This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft File: HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json) Hash identifier: bkhbQIWd62j25251KC/TZ94AJB6M77cZ6Kg2ov3wIZU= Subject key identifier: 61:A8:36:0F:D6:56:4B:4C:5F:44:FC:A8:B7:4C:0A:17:95:18:23:94 Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9 Certificate issuer: /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9 Certificate serial: 019AF4652ACB2CFDB59811BA90164F0F4682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft Manifest number: 0C88 Signing time: Sat 06 Dec 2025 16:01:02 +0000 Manifest this update: Sat 06 Dec 2025 16:01:02 +0000 Manifest next update: Sun 07 Dec 2025 16:01:02 +0000 Files and hashes: 1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: WA3gbrindIn5knPENC5XrYxzo6c4T8uxrwT9KctojDc=) 2: ZGoOUwMopHkREW85RzSsR457AEU.roa (hash: ll6YKs1Lb4wcNMvOVUUEMK6peyuIPU/LPfVQcksc3+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:2a:cb:2c:fd:b5:98:11:ba:90:16:4f:0f:46:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9 Validity Not Before: Dec 6 16:01:02 2025 GMT Not After : Dec 7 16:01:02 2025 GMT Subject: CN=61a8360fd6564b4c5f44fca8b74c0a1795182394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:08:fb:9f:06:4e:94:fd:c6:b3:f0:dd:b3: 23:4e:2e:2f:65:37:20:06:f7:35:5f:50:1f:d2:30: 37:cb:11:e8:06:3e:50:1f:da:0e:1a:e9:6a:0f:8e: b1:5c:da:54:c7:17:a1:ae:46:9d:1a:b8:d6:5f:3f: 11:be:5e:ea:69:ff:03:ec:91:3d:e3:db:da:49:1e: ad:ae:6e:3b:bd:9e:40:db:ec:c9:30:ca:c8:91:61: 1e:92:b0:be:0b:e4:b1:3d:a2:5c:46:09:1a:d2:dc: 65:eb:78:ac:a3:ef:f2:14:52:51:c4:9c:23:cd:7e: 01:ba:03:f4:87:3b:de:47:23:d3:90:22:74:56:e2: c7:19:48:0e:df:d2:74:50:e8:d2:58:ff:0c:ea:2b: bb:22:7a:5a:23:f6:9e:2c:00:47:5a:e9:1b:9c:c5: 72:96:12:a3:8c:3a:2f:e8:73:cc:5c:14:93:d4:5b: ca:76:ea:4a:84:90:83:81:c2:2d:72:45:6c:95:94: 3f:09:fc:03:a1:25:ad:e6:e3:9a:88:db:c1:cd:84: 55:c0:bc:2a:31:e1:f3:04:0b:8b:11:5a:23:5a:9f: 99:94:ae:2b:c2:93:70:29:a3:6e:fe:58:07:2e:21: f9:98:6d:c7:b9:d4:9a:cb:77:da:96:df:16:11:d9: d2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A8:36:0F:D6:56:4B:4C:5F:44:FC:A8:B7:4C:0A:17:95:18:23:94 X509v3 Authority Key Identifier: keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c4:8d:50:84:61:65:eb:5a:5d:c5:fd:24:06:88:1e:13:9d: 96:9e:af:34:8e:11:cb:e8:0c:34:19:13:16:d4:99:97:43:a2: 50:c4:60:a8:a9:d7:bb:4f:33:ce:a6:46:c0:4a:76:52:f3:6c: 8b:3d:67:6a:e9:90:c9:dc:29:1a:ae:22:09:32:33:c4:f9:77: a1:f5:00:a0:e6:08:d2:8f:6f:0d:dd:f2:c5:10:40:91:d4:02: 0c:d9:35:14:e1:72:52:03:55:a7:e4:e2:a1:ce:ac:de:1d:11: a8:21:9a:27:ac:02:04:24:8a:a7:e2:12:f9:42:bc:fc:ed:06: 0e:91:ab:ca:d3:d7:df:45:a3:9c:e4:2a:50:19:b6:05:8a:ba: b0:9d:f6:05:b8:78:a7:5b:9e:20:f3:55:4f:97:e5:96:08:a5: 2a:3d:89:fd:af:e2:78:60:43:af:9a:22:16:1a:f3:97:ac:e1: de:4a:07:a9:3c:32:26:6c:d9:bd:b0:c5:0a:bf:21:69:84:6d: 25:a4:2f:50:bb:a6:ef:de:3e:19:a6:80:26:59:c0:2a:a4:2e: 35:d3:2d:f4:7b:23:f3:ae:54:77:54:37:05:ab:c9:f5:71:17: ac:65:75:b6:55:35:ec:29:57:98:b2:0a:14:a5:97:82:71:14: 7a:de:1a:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZSrLLP21mBG6kBZPD0aCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMmI1MGRhZWYzYTBjYmRiNzJiMjNjYTNkYmJlZmMxNTcz NTgzZjkwHhcNMjUxMjA2MTYwMTAyWhcNMjUxMjA3MTYwMTAyWjAzMTEwLwYDVQQD Eyg2MWE4MzYwZmQ2NTY0YjRjNWY0NGZjYThiNzRjMGExNzk1MTgyMzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr10I+58GTpT9xrPw3bMjTi4vZTcg Bvc1X1Af0jA3yxHoBj5QH9oOGulqD46xXNpUxxehrkadGrjWXz8Rvl7qaf8D7JE9 49vaSR6trm47vZ5A2+zJMMrIkWEekrC+C+SxPaJcRgka0txl63iso+/yFFJRxJwj zX4BugP0hzveRyPTkCJ0VuLHGUgO39J0UOjSWP8M6iu7InpaI/aeLABHWukbnMVy lhKjjDov6HPMXBST1FvKdupKhJCDgcItckVslZQ/CfwDoSWt5uOaiNvBzYRVwLwq MeHzBAuLEVojWp+ZlK4rwpNwKaNu/lgHLiH5mG3HudSay3falt8WEdnSfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGoNg/WVktMX0T8qLdMCheVGCOUMB8GA1UdIwQY MBaAFBwrUNrvOgy9tysjyj2778FXNYP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODIt YWI0MjYzZWQ0MGRlLzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODItYWI0MjYzZWQ0MGRl LzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcSNUIRh ZetaXcX9JAaIHhOdlp6vNI4Ry+gMNBkTFtSZl0OiUMRgqKnXu08zzqZGwEp2UvNs iz1naumQydwpGq4iCTIzxPl3ofUAoOYI0o9vDd3yxRBAkdQCDNk1FOFyUgNVp+Ti oc6s3h0RqCGaJ6wCBCSKp+IS+UK8/O0GDpGrytPX30WjnOQqUBm2BYq6sJ32Bbh4 p1ueIPNVT5fllgilKj2J/a/ieGBDr5oiFhrzl6zh3koHqTwyJmzZvbDFCr8haYRt JaQvULum794+GaaAJlnAKqQuNdMt9Hsj865Ud1Q3BavJ9XEXrGV1tlU17ClXmLIK FKWXgnEUet4aRw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:20:00 2025 by rpki-client