This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft File: HCz1cnHCuPBLqn5jqbgQPVID1_g.mft (raw, json) Hash identifier: ioRyxUJjrw5NIcdtwFhGxYWhMvWeqFU9x5kTX5m8pJc= Subject key identifier: 96:C8:97:CE:DF:B5:10:14:35:A8:7B:DE:DB:22:68:65:F2:60:BD:42 Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8 Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8 Certificate serial: 019AF164824A76C0105E9225B1CA83A42959 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft Manifest number: 0FBC Signing time: Sat 06 Dec 2025 02:01:27 +0000 Manifest this update: Sat 06 Dec 2025 02:01:27 +0000 Manifest next update: Sun 07 Dec 2025 02:01:27 +0000 Files and hashes: 1: HCz1cnHCuPBLqn5jqbgQPVID1_g.crl (hash: RXs2vjSj9ydAy936oHpEuyQ0lqBIq8+/m5mOFFOMY3w=) 2: vH3uZ08iyiY8zb-A3dRrracn6LQ.roa (hash: zmUAFJf99C5ECEtVBxVkr25oo8bxiW5B47UWFtDZGZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:82:4a:76:c0:10:5e:92:25:b1:ca:83:a4:29:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8 Validity Not Before: Dec 6 02:01:27 2025 GMT Not After : Dec 7 02:01:27 2025 GMT Subject: CN=96c897cedfb5101435a87bdedb226865f260bd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:d9:1f:cf:4f:7e:67:ad:0a:76:aa:c4:18: ae:40:29:4c:8e:59:86:01:14:f6:0e:72:b0:5f:10: 47:37:fc:68:43:d3:71:19:9b:b7:78:d6:42:40:ad: 36:99:e3:c6:6f:30:c1:a1:15:8e:08:a2:0c:0e:77: 86:a0:39:d8:f1:95:ea:c1:22:67:c5:95:46:e0:83: 80:2d:64:24:13:17:b0:a1:21:a1:a4:13:de:8b:da: 8f:07:35:48:c0:86:fe:f5:cd:85:78:11:d2:50:37: df:0e:ea:aa:59:85:b2:73:72:3a:f8:f7:d7:b9:5c: 31:89:b9:51:1e:92:c4:4a:9b:54:df:b3:9c:f6:e5: c5:c9:3a:b2:25:8d:3f:8a:dd:54:35:09:58:90:c7: 2e:12:ea:4a:c9:15:ca:cb:65:3d:6a:77:b7:4d:60: 20:0f:c4:21:cd:14:fb:0b:90:f4:4c:54:85:9b:a2: 0a:ac:cd:cf:bd:a9:2c:54:6d:7d:33:a9:f3:5c:cc: 55:fd:31:f0:83:5d:98:fd:7f:04:56:85:ec:ce:82: d0:e1:0e:9e:93:b4:59:b3:11:52:ab:71:d7:7d:e7: c3:59:45:c7:96:64:f0:df:8b:09:67:a0:b4:e8:9b: 83:af:11:dd:28:0b:b0:5a:17:cb:77:85:ca:e4:4f: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C8:97:CE:DF:B5:10:14:35:A8:7B:DE:DB:22:68:65:F2:60:BD:42 X509v3 Authority Key Identifier: keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:41:2b:e3:0d:88:03:05:cf:5d:80:a7:a7:29:d7:18:4e:1c: e4:b4:55:da:80:da:1a:1d:22:67:55:b2:5a:5f:d5:40:cd:b4: 51:9d:e5:bb:97:90:02:05:c8:55:a0:39:41:cb:bd:9d:f1:ae: 3b:f6:ad:27:46:66:a4:45:b9:b4:82:25:00:2f:2f:bf:6c:a7: 99:8f:b3:73:b5:39:a9:11:55:47:47:c8:2d:dc:80:ab:13:4a: 71:6c:f4:cf:75:94:ca:65:27:a9:b7:08:be:b4:49:34:c1:e4: 3c:2a:d8:c6:1a:f2:d3:61:d5:f6:1a:de:66:f5:0a:21:1f:7b: 31:76:5f:e2:e8:8f:bf:d8:aa:32:1f:e3:3a:0a:f1:f6:34:49: 16:81:44:65:22:3b:c6:7b:d4:50:14:04:e4:cc:c5:85:74:ac: 60:8e:da:76:4a:a1:5a:8a:df:57:cb:70:03:cf:b9:61:6a:fc: 44:f3:af:a2:25:d6:71:f6:9d:be:0d:07:47:aa:cd:e5:4f:e7: a9:0f:f2:0c:f2:00:8f:37:67:18:58:d4:20:1b:52:be:f5:24: 64:30:72:dd:c9:2f:ec:d1:f5:96:23:76:dc:32:41:76:a0:bb: e1:04:6a:ca:84:11:c9:81:7f:13:57:fe:a3:d5:42:7d:af:0b: 01:3d:d3:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIJKdsAQXpIlscqDpClZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMmNmNTcyNzFjMmI4ZjA0YmFhN2U2M2E5YjgxMDNkNTIw M2Q3ZjgwHhcNMjUxMjA2MDIwMTI3WhcNMjUxMjA3MDIwMTI3WjAzMTEwLwYDVQQD Eyg5NmM4OTdjZWRmYjUxMDE0MzVhODdiZGVkYjIyNjg2NWYyNjBiZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM7ZH89PfmetCnaqxBiuQClMjlmG ART2DnKwXxBHN/xoQ9NxGZu3eNZCQK02mePGbzDBoRWOCKIMDneGoDnY8ZXqwSJn xZVG4IOALWQkExewoSGhpBPei9qPBzVIwIb+9c2FeBHSUDffDuqqWYWyc3I6+PfX uVwxiblRHpLESptU37Oc9uXFyTqyJY0/it1UNQlYkMcuEupKyRXKy2U9ane3TWAg D8QhzRT7C5D0TFSFm6IKrM3PvaksVG19M6nzXMxV/THwg12Y/X8EVoXszoLQ4Q6e k7RZsxFSq3HXfefDWUXHlmTw34sJZ6C06JuDrxHdKAuwWhfLd4XK5E/JeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbIl87ftRAUNah73tsiaGXyYL1CMB8GA1UdIwQY MBaAFBws9XJxwrjwS6p+Y6m4ED1SA9f4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81YWJjOTItZjU1YS00NTQ4LTlhMDAt NWI0NTM2YTc5ZTgyLzEvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy81YWJjOTItZjU1YS00NTQ4LTlhMDAtNWI0NTM2YTc5ZTgy LzEvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0Er4w2I AwXPXYCnpynXGE4c5LRV2oDaGh0iZ1WyWl/VQM20UZ3lu5eQAgXIVaA5Qcu9nfGu O/atJ0ZmpEW5tIIlAC8vv2ynmY+zc7U5qRFVR0fILdyAqxNKcWz0z3WUymUnqbcI vrRJNMHkPCrYxhry02HV9hreZvUKIR97MXZf4uiPv9iqMh/jOgrx9jRJFoFEZSI7 xnvUUBQE5MzFhXSsYI7adkqhWorfV8twA8+5YWr8RPOvoiXWcfadvg0HR6rN5U/n qQ/yDPIAjzdnGFjUIBtSvvUkZDBy3ckv7NH1liN23DJBdqC74QRqyoQRyYF/E1f+ o9VCfa8LAT3TWw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:31 2025 by rpki-client