This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft File: HkQmt06M9v_e23sGBBgIMqhiXzI.mft (raw, json) Hash identifier: sfRs/YparjC2jBb39tcwy/QtjcgzfYMNfXIsa9+IXvI= Subject key identifier: 22:43:A4:EF:9A:90:CA:97:32:6A:B4:20:7C:3E:49:71:64:B4:70:22 Authority key identifier: 1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32 Certificate issuer: /CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32 Certificate serial: 019AF31BDE4F9436747978AA6A7B8CA3F8D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft Manifest number: 0873 Signing time: Sat 06 Dec 2025 10:01:20 +0000 Manifest this update: Sat 06 Dec 2025 10:01:20 +0000 Manifest next update: Sun 07 Dec 2025 10:01:20 +0000 Files and hashes: 1: HkQmt06M9v_e23sGBBgIMqhiXzI.crl (hash: Y9lPIBlSdN4JhWyG2YAnw/dHg8NClf5cLF9z3Ia00PE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:de:4f:94:36:74:79:78:aa:6a:7b:8c:a3:f8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32 Validity Not Before: Dec 6 10:01:20 2025 GMT Not After : Dec 7 10:01:20 2025 GMT Subject: CN=2243a4ef9a90ca97326ab4207c3e497164b47022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:3e:dc:c9:cb:61:4e:d0:58:97:fe:ec:5e: d9:df:92:58:75:6e:65:af:05:3f:ff:59:e6:0a:3d: be:d6:ea:4f:9e:63:ca:1b:40:9a:8a:ab:bf:01:e3: ad:4d:0b:40:97:e8:3f:18:76:2e:95:14:7f:a7:52: 27:0a:6b:5c:9d:15:f7:60:78:0e:68:92:bf:c2:bf: d1:8e:3c:cd:ba:4f:93:00:c6:b8:c6:ff:5f:34:1d: 12:8a:09:f0:0e:62:3a:fd:d5:4b:37:69:66:09:9e: b2:26:5d:57:c8:97:c9:70:a4:58:22:32:85:fe:3d: 04:b0:cf:72:d2:ae:1f:25:f3:4e:11:07:b7:a2:40: 2c:52:b0:e5:60:2e:c5:aa:c3:e6:f9:58:1f:67:cb: 18:d8:57:79:b4:51:1e:40:1f:59:fa:aa:f4:29:da: f5:ce:80:5c:0d:db:0b:76:30:18:a4:2b:21:1f:b4: 51:1d:1d:88:37:f3:21:37:4e:f0:6f:30:32:14:d2: 0b:f1:16:07:aa:57:47:48:e5:1a:47:84:b1:16:fb: cd:f8:67:ed:81:69:e9:68:3c:8d:e6:d7:da:5e:29: 78:81:46:f1:05:af:41:1c:35:8b:17:e8:f9:dd:cf: 8a:7e:d3:2b:75:93:2b:4e:b4:d9:d6:47:2d:09:cb: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:43:A4:EF:9A:90:CA:97:32:6A:B4:20:7C:3E:49:71:64:B4:70:22 X509v3 Authority Key Identifier: keyid:1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b8:76:f3:ae:5f:58:d8:b4:8c:54:bd:03:e8:ca:b3:16:28: 4d:f5:5e:86:5c:84:93:1d:cc:3d:1d:ae:94:89:0f:21:51:55: 1a:33:05:ce:c9:54:cb:d7:fd:80:e1:14:08:70:16:5d:cd:dc: 44:f2:09:09:b7:ca:03:51:75:6b:a7:84:8e:75:ae:fe:e8:a2: 3e:3e:37:7c:ed:91:87:38:30:04:91:77:5d:d4:19:99:62:95: ee:0f:21:90:92:d1:56:12:fa:82:e6:6e:79:15:0c:90:3c:58: 6e:14:9b:03:85:63:5d:ed:84:fa:18:2f:e4:95:24:97:ed:2a: 3c:71:56:7d:87:5b:3b:39:f9:41:0b:66:5b:ae:5c:69:cf:48: 80:61:76:16:86:41:63:10:80:bf:95:e5:22:fb:4f:8e:85:23: 6d:4d:e1:d0:cf:34:a2:22:cd:70:3e:a6:59:bc:90:85:59:df: 76:d5:38:33:58:eb:b6:59:69:e4:cf:00:8d:c4:31:87:2d:a5: 62:a0:b0:f9:b3:2a:de:fa:44:a0:62:b6:5f:9b:b7:84:c1:79: 36:98:64:05:fa:7d:6e:97:6d:20:1e:03:60:ff:0d:0b:99:1d: 73:3a:1a:1e:91:64:7f:38:dc:3a:0f:c5:e8:9d:7b:ac:49:44: 84:aa:d6:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG95PlDZ0eXiqanuMo/jTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNDQyNmI3NGU4Y2Y2ZmZkZWRiN2IwNjA0MTgwODMyYTg2 MjVmMzIwHhcNMjUxMjA2MTAwMTIwWhcNMjUxMjA3MTAwMTIwWjAzMTEwLwYDVQQD EygyMjQzYTRlZjlhOTBjYTk3MzI2YWI0MjA3YzNlNDk3MTY0YjQ3MDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl4+3MnLYU7QWJf+7F7Z35JYdW5l rwU//1nmCj2+1upPnmPKG0Caiqu/AeOtTQtAl+g/GHYulRR/p1InCmtcnRX3YHgO aJK/wr/RjjzNuk+TAMa4xv9fNB0SignwDmI6/dVLN2lmCZ6yJl1XyJfJcKRYIjKF /j0EsM9y0q4fJfNOEQe3okAsUrDlYC7FqsPm+VgfZ8sY2Fd5tFEeQB9Z+qr0Kdr1 zoBcDdsLdjAYpCshH7RRHR2IN/MhN07wbzAyFNIL8RYHqldHSOUaR4SxFvvN+Gft gWnpaDyN5tfaXil4gUbxBa9BHDWLF+j53c+KftMrdZMrTrTZ1kctCcviYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJDpO+akMqXMmq0IHw+SXFktHAiMB8GA1UdIwQY MBaAFB5EJrdOjPb/3tt7BgQYCDKoYl8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGtRbXQwNk05dl9lMjNzR0JCZ0lNcWhpWHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81N2QwOGUtMWZiOC00ZmZjLThhNzEt YjQ3NDBhMjE1OGYwLzEvSGtRbXQwNk05dl9lMjNzR0JCZ0lNcWhpWHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81N2QwOGUtMWZiOC00ZmZjLThhNzEtYjQ3NDBhMjE1OGYw LzEvSGtRbXQwNk05dl9lMjNzR0JCZ0lNcWhpWHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLh2865f WNi0jFS9A+jKsxYoTfVehlyEkx3MPR2ulIkPIVFVGjMFzslUy9f9gOEUCHAWXc3c RPIJCbfKA1F1a6eEjnWu/uiiPj43fO2RhzgwBJF3XdQZmWKV7g8hkJLRVhL6guZu eRUMkDxYbhSbA4VjXe2E+hgv5JUkl+0qPHFWfYdbOzn5QQtmW65cac9IgGF2FoZB YxCAv5XlIvtPjoUjbU3h0M80oiLNcD6mWbyQhVnfdtU4M1jrtllp5M8AjcQxhy2l YqCw+bMq3vpEoGK2X5u3hMF5NphkBfp9bpdtIB4DYP8NC5kdczoaHpFkfzjcOg/F 6J17rElEhKrWpw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:54 2025 by rpki-client