This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft File: HGce_RKBEUKXWJ51k6fgUFTZJVs.mft (raw, json) Hash identifier: 3dPrM8Adacv2PYWpmC3G0I+8b9gQ3YgHSi6W8KG99eA= Subject key identifier: 36:34:0E:41:3F:0C:72:C1:FC:E3:2B:A3:38:E2:5F:E1:76:3A:1B:65 Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B Certificate issuer: /CN=1c671efd1281114297589e7593a7e05054d9255b Certificate serial: 019AF19B00B98B77D5BDEEF59C5160834344 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft Manifest number: 1261 Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: HGce_RKBEUKXWJ51k6fgUFTZJVs.crl (hash: q0V+PWwa/j0fGYBb22kq0YjPv9LWe3z4/jUiE2/IhYU=) 2: quzeBvB4K-uCJUdGNl5lumOg01g.roa (hash: NUc87tmJZd1YHslvV2s3oIDhhEPpWQvZDbTgS+MJ6oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:00:b9:8b:77:d5:bd:ee:f5:9c:51:60:83:43:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=36340e413f0c72c1fce32ba338e25fe1763a1b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:c3:22:87:4e:9a:4e:ee:07:98:76:36:f0: 5c:87:2d:53:ee:3d:ce:4a:24:9f:54:53:90:52:9d: 6e:7e:f9:2d:31:8d:02:a2:34:65:da:67:a3:2a:86: a8:97:24:27:38:a8:a8:63:91:4d:2b:43:2f:07:5b: 46:95:0e:d2:0a:46:01:32:ef:44:e1:05:e1:34:5b: a7:db:5b:2f:60:2d:34:a0:e9:6b:ca:e5:96:6e:a5: 97:bf:cf:17:08:30:19:81:be:f3:d9:68:ff:59:ca: 38:ec:31:98:75:c4:01:61:cc:cd:0b:8c:93:45:cc: 80:ce:5b:3c:d3:2f:ba:9d:f1:a9:03:71:24:99:01: 2e:47:8c:8d:b1:94:06:2c:20:c0:dd:54:ba:cc:8a: f4:c3:8f:e2:69:7a:02:b8:d2:20:bf:80:2d:fe:bf: f5:cf:ba:9a:80:16:d7:fe:c7:63:85:74:ce:07:56: 14:36:33:7d:90:d7:ac:3b:9d:7f:07:08:78:c0:2c: 0b:5d:01:b3:81:24:d1:23:ac:4e:3c:f4:03:4f:5f: 2c:69:e5:cb:0a:eb:d1:30:52:45:47:73:00:34:e2: c4:e9:ee:b8:19:9d:b0:8f:3f:f6:67:f1:42:01:3d: dc:3d:a6:d2:bc:97:df:90:b3:70:e0:0e:55:76:d2: 17:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:34:0E:41:3F:0C:72:C1:FC:E3:2B:A3:38:E2:5F:E1:76:3A:1B:65 X509v3 Authority Key Identifier: keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ec:aa:61:6b:62:11:2e:c1:95:2c:fa:11:ce:07:83:42:50: 9f:8a:31:90:29:6f:3e:bc:24:a2:cd:d8:5e:fd:04:03:00:71: 3d:5a:71:a3:4e:63:31:f8:70:40:4e:7f:2e:fe:05:a3:cd:35: 23:48:8d:a8:11:d7:6a:8b:58:ee:b2:8c:58:da:b9:c3:19:00: 95:1d:90:51:85:0b:70:dd:cd:54:15:3d:1b:e6:95:87:52:40: 6e:e3:03:a1:55:3d:b1:4f:ac:c9:30:f7:02:02:a3:68:fb:72: eb:60:f7:05:d0:0c:ec:04:ca:5c:8d:40:58:01:5d:98:1a:52: ba:85:92:21:0b:a1:93:7f:61:1a:b5:8f:5b:a4:6e:d9:04:8b: 85:07:f1:cb:e1:ae:43:af:62:95:ec:e8:91:f0:72:6c:a7:32: 68:7f:96:78:64:f4:c2:ab:eb:a0:ca:88:57:f2:71:42:7e:77: 94:c3:59:52:70:28:f6:3e:3a:6a:8c:21:ae:e2:20:ac:e3:e3: ec:0b:05:bc:9d:fa:f1:3a:a1:17:d1:d6:8a:e1:15:4c:2c:18: 78:de:62:99:e4:53:97:8a:b4:b3:5e:22:ba:65:c4:bf:47:99: e0:35:0a:c0:91:cd:01:69:16:a4:78:9c:48:46:bb:9e:a4:39: 88:f7:dc:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwC5i3fVve71nFFgg0NEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNjcxZWZkMTI4MTExNDI5NzU4OWU3NTkzYTdlMDUwNTRk OTI1NWIwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD EygzNjM0MGU0MTNmMGM3MmMxZmNlMzJiYTMzOGUyNWZlMTc2M2ExYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0jDIodOmk7uB5h2NvBchy1T7j3O SiSfVFOQUp1ufvktMY0CojRl2mejKoaolyQnOKioY5FNK0MvB1tGlQ7SCkYBMu9E 4QXhNFun21svYC00oOlryuWWbqWXv88XCDAZgb7z2Wj/Wco47DGYdcQBYczNC4yT RcyAzls80y+6nfGpA3EkmQEuR4yNsZQGLCDA3VS6zIr0w4/iaXoCuNIgv4At/r/1 z7qagBbX/sdjhXTOB1YUNjN9kNesO51/Bwh4wCwLXQGzgSTRI6xOPPQDT18saeXL CuvRMFJFR3MANOLE6e64GZ2wjz/2Z/FCAT3cPabSvJffkLNw4A5VdtIXtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDY0DkE/DHLB/OMrozjiX+F2OhtlMB8GA1UdIwQY MBaAFBxnHv0SgRFCl1iedZOn4FBU2SVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEdjZV9SS0JFVUtYV0o1MWs2ZmdVRlRaSlZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mZGIwMDMtZmFlMy00YTY5LTljOTEt ZTNkMmY2NGZkZGQ0LzEvSEdjZV9SS0JFVUtYV0o1MWs2ZmdVRlRaSlZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mZGIwMDMtZmFlMy00YTY5LTljOTEtZTNkMmY2NGZkZGQ0 LzEvSEdjZV9SS0JFVUtYV0o1MWs2ZmdVRlRaSlZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuyqYWti ES7BlSz6Ec4Hg0JQn4oxkClvPrwkos3YXv0EAwBxPVpxo05jMfhwQE5/Lv4Fo801 I0iNqBHXaotY7rKMWNq5wxkAlR2QUYULcN3NVBU9G+aVh1JAbuMDoVU9sU+syTD3 AgKjaPty62D3BdAM7ATKXI1AWAFdmBpSuoWSIQuhk39hGrWPW6Ru2QSLhQfxy+Gu Q69ilezokfBybKcyaH+WeGT0wqvroMqIV/JxQn53lMNZUnAo9j46aowhruIgrOPj 7AsFvJ368TqhF9HWiuEVTCwYeN5imeRTl4q0s14iumXEv0eZ4DUKwJHNAWkWpHic SEa7nqQ5iPfcUw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:42 2025 by rpki-client