This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft File: HCM-7mJMGSxsfa2hQy3gueeLCbo.mft (raw, json) Hash identifier: gWuvWVrzO3Fqy5B3VNljbvpIT6enjGuqVFk/xs6etvM= Subject key identifier: F7:46:26:45:A6:22:13:70:A2:6F:FD:34:46:C3:FE:44:41:82:EE:0C Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA Certificate issuer: /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba Certificate serial: 019AF208D8E75B3951A067184272DA330215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 05:00:57 +0000 Manifest this update: Sat 06 Dec 2025 05:00:57 +0000 Manifest next update: Sun 07 Dec 2025 05:00:57 +0000 Files and hashes: 1: HCM-7mJMGSxsfa2hQy3gueeLCbo.crl (hash: hfXrdPoPQ9lxiavCGuUyZrVHnQtmqQqXAnxaXyO6VKM=) 2: K45e82x9WOXI8E3rbiZhpm6Y1c8.roa (hash: b1lnr/cxWdJYHM4gx0SMdfk+T7jlT+eQyoUM+qzNzCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d8:e7:5b:39:51:a0:67:18:42:72:da:33:02:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba Validity Not Before: Dec 6 05:00:57 2025 GMT Not After : Dec 7 05:00:57 2025 GMT Subject: CN=f7462645a6221370a26ffd3446c3fe444182ee0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:86:d6:5d:89:df:82:e5:0d:93:b7:3f:94:f2: d2:d7:54:be:13:87:b0:f6:43:96:52:81:64:4b:f4: 2f:62:6e:7a:54:f2:00:bb:c2:41:9e:d5:1e:55:47: 1e:bf:7a:e4:15:da:cf:8f:93:60:ce:1c:ba:0a:37: c8:d8:54:48:a4:c9:38:f7:6b:61:ff:88:73:23:7d: 49:d3:64:c4:74:fc:e6:9a:df:1c:23:a4:c4:b7:ab: 99:6e:18:de:0f:81:18:75:57:89:32:b6:58:9c:d3: 79:09:8a:21:48:22:f4:46:3b:03:05:62:f7:d2:9c: 12:e5:c3:eb:62:b6:79:df:cf:fb:c4:1c:45:9f:61: cf:e4:de:29:d3:b4:22:66:6a:34:9d:8a:a5:37:f8: 61:d0:cb:54:1e:ed:1a:8d:ae:c6:58:66:ae:81:38: 8f:1b:d7:62:60:07:29:17:cd:ac:fb:44:c9:b7:a4: 97:92:73:15:fc:cf:06:cc:c5:c7:1f:ba:60:85:c4: 23:d0:98:e4:20:13:b7:0f:e4:92:a7:0b:bb:74:57: 30:ff:59:70:fd:3e:eb:9e:ff:cf:a9:de:78:c3:55: 71:8d:24:98:e7:c8:77:a2:4a:ec:8f:89:47:d9:f4: 88:97:b3:b9:14:87:30:ab:e9:3e:39:4e:36:19:e7: 35:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:46:26:45:A6:22:13:70:A2:6F:FD:34:46:C3:FE:44:41:82:EE:0C X509v3 Authority Key Identifier: keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:cc:e9:fd:53:2d:4d:73:07:3b:b8:4e:bd:12:d9:2a:a4:7c: dd:bb:71:33:3d:e4:71:98:c9:71:5a:b5:bb:ed:82:9a:60:5a: 5e:d7:01:12:1a:37:a5:6d:04:2f:ec:f2:cf:91:e9:f2:34:e6: 64:83:b9:df:15:a0:d8:74:96:f0:e1:42:c4:5c:70:5d:ab:92: 2c:75:cd:6a:78:97:50:4a:a5:e5:b7:71:6e:4a:37:23:f0:d5: 25:f4:f5:92:97:a9:ae:8b:0c:1d:0f:97:2a:34:99:21:e1:7a: 5e:49:a7:8b:ee:46:a8:07:56:cf:92:e5:1f:32:f6:df:11:32: ff:55:3f:22:3b:cd:7b:51:72:64:0b:8b:dd:08:17:59:85:50: 34:f2:d2:62:b8:3f:80:9e:d0:b1:10:1a:eb:19:cd:71:c3:7e: 83:3e:a8:e3:87:c5:8a:52:64:d7:e4:a2:24:ba:c4:25:2e:e5: 84:2e:87:7a:a3:e6:15:53:0f:ab:30:2a:a3:1e:e0:fb:1e:fc: 5e:b4:0c:aa:1a:36:b3:34:89:a7:95:5a:5b:28:5d:3c:91:22: bc:87:26:4c:6e:91:62:3d:9b:71:c1:6a:cc:fb:7d:3d:f8:77: a6:55:f9:fb:8c:48:af:42:7f:fb:91:48:95:07:ba:d8:2d:a3: af:7e:6f:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNjnWzlRoGcYQnLaMwIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjMzZWVlNjI0YzE5MmM2YzdkYWRhMTQzMmRlMGI5ZTc4 YjA5YmEwHhcNMjUxMjA2MDUwMDU3WhcNMjUxMjA3MDUwMDU3WjAzMTEwLwYDVQQD EyhmNzQ2MjY0NWE2MjIxMzcwYTI2ZmZkMzQ0NmMzZmU0NDQxODJlZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlobWXYnfguUNk7c/lPLS11S+E4ew 9kOWUoFkS/QvYm56VPIAu8JBntUeVUcev3rkFdrPj5Ngzhy6CjfI2FRIpMk492th /4hzI31J02TEdPzmmt8cI6TEt6uZbhjeD4EYdVeJMrZYnNN5CYohSCL0RjsDBWL3 0pwS5cPrYrZ538/7xBxFn2HP5N4p07QiZmo0nYqlN/hh0MtUHu0aja7GWGaugTiP G9diYAcpF82s+0TJt6SXknMV/M8GzMXHH7pghcQj0JjkIBO3D+SSpwu7dFcw/1lw /T7rnv/Pqd54w1VxjSSY58h3okrsj4lH2fSIl7O5FIcwq+k+OU42Gec1eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdGJkWmIhNwom/9NEbD/kRBgu4MMB8GA1UdIwQY MBaAFBwjPu5iTBksbH2toUMt4Lnniwm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNWJlZjctMjViMy00NDYzLWIzYmYt NTdhOTUxZjQ5OTMwLzEvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jNWJlZjctMjViMy00NDYzLWIzYmYtNTdhOTUxZjQ5OTMw LzEvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMzp/VMt TXMHO7hOvRLZKqR83btxMz3kcZjJcVq1u+2CmmBaXtcBEho3pW0EL+zyz5Hp8jTm ZIO53xWg2HSW8OFCxFxwXauSLHXNaniXUEql5bdxbko3I/DVJfT1kpeprosMHQ+X KjSZIeF6Xkmni+5GqAdWz5LlHzL23xEy/1U/IjvNe1FyZAuL3QgXWYVQNPLSYrg/ gJ7QsRAa6xnNccN+gz6o44fFilJk1+SiJLrEJS7lhC6HeqPmFVMPqzAqox7g+x78 XrQMqho2szSJp5VaWyhdPJEivIcmTG6RYj2bccFqzPt9Pfh3plX5+4xIr0J/+5FI lQe62C2jr35v5g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:47 2025 by rpki-client