This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json) Hash identifier: 9IdxDaOk+GWALXdHnhUzPfhIcSvNrx2raXqeMbW/PgQ= Subject key identifier: DB:65:00:50:84:6E:AF:17:F2:CC:53:0A:74:24:D2:CD:09:0C:1A:45 Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72 Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772 Certificate serial: 019AF31BEFD0E1781A69F02D6E189F3F6096 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:25 +0000 Manifest this update: Sat 06 Dec 2025 10:01:25 +0000 Manifest next update: Sun 07 Dec 2025 10:01:25 +0000 Files and hashes: 1: 2p9UhZ4f1RpCso5_KIEAEmFd_Cs.roa (hash: oRMeyyuTPK9dSZ9MmutE2TkHWIxlWdCs8LlZr1bRdaE=) 2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: +Pd7U5sUqhxR1bJi0/kcc9Zgj08waMnTAgGOTJG1tBE=) 3: IJNfARVzI865AIKgN_3yjxJwMgI.roa (hash: fusPL7W50hSr1S5X6R9RazY+w4yFVSYD9+IMtNP9M5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ef:d0:e1:78:1a:69:f0:2d:6e:18:9f:3f:60:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772 Validity Not Before: Dec 6 10:01:25 2025 GMT Not After : Dec 7 10:01:25 2025 GMT Subject: CN=db650050846eaf17f2cc530a7424d2cd090c1a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:32:02:1e:35:1a:f8:40:02:4f:46:9e:0d: e0:de:78:87:08:f3:a8:d6:a5:15:92:aa:1b:45:25: c9:0b:cc:cf:88:46:5e:4e:04:60:c0:c2:e7:0a:b3: 62:30:b4:ce:10:d6:01:46:bf:fd:76:49:4c:d5:87: ad:8c:71:ba:cb:f5:b7:32:06:97:4d:eb:99:24:09: 15:62:c8:7e:f1:a0:04:82:45:f7:d8:c4:24:50:59: 47:e6:f6:82:ac:d5:91:89:07:0f:7e:7f:98:c3:a7: fc:27:de:e0:2b:28:26:8e:e4:00:41:30:c5:0e:b2: 7e:cb:15:b7:dd:c1:68:11:a0:60:ff:61:76:80:f3: 16:43:fc:f6:07:ec:5b:19:99:78:41:0b:29:b6:b5: 72:7f:3d:65:b3:91:a8:42:0a:88:12:24:00:f9:13: 4a:dd:9c:00:12:02:f5:c5:9b:40:91:60:71:1c:74: be:e7:6b:a9:ee:ff:dd:9b:a5:9e:08:ce:5f:d8:49: 25:0b:c3:7c:7d:b5:81:cd:c8:b0:bc:ab:da:77:b6: 86:33:41:0c:51:93:0a:b2:6f:a2:4f:b4:cd:c5:c6: 84:3a:2c:dc:2e:01:36:85:b2:76:d6:bb:f6:bc:55: 83:b7:96:a1:72:c4:a3:57:ee:e9:3c:f1:31:7e:09: f8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:65:00:50:84:6E:AF:17:F2:CC:53:0A:74:24:D2:CD:09:0C:1A:45 X509v3 Authority Key Identifier: keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:8a:84:c0:e0:54:10:56:9a:c6:e1:9c:19:9c:bf:ac:a5:f8: bc:e2:22:5d:b7:75:f9:2a:bd:1f:55:af:1c:57:10:8b:59:99: 06:e5:26:fe:f3:a6:15:52:35:c1:b8:e6:4e:a9:a2:0b:68:75: 0d:f6:9d:67:f1:d3:da:bf:c2:c7:29:a6:d0:e6:53:da:64:01: af:ba:94:c1:46:2f:18:f1:61:f4:be:29:b0:d7:ef:d9:f1:30: 8e:e8:c7:e9:a6:76:b6:40:ca:b0:45:eb:19:d3:eb:2d:a7:ce: f6:ec:eb:2d:74:19:47:87:df:13:00:12:b8:7f:63:90:84:83: 7f:c8:0c:fd:83:44:a4:ec:69:b6:26:3f:f0:51:bd:15:ae:3a: 88:ae:cb:4e:3e:d8:f5:31:a5:d1:e5:0f:61:2e:8f:4f:ca:74: a6:dd:31:7e:35:a9:6e:03:d3:37:5e:4d:05:20:ce:b8:0a:31: 02:91:b7:75:31:a6:f6:52:34:25:c8:85:94:d2:54:40:df:18: a2:1b:03:a7:f7:53:a0:b4:e0:02:9b:5d:d6:53:cd:3b:c8:dc: f3:e7:5b:7c:de:75:12:4f:9e:a7:60:ae:37:f2:fc:7e:46:97: 12:08:bd:16:b3:34:82:0f:6e:10:a7:94:2b:f1:e1:b3:65:5a: ee:c7:00:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+/Q4XgaafAtbhifP2CWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNjgzZjk1Yzk4ZDJjZmU5ZDc5Y2RkM2RiOGVlODEzOGJi MzU3NzIwHhcNMjUxMjA2MTAwMTI1WhcNMjUxMjA3MTAwMTI1WjAzMTEwLwYDVQQD EyhkYjY1MDA1MDg0NmVhZjE3ZjJjYzUzMGE3NDI0ZDJjZDA5MGMxYTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQUyAh41GvhAAk9Gng3g3niHCPOo 1qUVkqobRSXJC8zPiEZeTgRgwMLnCrNiMLTOENYBRr/9dklM1YetjHG6y/W3MgaX TeuZJAkVYsh+8aAEgkX32MQkUFlH5vaCrNWRiQcPfn+Yw6f8J97gKygmjuQAQTDF DrJ+yxW33cFoEaBg/2F2gPMWQ/z2B+xbGZl4QQsptrVyfz1ls5GoQgqIEiQA+RNK 3ZwAEgL1xZtAkWBxHHS+52up7v/dm6WeCM5f2EklC8N8fbWBzciwvKvad7aGM0EM UZMKsm+iT7TNxcaEOizcLgE2hbJ21rv2vFWDt5ahcsSjV+7pPPExfgn4uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtlAFCEbq8X8sxTCnQk0s0JDBpFMB8GA1UdIwQY MBaAFBxoP5XJjSz+nXnN09uO6BOLs1dyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWIt YjNhZTFlNGMzMmI3LzEvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWItYjNhZTFlNGMzMmI3 LzEvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYqEwOBU EFaaxuGcGZy/rKX4vOIiXbd1+Sq9H1WvHFcQi1mZBuUm/vOmFVI1wbjmTqmiC2h1 DfadZ/HT2r/Cxymm0OZT2mQBr7qUwUYvGPFh9L4psNfv2fEwjujH6aZ2tkDKsEXr GdPrLafO9uzrLXQZR4ffEwASuH9jkISDf8gM/YNEpOxptiY/8FG9Fa46iK7LTj7Y 9TGl0eUPYS6PT8p0pt0xfjWpbgPTN15NBSDOuAoxApG3dTGm9lI0JciFlNJUQN8Y ohsDp/dToLTgAptd1lPNO8jc8+dbfN51Ek+ep2CuN/L8fkaXEgi9FrM0gg9uEKeU K/Hhs2Va7scAmA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:57 2025 by rpki-client