This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft File: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft (raw, json) Hash identifier: ER3kLWeOlDSGxgX0mqHUB1eFOf5W30/WG3WJJfp4s8A= Subject key identifier: 52:1A:88:91:48:D2:E9:78:C0:E2:B4:8D:34:FA:3E:51:C1:9E:B9:4B Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c Certificate serial: 019AF2AD7E4B464F018C943E7BFDE822E83B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft Manifest number: 0E0A Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl (hash: H0Z1IWm5caoY2oOH8UovOAqJ9frBbSvGu0FTJu6aqAo=) 2: Z51tk-_RA8tS0qKG579XKDThD1k.roa (hash: jrw3DdxxDeKhPMS6oVcqpTg9EmGuyht4s1KNeKcKW/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7e:4b:46:4f:01:8c:94:3e:7b:fd:e8:22:e8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=521a889148d2e978c0e2b48d34fa3e51c19eb94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:cc:2d:8f:a7:cd:0b:d9:21:fc:d2:a4:7d: 87:15:e4:90:d8:ca:94:0c:4e:4b:6f:24:69:02:d9: 53:ee:27:a7:53:22:e5:8e:d9:c8:1f:28:34:b1:89: 4c:c0:62:df:d4:30:63:d8:7f:79:53:5b:0c:03:a1: 7f:b4:d8:37:1f:4d:eb:cb:50:14:56:d0:db:10:a4: 04:d2:ec:d9:7c:83:3e:98:b5:a1:f7:aa:8e:7e:a6: 69:83:0d:d5:aa:f1:68:78:98:fa:01:5d:99:72:16: 76:00:d9:eb:07:26:8d:27:24:d6:e1:d8:c5:23:16: 79:6d:f5:80:27:ab:b4:35:56:b4:f1:cf:f8:11:25: d0:25:59:47:d8:4e:dc:21:e4:e4:5d:46:a2:2c:31: 9d:1f:47:4e:f7:52:a3:82:95:55:7b:f9:91:70:70: a3:fe:14:2c:42:99:84:fa:8e:32:18:35:cb:ac:e0: 43:1e:ed:9b:06:f3:76:f6:8a:9d:34:bd:1d:d2:c9: 4c:df:3f:47:50:28:b7:1d:db:70:64:4e:67:7f:9c: 3d:74:46:85:d9:80:63:76:4f:a8:6d:c5:37:2e:50: 83:ef:f4:d2:af:42:9c:1c:a6:99:9d:d4:87:9c:95: 75:cd:0a:3d:e1:b3:e5:b6:22:4f:55:f9:62:a4:9e: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1A:88:91:48:D2:E9:78:C0:E2:B4:8D:34:FA:3E:51:C1:9E:B9:4B X509v3 Authority Key Identifier: keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2f:bb:9c:78:3a:66:d0:43:0c:be:48:40:d0:11:bd:e7:e6: 5d:6e:bc:f2:1e:47:23:ce:e1:00:f0:34:9d:0c:a9:60:85:7f: 55:ae:df:e8:09:fb:39:11:9d:21:ae:2a:bc:ca:3e:35:a8:fa: f1:95:16:31:b2:ef:f0:70:cf:f4:38:57:b5:c5:73:bb:9c:40: d9:03:0d:b4:1e:d5:07:bc:cc:63:d6:6f:f7:a8:9d:d2:ff:ea: e8:02:41:44:24:a1:ba:4d:2e:0c:b3:06:d6:bf:32:e6:24:91: af:6f:dc:a7:8d:35:d3:8a:12:97:23:2f:35:e7:7e:34:ee:15: 05:69:f3:90:20:46:3e:4d:1d:02:e3:f5:a9:c2:e4:b9:50:29: 4a:d3:3b:56:61:08:6a:94:56:63:e9:30:2d:3d:25:3d:e9:e2: 3f:d3:4d:e1:60:52:8b:0d:28:fd:f1:04:08:d2:f3:a6:bc:74: 4b:45:95:a2:d0:8d:1c:41:c7:98:78:3f:66:a2:fd:56:49:e8: f0:5a:0e:82:c1:7e:e9:4f:0b:5a:64:8c:76:d6:47:0d:81:c4: bb:71:4c:0a:a7:f1:af:c8:92:51:c2:b4:32:71:b0:c1:83:20: 10:e6:25:bc:5e:80:f4:be:39:20:74:60:9f:c3:d4:cb:15:28: cc:27:9d:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrX5LRk8BjJQ+e/3oIug7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYjk5YzEyMGVjOTk0ZjNiNzBkYmZjNWUwMTlhMmU4YjE4 N2NkMGMwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD Eyg1MjFhODg5MTQ4ZDJlOTc4YzBlMmI0OGQzNGZhM2U1MWMxOWViOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpzMLY+nzQvZIfzSpH2HFeSQ2MqU DE5LbyRpAtlT7ienUyLljtnIHyg0sYlMwGLf1DBj2H95U1sMA6F/tNg3H03ry1AU VtDbEKQE0uzZfIM+mLWh96qOfqZpgw3VqvFoeJj6AV2ZchZ2ANnrByaNJyTW4djF IxZ5bfWAJ6u0NVa08c/4ESXQJVlH2E7cIeTkXUaiLDGdH0dO91KjgpVVe/mRcHCj /hQsQpmE+o4yGDXLrOBDHu2bBvN29oqdNL0d0slM3z9HUCi3HdtwZE5nf5w9dEaF 2YBjdk+obcU3LlCD7/TSr0KcHKaZndSHnJV1zQo94bPltiJPVflipJ4gXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIaiJFI0ul4wOK0jTT6PlHBnrlLMB8GA1UdIwQY MBaAFB65nBIOyZTztw2/xeAZouixh80MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHJtY0VnN0psUE8zRGJfRjRCbWk2TEdIelF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MDg0M2UtNjY2My00ZWUxLWIxZjQt YTliODhmZGFiNjY4LzEvSHJtY0VnN0psUE8zRGJfRjRCbWk2TEdIelF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MDg0M2UtNjY2My00ZWUxLWIxZjQtYTliODhmZGFiNjY4 LzEvSHJtY0VnN0psUE8zRGJfRjRCbWk2TEdIelF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKi+7nHg6 ZtBDDL5IQNARvefmXW688h5HI87hAPA0nQypYIV/Va7f6An7ORGdIa4qvMo+Naj6 8ZUWMbLv8HDP9DhXtcVzu5xA2QMNtB7VB7zMY9Zv96id0v/q6AJBRCShuk0uDLMG 1r8y5iSRr2/cp40104oSlyMvNed+NO4VBWnzkCBGPk0dAuP1qcLkuVApStM7VmEI apRWY+kwLT0lPeniP9NN4WBSiw0o/fEECNLzprx0S0WVotCNHEHHmHg/ZqL9Vkno 8FoOgsF+6U8LWmSMdtZHDYHEu3FMCqfxr8iSUcK0MnGwwYMgEOYlvF6A9L45IHRg n8PUyxUozCedOA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:40 2025 by rpki-client