This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft File: HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft (raw, json) Hash identifier: QqAsaEgYUQLZnDofnlr5reB2syyTPVIRY4j9rLglELI= Subject key identifier: 3C:9C:87:AC:05:20:35:9F:52:FC:B0:DA:98:C8:13:16:96:89:80:69 Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10 Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410 Certificate serial: 019AF1D24F40744F27C3970FF41FF38225AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft Manifest number: 12AD Signing time: Sat 06 Dec 2025 04:01:23 +0000 Manifest this update: Sat 06 Dec 2025 04:01:23 +0000 Manifest next update: Sun 07 Dec 2025 04:01:23 +0000 Files and hashes: 1: HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl (hash: 3i/1r4EYYD9HbGRDFlu307uDqC5zkyyhraaKeF50zJ4=) 2: I2Um-BptLNwnopUXCKyaHVD-kHY.roa (hash: oaTE3K1HG85ox8sjIAMWSASmDZ12fR3RjImb2V3uqGk=) 3: V64dlNuRxsB4pj8KUNyI80O85tg.roa (hash: 2nVKvx4azH+bxWy0PRhnAkeITVbTxn6s3MeHunV69tk=) 4: edFVYVioPZTorF9uuac8djTSV64.roa (hash: Sqg7k+1F+ZM0n3f+ttHkMFPzbVfUdm2GmmTGOixgY9A=) 5: zldR7t2bu_wertKzQ3TJznNKjCE.roa (hash: Yg9qWkGrkBhdxY/Lab0rn600w8RlUBzjFYaLiDvl9fw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4f:40:74:4f:27:c3:97:0f:f4:1f:f3:82:25:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410 Validity Not Before: Dec 6 04:01:23 2025 GMT Not After : Dec 7 04:01:23 2025 GMT Subject: CN=3c9c87ac0520359f52fcb0da98c8131696898069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:78:e5:87:34:7f:5e:42:64:37:b3:a6:e4:f1: b6:5a:53:a0:f6:29:63:30:21:38:d5:69:f5:68:62: ee:b6:9f:4e:3b:67:17:4c:75:ad:32:d3:de:1c:7f: 27:9e:90:e3:b7:1a:f7:7c:34:8f:49:d2:c3:e8:9a: f4:2c:b1:22:2c:14:47:70:38:2f:88:55:dc:68:9a: 8a:ad:1f:93:0c:59:2c:44:eb:d9:8e:c5:97:a8:49: 9a:7b:a6:e5:99:19:11:f1:c5:c2:60:ba:1c:01:52: f4:d6:47:0c:9e:a2:45:51:d8:66:24:10:40:f9:6c: df:ed:85:29:ac:c7:3f:86:bc:f3:1b:c4:e1:e2:a7: 20:f4:25:eb:2c:0d:13:f4:67:84:5e:13:84:be:4b: 16:fe:ab:a4:24:6b:30:b5:27:a9:dc:7b:b8:b5:72: 5a:aa:49:e0:e3:ac:08:e5:80:31:95:46:0d:54:67: 25:d5:a8:20:a8:92:9f:e9:7d:82:de:d7:ad:58:18: dc:59:0b:cd:80:9b:6d:52:bb:06:82:60:bb:7d:55: 28:94:33:4e:88:d4:51:d6:4b:e9:d1:08:22:f5:dd: a7:ea:f5:9c:56:c9:d6:23:7c:c2:7e:64:51:45:ba: ad:98:fd:17:aa:b6:b6:74:ce:4c:a4:c8:38:f1:65: 2f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9C:87:AC:05:20:35:9F:52:FC:B0:DA:98:C8:13:16:96:89:80:69 X509v3 Authority Key Identifier: keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:67:ce:8b:4d:e0:56:73:ef:4d:1e:3c:27:05:f7:23:92:6f: f9:82:c4:39:e3:01:2b:30:db:c0:10:03:bc:f5:44:37:44:b1: 15:05:8f:00:66:b9:fc:40:02:c1:80:b6:36:10:0c:79:90:1f: e2:33:8f:4d:65:90:2f:50:ed:0f:76:78:f5:65:07:5e:de:ad: e2:da:55:fa:48:6e:a9:07:6c:f6:3f:f2:62:d0:79:7f:42:e5: c3:c6:ee:4b:d7:c1:e2:3c:3c:3e:20:b4:94:1b:da:21:cb:ae: bb:f8:7a:5a:eb:60:b3:e1:b7:dd:7e:a6:64:47:ff:71:a4:3a: 95:c4:d7:52:12:b8:56:d5:21:23:99:57:61:52:87:b0:c0:68: bb:0d:e8:8c:49:7d:cd:8b:e7:7f:6a:49:d8:b1:cd:3e:0a:fd: 65:f2:10:be:f2:54:a6:a9:b5:c9:0c:d0:83:5c:26:8e:8f:61: c4:80:a2:2c:b3:31:c4:e3:73:4c:60:58:68:5b:21:7d:ab:8a: 24:7c:12:d9:7a:a1:72:92:3a:82:87:33:26:d5:10:3f:e8:bc: 00:80:0d:c5:8a:98:d4:cf:0f:34:f9:6b:ef:42:1b:ce:80:40: 30:ad:4f:7e:04:cd:ee:6b:10:08:b9:f0:21:53:f7:de:6c:a9: 2a:12:c5:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0k9AdE8nw5cP9B/zgiWvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNmM0OGNjY2NlMzIxZWMxODcwMjk1N2IzOTYzODFhMWYx YTA0MTAwHhcNMjUxMjA2MDQwMTIzWhcNMjUxMjA3MDQwMTIzWjAzMTEwLwYDVQQD EygzYzljODdhYzA1MjAzNTlmNTJmY2IwZGE5OGM4MTMxNjk2ODk4MDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03jlhzR/XkJkN7Om5PG2WlOg9ilj MCE41Wn1aGLutp9OO2cXTHWtMtPeHH8nnpDjtxr3fDSPSdLD6Jr0LLEiLBRHcDgv iFXcaJqKrR+TDFksROvZjsWXqEmae6blmRkR8cXCYLocAVL01kcMnqJFUdhmJBBA +Wzf7YUprMc/hrzzG8Th4qcg9CXrLA0T9GeEXhOEvksW/qukJGswtSep3Hu4tXJa qkng46wI5YAxlUYNVGcl1aggqJKf6X2C3tetWBjcWQvNgJttUrsGgmC7fVUolDNO iNRR1kvp0Qgi9d2n6vWcVsnWI3zCfmRRRbqtmP0Xqra2dM5MpMg48WUvqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDych6wFIDWfUvyw2pjIExaWiYBpMB8GA1UdIwQY MBaAFBxsSMzM4yHsGHApV7OWOBofGgQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYt YTA1NjBhYzgyYmE3LzEvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYtYTA1NjBhYzgyYmE3 LzEvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWfOi03g VnPvTR48JwX3I5Jv+YLEOeMBKzDbwBADvPVEN0SxFQWPAGa5/EACwYC2NhAMeZAf 4jOPTWWQL1DtD3Z49WUHXt6t4tpV+khuqQds9j/yYtB5f0Llw8buS9fB4jw8PiC0 lBvaIcuuu/h6Wutgs+G33X6mZEf/caQ6lcTXUhK4VtUhI5lXYVKHsMBouw3ojEl9 zYvnf2pJ2LHNPgr9ZfIQvvJUpqm1yQzQg1wmjo9hxICiLLMxxONzTGBYaFshfauK JHwS2XqhcpI6goczJtUQP+i8AIANxYqY1M8PNPlr70IbzoBAMK1PfgTN7msQCLnw IVP33mypKhLFqA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:26:01 2025 by rpki-client