This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json) Hash identifier: Ij8aNYH07iA0efJ1W9ikkXEqSYVHVcPQky+lxX8aBLE= Subject key identifier: 84:01:A5:39:7F:3B:FE:87:CC:96:1A:08:F4:38:99:91:46:9F:16:AC Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72 Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72 Certificate serial: 019AF0BF6E7681E9220AE68468D035F9F0A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft Manifest number: 06D1 Signing time: Fri 05 Dec 2025 23:01:08 +0000 Manifest this update: Fri 05 Dec 2025 23:01:08 +0000 Manifest next update: Sat 06 Dec 2025 23:01:08 +0000 Files and hashes: 1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=) 2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: YVisPM0kWFcGODSkO6mnqxXPn3RVVFR5TSVJKI0ePpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6e:76:81:e9:22:0a:e6:84:68:d0:35:f9:f0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72 Validity Not Before: Dec 5 23:01:08 2025 GMT Not After : Dec 6 23:01:08 2025 GMT Subject: CN=8401a5397f3bfe87cc961a08f4389991469f16ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6a:41:f6:f6:af:6d:ad:30:e5:45:5a:7b:67: 74:09:e6:c4:e2:59:be:ac:35:29:8b:55:82:bd:87: 49:98:16:05:65:53:38:1c:a0:a5:01:3f:d0:4a:cc: ea:06:c3:a0:37:24:de:27:55:6d:ef:23:65:5e:b8: f0:4a:ea:aa:e9:bc:44:13:28:3f:fd:40:6a:34:5d: fa:66:93:e6:a8:37:63:39:97:c2:6e:2b:1e:00:7c: 05:a0:ef:0b:7c:e4:15:7d:d6:64:a6:2d:e8:5c:14: 7a:05:af:cb:c2:08:4f:73:eb:01:42:fc:04:3d:ff: 40:92:ca:23:50:6d:3c:51:25:ea:c8:c5:3e:29:10: d4:f1:d9:dd:a2:e0:c7:35:29:4a:7f:cd:5c:dc:c1: 86:90:0c:43:cf:30:1d:bf:5d:f8:52:7a:c3:46:1d: 2f:c9:5f:af:2f:67:d2:c7:48:34:dd:6f:5c:d3:6f: 3f:fb:96:60:c4:ac:0f:04:d2:68:95:d6:ff:ed:78: 79:5b:77:8f:fe:f4:61:d1:72:c5:38:db:88:ff:ba: 3f:55:be:9f:76:da:70:b7:d8:2e:7f:31:63:f2:67: a0:12:4f:69:2e:f8:85:cc:ea:e6:d2:53:aa:08:73: 9b:12:f8:4b:24:35:1e:89:d7:72:b1:67:7a:19:f3: 09:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:01:A5:39:7F:3B:FE:87:CC:96:1A:08:F4:38:99:91:46:9F:16:AC X509v3 Authority Key Identifier: keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5a:aa:bd:f8:80:db:93:d8:9d:11:6c:da:ca:6c:a3:6e:76: 5e:45:3e:9d:fa:c0:5c:3f:7d:e8:7c:68:d9:eb:e6:3d:68:32: 20:89:54:15:d9:6a:12:82:0e:18:fa:4a:f6:6d:76:1a:b8:39: 31:c4:99:80:2a:c1:9d:64:c5:41:43:cf:9a:81:69:70:b3:fa: b6:1e:d2:c1:7b:20:32:59:37:e3:78:ca:85:18:c9:6d:a6:7c: 5b:a8:c9:a9:b2:b1:0f:9a:b9:e8:e7:08:3a:e2:9b:d6:da:ec: 47:52:81:b2:89:d6:93:a9:ff:85:69:3b:d9:f7:ac:17:98:a1: db:71:74:40:50:bb:bf:0f:3c:ac:fa:e3:15:7d:7b:14:69:ce: 65:be:f1:63:30:d0:46:72:3a:26:f6:32:ee:4d:d8:b5:39:00: ec:c9:80:2e:2b:7b:26:ca:d9:d0:5e:cc:df:0b:a9:69:11:6c: da:84:60:ee:04:66:a0:2f:a3:41:b0:11:bd:38:7b:c9:81:fe: 4c:d7:27:ab:08:ad:e0:c0:91:de:a6:07:15:55:aa:47:b0:25: 6e:1b:79:d0:97:02:2b:fc:05:38:c3:8a:02:b4:f0:90:8d:02: a7:71:df:a8:74:ab:91:c1:cc:19:4f:4b:35:ed:86:c5:db:79: aa:f7:dd:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv252gekiCuaEaNA1+fCoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjcxNmVmMDlmYWU0OTBjYzdjZGJkMzYwOTRkYjVmM2Qw YTFjNzIwHhcNMjUxMjA1MjMwMTA4WhcNMjUxMjA2MjMwMTA4WjAzMTEwLwYDVQQD Eyg4NDAxYTUzOTdmM2JmZTg3Y2M5NjFhMDhmNDM4OTk5MTQ2OWYxNmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2pB9vavba0w5UVae2d0CebE4lm+ rDUpi1WCvYdJmBYFZVM4HKClAT/QSszqBsOgNyTeJ1Vt7yNlXrjwSuqq6bxEEyg/ /UBqNF36ZpPmqDdjOZfCbiseAHwFoO8LfOQVfdZkpi3oXBR6Ba/LwghPc+sBQvwE Pf9AksojUG08USXqyMU+KRDU8dndouDHNSlKf81c3MGGkAxDzzAdv134UnrDRh0v yV+vL2fSx0g03W9c028/+5ZgxKwPBNJoldb/7Xh5W3eP/vRh0XLFONuI/7o/Vb6f dtpwt9gufzFj8megEk9pLviFzOrm0lOqCHObEvhLJDUeiddysWd6GfMJrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQBpTl/O/6HzJYaCPQ4mZFGnxasMB8GA1UdIwQY MBaAFBwnFu8J+uSQzHzb02CU2189ChxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82YTdlYTItYWJmZC00NGQyLWE3YWUt MTRkMWFjMzRhNWYyLzEvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82YTdlYTItYWJmZC00NGQyLWE3YWUtMTRkMWFjMzRhNWYy LzEvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFqqvfiA 25PYnRFs2spso252XkU+nfrAXD996Hxo2evmPWgyIIlUFdlqEoIOGPpK9m12Grg5 McSZgCrBnWTFQUPPmoFpcLP6th7SwXsgMlk343jKhRjJbaZ8W6jJqbKxD5q56OcI OuKb1trsR1KBsonWk6n/hWk72fesF5ih23F0QFC7vw88rPrjFX17FGnOZb7xYzDQ RnI6JvYy7k3YtTkA7MmALit7JsrZ0F7M3wupaRFs2oRg7gRmoC+jQbARvTh7yYH+ TNcnqwit4MCR3qYHFVWqR7Albht50JcCK/wFOMOKArTwkI0Cp3HfqHSrkcHMGU9L Ne2Gxdt5qvfdPw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:44:44 2025 by rpki-client