This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json) Hash identifier: hvwe87YXVBL8Uaye1TZECud1aqCOymzmwcwEOCNLBbQ= Subject key identifier: 0D:D2:40:A6:62:E9:DA:5C:D1:FB:B4:F5:F5:B2:AD:DC:58:04:E4:D9 Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54 Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54 Certificate serial: 019AF0BF4C85D4B7EC27A109B6BA24FC8CC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 23:00:59 +0000 Manifest this update: Fri 05 Dec 2025 23:00:59 +0000 Manifest next update: Sat 06 Dec 2025 23:00:59 +0000 Files and hashes: 1: 4NKKaipkT34nKtWhfa19D74f25c.roa (hash: YTaiys0RSHABRCWEassKEE2Fqko+03tYIMHlBHkZyig=) 2: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: aOn8PaR6oUEn8OvHbiCvzPVpLIZqF73cmQ20eyuHIGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:4c:85:d4:b7:ec:27:a1:09:b6:ba:24:fc:8c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54 Validity Not Before: Dec 5 23:00:59 2025 GMT Not After : Dec 6 23:00:59 2025 GMT Subject: CN=0dd240a662e9da5cd1fbb4f5f5b2addc5804e4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:70:b0:76:c9:b2:95:bd:6f:ef:1b:e1:1e: b8:8d:ca:58:67:e5:0d:39:c4:9f:15:5e:70:01:e1: e9:ad:e8:b9:25:c6:c9:ab:f2:20:8e:99:eb:01:9e: e8:c7:d1:bc:48:0a:d6:be:a2:6a:4e:17:b9:b5:3d: c5:39:e2:05:77:3b:aa:f6:e7:ba:0e:1e:b0:91:8e: 01:10:ce:ec:82:d8:50:df:7e:fe:7a:d7:4c:57:76: 53:03:bb:3a:53:7a:ce:9e:31:f4:f1:a9:db:63:88: af:eb:e0:f3:b2:be:f9:16:ad:d8:63:6a:85:7b:df: b0:cf:fb:b8:cc:63:01:30:be:e9:bd:d4:83:f7:cd: 29:74:08:d0:09:b0:7c:20:79:bf:76:f9:7d:56:a3: b3:09:ce:83:b6:90:ce:f3:c8:95:1e:3e:43:75:80: cc:fd:ef:0b:1a:ed:21:ba:b0:72:d1:7a:a2:59:63: 85:bc:04:46:0b:df:95:19:3d:8b:18:ce:31:3d:93: b3:52:e8:c3:bd:91:ff:5b:5b:ed:1c:6e:04:c7:03: fe:29:6a:24:60:64:b3:9d:14:c5:87:f4:db:d9:b2: 59:54:96:4e:79:dd:64:86:81:cc:e9:a9:ba:8e:7d: 38:de:4a:98:62:71:aa:33:bd:e1:cf:f4:9c:55:5f: fe:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D2:40:A6:62:E9:DA:5C:D1:FB:B4:F5:F5:B2:AD:DC:58:04:E4:D9 X509v3 Authority Key Identifier: keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:a9:b0:51:d9:00:2f:a8:c0:13:d1:5b:54:24:ea:17:fe:7a: e5:f5:f2:c6:5a:fe:cc:f5:ec:15:19:82:96:df:b9:79:81:dc: 50:6e:05:b6:4f:15:1c:1d:36:43:12:2f:a0:04:37:64:ab:90: c7:44:eb:20:94:7e:45:78:89:81:d7:31:ec:c2:9b:93:bf:92: 28:89:e7:cf:4a:f6:98:27:d8:30:69:f9:a2:18:8b:d6:f7:39: 03:0c:40:b4:18:d6:5a:ee:03:b3:dc:30:e8:9c:24:42:33:50: 8b:fe:56:36:d8:7c:dc:f7:a1:11:94:45:ac:48:8a:a9:6d:fe: 55:cf:c8:08:02:3e:de:b0:38:aa:d6:72:18:1d:76:54:0d:83: 39:2c:e6:64:68:bc:44:0d:c6:4d:a2:36:46:13:7c:e5:77:3d: 9c:be:23:20:34:37:3c:47:c1:6c:44:c5:c1:b4:f6:f5:cc:75: 54:27:a1:1c:35:a3:e1:cc:af:f4:29:3b:b5:8c:62:b5:33:f3: ea:7c:72:79:66:50:23:59:f4:90:3f:36:9f:de:70:07:e8:79: 4a:70:ae:97:b9:cd:f8:ac:a5:e9:1f:7a:61:d8:12:6b:e7:a9: d5:42:aa:a7:45:77:ca:f8:fd:4c:4a:ed:2f:ad:70:f6:ab:8c: c7:1c:03:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0yF1LfsJ6EJtrok/IzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MDRlYmY5ZGIxNzEwYTQ3YmFlNDUwOGNkYWY4MTMxZTE2 NzRhNTQwHhcNMjUxMjA1MjMwMDU5WhcNMjUxMjA2MjMwMDU5WjAzMTEwLwYDVQQD EygwZGQyNDBhNjYyZTlkYTVjZDFmYmI0ZjVmNWIyYWRkYzU4MDRlNGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSZwsHbJspW9b+8b4R64jcpYZ+UN OcSfFV5wAeHprei5JcbJq/IgjpnrAZ7ox9G8SArWvqJqThe5tT3FOeIFdzuq9ue6 Dh6wkY4BEM7sgthQ337+etdMV3ZTA7s6U3rOnjH08anbY4iv6+Dzsr75Fq3YY2qF e9+wz/u4zGMBML7pvdSD980pdAjQCbB8IHm/dvl9VqOzCc6DtpDO88iVHj5DdYDM /e8LGu0hurBy0XqiWWOFvARGC9+VGT2LGM4xPZOzUujDvZH/W1vtHG4ExwP+KWok YGSznRTFh/Tb2bJZVJZOed1khoHM6am6jn043kqYYnGqM73hz/ScVV/+UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3SQKZi6dpc0fu09fWyrdxYBOTZMB8GA1UdIwQY MBaAFIUE6/nbFxCke65FCM2vgTHhZ0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgt YTliMWRmNDRjZTJmLzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgtYTliMWRmNDRjZTJm LzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcamwUdkA L6jAE9FbVCTqF/565fXyxlr+zPXsFRmClt+5eYHcUG4Ftk8VHB02QxIvoAQ3ZKuQ x0TrIJR+RXiJgdcx7MKbk7+SKInnz0r2mCfYMGn5ohiL1vc5AwxAtBjWWu4Ds9ww 6JwkQjNQi/5WNth83PehEZRFrEiKqW3+Vc/ICAI+3rA4qtZyGB12VA2DOSzmZGi8 RA3GTaI2RhN85Xc9nL4jIDQ3PEfBbETFwbT29cx1VCehHDWj4cyv9Ck7tYxitTPz 6nxyeWZQI1n0kD82n95wB+h5SnCul7nN+Kyl6R96YdgSa+ep1UKqp0V3yvj9TErt L61w9quMxxwDdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:29 2025 by rpki-client