This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json) Hash identifier: qUebFF8eFtow/gKMrzLh+Ai+I0ANmxbxZDqDI1VfEaw= Subject key identifier: 5C:DF:6E:27:A1:AE:A3:23:24:FA:A4:51:12:A5:98:D1:CA:E9:44:49 Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16 Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116 Certificate serial: 019AF12E35371A4660C5341B3A57FF8BA8F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:02:08 +0000 Manifest this update: Sat 06 Dec 2025 01:02:08 +0000 Manifest next update: Sun 07 Dec 2025 01:02:08 +0000 Files and hashes: 1: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: SLWSIsU5l7Q3akNt7EBYaQnVLYyVC5QzElEXjin4IuE=) 2: oaiKe9BUmU6ux91XLaQvZC7XqN0.roa (hash: uC3IsodMVYaUiVMHtDRZahUGbsjXFHZTUvnA/e2zbi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:35:37:1a:46:60:c5:34:1b:3a:57:ff:8b:a8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116 Validity Not Before: Dec 6 01:02:08 2025 GMT Not After : Dec 7 01:02:08 2025 GMT Subject: CN=5cdf6e27a1aea32324faa45112a598d1cae94449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:db:48:83:00:17:fd:4b:da:d4:f3:2f:3f: 24:a0:40:4f:0e:fb:06:be:3e:42:52:d1:43:24:d8: c7:7f:c3:56:68:c4:07:36:6b:0e:80:14:65:37:f3: 92:ba:9d:a9:c5:60:b0:1c:cf:7c:30:87:e0:d2:03: 3d:2e:a3:57:4e:87:42:52:13:4b:bd:4b:98:44:55: 79:ad:73:45:78:c4:a1:86:d9:85:67:24:72:3e:fc: 2e:e1:3b:87:ba:b4:b6:21:99:98:5c:60:57:3f:63: f0:1a:ec:c7:96:55:b3:f8:fe:f2:d1:dc:7b:5b:f8: a9:61:90:c1:36:9d:55:2c:ea:6a:7d:78:67:6b:69: 9f:c7:c0:14:3a:1e:19:42:13:75:83:32:07:66:3d: fc:94:4a:70:b6:5b:74:1a:86:d6:ba:c0:57:2d:84: d0:9d:35:c4:88:5b:0f:e2:36:b5:71:16:9e:8c:d1: 1e:f3:28:85:15:ec:88:b1:0e:27:29:59:a0:84:50: c0:36:24:5c:31:a2:82:e5:58:aa:45:3e:a2:c4:e3: dc:57:b8:05:5a:9b:6f:ae:e9:a3:c9:87:4f:ac:ac: 7c:b0:88:28:a2:75:64:9f:5f:f7:d7:94:33:fb:dc: 43:ff:75:81:aa:57:c2:89:6e:85:31:dd:e9:5f:05: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DF:6E:27:A1:AE:A3:23:24:FA:A4:51:12:A5:98:D1:CA:E9:44:49 X509v3 Authority Key Identifier: keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f4:32:72:49:7f:3b:8b:1f:7e:cb:29:99:3d:a2:e1:48:a5: 0e:3d:8c:d3:14:e6:f4:8c:8c:11:c4:e6:f9:19:5f:94:c1:39: c3:ef:df:06:84:8f:c8:7f:70:0f:92:e4:fa:f5:90:52:f8:62: 00:8e:3f:fe:59:b8:0a:8d:1c:e4:08:17:e3:61:c3:89:bc:8f: 62:5b:4a:98:d1:0b:cc:a9:c8:c5:cb:a1:fd:fa:74:69:84:70: 7c:b9:27:21:aa:db:8a:f9:07:cd:b9:81:6f:04:aa:b5:a4:aa: 5a:b4:c2:ee:20:5e:37:22:9d:2b:11:14:dd:d0:0f:8b:e0:9e: 05:f7:fb:97:49:66:8a:1c:d1:df:bf:ab:09:63:7d:0a:d9:3b: 22:02:ec:80:bb:ae:85:96:e0:8a:42:ca:46:e7:7b:31:0c:43: f3:a6:f5:84:ea:ff:06:79:4e:df:e3:f2:ae:4a:7d:c4:7b:37: 98:0d:1b:e7:02:2b:31:f0:a7:c9:92:f7:cf:28:ff:e9:1a:c6: 66:0f:53:86:ae:54:94:70:e8:3b:07:3e:0e:6f:d3:a7:e8:ea: 03:f1:ed:6e:ed:9c:e5:df:1f:70:81:35:17:d9:69:5a:5b:64: 2a:44:ec:6d:6b:ae:30:30:7a:39:89:e8:a4:3d:be:01:1e:06: d7:15:43:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjU3GkZgxTQbOlf/i6j2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMDQzNmRkNjk4ZWJhM2VhYjVhOTJkYjFkNjRmMmYzMTRl ZDMxMTYwHhcNMjUxMjA2MDEwMjA4WhcNMjUxMjA3MDEwMjA4WjAzMTEwLwYDVQQD Eyg1Y2RmNmUyN2ExYWVhMzIzMjRmYWE0NTExMmE1OThkMWNhZTk0NDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl3bSIMAF/1L2tTzLz8koEBPDvsG vj5CUtFDJNjHf8NWaMQHNmsOgBRlN/OSup2pxWCwHM98MIfg0gM9LqNXTodCUhNL vUuYRFV5rXNFeMShhtmFZyRyPvwu4TuHurS2IZmYXGBXP2PwGuzHllWz+P7y0dx7 W/ipYZDBNp1VLOpqfXhna2mfx8AUOh4ZQhN1gzIHZj38lEpwtlt0GobWusBXLYTQ nTXEiFsP4ja1cRaejNEe8yiFFeyIsQ4nKVmghFDANiRcMaKC5ViqRT6ixOPcV7gF WptvrumjyYdPrKx8sIgoonVkn1/315Qz+9xD/3WBqlfCiW6FMd3pXwX0XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzfbiehrqMjJPqkURKlmNHK6URJMB8GA1UdIwQY MBaAFB4ENt1pjro+q1qS2x1k8vMU7TEWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zY2UwNDctZDg1OC00ZTdmLWEwNzAt ZDQzMTlkMTNjNzc1LzEvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8zY2UwNDctZDg1OC00ZTdmLWEwNzAtZDQzMTlkMTNjNzc1 LzEvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfQyckl/ O4sffsspmT2i4UilDj2M0xTm9IyMEcTm+RlflME5w+/fBoSPyH9wD5Lk+vWQUvhi AI4//lm4Co0c5AgX42HDibyPYltKmNELzKnIxcuh/fp0aYRwfLknIarbivkHzbmB bwSqtaSqWrTC7iBeNyKdKxEU3dAPi+CeBff7l0lmihzR37+rCWN9Ctk7IgLsgLuu hZbgikLKRud7MQxD86b1hOr/BnlO3+Pyrkp9xHs3mA0b5wIrMfCnyZL3zyj/6RrG Zg9Thq5UlHDoOwc+Dm/Tp+jqA/Htbu2c5d8fcIE1F9lpWltkKkTsbWuuMDB6OYno pD2+AR4G1xVDRA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:53:35 2025 by rpki-client