This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json) Hash identifier: MjJr8j6PUY5RgMNZdOCvS5+32nYBAZ7ezLTZC7/Y4z8= Subject key identifier: 5A:5D:76:DB:AE:CA:B4:C8:B1:C0:7B:98:A4:5E:34:F4:6C:19:63:A2 Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92 Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892 Certificate serial: 019AF08833AB3D21FB60DF51E6EEC9FBCB4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft Manifest number: 19 Signing time: Fri 05 Dec 2025 22:00:49 +0000 Manifest this update: Fri 05 Dec 2025 22:00:49 +0000 Manifest next update: Sat 06 Dec 2025 22:00:49 +0000 Files and hashes: 1: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: KPEvlKYOOp59wqLvMRainxqsy5vjHhVPCV6dl/XGU3w=) 2: eydd9b9yJG4u8PDoXh8HYchwXcQ.asa (hash: XLJ8T9Pn5PjpqOyDdfyyg17qfr7NWdf6Z89qNT5NgvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:33:ab:3d:21:fb:60:df:51:e6:ee:c9:fb:cb:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892 Validity Not Before: Dec 5 22:00:49 2025 GMT Not After : Dec 6 22:00:49 2025 GMT Subject: CN=5a5d76dbaecab4c8b1c07b98a45e34f46c1963a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:d6:2b:85:bf:dd:6b:3a:eb:6f:71:6a:87: dc:a2:5f:4f:58:1e:52:fe:67:5d:21:14:8b:24:2f: 57:a4:cc:83:79:7b:97:07:bc:33:7f:1f:99:bd:4d: 60:a9:07:b1:88:09:01:d7:67:c7:d8:9e:62:b4:06: 46:df:c9:09:22:78:70:52:e4:cd:b1:28:87:8b:f5: 37:12:a7:1b:45:b3:f5:6d:30:a0:05:32:cf:de:60: 72:65:70:a7:8f:95:94:28:37:3e:be:48:56:22:32: a7:94:23:76:b5:0d:13:d4:ae:0d:9d:6f:23:57:2d: ee:54:93:0b:6c:b5:0f:ef:69:f3:8f:92:b1:71:78: 34:62:6a:ef:3c:d3:9f:7b:41:40:a0:4f:00:cd:fd: 3d:ff:91:5a:b8:de:f8:d3:d4:75:a6:bf:4a:8f:62: cc:be:b5:30:89:9e:09:30:5f:58:ad:f1:d0:5b:9c: f2:dd:59:47:59:84:8a:d9:13:77:9c:b2:33:b7:a6: bc:5d:26:5c:8b:ef:35:84:58:b3:29:55:85:08:8e: cb:99:a0:24:e5:73:2d:bb:4a:00:18:a5:dc:b3:fc: f1:fd:a5:0f:18:17:ae:90:31:4a:57:d9:9f:13:4e: 5c:96:f5:7d:5e:b4:d8:58:a2:ae:bc:71:47:6b:89: 2e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5D:76:DB:AE:CA:B4:C8:B1:C0:7B:98:A4:5E:34:F4:6C:19:63:A2 X509v3 Authority Key Identifier: keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:df:be:57:7e:5a:0e:93:67:27:58:84:97:04:f4:16:6b:47: cb:70:f2:a3:18:db:63:7e:7e:ee:1b:51:b9:89:6f:e7:96:28: a6:74:2f:9c:8e:67:19:e7:d0:13:33:1f:4a:c6:95:d2:5c:8b: 75:69:93:aa:22:d2:55:46:70:45:e3:0e:fb:84:62:21:9a:d1: 17:b1:61:03:0a:c5:5e:21:86:36:7e:ee:fe:1d:f4:05:87:84: 66:89:ef:c7:18:56:09:34:ea:26:f5:61:5c:74:68:5f:5c:bd: f0:17:74:3d:05:32:8b:ed:a5:14:28:9b:49:c7:2a:01:b4:8c: 34:03:27:78:15:6e:31:34:ff:b3:5a:6c:7f:0b:34:c3:c2:b6: b1:39:09:70:64:ca:80:90:0b:06:76:74:c3:61:ac:a1:3b:30: 12:9f:8c:a3:b6:5d:c1:df:bc:b3:66:ca:10:e9:d9:61:be:f4: d1:e2:9e:c7:d3:95:0f:02:e6:fc:82:65:47:70:31:17:11:38: e6:ef:8e:42:3b:24:ca:d3:bc:bd:de:d2:27:84:ac:1e:29:ff: 25:d5:0b:fd:fc:97:84:77:53:ba:e2:b6:b9:b7:56:b1:28:da: aa:32:66:4f:67:02:f8:12:f1:90:dd:88:2a:7b:9e:9f:27:c2: 39:33:9e:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDOrPSH7YN9R5u7J+8tLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYzFlZjYzNzQ5OThhODRlODBlNWUzMGRhMDlhNjlmNGZm ZWE4OTIwHhcNMjUxMjA1MjIwMDQ5WhcNMjUxMjA2MjIwMDQ5WjAzMTEwLwYDVQQD Eyg1YTVkNzZkYmFlY2FiNGM4YjFjMDdiOThhNDVlMzRmNDZjMTk2M2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiPWK4W/3Ws6629xaofcol9PWB5S /mddIRSLJC9XpMyDeXuXB7wzfx+ZvU1gqQexiAkB12fH2J5itAZG38kJInhwUuTN sSiHi/U3EqcbRbP1bTCgBTLP3mByZXCnj5WUKDc+vkhWIjKnlCN2tQ0T1K4NnW8j Vy3uVJMLbLUP72nzj5KxcXg0YmrvPNOfe0FAoE8Azf09/5FauN7409R1pr9Kj2LM vrUwiZ4JMF9YrfHQW5zy3VlHWYSK2RN3nLIzt6a8XSZci+81hFizKVWFCI7LmaAk 5XMtu0oAGKXcs/zx/aUPGBeukDFKV9mfE05clvV9XrTYWKKuvHFHa4kuwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpddtuuyrTIscB7mKReNPRsGWOiMB8GA1UdIwQY MBaAFB3B72N0mYqE6A5eMNoJpp9P/qiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQt MTQ2Yzk0NzNiNmNiLzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQtMTQ2Yzk0NzNiNmNi LzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHt++V35a DpNnJ1iElwT0FmtHy3DyoxjbY35+7htRuYlv55YopnQvnI5nGefQEzMfSsaV0lyL dWmTqiLSVUZwReMO+4RiIZrRF7FhAwrFXiGGNn7u/h30BYeEZonvxxhWCTTqJvVh XHRoX1y98Bd0PQUyi+2lFCibSccqAbSMNAMneBVuMTT/s1psfws0w8K2sTkJcGTK gJALBnZ0w2GsoTswEp+Mo7Zdwd+8s2bKEOnZYb700eKex9OVDwLm/IJlR3AxFxE4 5u+OQjskytO8vd7SJ4SsHin/JdUL/fyXhHdTuuK2ubdWsSjaqjJmT2cC+BLxkN2I KnuenyfCOTOeDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:37:23 2025 by rpki-client