This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft File: HFGW3tW6XWhucJXG1cY4xrj4uto.mft (raw, json) Hash identifier: zOefOYjdTZPIKS3GsM6gH8zFjEOXhHIP1CX/Xx3Utxg= Subject key identifier: 3E:D7:84:52:AA:49:C9:73:D5:32:F7:DD:36:1E:E5:1D:98:3A:A6:7C Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada Certificate serial: 019AF12E1CDB9CAF84F13B368B05FC3CC5E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft Manifest number: 10A6 Signing time: Sat 06 Dec 2025 01:02:02 +0000 Manifest this update: Sat 06 Dec 2025 01:02:02 +0000 Manifest next update: Sun 07 Dec 2025 01:02:02 +0000 Files and hashes: 1: HFGW3tW6XWhucJXG1cY4xrj4uto.crl (hash: EeON/LqefqLtK13R+pcf/dgxsE2WWOhhIn9QK2Tik+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1c:db:9c:af:84:f1:3b:36:8b:05:fc:3c:c5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada Validity Not Before: Dec 6 01:02:02 2025 GMT Not After : Dec 7 01:02:02 2025 GMT Subject: CN=3ed78452aa49c973d532f7dd361ee51d983aa67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:63:de:7a:2b:fe:96:69:14:ab:76:39:44:56: b3:75:57:2d:ea:59:f9:a2:b4:21:ba:32:a3:a9:ec: 8a:60:e3:93:4d:ef:c3:dc:73:6c:3e:d9:be:18:a7: b5:f5:b6:46:76:06:ca:8e:31:f7:0d:bf:f8:81:e3: 2a:07:da:da:9e:4b:b6:cc:38:fb:ff:52:68:91:01: 7f:61:7d:a7:d1:09:52:62:82:d8:35:d7:8a:da:62: 83:09:0e:64:c7:d9:14:b2:11:14:69:08:4e:b8:b8: 89:ff:a3:40:a0:d6:06:58:ff:d4:d9:19:0f:bc:c8: aa:9d:06:aa:ea:0f:da:37:d0:a4:06:8b:cf:28:7b: 7c:b8:16:41:85:36:26:0d:b2:de:ad:60:b1:69:c1: 84:7d:ce:f0:b7:c3:1e:3e:54:2e:3a:45:b1:63:b6: 15:6e:67:02:e7:89:87:f8:3f:6a:f4:79:cd:19:e2: a7:9a:07:47:e6:85:a4:f1:6d:87:42:91:b6:cd:25: a5:06:f6:de:af:8e:3a:05:e4:63:d0:b2:da:40:bd: c5:d0:90:e4:6c:26:15:80:b4:6f:15:95:8e:a0:c2: 08:66:59:c9:6a:2a:51:b4:bd:28:df:d3:19:d2:05: ed:bd:86:ac:6c:d1:ff:b2:0e:e2:69:08:70:18:15: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D7:84:52:AA:49:C9:73:D5:32:F7:DD:36:1E:E5:1D:98:3A:A6:7C X509v3 Authority Key Identifier: keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a4:d3:2d:7d:f1:19:ed:78:11:dd:fb:4f:72:81:58:c9:e7: df:b7:00:1b:9e:74:5a:69:e2:3d:57:82:b5:75:7f:27:e7:7e: 21:96:d2:f8:61:43:3b:ca:8b:1c:2c:04:4e:69:ba:55:06:06: e1:86:6b:74:ce:fb:10:06:ef:f6:42:e5:93:42:5d:ff:1d:f9: 9d:7b:1a:8d:4e:b4:89:d9:d7:16:e1:d0:77:c2:f8:2d:8d:44: be:f9:ad:f7:0d:5e:d5:56:61:2c:58:e6:f3:1f:ff:6d:fe:9f: ad:e3:19:88:af:9a:74:2a:5e:73:98:d2:7e:9b:d8:24:8f:be: 63:25:b8:8a:f8:e7:86:1d:c5:0b:5a:15:c0:8c:d4:36:0c:f8: ad:d3:d5:92:fa:d1:ee:e3:37:13:0d:a3:9d:af:30:02:e3:be: cf:9d:fc:45:9d:f2:ab:81:29:17:e4:77:2e:e8:d0:aa:81:df: 0d:c7:10:65:1b:e6:47:f3:f0:f9:a7:2f:bc:69:4d:61:15:19: ed:b5:cc:24:93:04:0d:5f:21:f2:4a:dd:de:fc:01:3b:78:c3: f7:f3:53:8a:db:46:a8:18:7b:01:90:63:a3:b7:f4:2a:5c:0c: 82:d9:59:8b:12:07:cf:0d:8b:b2:37:25:d9:97:7a:80:6c:ad: 57:cb:ce:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhzbnK+E8Ts2iwX8PMXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNTE5NmRlZDViYTVkNjg2ZTcwOTVjNmQ1YzYzOGM2Yjhm OGJhZGEwHhcNMjUxMjA2MDEwMjAyWhcNMjUxMjA3MDEwMjAyWjAzMTEwLwYDVQQD EygzZWQ3ODQ1MmFhNDljOTczZDUzMmY3ZGQzNjFlZTUxZDk4M2FhNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmPeeiv+lmkUq3Y5RFazdVct6ln5 orQhujKjqeyKYOOTTe/D3HNsPtm+GKe19bZGdgbKjjH3Db/4geMqB9ranku2zDj7 /1JokQF/YX2n0QlSYoLYNdeK2mKDCQ5kx9kUshEUaQhOuLiJ/6NAoNYGWP/U2RkP vMiqnQaq6g/aN9CkBovPKHt8uBZBhTYmDbLerWCxacGEfc7wt8MePlQuOkWxY7YV bmcC54mH+D9q9HnNGeKnmgdH5oWk8W2HQpG2zSWlBvber446BeRj0LLaQL3F0JDk bCYVgLRvFZWOoMIIZlnJaipRtL0o39MZ0gXtvYasbNH/sg7iaQhwGBVX1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7XhFKqSclz1TL33TYe5R2YOqZ8MB8GA1UdIwQY MBaAFBxRlt7Vul1obnCVxtXGOMa4+LraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNTlmYTMtMzE2ZS00ZjVlLThiNjEt MjBiZjI3NWZkMGU3LzEvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNTlmYTMtMzE2ZS00ZjVlLThiNjEtMjBiZjI3NWZkMGU3 LzEvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKTTLX3x Ge14Ed37T3KBWMnn37cAG550WmniPVeCtXV/J+d+IZbS+GFDO8qLHCwETmm6VQYG 4YZrdM77EAbv9kLlk0Jd/x35nXsajU60idnXFuHQd8L4LY1Evvmt9w1e1VZhLFjm 8x//bf6freMZiK+adCpec5jSfpvYJI++YyW4ivjnhh3FC1oVwIzUNgz4rdPVkvrR 7uM3Ew2jna8wAuO+z538RZ3yq4EpF+R3LujQqoHfDccQZRvmR/Pw+acvvGlNYRUZ 7bXMJJMEDV8h8krd3vwBO3jD9/NTittGqBh7AZBjo7f0KlwMgtlZixIHzw2Lsjcl 2Zd6gGytV8vOqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:02 2025 by rpki-client