This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft File: HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft (raw, json) Hash identifier: p1aow4VdeDdmbqhHDc+7uDzSDD0euPH2pfhImvWAevs= Subject key identifier: 35:4D:12:E1:D8:9A:DE:49:14:EF:C7:AA:EA:32:C1:3A:A5:F5:5F:0E Authority key identifier: 1C:1C:75:4B:7A:5B:54:18:92:54:0D:24:AB:98:D3:15:37:97:45:74 Certificate issuer: /CN=1c1c754b7a5b541892540d24ab98d31537974574 Certificate serial: 019AF1D260E043C252314DAC67C4BF5A06AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:01:27 +0000 Manifest this update: Sat 06 Dec 2025 04:01:27 +0000 Manifest next update: Sun 07 Dec 2025 04:01:27 +0000 Files and hashes: 1: HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl (hash: G9iE8OINrYpuD+3wWOssLHi3k50yoAgyJ+udYo/sbRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:60:e0:43:c2:52:31:4d:ac:67:c4:bf:5a:06:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c1c754b7a5b541892540d24ab98d31537974574 Validity Not Before: Dec 6 04:01:27 2025 GMT Not After : Dec 7 04:01:27 2025 GMT Subject: CN=354d12e1d89ade4914efc7aaea32c13aa5f55f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:1b:3e:3a:95:61:dc:4a:50:b2:dc:cb:21: d7:0e:3a:21:c1:2f:44:b8:05:6a:0b:96:20:93:7f: 75:73:fa:d3:68:38:8a:67:ac:c9:eb:37:5f:79:55: 0e:0d:e5:df:b4:26:3f:34:9f:df:53:f3:f9:28:da: 69:25:69:98:4d:cd:7d:18:e6:18:d6:26:10:d2:8b: ef:12:cb:a3:e3:47:75:fe:61:82:3c:72:71:7d:9d: 88:c8:57:30:53:72:48:ab:a1:45:be:0e:ae:c5:60: 5f:c6:ae:eb:a9:8d:49:de:03:06:6c:9a:4a:b8:78: bf:aa:e1:26:3d:27:20:e1:1e:e2:77:b0:5c:a7:e1: aa:26:57:5e:8e:7b:c7:f1:a5:86:99:01:e1:87:dd: 04:a3:fb:3a:39:e2:0c:98:9e:36:0d:7b:fb:71:86: cd:eb:8e:b9:3c:ad:ca:ae:f7:b4:12:2e:8a:32:74: 89:07:79:f5:ce:a6:d2:a0:7c:95:98:f2:cb:56:49: 58:ee:4c:14:6c:7b:ca:c0:20:b5:0a:75:87:71:c8: 69:03:32:16:cd:00:af:69:15:1e:9b:86:31:21:1c: 25:80:30:c9:db:c4:7c:44:33:73:c5:12:90:8d:ab: 9c:f8:22:00:a2:a3:ce:3d:19:96:5c:4e:1c:a4:92: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4D:12:E1:D8:9A:DE:49:14:EF:C7:AA:EA:32:C1:3A:A5:F5:5F:0E X509v3 Authority Key Identifier: keyid:1C:1C:75:4B:7A:5B:54:18:92:54:0D:24:AB:98:D3:15:37:97:45:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:fb:2d:a4:b2:7a:51:6d:dd:3a:9e:7f:6b:11:ea:77:ce:9d: 78:8a:04:48:a9:6d:89:0a:ea:fa:af:5d:f6:d0:a4:44:02:aa: a7:83:3f:8c:b7:ee:f7:9d:ec:c8:80:d8:3b:b7:df:97:aa:6a: 4b:76:e3:15:25:99:67:c0:36:78:6a:7e:eb:8d:92:2a:32:06: ea:d6:74:f3:8d:bf:49:04:f5:a0:73:66:52:40:e9:52:c9:b7: 45:39:74:2b:e6:9e:c5:cd:e8:e8:c8:5b:71:56:b1:68:69:82: a0:99:dc:40:95:12:af:c1:1e:ed:18:87:86:18:d0:54:1d:50: 6a:f8:0f:af:0c:a5:b1:fd:1a:fc:d5:f6:67:7a:6b:3b:3a:0f: 66:0c:ab:b0:de:c5:c6:83:03:2b:9f:aa:1f:4a:8e:a0:96:85: 30:dd:6b:80:85:74:90:bf:4d:55:b8:af:90:b5:f5:7d:6f:5d: 5d:5f:90:18:ec:a4:df:d6:6d:15:94:73:fb:97:1f:a2:75:a2: 81:14:10:6d:28:93:17:58:1c:8b:8c:1c:92:71:e7:c6:bc:fd: 64:4d:e7:94:3d:9d:3c:da:40:70:34:21:08:02:3a:45:02:f8: 40:a0:f9:b3:af:28:57:71:21:e6:f3:05:c4:8b:34:d4:ab:cb: f4:a7:16:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mDgQ8JSMU2sZ8S/WgasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMWM3NTRiN2E1YjU0MTg5MjU0MGQyNGFiOThkMzE1Mzc5 NzQ1NzQwHhcNMjUxMjA2MDQwMTI3WhcNMjUxMjA3MDQwMTI3WjAzMTEwLwYDVQQD EygzNTRkMTJlMWQ4OWFkZTQ5MTRlZmM3YWFlYTMyYzEzYWE1ZjU1ZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjkbPjqVYdxKULLcyyHXDjohwS9E uAVqC5Ygk391c/rTaDiKZ6zJ6zdfeVUODeXftCY/NJ/fU/P5KNppJWmYTc19GOYY 1iYQ0ovvEsuj40d1/mGCPHJxfZ2IyFcwU3JIq6FFvg6uxWBfxq7rqY1J3gMGbJpK uHi/quEmPScg4R7id7Bcp+GqJldejnvH8aWGmQHhh90Eo/s6OeIMmJ42DXv7cYbN 6465PK3Krve0Ei6KMnSJB3n1zqbSoHyVmPLLVklY7kwUbHvKwCC1CnWHcchpAzIW zQCvaRUem4YxIRwlgDDJ28R8RDNzxRKQjauc+CIAoqPOPRmWXE4cpJILmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVNEuHYmt5JFO/HquoywTql9V8OMB8GA1UdIwQY MBaAFBwcdUt6W1QYklQNJKuY0xU3l0V0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEJ4MVMzcGJWQmlTVkEwa3E1alRGVGVYUlhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8zNmM4MDgtZGQ4Ny00OGY4LTk3ZTAt YWEwZjM1ODI0YTI3LzEvSEJ4MVMzcGJWQmlTVkEwa3E1alRGVGVYUlhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8zNmM4MDgtZGQ4Ny00OGY4LTk3ZTAtYWEwZjM1ODI0YTI3 LzEvSEJ4MVMzcGJWQmlTVkEwa3E1alRGVGVYUlhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/stpLJ6 UW3dOp5/axHqd86deIoESKltiQrq+q9d9tCkRAKqp4M/jLfu953syIDYO7ffl6pq S3bjFSWZZ8A2eGp+642SKjIG6tZ0842/SQT1oHNmUkDpUsm3RTl0K+aexc3o6Mhb cVaxaGmCoJncQJUSr8Ee7RiHhhjQVB1QavgPrwylsf0a/NX2Z3prOzoPZgyrsN7F xoMDK5+qH0qOoJaFMN1rgIV0kL9NVbivkLX1fW9dXV+QGOyk39ZtFZRz+5cfonWi gRQQbSiTF1gci4wcknHnxrz9ZE3nlD2dPNpAcDQhCAI6RQL4QKD5s68oV3Eh5vMF xIs01KvL9KcWRg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:51 2025 by rpki-client