b:5e:1c:01:86:e0:80:e1:5d:f9:b4:5e:f9:68: 11:2f:0b:eb:88:59:ee:ae:7b:33:70:1e:c5:06:0c:f1:08:c2: 17:4e:bb:c7:35:b7:38:78:63:56:7e:b0:ce:dc:bd:78:ac:9d: d0:be:b0:00:ee:5d:5a:a2:07:b3:be:8c:05:a6:21:c7:1b:5e: cd:14:b5:c5:04:84:5a:74:d0:5e:4f:1b:27:2e:dd:cf:b9:14: 58:dc:74:54:26:c8:aa:a0:85:97:d0:6a:f3:92:fa:45:8e:70: de:d0:7d:36:fe:e7:9d:59:5c:58:b7:93:d2:d4:3c:1b:d9:20: 23:c7:c3:14:ae:02:ac:8d:13:19:88:f2:c8:f3:de:d7:c5:3d: 18:6f:ee:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C3PodK9f79YwXOzbphQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYzI5ZTU3NDllZTkxYzVhMzNhZThlMzBiN2RjOWZmZjM5 NWZmZTYwHhcNMjUxMjA2MTkwMjM5WhcNMjUxMjA3MTkwMjM5WjAzMTEwLwYDVQQD Eyg4MjgyOTMwMWI2NjJmZWE4MTIxYjM5YmYyMDI0MWVhNWYxMTE1NjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqurKMAHOmxJArIhusN6eQ5yfyf7O CKYQsFoBiBJioAHard+xsq69Ga051OPr+YGNQubip6biMziLE3oC8wia2NphUiB2 dU3qR0z6hkDBp61nfJh/tqM+to1OrQVPimgiRO7OJEWYCL/r7lisweHeonBELPo9 oN8M28BHoz42iHCg5RMSHp5nWJJ2IKx8p8FBhaLGigow0PH9Mm+Kc9yjad4+FufB S7GUaqRNkLMmAsVBepbFexhKByhUMF3bgSzhGHjehNNSw4gqRkIWaieyWbtdP69P Hm0MwKjYK6c7yLzv2IYJZJ0oXEqPCoC3hrK7QMLWXvfXvIcTUjGW27CwawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKCkwG2Yv6oEhs5vyAkHqXxEVZjMB8GA1UdIwQY MBaAFB3CnldJ7pHFozro4wt9yf/zlf/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jMWQ5N2EtNWI5ZC00MGJiLTliMjct NTNmZmE1Zjk5ODVjLzEvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9jMWQ5N2EtNWI5ZC00MGJiLTliMjctNTNmZmE1Zjk5ODVj LzEvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu66Ecks+ I2Yav8iVInIH8u7rs5H+zE26IDb63aaJjXLREgNVovXiZRq3dPGbzgCJaiC+vIT5 OsakPc4pf4+29fvVM7tXo4A5kxcx0pkKeU33ufSXxnUjsEam3UlgeyEe3t/wXLJz dFXxDggEeGBm4nteHAGG4IDhXfm0XvloES8L64hZ7q57M3AexQYM8QjCF067xzW3 OHhjVn6wzty9eKyd0L6wAO5dWqIHs76MBaYhxxtezRS1xQSEWnTQXk8bJy7dz7kU WNx0VCbIqqCFl9Bq85L6RY5w3tB9Nv7nnVlcWLeT0tQ8G9kgI8fDFK4CrI0TGYjy yPPe18U9GG/udA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:27 2025 by rpki-client