This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json) Hash identifier: hSEJvsu0nMfjnhntGZoVahTrN6a5mHwpsmyfqnIjfu0= Subject key identifier: D7:1A:85:79:FC:78:44:C7:CB:41:6C:11:83:EE:CD:1E:0A:CD:A4:05 Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf Certificate serial: 019AF12DC79131F1EDD38D4AACBCCF08AE8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft Manifest number: 106E Signing time: Sat 06 Dec 2025 01:01:40 +0000 Manifest this update: Sat 06 Dec 2025 01:01:40 +0000 Manifest next update: Sun 07 Dec 2025 01:01:40 +0000 Files and hashes: 1: GtM4pSsiK5eSfyxXfFff62QmvIQ.roa (hash: d17WNX33kwLBGAgNh9bS/nIhg2dh/WqffpjSyAJ5+FM=) 2: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: 9lTVFC1r5D12Eeh46JDrFzG6lsfs3YG3HsXetpYwJ84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c7:91:31:f1:ed:d3:8d:4a:ac:bc:cf:08:ae:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf Validity Not Before: Dec 6 01:01:40 2025 GMT Not After : Dec 7 01:01:40 2025 GMT Subject: CN=d71a8579fc7844c7cb416c1183eecd1e0acda405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:9d:16:50:d9:80:b5:26:ab:32:5a:09:eb: 50:86:2b:97:ea:7f:48:b7:3c:bc:87:32:33:6c:78: ea:8c:50:13:3f:1f:43:36:2d:de:1d:1d:40:56:85: 23:10:7a:cb:36:4c:e9:b0:12:82:50:1e:02:ed:37: dc:ea:97:a5:03:ae:80:30:5b:a7:ff:b9:c9:1a:0d: 30:ac:1d:78:b1:49:b9:38:0c:14:9e:42:7c:02:78: 46:35:58:05:60:51:b1:fd:ad:f9:66:18:10:8e:3c: 4a:ee:70:d2:e5:06:4a:e2:3c:e6:29:7c:a1:24:6f: c8:3a:1b:73:57:e2:2a:c8:eb:38:20:86:44:ca:28: 15:a0:4e:c0:72:44:94:b7:e1:2d:42:1f:a5:0f:91: 74:9e:a9:f2:fb:c1:fc:79:be:20:b3:8d:da:8f:f5: 96:8b:19:f7:d6:12:02:57:60:f4:4d:d3:06:8b:33: fe:b4:f6:4a:65:e6:bf:68:c7:f8:ea:bb:ae:0f:02: 57:1e:23:49:34:ac:ff:55:20:df:55:b8:98:a0:01: 8a:01:a0:3c:96:52:d2:45:b6:4f:96:20:b4:37:78: 7e:97:dc:22:c4:38:c9:10:f4:64:8a:53:37:ba:0d: 6e:3f:e7:63:f4:60:d0:3c:19:6e:81:ac:1e:5f:a8: 61:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1A:85:79:FC:78:44:C7:CB:41:6C:11:83:EE:CD:1E:0A:CD:A4:05 X509v3 Authority Key Identifier: keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7b:02:27:bc:12:0a:71:62:44:3a:88:fa:c5:06:07:f7:61: 27:95:44:4f:b5:cf:1f:c9:f9:d8:ef:e7:f1:49:67:f0:39:8f: d9:bc:ea:d0:b8:ee:3e:a5:7c:a6:67:f5:1a:56:e7:9d:78:5c: 68:74:61:9a:e0:8d:90:bd:ca:5e:ca:d0:f2:97:6f:c1:e5:19: fd:6f:ad:82:e5:8f:76:1d:73:25:1a:95:93:b3:33:85:06:9a: 36:78:fa:72:8e:1c:af:da:20:be:4c:0e:05:5a:9d:ae:5e:53: 9b:ca:82:bb:1e:b0:61:f5:50:b4:c6:fc:04:9c:59:7b:8e:05: f6:dd:d1:cc:3e:8d:69:e3:d4:6d:bc:06:d3:b4:4f:9b:dd:93: 8e:d0:a6:2e:73:d4:b1:24:29:d0:01:3b:82:4c:ba:ad:3f:68: d6:03:c4:97:fe:11:9e:ac:23:04:c6:fb:ad:f4:f4:9a:6c:88: eb:de:7f:83:89:16:13:cc:cd:b0:19:a3:a3:14:e8:52:df:12: 68:c9:ae:c9:26:2a:bb:b9:c6:bc:59:e8:49:bd:b4:d6:2c:93: 5a:16:2d:81:6f:93:ae:67:b2:1c:8f:48:0a:98:71:3f:75:a7: 28:5a:3e:62:91:e3:f0:99:5c:66:40:2f:39:ce:4f:77:98:50: 78:03:a0:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLceRMfHt041KrLzPCK6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNzUxMDY3NzFjNDI5NWUzZDNlY2ZhMDRjYjk3ZjYzMTYy M2U1YmYwHhcNMjUxMjA2MDEwMTQwWhcNMjUxMjA3MDEwMTQwWjAzMTEwLwYDVQQD EyhkNzFhODU3OWZjNzg0NGM3Y2I0MTZjMTE4M2VlY2QxZTBhY2RhNDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWKdFlDZgLUmqzJaCetQhiuX6n9I tzy8hzIzbHjqjFATPx9DNi3eHR1AVoUjEHrLNkzpsBKCUB4C7Tfc6pelA66AMFun /7nJGg0wrB14sUm5OAwUnkJ8AnhGNVgFYFGx/a35ZhgQjjxK7nDS5QZK4jzmKXyh JG/IOhtzV+IqyOs4IIZEyigVoE7AckSUt+EtQh+lD5F0nqny+8H8eb4gs43aj/WW ixn31hICV2D0TdMGizP+tPZKZea/aMf46ruuDwJXHiNJNKz/VSDfVbiYoAGKAaA8 llLSRbZPliC0N3h+l9wixDjJEPRkilM3ug1uP+dj9GDQPBlugaweX6hh1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcahXn8eETHy0FsEYPuzR4KzaQFMB8GA1UdIwQY MBaAFB51EGdxxClePT7PoEy5f2MWI+W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTct YTJmZGI5MzhjYTJkLzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTctYTJmZGI5MzhjYTJk LzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHsCJ7wS CnFiRDqI+sUGB/dhJ5VET7XPH8n52O/n8Uln8DmP2bzq0LjuPqV8pmf1GlbnnXhc aHRhmuCNkL3KXsrQ8pdvweUZ/W+tguWPdh1zJRqVk7MzhQaaNnj6co4cr9ogvkwO BVqdrl5Tm8qCux6wYfVQtMb8BJxZe44F9t3RzD6NaePUbbwG07RPm92TjtCmLnPU sSQp0AE7gky6rT9o1gPEl/4RnqwjBMb7rfT0mmyI695/g4kWE8zNsBmjoxToUt8S aMmuySYqu7nGvFnoSb201iyTWhYtgW+TrmeyHI9ICphxP3WnKFo+YpHj8JlcZkAv Oc5Pd5hQeAOghg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:01 2025 by rpki-client