This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json) Hash identifier: gQYs+yobmoLaxkDTEAzFS1EKLHVSsiLqDR+DQLhOwzc= Subject key identifier: 41:81:57:E9:3D:FA:36:C6:80:29:96:FD:E7:8F:82:94:A9:B0:CA:35 Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc Certificate serial: 019AF23F8FD2AB100845C39823A9509DC792 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: S0hYt017QYbxNNkQ4wHdGvSN+QqhMKZYzhzQhQa6Ge0=) 2: R5Y0djQcssCZ701JjQDPk4xfdyk.roa (hash: DSc2N36MG8S0TaEh5/lKpHOjngU7hgS2sauKy31uyUE=) 3: hRSmm6516V7O9m-dgRCN1dXhmM0.roa (hash: s+JGSz7mfrWnjIH/FpqXmM7l8VH4pyNnAOb8PA/Xeww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8f:d2:ab:10:08:45:c3:98:23:a9:50:9d:c7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=418157e93dfa36c6802996fde78f8294a9b0ca35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:17:44:cf:31:74:2b:67:0b:5d:5e:da:23:9e: 73:5e:10:05:76:b1:d1:e2:46:05:87:4a:df:91:6c: 1f:4e:32:b8:fe:b5:1e:12:91:1d:6e:3c:1f:fd:49: c7:a8:db:43:a7:ca:ca:2d:3e:56:4e:ba:64:17:4d: 44:1e:3b:bc:39:89:fd:c5:01:37:07:03:0b:da:50: 0e:da:6d:9c:d2:48:18:3c:7a:e0:14:a5:02:2a:84: 2c:4a:60:34:c3:66:44:83:5e:c3:0b:01:98:89:f8: 22:c8:6e:e8:30:aa:b6:22:87:78:bc:c5:67:0c:00: 2f:92:a1:f4:e5:3f:1d:2b:10:82:c5:2d:07:f7:61: 9f:30:6b:fa:8d:3a:2b:59:3e:1e:f9:64:23:f2:9c: 62:20:46:c4:c8:df:d4:18:ec:5a:fd:e9:74:56:4f: fd:e0:58:78:a4:eb:38:0a:5e:c0:1a:07:f1:25:5b: f1:7d:91:a9:e5:39:20:6a:21:d0:93:30:a6:63:71: 47:4c:61:7f:2e:b4:8f:79:d1:33:82:e9:10:a3:3e: 4a:a2:f4:91:58:68:aa:b9:38:d5:48:1d:2a:14:df: d1:d0:52:f1:33:11:3b:de:c6:4b:a9:7a:77:22:8a: 08:50:ba:0f:88:22:96:c4:db:f9:23:66:cf:94:05: 0c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:81:57:E9:3D:FA:36:C6:80:29:96:FD:E7:8F:82:94:A9:B0:CA:35 X509v3 Authority Key Identifier: keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:67:9a:ee:6f:ae:d9:47:d9:4e:a6:e3:fb:57:50:db:a6:18: c3:84:cf:18:de:ef:6a:ef:8c:9d:e3:15:7d:64:dc:da:62:60: 2d:67:4d:59:0f:33:a4:71:97:b3:29:c1:b7:2b:fb:0a:25:c7: f2:d2:c1:5e:9d:cd:68:5e:8e:38:42:1f:75:00:ec:01:02:15: 1a:bc:a5:35:8b:e7:e4:4e:58:02:27:27:3a:fb:70:1f:95:a6: 2c:e5:d2:01:c4:ea:63:cc:67:2d:c5:94:e2:23:a9:d8:dd:12: 47:c7:eb:c2:fc:75:97:4d:06:06:8f:8f:86:ba:99:38:ba:07: 2c:63:f5:98:c8:9f:32:f6:b5:33:d3:72:5d:d0:9b:3a:00:10: e4:85:cc:b0:4b:20:d4:7c:d3:99:ce:e6:9f:5d:9d:b8:fb:e1: 98:89:da:f6:67:d4:70:58:a1:95:79:fb:f0:70:0c:58:81:46: 96:26:c0:4d:b8:b5:71:ac:b2:a9:14:22:c2:36:d2:f0:74:95: 6a:2b:76:9b:b2:1a:65:33:cf:e2:93:6b:4c:79:21:1a:e9:0c: 85:f0:60:4c:2f:2c:80:86:b0:9e:0f:14:3a:db:ff:09:91:e3: 5c:db:f4:a7:1d:91:05:e5:bd:98:3d:a0:e3:18:32:7f:58:30: eb:41:0e:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4/SqxAIRcOYI6lQnceSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYmQ1NzQ2ZTMwMDA5MWRlZDFhMTFhMTNiMTY4MDdiNGZk MGYxZmMwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD Eyg0MTgxNTdlOTNkZmEzNmM2ODAyOTk2ZmRlNzhmODI5NGE5YjBjYTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RdEzzF0K2cLXV7aI55zXhAFdrHR 4kYFh0rfkWwfTjK4/rUeEpEdbjwf/UnHqNtDp8rKLT5WTrpkF01EHju8OYn9xQE3 BwML2lAO2m2c0kgYPHrgFKUCKoQsSmA0w2ZEg17DCwGYifgiyG7oMKq2Iod4vMVn DAAvkqH05T8dKxCCxS0H92GfMGv6jTorWT4e+WQj8pxiIEbEyN/UGOxa/el0Vk/9 4Fh4pOs4Cl7AGgfxJVvxfZGp5TkgaiHQkzCmY3FHTGF/LrSPedEzgukQoz5KovSR WGiquTjVSB0qFN/R0FLxMxE73sZLqXp3IooIULoPiCKWxNv5I2bPlAUM8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGBV+k9+jbGgCmW/eePgpSpsMo1MB8GA1UdIwQY MBaAFBy9V0bjAAkd7RoRoTsWgHtP0PH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEwxWFJ1TUFDUjN0R2hHaE94YUFlMF9ROGZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lMzA4NmMtZDcyZi00MWVhLTk0NDQt YmRlYTYzZTVhN2M0LzEvSEwxWFJ1TUFDUjN0R2hHaE94YUFlMF9ROGZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lMzA4NmMtZDcyZi00MWVhLTk0NDQtYmRlYTYzZTVhN2M0 LzEvSEwxWFJ1TUFDUjN0R2hHaE94YUFlMF9ROGZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGea7m+u 2UfZTqbj+1dQ26YYw4TPGN7vau+MneMVfWTc2mJgLWdNWQ8zpHGXsynBtyv7CiXH 8tLBXp3NaF6OOEIfdQDsAQIVGrylNYvn5E5YAicnOvtwH5WmLOXSAcTqY8xnLcWU 4iOp2N0SR8frwvx1l00GBo+PhrqZOLoHLGP1mMifMva1M9NyXdCbOgAQ5IXMsEsg 1HzTmc7mn12duPvhmIna9mfUcFihlXn78HAMWIFGlibATbi1cayyqRQiwjbS8HSV ait2m7IaZTPP4pNrTHkhGukMhfBgTC8sgIawng8UOtv/CZHjXNv0px2RBeW9mD2g 4xgyf1gw60EOAg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:45 2025 by rpki-client