This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft File: HCF8gIa-KdUPg8j9j8kXsAnePIE.mft (raw, json) Hash identifier: 0mdHMzz5IhEX7RD4uFWwrnV5fRX/rsCE822cnGahrCg= Subject key identifier: 9B:AF:6B:03:2A:13:CC:B0:40:4C:AE:37:76:12:97:0D:61:3B:DB:7D Authority key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81 Certificate issuer: /CN=1c217c8086be29d50f83c8fd8fc917b009de3c81 Certificate serial: 019AF3891108F924C83F22B0A535C7120F06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft Manifest number: 0288 Signing time: Sat 06 Dec 2025 12:00:37 +0000 Manifest this update: Sat 06 Dec 2025 12:00:37 +0000 Manifest next update: Sun 07 Dec 2025 12:00:37 +0000 Files and hashes: 1: 0Ai9U12mBfKyiWOFnwxyJgomY7A.roa (hash: w93SlMAnXeNUWu2aTB2M64qmn0qVbSFDgVMubrcribE=) 2: HCF8gIa-KdUPg8j9j8kXsAnePIE.crl (hash: Ir5CsxYU4lIT2ioOwHERk4TrJ5pZZ6tHMOcOJrrWQ3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:11:08:f9:24:c8:3f:22:b0:a5:35:c7:12:0f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81 Validity Not Before: Dec 6 12:00:37 2025 GMT Not After : Dec 7 12:00:37 2025 GMT Subject: CN=9baf6b032a13ccb0404cae377612970d613bdb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:78:0f:b0:6b:2d:21:4e:be:69:7e:6c:83:53: a3:65:e4:f7:7b:cf:2c:81:bb:47:a6:3c:74:cc:26: 56:a9:a1:26:f3:77:8f:40:0c:57:58:9a:19:98:86: 59:f4:92:2b:f9:e2:50:9d:7f:15:38:37:e3:06:cb: 28:86:b2:d6:78:02:fb:a6:80:f4:5b:4e:ea:39:80: ce:3d:0d:46:54:18:c4:a9:27:ce:d8:4a:17:45:27: c7:6c:9d:64:ab:ce:97:03:fc:17:7b:fc:30:a6:27: 69:47:16:7c:dd:df:06:88:de:31:df:fd:59:17:35: da:8c:12:fa:59:a4:e4:23:86:6a:a9:4f:f2:fa:bd: cc:49:10:c8:51:13:66:45:ae:3e:b5:9f:29:02:e4: e7:e4:67:59:d2:31:e6:17:d1:15:a2:40:d9:14:8e: 82:a5:ec:61:ff:84:94:39:69:24:6b:ad:af:92:32: 20:97:f4:47:18:40:a8:7d:22:6d:4e:07:bf:0b:22: a9:01:dd:23:47:b8:3e:19:ae:71:94:ae:ca:f5:fb: 4f:70:69:e0:90:53:ec:75:4a:6a:56:c3:2a:6e:e3: f0:63:6c:07:cc:ad:dc:4e:5b:ba:b0:82:80:f6:aa: 7d:a3:83:fb:2e:be:88:9e:7a:8f:1c:0b:eb:1c:76: de:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AF:6B:03:2A:13:CC:B0:40:4C:AE:37:76:12:97:0D:61:3B:DB:7D X509v3 Authority Key Identifier: keyid:1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:9c:e3:26:3e:6b:f7:2a:de:4b:ae:18:af:a7:63:dc:f7:42: b6:ec:ea:86:df:73:27:09:2a:10:23:70:81:ea:4d:ee:3c:f7: fd:9e:17:d9:e8:a2:29:7b:69:d3:0e:4f:b5:73:d4:f6:ed:63: b0:a6:b7:93:fb:b0:9a:92:70:21:8a:df:09:e0:72:71:38:4a: 60:b8:82:e7:62:84:ee:96:af:c8:ed:59:ce:9b:92:b9:c6:68: ba:84:44:36:95:46:bd:f1:9f:1d:b7:67:ec:eb:df:24:1f:98: 5c:3f:de:03:96:65:61:e1:e5:3c:82:f5:22:5a:4f:3f:c5:db: 98:27:c7:69:35:0a:15:07:26:8e:a9:99:40:15:fb:de:bd:e8: 7c:a3:55:f3:61:f7:b3:50:f4:d1:9d:1e:c7:86:c3:c6:dd:29: 4f:d7:d2:c0:d9:3c:9b:3e:e4:17:65:9d:d5:2f:5d:35:1a:cc: 61:5c:48:07:95:7d:e6:24:a2:40:47:42:e2:ef:a2:75:01:f2: b8:ed:cc:5f:de:51:5e:78:7b:27:4e:40:83:52:90:d9:7a:2c: e1:d9:7e:27:55:3c:4a:26:2a:83:74:3c:01:98:e2:f3:83:22: d8:ac:ae:fb:97:7f:29:1c:d5:62:ee:d0:cf:fc:0d:66:25:f2: 9a:ff:ec:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziREI+STIPyKwpTXHEg8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjE3YzgwODZiZTI5ZDUwZjgzYzhmZDhmYzkxN2IwMDlk ZTNjODEwHhcNMjUxMjA2MTIwMDM3WhcNMjUxMjA3MTIwMDM3WjAzMTEwLwYDVQQD Eyg5YmFmNmIwMzJhMTNjY2IwNDA0Y2FlMzc3NjEyOTcwZDYxM2JkYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHgPsGstIU6+aX5sg1OjZeT3e88s gbtHpjx0zCZWqaEm83ePQAxXWJoZmIZZ9JIr+eJQnX8VODfjBssohrLWeAL7poD0 W07qOYDOPQ1GVBjEqSfO2EoXRSfHbJ1kq86XA/wXe/wwpidpRxZ83d8GiN4x3/1Z FzXajBL6WaTkI4ZqqU/y+r3MSRDIURNmRa4+tZ8pAuTn5GdZ0jHmF9EVokDZFI6C pexh/4SUOWkka62vkjIgl/RHGECofSJtTge/CyKpAd0jR7g+Ga5xlK7K9ftPcGng kFPsdUpqVsMqbuPwY2wHzK3cTlu6sIKA9qp9o4P7Lr6InnqPHAvrHHbeRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuvawMqE8ywQEyuN3YSlw1hO9t9MB8GA1UdIwQY MBaAFBwhfICGvinVD4PI/Y/JF7AJ3jyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84NmJiMDQtMDlkZi00MjJhLWI1Zjkt ZjM0YjMxZDNiNDNjLzEvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC84NmJiMDQtMDlkZi00MjJhLWI1ZjktZjM0YjMxZDNiNDNj LzEvSENGOGdJYS1LZFVQZzhqOWo4a1hzQW5lUElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZzjJj5r 9yreS64Yr6dj3PdCtuzqht9zJwkqECNwgepN7jz3/Z4X2eiiKXtp0w5PtXPU9u1j sKa3k/uwmpJwIYrfCeBycThKYLiC52KE7pavyO1ZzpuSucZouoRENpVGvfGfHbdn 7OvfJB+YXD/eA5ZlYeHlPIL1IlpPP8XbmCfHaTUKFQcmjqmZQBX73r3ofKNV82H3 s1D00Z0ex4bDxt0pT9fSwNk8mz7kF2Wd1S9dNRrMYVxIB5V95iSiQEdC4u+idQHy uO3MX95RXnh7J05Ag1KQ2Xos4dl+J1U8SiYqg3Q8AZji84Mi2Kyu+5d/KRzVYu7Q z/wNZiXymv/s4g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:38 2025 by rpki-client