This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json) Hash identifier: KLstr7d+ibgtR8ATcah2YavCb36y5+vNilMwtYUuCCk= Subject key identifier: 0D:5A:97:2F:14:FB:5C:CA:FC:FA:D0:EC:D3:52:FD:98:37:69:E5:EC Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59 Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759 Certificate serial: 019AF42DD511F2926FAD5C1F3F69D9E455D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft Manifest number: 16D5 Signing time: Sat 06 Dec 2025 15:00:35 +0000 Manifest this update: Sat 06 Dec 2025 15:00:35 +0000 Manifest next update: Sun 07 Dec 2025 15:00:35 +0000 Files and hashes: 1: 81MEacBenBgmbO5jhDxF0nT9AY8.roa (hash: vqTM9hVXCE9d+gr3kAinLULx9Hs2eNhvPcIV7jj+wQo=) 2: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: qCZgADACofr3Ky7TWd0C1bwFqaD7Y4RyqYrS/bNN/a8=) 3: sdKlP2Aw2qctGsD4JmkFw0F6ogE.roa (hash: QHNv9dzaWkHzsPtxPcBQqXpHwKOh3KwCvpG8ivysLbs=) 4: uxkgUTNHz5hEl5ZXCX6UmUPRqGc.roa (hash: L+VrhfELaxB0CKXlAjrRZtLxN2tzA9plKPHYSxcGzdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:d5:11:f2:92:6f:ad:5c:1f:3f:69:d9:e4:55:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759 Validity Not Before: Dec 6 15:00:35 2025 GMT Not After : Dec 7 15:00:35 2025 GMT Subject: CN=0d5a972f14fb5ccafcfad0ecd352fd983769e5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:68:c9:49:1c:95:7d:7a:9f:58:c4:f2:20: c7:85:c3:2d:88:24:73:86:13:1c:6b:e6:41:6d:b6: 99:74:29:ea:00:ab:7e:ab:e3:75:5d:d8:4c:7e:b8: 96:3c:da:29:86:58:1d:21:00:72:2d:f7:fb:cf:0b: db:93:1e:2d:f0:5b:7c:4e:c3:c5:17:09:f9:47:6f: 9f:61:ac:12:04:fb:e2:cf:28:98:cc:b6:2f:7e:f3: 14:87:4f:e8:33:7e:f2:a5:3d:38:1c:ad:09:6f:5a: 1c:b3:60:73:59:0b:c3:2c:10:57:d6:ed:1a:ec:f2: e7:08:79:68:a3:f6:c1:66:ea:e9:6e:76:2e:59:e2: cf:61:1a:1f:c3:5e:f3:b5:b0:e7:2d:03:b8:23:2d: a7:94:e2:24:48:50:5c:97:22:f7:ac:46:66:60:c1: bc:25:dc:68:9a:8b:d4:0f:db:b6:6b:cb:52:db:8d: 7e:e9:a5:1c:95:68:13:01:e3:12:d4:aa:77:da:55: bd:3c:cb:5a:d0:ce:b9:79:d7:84:3a:60:9d:52:60: c6:8f:91:47:23:d7:06:84:4a:21:d1:10:8e:8d:49: 18:3a:72:18:bf:88:85:a9:d3:fa:91:5a:b9:f8:16: cf:06:b4:50:29:68:28:50:4d:26:ac:bf:ec:e4:d3: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5A:97:2F:14:FB:5C:CA:FC:FA:D0:EC:D3:52:FD:98:37:69:E5:EC X509v3 Authority Key Identifier: keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a8:b9:95:be:79:e8:35:a7:42:e8:de:91:ac:8a:02:45:5c: 6e:47:13:b0:18:de:c4:b8:6b:ac:71:fc:af:cf:29:e0:b4:f2: c2:08:db:46:3c:4b:ef:c8:aa:ad:a2:d6:ac:28:16:d7:06:36: 7a:4f:08:92:e5:c5:4b:66:26:57:a8:39:76:06:dd:dd:06:4b: 5c:6a:fd:23:02:55:a9:7b:29:f4:f2:15:0c:a2:b9:47:41:4f: 75:0e:7f:19:e5:46:04:8a:e7:f7:c9:ed:ab:e4:59:ea:b8:85: b4:dd:a5:7a:dc:2c:83:06:8e:b1:75:0c:a8:21:99:69:d7:d1: 82:e2:5e:52:a1:89:f9:f6:36:5c:b9:0d:bf:f1:0e:57:12:14: 34:4e:aa:9a:29:8f:c9:1f:f7:23:2d:2e:1d:7c:ed:65:70:60: 47:fd:04:c1:64:33:36:a1:90:0a:88:0f:d3:8e:55:f1:24:92: d1:f3:91:09:fa:da:3d:65:51:ee:d4:de:48:b5:46:29:83:f2: ff:b7:03:c0:e9:df:f7:0e:d5:62:44:0a:44:8e:79:c5:16:d2: dd:32:81:41:b0:60:62:2b:38:df:1f:09:ec:36:11:e7:e0:28: f2:aa:97:eb:a3:13:6d:29:07:c0:27:6b:42:ed:6e:a2:67:64: 29:1a:12:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LdUR8pJvrVwfP2nZ5FXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzQzM2ZhZmE1OWYwZDUxMmEyYmViYjA5N2U2OTQ2M2Nj MDY3NTkwHhcNMjUxMjA2MTUwMDM1WhcNMjUxMjA3MTUwMDM1WjAzMTEwLwYDVQQD EygwZDVhOTcyZjE0ZmI1Y2NhZmNmYWQwZWNkMzUyZmQ5ODM3NjllNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIhoyUkclX16n1jE8iDHhcMtiCRz hhMca+ZBbbaZdCnqAKt+q+N1XdhMfriWPNophlgdIQByLff7zwvbkx4t8Ft8TsPF Fwn5R2+fYawSBPvizyiYzLYvfvMUh0/oM37ypT04HK0Jb1ocs2BzWQvDLBBX1u0a 7PLnCHloo/bBZurpbnYuWeLPYRofw17ztbDnLQO4Iy2nlOIkSFBclyL3rEZmYMG8 JdxomovUD9u2a8tS241+6aUclWgTAeMS1Kp32lW9PMta0M65edeEOmCdUmDGj5FH I9cGhEoh0RCOjUkYOnIYv4iFqdP6kVq5+BbPBrRQKWgoUE0mrL/s5NPXLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1aly8U+1zK/PrQ7NNS/Zg3aeXsMB8GA1UdIwQY MBaAFBx0M/r6WfDVEqK+uwl+aUY8wGdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0Nzkt MTJmNDFhMGNjMGMxLzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0NzktMTJmNDFhMGNjMGMx LzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKi5lb55 6DWnQujekayKAkVcbkcTsBjexLhrrHH8r88p4LTywgjbRjxL78iqraLWrCgW1wY2 ek8IkuXFS2YmV6g5dgbd3QZLXGr9IwJVqXsp9PIVDKK5R0FPdQ5/GeVGBIrn98nt q+RZ6riFtN2letwsgwaOsXUMqCGZadfRguJeUqGJ+fY2XLkNv/EOVxIUNE6qmimP yR/3Iy0uHXztZXBgR/0EwWQzNqGQCogP045V8SSS0fORCfraPWVR7tTeSLVGKYPy /7cDwOnf9w7VYkQKRI55xRbS3TKBQbBgYis43x8J7DYR5+Ao8qqX66MTbSkHwCdr Qu1uomdkKRoSgg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:55 2025 by rpki-client