This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json) Hash identifier: iA4Y0xWNzuVJqEBvSdiD/VH4hY5zsdOAfmD1qjrZDwQ= Subject key identifier: 04:3B:16:95:C6:B2:94:2A:43:6A:5A:91:C7:F1:9D:55:8C:1B:D3:D2 Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93 Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193 Certificate serial: 019AF19B3B5BFDA37D5B0014A352E57CADBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 03:01:13 +0000 Manifest this update: Sat 06 Dec 2025 03:01:13 +0000 Manifest next update: Sun 07 Dec 2025 03:01:13 +0000 Files and hashes: 1: AJvWKjlfflZ9cQofDD0ppbseZLQ.roa (hash: VGiicvrQITfBrX3SAtjyhR6B6SA41PSS6lItKnKTNYo=) 2: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: Rx+k1OxhPZFUEk349ICFEIx3yqQO/S9oa8KeTCtl/iY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3b:5b:fd:a3:7d:5b:00:14:a3:52:e5:7c:ad:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193 Validity Not Before: Dec 6 03:01:13 2025 GMT Not After : Dec 7 03:01:13 2025 GMT Subject: CN=043b1695c6b2942a436a5a91c7f19d558c1bd3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c8:2d:cd:46:e2:f1:51:3d:73:74:8a:de:29: ba:86:d5:e8:91:79:2e:37:f4:9e:5f:ca:05:df:a3: b2:93:bd:10:17:40:c8:86:73:42:27:78:c4:34:df: 19:ff:6f:eb:ca:9b:c6:27:27:01:28:fc:9c:25:d8: 62:55:ab:5e:d2:10:81:90:c0:0b:17:30:24:82:35: a3:99:8c:c9:cb:7a:05:c8:6c:90:d3:f0:dc:82:e7: a0:f0:0a:e8:11:d5:f3:a2:ae:3c:0c:8a:90:bd:4d: 68:1f:47:02:21:39:0d:89:57:65:bc:b3:82:11:b3: ac:33:0f:94:c4:04:53:7c:d3:f6:83:9b:f5:e8:d1: c4:71:de:65:88:3d:c6:8a:f6:fa:80:89:cc:bc:a4: ef:7d:9e:27:73:c1:e4:01:2e:1f:9a:25:0f:f5:64: 1f:65:fc:e7:9f:9c:88:78:f9:1f:d2:e2:d0:bb:b2: 1a:ac:a3:b6:5b:57:0a:92:28:7f:c9:21:9e:2a:1e: e3:ba:7a:2a:7f:10:cd:bc:94:43:69:57:bd:c8:ec: 88:dc:68:86:7f:dd:c3:d2:8a:b1:a6:b2:4e:87:e4: e8:84:db:69:6d:b6:b0:d0:f7:70:5b:82:98:b4:44: 4c:e9:bc:1d:4e:0d:23:f4:46:23:ce:c6:6c:60:2a: 68:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3B:16:95:C6:B2:94:2A:43:6A:5A:91:C7:F1:9D:55:8C:1B:D3:D2 X509v3 Authority Key Identifier: keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3d:32:0e:80:0e:ed:e8:eb:07:07:29:ed:04:a2:9d:f7:cd: 17:d9:f2:4f:70:df:30:c7:c5:84:a7:88:9f:75:84:ef:18:3c: 64:89:f8:78:fb:bf:24:9a:2b:e4:df:f3:89:6a:b9:04:4b:75: f9:8d:fe:fa:42:bf:1a:96:b1:36:73:fd:89:d0:f1:67:9a:80: 73:44:87:3a:8b:6b:48:ad:24:a1:c1:89:df:1b:af:1f:b1:b6: d0:9f:d8:76:f0:dd:59:25:33:eb:b6:8f:f0:b0:c6:e5:64:ca: 71:1d:2d:eb:53:db:48:69:09:71:71:b0:5d:ae:1c:f5:1a:f2: 8e:fa:2c:9a:bb:1e:5e:c2:4b:d3:57:bc:51:bf:ce:1c:b2:16: 0a:95:18:4f:38:23:f7:51:83:a6:d6:11:3d:93:a6:cf:e5:0a: 94:16:91:90:83:9e:08:1a:29:ae:eb:1d:b1:19:c3:dd:0e:50: 17:f6:c2:53:76:eb:74:c9:28:9b:7a:b1:b6:ff:70:f1:d5:40: 1a:f4:5b:4d:75:97:53:9e:99:42:dc:1a:e8:0f:02:0b:2a:e7: 6b:fa:42:7f:58:db:67:cb:6f:a0:f7:92:30:6a:9b:1c:44:54: e5:fb:85:8e:9e:b3:a5:0e:6f:d1:1a:21:71:2d:3d:91:2e:24: 26:cf:92:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmztb/aN9WwAUo1LlfK28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTU1OWQ4YmY2YWMyZDg2OGQwNjY1YWQ1N2QyYzZhYzE0 NzIxOTMwHhcNMjUxMjA2MDMwMTEzWhcNMjUxMjA3MDMwMTEzWjAzMTEwLwYDVQQD EygwNDNiMTY5NWM2YjI5NDJhNDM2YTVhOTFjN2YxOWQ1NThjMWJkM2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsgtzUbi8VE9c3SK3im6htXokXku N/SeX8oF36Oyk70QF0DIhnNCJ3jENN8Z/2/rypvGJycBKPycJdhiVate0hCBkMAL FzAkgjWjmYzJy3oFyGyQ0/Dcgueg8AroEdXzoq48DIqQvU1oH0cCITkNiVdlvLOC EbOsMw+UxARTfNP2g5v16NHEcd5liD3Givb6gInMvKTvfZ4nc8HkAS4fmiUP9WQf Zfznn5yIePkf0uLQu7IarKO2W1cKkih/ySGeKh7junoqfxDNvJRDaVe9yOyI3GiG f93D0oqxprJOh+TohNtpbbaw0PdwW4KYtERM6bwdTg0j9EYjzsZsYCpofQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQ7FpXGspQqQ2pakcfxnVWMG9PSMB8GA1UdIwQY MBaAFB6lWdi/asLYaNBmWtV9LGrBRyGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEt NWZmY2M0NmFlN2I1LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEtNWZmY2M0NmFlN2I1 LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUD0yDoAO 7ejrBwcp7QSinffNF9nyT3DfMMfFhKeIn3WE7xg8ZIn4ePu/JJor5N/ziWq5BEt1 +Y3++kK/GpaxNnP9idDxZ5qAc0SHOotrSK0kocGJ3xuvH7G20J/YdvDdWSUz67aP 8LDG5WTKcR0t61PbSGkJcXGwXa4c9RryjvosmrseXsJL01e8Ub/OHLIWCpUYTzgj 91GDptYRPZOmz+UKlBaRkIOeCBoprusdsRnD3Q5QF/bCU3brdMkom3qxtv9w8dVA GvRbTXWXU56ZQtwa6A8CCyrna/pCf1jbZ8tvoPeSMGqbHERU5fuFjp6zpQ5v0Roh cS09kS4kJs+Spw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:48:59 2025 by rpki-client