This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft File: HkQmt06M9v_e23sGBBgIMqhiXzI.mft (raw, json) Hash identifier: d8/RhpLhc/AcRtoUQPrt2r4tpv7K03eS0mdkGqPPT5I= Subject key identifier: 60:95:7E:3C:45:31:26:ED:93:C7:9F:01:AF:6D:1D:0E:4A:51:91:44 Authority key identifier: 1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32 Certificate issuer: /CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32 Certificate serial: 019B2D0B6A1710F8378D5C9B7D61552FD512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft Manifest number: 0891 Signing time: Wed 17 Dec 2025 16:01:21 +0000 Manifest this update: Wed 17 Dec 2025 16:01:21 +0000 Manifest next update: Thu 18 Dec 2025 16:01:21 +0000 Files and hashes: 1: HkQmt06M9v_e23sGBBgIMqhiXzI.crl (hash: 1E5SNikbYijg/tTK8keZvX/+lLJQS7kxxjYd+NdaJhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:6a:17:10:f8:37:8d:5c:9b:7d:61:55:2f:d5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32 Validity Not Before: Dec 17 16:01:21 2025 GMT Not After : Dec 18 16:01:21 2025 GMT Subject: CN=60957e3c453126ed93c79f01af6d1d0e4a519144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ad:2e:91:12:d2:1f:9d:f3:76:4d:e7:02:7f: 2e:f9:6c:31:72:c4:09:8c:86:d6:f1:d6:29:fd:45: d7:ea:82:e3:70:e4:05:89:3c:94:2e:10:34:0c:00: 63:c5:69:07:1d:3c:aa:a2:60:7d:44:5a:bf:7c:fb: 3c:16:1f:f5:55:55:d8:bb:f3:0c:c8:df:a8:8e:b5: 34:71:99:3d:4e:25:8e:b1:8c:a8:af:75:8a:b9:3b: 12:18:48:d2:40:59:47:72:c5:9f:e4:52:54:52:da: e6:e5:c3:a2:53:e5:04:07:a6:23:55:94:03:2b:36: ac:b1:3b:3a:c4:7e:f0:18:92:3c:e4:28:3e:fc:96: d2:e6:1c:b7:6b:81:5d:78:8b:55:ed:7b:59:50:7e: 04:45:1f:12:43:e0:01:85:fa:c8:b8:a7:b5:21:12: 2c:79:c6:08:10:28:9c:0d:f5:c7:5e:8d:60:d6:19: 17:db:83:cf:04:88:66:78:84:2a:35:c1:6c:a7:45: 6f:3d:df:1b:9e:37:db:4e:c6:fb:b2:1c:f9:2e:db: 4d:84:92:b1:76:3f:37:31:3e:f0:ef:7a:b5:2e:6c: 4d:56:f2:96:9a:48:5a:02:4d:86:41:dc:ef:cb:0e: fd:76:a9:99:dc:62:5d:fe:fb:0e:d7:4d:54:98:12: 4b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:95:7E:3C:45:31:26:ED:93:C7:9F:01:AF:6D:1D:0E:4A:51:91:44 X509v3 Authority Key Identifier: keyid:1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:91:d7:ab:c9:f4:70:6c:1b:e9:46:35:87:19:34:d0:16:19: ea:c3:68:56:47:1b:98:fe:98:1a:02:94:e8:83:bb:da:1c:80: 82:f3:f6:5f:cf:c9:00:17:4a:69:1f:f7:de:f1:08:61:ef:47: 9f:2f:8a:75:38:09:a5:26:a1:99:a7:a5:39:9a:67:9c:b9:0a: 6d:b5:78:68:f4:ff:bc:37:56:a7:fd:71:d5:e8:60:e3:ba:08: d2:9e:0c:13:10:c3:c5:2d:d8:1d:95:06:7c:cc:4f:b3:e7:de: 6a:57:9c:ec:b0:1b:94:26:17:99:dc:77:36:7a:38:4d:ab:02: 87:a0:60:13:63:d0:dc:4d:2f:2b:24:ce:6c:7f:0c:51:58:81: c0:04:68:a4:a1:31:7a:83:06:44:db:31:1c:1b:01:aa:3d:55: 45:b1:5e:dd:ee:18:b2:c5:29:80:5c:39:b7:7b:2c:22:26:f5: 85:47:5e:1e:81:8f:fb:d5:e7:96:1b:29:2f:8d:fe:03:e6:7b: f5:21:19:68:ec:a9:d5:c3:91:e6:c0:c1:f2:a1:3f:bf:48:d3: 83:cc:0c:3a:0b:0e:26:27:2d:af:10:78:55:9e:db:d3:7e:e7: 65:5f:26:e0:c1:30:86:09:9e:0d:2c:9b:b5:ac:9b:a2:9b:f9: 86:d9:fa:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC2oXEPg3jVybfWFVL9USMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNDQyNmI3NGU4Y2Y2ZmZkZWRiN2IwNjA0MTgwODMyYTg2 MjVmMzIwHhcNMjUxMjE3MTYwMTIxWhcNMjUxMjE4MTYwMTIxWjAzMTEwLwYDVQQD Eyg2MDk1N2UzYzQ1MzEyNmVkOTNjNzlmMDFhZjZkMWQwZTRhNTE5MTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K0ukRLSH53zdk3nAn8u+WwxcsQJ jIbW8dYp/UXX6oLjcOQFiTyULhA0DABjxWkHHTyqomB9RFq/fPs8Fh/1VVXYu/MM yN+ojrU0cZk9TiWOsYyor3WKuTsSGEjSQFlHcsWf5FJUUtrm5cOiU+UEB6YjVZQD KzassTs6xH7wGJI85Cg+/JbS5hy3a4FdeItV7XtZUH4ERR8SQ+ABhfrIuKe1IRIs ecYIECicDfXHXo1g1hkX24PPBIhmeIQqNcFsp0VvPd8bnjfbTsb7shz5LttNhJKx dj83MT7w73q1LmxNVvKWmkhaAk2GQdzvyw79dqmZ3GJd/vsO101UmBJLlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCVfjxFMSbtk8efAa9tHQ5KUZFEMB8GA1UdIwQY MBaAFB5EJrdOjPb/3tt7BgQYCDKoYl8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGtRbXQwNk05dl9lMjNzR0JCZ0lNcWhpWHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81N2QwOGUtMWZiOC00ZmZjLThhNzEt YjQ3NDBhMjE1OGYwLzEvSGtRbXQwNk05dl9lMjNzR0JCZ0lNcWhpWHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81N2QwOGUtMWZiOC00ZmZjLThhNzEtYjQ3NDBhMjE1OGYw LzEvSGtRbXQwNk05dl9lMjNzR0JCZ0lNcWhpWHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpHXq8n0 cGwb6UY1hxk00BYZ6sNoVkcbmP6YGgKU6IO72hyAgvP2X8/JABdKaR/33vEIYe9H ny+KdTgJpSahmaelOZpnnLkKbbV4aPT/vDdWp/1x1ehg47oI0p4MExDDxS3YHZUG fMxPs+fealec7LAblCYXmdx3Nno4TasCh6BgE2PQ3E0vKyTObH8MUViBwARopKEx eoMGRNsxHBsBqj1VRbFe3e4YssUpgFw5t3ssIib1hUdeHoGP+9XnlhspL43+A+Z7 9SEZaOyp1cOR5sDB8qE/v0jTg8wMOgsOJictrxB4VZ7b037nZV8m4MEwhgmeDSyb taybopv5htn6yQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:47:05 2025 by rpki-client