This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json) Hash identifier: 2w9vYxAgXvKX103eo70fobkjZ1M3oCOnH8Y+lDRjy5w= Subject key identifier: F4:80:20:B9:1D:2D:3E:91:6F:F8:3E:BF:4B:91:95:A4:2C:FB:79:0C Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa Certificate serial: 019AF2ADB0D6EF9344738B815F0A0B8D2BF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft Manifest number: 0267 Signing time: Sat 06 Dec 2025 08:01:00 +0000 Manifest this update: Sat 06 Dec 2025 08:01:00 +0000 Manifest next update: Sun 07 Dec 2025 08:01:00 +0000 Files and hashes: 1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: jCMGvun5mgRZt2sQFkp6xgCjszVjHUMhsNGkQjBp6E0=) 2: _Nik0ILMWiY-Lkg3eSFYx1wzEfA.roa (hash: QByoOOal5rCcpZU9uENOAkBjvkiFCQ20AYgJc/azBtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b0:d6:ef:93:44:73:8b:81:5f:0a:0b:8d:2b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa Validity Not Before: Dec 6 08:01:00 2025 GMT Not After : Dec 7 08:01:00 2025 GMT Subject: CN=f48020b91d2d3e916ff83ebf4b9195a42cfb790c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:af:13:b8:67:a9:a6:57:7b:63:5d:85:fa: 5a:44:47:31:85:09:05:43:f3:0a:7d:5c:90:fe:b0: e3:88:9d:b5:6e:ba:f6:71:36:75:83:27:11:6d:c9: c9:0a:2c:45:9a:51:a6:95:a9:41:cc:10:f1:2d:db: 0b:0d:ae:04:db:f5:52:47:48:4e:6c:16:1d:61:32: 19:76:0a:5a:b5:b7:c2:39:4e:a2:7c:cc:60:b7:68: 27:3d:5d:54:6c:dd:b7:82:d1:e4:f6:76:4d:30:75: 94:47:4e:17:80:f2:4d:8d:d5:bb:45:d6:d9:81:9c: 63:11:57:84:35:ff:dc:12:08:9f:e2:cd:aa:92:c5: 1c:55:f6:5a:00:a8:6a:79:fb:7b:de:d1:fb:4b:56: ea:a1:43:15:4e:30:f5:ba:bb:a7:34:c5:32:d0:fd: 2d:55:45:83:d6:ab:72:2c:fb:67:23:89:4c:2f:c0: ad:1e:f1:62:75:87:39:e8:26:5f:3e:df:26:f9:47: 00:d0:f3:64:58:33:35:ee:57:06:e7:83:00:d2:0b: 18:19:f4:a9:c2:3e:88:b0:c9:8f:ee:f4:7c:ea:d3: 5b:9a:27:d8:7e:10:90:39:6d:e5:1b:66:38:ee:e8: 1d:64:ac:7e:4a:0f:ff:f2:bf:09:93:37:63:0c:93: ba:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:80:20:B9:1D:2D:3E:91:6F:F8:3E:BF:4B:91:95:A4:2C:FB:79:0C X509v3 Authority Key Identifier: keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f1:55:64:0a:3a:7b:36:ca:a7:42:01:e8:e0:a4:ff:3f:00: bd:b1:63:58:5a:0d:bc:15:f3:4d:00:d3:6d:e3:21:17:b0:1f: 2d:78:cb:c9:2c:bd:04:4e:45:cc:c0:29:95:e5:f5:59:df:a2: 0c:e5:70:72:13:a6:18:27:b9:f0:aa:49:22:34:da:2a:d2:e8: 90:f8:47:74:1c:8e:19:07:46:ff:39:72:79:d6:3e:d1:04:4f: bb:0b:e2:eb:01:0f:6f:de:e9:cb:6c:32:b1:af:9d:6a:29:76: 5a:96:cf:9a:8a:64:f1:b7:f0:ad:5c:f7:da:13:e5:2b:55:3b: 5e:ea:90:d8:86:bf:f6:cc:d0:b6:1a:aa:12:76:a6:ce:74:10: f5:8c:d8:e2:e4:fd:92:45:12:7f:1d:16:77:eb:8d:69:26:5b: 7e:43:9f:4d:e8:b8:84:6f:9e:66:39:df:bf:60:64:a4:dd:5b: de:e7:56:8e:7e:2b:44:e9:eb:f1:5a:06:a8:d9:48:62:50:75: 10:e0:33:97:a8:09:3a:0e:17:11:7a:11:f9:a4:4b:9f:95:05: c7:45:50:ea:aa:cd:51:36:bf:0f:5d:f9:3f:88:75:85:49:05: 5b:74:e2:7a:d9:5a:07:01:a3:f4:8c:ee:40:b6:ca:9b:7d:cb: 38:13:8e:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbDW75NEc4uBXwoLjSvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZDcwODhkOWRhMjIxZjA1NjVlYjE3ODQ0MzYwMDE3MWU3 OTc3YWEwHhcNMjUxMjA2MDgwMTAwWhcNMjUxMjA3MDgwMTAwWjAzMTEwLwYDVQQD EyhmNDgwMjBiOTFkMmQzZTkxNmZmODNlYmY0YjkxOTVhNDJjZmI3OTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugmvE7hnqaZXe2NdhfpaREcxhQkF Q/MKfVyQ/rDjiJ21brr2cTZ1gycRbcnJCixFmlGmlalBzBDxLdsLDa4E2/VSR0hO bBYdYTIZdgpatbfCOU6ifMxgt2gnPV1UbN23gtHk9nZNMHWUR04XgPJNjdW7RdbZ gZxjEVeENf/cEgif4s2qksUcVfZaAKhqeft73tH7S1bqoUMVTjD1urunNMUy0P0t VUWD1qtyLPtnI4lML8CtHvFidYc56CZfPt8m+UcA0PNkWDM17lcG54MA0gsYGfSp wj6IsMmP7vR86tNbmifYfhCQOW3lG2Y47ugdZKx+Sg//8r8JkzdjDJO62wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSAILkdLT6Rb/g+v0uRlaQs+3kMMB8GA1UdIwQY MBaAFB3XCI2doiHwVl6xeEQ2ABceeXeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Nzk5NjgtMTFlOS00OWE1LWIxZDEt ZTBiZTE0OGM0MDk3LzEvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS82Nzk5NjgtMTFlOS00OWE1LWIxZDEtZTBiZTE0OGM0MDk3 LzEvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfFVZAo6 ezbKp0IB6OCk/z8AvbFjWFoNvBXzTQDTbeMhF7AfLXjLySy9BE5FzMApleX1Wd+i DOVwchOmGCe58KpJIjTaKtLokPhHdByOGQdG/zlyedY+0QRPuwvi6wEPb97py2wy sa+dail2WpbPmopk8bfwrVz32hPlK1U7XuqQ2Ia/9szQthqqEnamznQQ9YzY4uT9 kkUSfx0Wd+uNaSZbfkOfTei4hG+eZjnfv2BkpN1b3udWjn4rROnr8VoGqNlIYlB1 EOAzl6gJOg4XEXoR+aRLn5UFx0VQ6qrNUTa/D135P4h1hUkFW3TietlaBwGj9Izu QLbKm33LOBOOXA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:22:19 2025 by rpki-client