This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json) Hash identifier: mZsSwswGUQJXr3DD6OlM6EpmuMyR1tNX7GhzX4eRZgk= Subject key identifier: 08:4C:A3:8F:67:F6:AA:4B:5F:D0:86:03:57:70:02:C8:76:EC:35:4F Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51 Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551 Certificate serial: 019AF5AEAEAB0DD08DAAF976444EDD19D124 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft Manifest number: 0E23 Signing time: Sat 06 Dec 2025 22:00:57 +0000 Manifest this update: Sat 06 Dec 2025 22:00:57 +0000 Manifest next update: Sun 07 Dec 2025 22:00:57 +0000 Files and hashes: 1: 2X95sls0uWU5PgwEsuvbZMPdH28.roa (hash: WAXbNwzmu9B4g0l97d8oAvrkNfSo32YmgajceOiYDlc=) 2: 44WcjUyhdWbouJas9-vY_4pr1wA.roa (hash: Qx8y85cpYAiQ8a63DXW295iCOgGuHySiBFYnU925DiI=) 3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: gSjzV1X9NKwgIT7nz9iDQlEi9twZ4t7wUs5zDFd25jc=) 4: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:ae:ab:0d:d0:8d:aa:f9:76:44:4e:dd:19:d1:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551 Validity Not Before: Dec 6 22:00:57 2025 GMT Not After : Dec 7 22:00:57 2025 GMT Subject: CN=084ca38f67f6aa4b5fd08603577002c876ec354f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:46:7c:86:43:1e:c0:8f:de:3b:65:f3:79: 05:17:9e:07:f8:70:35:6b:0f:a7:ec:cd:1c:c5:39: 40:a8:26:99:d6:7f:d5:d4:26:b0:f6:cd:d9:06:fd: 82:ca:48:b6:3f:4f:83:3b:10:48:c5:ed:90:12:9d: cb:af:1a:bb:2a:47:ef:4b:1c:9d:85:e7:a0:c0:54: 1c:20:e6:28:90:dd:99:fb:77:6b:1f:da:fb:ca:60: c2:0d:6a:b8:58:46:22:59:dc:c8:38:53:e9:68:e4: 2d:81:45:a4:83:46:40:a3:57:9a:05:d1:9d:bc:ec: e5:47:86:f5:1d:d6:fa:b5:0c:be:a3:53:da:c4:1a: 7d:a2:91:86:df:7a:10:f9:eb:c0:38:9f:c3:a7:12: 07:60:b7:ec:4e:47:08:48:e3:8c:28:e6:28:43:82: 6b:85:97:55:9f:8d:65:3f:45:a6:fc:e3:63:d9:90: 50:dc:3b:8c:8e:de:50:0c:82:3c:5e:d7:21:8e:04: 01:a1:91:35:ca:a4:01:ce:18:02:28:a3:5c:1c:e8: 1c:18:d8:01:3a:b3:4a:20:17:2e:66:4c:92:e0:e8: 94:7b:7f:ff:ca:b1:1f:6d:6d:a3:91:2f:fa:6c:e7: 94:0e:c3:38:3b:85:78:b9:49:7d:31:e7:84:37:33: 08:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4C:A3:8F:67:F6:AA:4B:5F:D0:86:03:57:70:02:C8:76:EC:35:4F X509v3 Authority Key Identifier: keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e2:2d:aa:2f:68:3e:42:7c:b9:a5:7a:c5:f5:24:d0:72:46: 62:15:61:1d:79:b0:61:f5:cf:22:c6:0b:bf:e6:5a:25:cf:9a: 67:04:e1:ce:d8:99:c9:d7:eb:6d:f4:00:ea:b5:53:8d:e7:c9: 52:e8:f4:20:39:45:87:4a:93:4e:78:b4:7a:4c:0f:b3:d9:51: b5:1b:81:a2:22:6e:70:40:0f:71:38:94:e0:bf:ff:bb:a8:e1: a8:2b:bf:0e:cf:70:1b:cb:9b:a8:fc:0e:7b:1e:16:e4:3d:ba: 29:e0:15:71:af:8b:be:92:e0:19:e2:64:dc:5f:70:f4:00:d5: 3e:14:f6:07:92:06:0f:3d:ed:4d:7d:80:9b:ee:1e:cb:2f:0b: 72:56:3c:ee:32:6b:4d:7f:10:e1:da:91:ca:bc:a6:3d:ab:e2: 6a:42:86:71:4f:05:32:75:39:a0:61:58:19:2a:a0:f5:77:0b: 7e:1b:1e:e2:6a:5f:c0:5c:95:fa:28:18:dd:35:46:15:52:5a: d2:c0:1f:65:b0:e3:25:a9:60:63:15:40:6f:bf:b4:e4:e6:e0: 08:60:d9:92:35:9c:f8:f5:c4:55:fd:11:d7:4a:ff:af:5d:0b: 81:89:a3:13:be:8f:17:8c:ce:9f:90:9b:85:4d:26:d3:b5:87: 02:94:5b:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rq6rDdCNqvl2RE7dGdEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTBhOWViNDdkODI0YjUxZjE1NDQ0MjQ4MWEyNTcxNjgz OTQ1NTEwHhcNMjUxMjA2MjIwMDU3WhcNMjUxMjA3MjIwMDU3WjAzMTEwLwYDVQQD EygwODRjYTM4ZjY3ZjZhYTRiNWZkMDg2MDM1NzcwMDJjODc2ZWMzNTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs31GfIZDHsCP3jtl83kFF54H+HA1 aw+n7M0cxTlAqCaZ1n/V1Caw9s3ZBv2Cyki2P0+DOxBIxe2QEp3Lrxq7KkfvSxyd heegwFQcIOYokN2Z+3drH9r7ymDCDWq4WEYiWdzIOFPpaOQtgUWkg0ZAo1eaBdGd vOzlR4b1Hdb6tQy+o1PaxBp9opGG33oQ+evAOJ/DpxIHYLfsTkcISOOMKOYoQ4Jr hZdVn41lP0Wm/ONj2ZBQ3DuMjt5QDII8XtchjgQBoZE1yqQBzhgCKKNcHOgcGNgB OrNKIBcuZkyS4OiUe3//yrEfbW2jkS/6bOeUDsM4O4V4uUl9MeeENzMIKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhMo49n9qpLX9CGA1dwAsh27DVPMB8GA1UdIwQY MBaAFB6gqetH2CS1HxVEQkgaJXFoOUVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzkt ODQxOGE5NmY2Nzk1LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzktODQxOGE5NmY2Nzk1 LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeItqi9o PkJ8uaV6xfUk0HJGYhVhHXmwYfXPIsYLv+ZaJc+aZwThztiZydfrbfQA6rVTjefJ Uuj0IDlFh0qTTni0ekwPs9lRtRuBoiJucEAPcTiU4L//u6jhqCu/Ds9wG8ubqPwO ex4W5D26KeAVca+LvpLgGeJk3F9w9ADVPhT2B5IGDz3tTX2Am+4eyy8LclY87jJr TX8Q4dqRyrymPaviakKGcU8FMnU5oGFYGSqg9XcLfhse4mpfwFyV+igY3TVGFVJa 0sAfZbDjJalgYxVAb7+05ObgCGDZkjWc+PXEVf0R10r/r10LgYmjE76PF4zOn5Cb hU0m07WHApRbZw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:14:21 2025 by rpki-client