This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft File: HqvXZaBQUv7FmmonPV70v8ekA1o.mft (raw, json) Hash identifier: 5pjwRsjS7QrHSElaGgr2r3wYxR9JZCC7vmZRXtmLU5Y= Subject key identifier: FC:C2:0C:E8:B8:F7:F0:5B:4F:8A:12:81:DD:9E:A2:5A:19:0B:5B:2D Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A Certificate issuer: /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a Certificate serial: 019AF19AE88D9BAD9C63FB0449B37612093A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:00:52 +0000 Manifest this update: Sat 06 Dec 2025 03:00:52 +0000 Manifest next update: Sun 07 Dec 2025 03:00:52 +0000 Files and hashes: 1: HqvXZaBQUv7FmmonPV70v8ekA1o.crl (hash: 8jYDYgs3oPpH27lVcDQKyz1/shj2/WExtg52hs/1PT0=) 2: MFHqmqIi0lc_Re9PoYpL1Pw-ATg.roa (hash: iQ8gQVoAElI9FMya7NrxkBP0Xq9GVsJ7ePhe9Fu3PJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e8:8d:9b:ad:9c:63:fb:04:49:b3:76:12:09:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a Validity Not Before: Dec 6 03:00:52 2025 GMT Not After : Dec 7 03:00:52 2025 GMT Subject: CN=fcc20ce8b8f7f05b4f8a1281dd9ea25a190b5b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b0:ac:aa:72:03:2f:f7:13:c1:f5:68:34:7f: f8:9c:f5:5d:06:1a:1a:66:88:bc:99:ff:a7:f5:56: 68:50:da:fb:50:a7:60:ba:7f:f8:ce:8a:c3:58:3d: 05:8b:cb:61:24:c8:d6:7f:5a:ea:26:51:83:7a:04: 06:60:67:b7:e8:ee:e7:c0:52:ed:9a:0e:cf:4b:b7: 74:75:99:2b:47:27:bf:5e:1a:6d:fb:3c:0e:84:b5: 20:9c:74:39:2a:b4:4b:34:12:01:ad:ef:6d:23:b7: 7a:b0:b3:5a:26:92:79:85:04:bd:d1:1d:28:4a:ae: ad:3c:4a:28:07:9b:d4:3b:cf:17:f2:97:14:8c:74: c0:f9:de:b5:89:50:6c:b6:8e:27:4c:24:b1:61:9e: 3e:d1:55:8d:ef:fd:5f:ed:d4:53:db:b8:de:7f:2d: 39:36:ac:e9:14:75:8b:5d:85:f5:1e:da:86:2c:07: d6:15:da:7d:82:65:bd:87:5a:36:f8:1b:0d:b7:e0: b5:0e:43:20:ff:f1:62:d3:8b:3e:53:17:fe:ae:25: 0d:ec:f6:e8:48:8a:92:39:94:d5:05:69:b2:af:bb: 6d:7e:5f:00:98:1f:8e:10:76:4a:4e:67:e1:69:e8: 94:51:6b:15:41:02:d4:cf:f7:c4:e9:25:d7:8b:a8: 23:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C2:0C:E8:B8:F7:F0:5B:4F:8A:12:81:DD:9E:A2:5A:19:0B:5B:2D X509v3 Authority Key Identifier: keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:09:d0:9e:0b:3c:74:6a:d6:70:47:63:21:18:47:95:25:18: 82:67:35:28:c6:66:31:73:7d:86:5f:cb:e6:b1:45:27:85:b9: 2e:dd:85:28:0c:b0:5f:02:a4:6c:b1:98:62:be:33:68:b5:d6: 11:75:ad:5a:64:18:1f:81:6f:24:a0:5a:46:5d:31:e4:7b:fe: 7d:98:4a:1a:07:4f:d9:17:26:cd:b1:9e:03:0b:0f:99:34:a1: 26:e1:ce:68:8b:2e:0f:3f:59:f5:1b:67:46:a2:51:fb:ae:b4: ea:a6:01:6d:35:d9:d4:2c:fc:96:cd:65:de:26:b1:93:64:86: fe:2d:ce:24:9c:52:3d:93:8e:d1:e1:d7:d9:c2:13:63:84:7a: 30:e5:01:16:be:4e:20:5e:8f:a3:36:d7:b5:55:7a:2a:4d:11: a7:09:4a:fe:88:09:92:81:c7:0a:f1:c1:87:5c:59:9e:68:3a: 85:2d:17:ca:d7:b3:8a:07:0b:62:fc:ca:62:d2:2e:9e:f5:33: 27:25:14:b4:d6:8e:17:3a:ea:06:e8:03:a3:e5:ff:9b:d3:13: 18:02:0a:98:6b:c5:10:89:91:0b:58:54:17:52:4b:38:92:85: 65:f5:0c:ff:5b:4d:ca:cb:c8:68:aa:e4:2b:85:dc:10:bf:d2: 63:9e:7c:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuiNm62cY/sESbN2Egk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWJkNzY1YTA1MDUyZmVjNTlhNmEyNzNkNWVmNGJmYzdh NDAzNWEwHhcNMjUxMjA2MDMwMDUyWhcNMjUxMjA3MDMwMDUyWjAzMTEwLwYDVQQD EyhmY2MyMGNlOGI4ZjdmMDViNGY4YTEyODFkZDllYTI1YTE5MGI1YjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7CsqnIDL/cTwfVoNH/4nPVdBhoa Zoi8mf+n9VZoUNr7UKdgun/4zorDWD0Fi8thJMjWf1rqJlGDegQGYGe36O7nwFLt mg7PS7d0dZkrRye/Xhpt+zwOhLUgnHQ5KrRLNBIBre9tI7d6sLNaJpJ5hQS90R0o Sq6tPEooB5vUO88X8pcUjHTA+d61iVBsto4nTCSxYZ4+0VWN7/1f7dRT27jefy05 NqzpFHWLXYX1HtqGLAfWFdp9gmW9h1o2+BsNt+C1DkMg//Fi04s+Uxf+riUN7Pbo SIqSOZTVBWmyr7ttfl8AmB+OEHZKTmfhaeiUUWsVQQLUz/fE6SXXi6gjrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzCDOi49/BbT4oSgd2eoloZC1stMB8GA1UdIwQY MBaAFB6r12WgUFL+xZpqJz1e9L/HpANaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHF2WFphQlFVdjdGbW1vblBWNzB2OGVrQTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lMTA3MjItZGFiYi00YTQxLTg5MjMt YjFiNjgyZTIwNjBmLzEvSHF2WFphQlFVdjdGbW1vblBWNzB2OGVrQTFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9lMTA3MjItZGFiYi00YTQxLTg5MjMtYjFiNjgyZTIwNjBm LzEvSHF2WFphQlFVdjdGbW1vblBWNzB2OGVrQTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1AnQngs8 dGrWcEdjIRhHlSUYgmc1KMZmMXN9hl/L5rFFJ4W5Lt2FKAywXwKkbLGYYr4zaLXW EXWtWmQYH4FvJKBaRl0x5Hv+fZhKGgdP2RcmzbGeAwsPmTShJuHOaIsuDz9Z9Rtn RqJR+6606qYBbTXZ1Cz8ls1l3iaxk2SG/i3OJJxSPZOO0eHX2cITY4R6MOUBFr5O IF6PozbXtVV6Kk0RpwlK/ogJkoHHCvHBh1xZnmg6hS0XytezigcLYvzKYtIunvUz JyUUtNaOFzrqBugDo+X/m9MTGAIKmGvFEImRC1hUF1JLOJKFZfUM/1tNysvIaKrk K4XcEL/SY558aA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:33 2025 by rpki-client