This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft File: HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json) Hash identifier: f/IJ/oP3VqqkAfY0pn90Dv8kU9GDkR89Ju4NjA3C5ZU= Subject key identifier: 51:83:2A:FA:3C:D6:90:5E:B0:F2:7B:66:9F:1D:0A:BD:27:45:82:1C Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE Certificate issuer: /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace Certificate serial: 019AF0F5CECBB2206D38208E1F4603CC64E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft Manifest number: 34 Signing time: Sat 06 Dec 2025 00:00:32 +0000 Manifest this update: Sat 06 Dec 2025 00:00:32 +0000 Manifest next update: Sun 07 Dec 2025 00:00:32 +0000 Files and hashes: 1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: S0p0o7qMEzflVtIk36iq6KGPPhfATTZnG70UXV4PBj8=) 2: Tf9luNXyEq9QxysMyYE_MI2T-Dw.roa (hash: JCTZRaYwg2Dc/NrGs0vNosIbeSst/kpqGq9Ss3robz0=) 3: unFfRVZsvRvkohGxQoSgq95x_UY.roa (hash: tSXKguvWUmVfGHfR9KLHr2lCBC0TGZziW3nPkjH31gQ=) 4: vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa (hash: TYWXQ81PwJFaPM/v0IBTjfWfvW7fjHxqu9IT+A6xBqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:ce:cb:b2:20:6d:38:20:8e:1f:46:03:cc:64:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace Validity Not Before: Dec 6 00:00:32 2025 GMT Not After : Dec 7 00:00:32 2025 GMT Subject: CN=51832afa3cd6905eb0f27b669f1d0abd2745821c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ed:18:ec:5d:22:95:87:a4:7f:3e:7d:bb:18: ec:14:cf:dc:99:5f:41:d5:64:93:40:b2:c5:d8:2f: 6e:32:88:a2:1e:00:72:9d:07:5b:80:08:8b:62:5f: fc:35:e1:09:4a:89:b6:21:d6:3c:7c:cb:00:8e:4e: 79:8f:0c:56:e3:a0:f8:d2:78:f8:7e:8e:dc:3b:6d: d1:6c:a0:ec:bf:25:41:a8:02:63:0b:06:20:1d:c8: c1:f1:d1:04:fa:86:2e:bf:c7:f4:92:e9:7a:31:9c: 9f:92:23:df:1b:fa:68:ad:07:16:25:fc:98:e2:06: e4:e0:d9:a6:68:d7:05:bc:ae:ec:fe:2c:eb:a6:03: 65:55:9a:90:07:53:e2:e0:3c:eb:70:39:e5:63:b9: 00:4d:a0:21:18:8a:ba:9e:39:54:61:14:cb:a8:a0: b1:bf:11:57:bb:15:6c:8a:83:7b:b8:4d:38:71:24: 34:af:08:21:26:38:81:f7:c5:fd:1d:d3:64:13:aa: b0:07:75:76:9e:ff:4f:14:19:9e:b1:ee:21:67:eb: 62:b0:64:d2:df:09:24:df:a3:15:c2:36:d0:54:ef: bb:c3:61:76:2a:d4:ea:5b:0b:30:44:5e:fd:37:1a: d6:2b:11:49:fb:55:9f:6f:7d:e7:70:f3:7a:99:6c: 7a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:83:2A:FA:3C:D6:90:5E:B0:F2:7B:66:9F:1D:0A:BD:27:45:82:1C X509v3 Authority Key Identifier: keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:f1:2d:63:f0:be:fb:bf:18:6e:28:36:7d:24:5f:21:1b:5d: 93:aa:72:ec:5f:bf:2e:0a:46:7f:62:b8:a7:43:de:b2:e7:1c: c8:cd:46:9e:e6:1b:86:52:f7:79:a2:53:72:3a:3d:30:23:d5: 9a:d3:ff:f2:90:d2:90:48:d2:0e:92:71:5f:b6:d5:5e:24:36: fb:59:26:1f:58:b1:3f:61:3f:7d:fe:df:ec:39:60:0f:63:14: 75:a2:91:42:b0:2e:b0:bc:38:a9:a5:57:a2:7e:28:97:53:4b: 0a:44:e5:f7:bd:80:9a:71:2b:a6:3e:1e:6a:53:d3:4b:2a:c5: 57:7f:e7:0b:20:35:2a:95:bc:8b:64:ce:66:0c:d9:3c:ab:e9: 3e:99:b6:07:5c:0f:fb:03:6f:2f:7c:54:74:56:84:8c:03:56: ea:14:c6:92:29:36:3b:e5:9a:de:d6:2e:a7:49:a4:f9:16:d4: ce:3e:97:27:f7:b4:60:83:9d:55:b9:40:80:f0:de:30:eb:a3: 27:7a:39:1b:68:8f:2a:23:8b:28:de:99:b2:fd:a9:c5:97:cd: 43:6d:2a:87:64:dc:63:f1:7a:64:86:ba:45:f3:4f:b1:d3:a0: 9c:c9:7b:2b:73:d2:13:5d:1d:18:4a:79:aa:44:07:f9:bf:ca: 54:e3:ab:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9c7LsiBtOCCOH0YDzGTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDRhZjI4ZjhmN2FhODU4ZTI3ZDhlMmM3NjExNGM2ZmY0 OWJhY2UwHhcNMjUxMjA2MDAwMDMyWhcNMjUxMjA3MDAwMDMyWjAzMTEwLwYDVQQD Eyg1MTgzMmFmYTNjZDY5MDVlYjBmMjdiNjY5ZjFkMGFiZDI3NDU4MjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+0Y7F0ilYekfz59uxjsFM/cmV9B 1WSTQLLF2C9uMoiiHgBynQdbgAiLYl/8NeEJSom2IdY8fMsAjk55jwxW46D40nj4 fo7cO23RbKDsvyVBqAJjCwYgHcjB8dEE+oYuv8f0kul6MZyfkiPfG/porQcWJfyY 4gbk4NmmaNcFvK7s/izrpgNlVZqQB1Pi4DzrcDnlY7kATaAhGIq6njlUYRTLqKCx vxFXuxVsioN7uE04cSQ0rwghJjiB98X9HdNkE6qwB3V2nv9PFBmese4hZ+tisGTS 3wkk36MVwjbQVO+7w2F2KtTqWwswRF79NxrWKxFJ+1Wfb33ncPN6mWx6uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGDKvo81pBesPJ7Zp8dCr0nRYIcMB8GA1UdIwQY MBaAFB0Eryj496qFjifY4sdhFMb/SbrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUt NzBiNGUwYjNmYzllLzEvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUtNzBiNGUwYjNmYzll LzEvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2PEtY/C+ +78Ybig2fSRfIRtdk6py7F+/LgpGf2K4p0PesuccyM1GnuYbhlL3eaJTcjo9MCPV mtP/8pDSkEjSDpJxX7bVXiQ2+1kmH1ixP2E/ff7f7DlgD2MUdaKRQrAusLw4qaVX on4ol1NLCkTl972AmnErpj4ealPTSyrFV3/nCyA1KpW8i2TOZgzZPKvpPpm2B1wP +wNvL3xUdFaEjANW6hTGkik2O+Wa3tYup0mk+RbUzj6XJ/e0YIOdVblAgPDeMOuj J3o5G2iPKiOLKN6Zsv2pxZfNQ20qh2TcY/F6ZIa6RfNPsdOgnMl7K3PSE10dGEp5 qkQH+b/KVOOrxw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:45:02 2025 by rpki-client