This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json) Hash identifier: 7EpsdHd5xJIqDj4tNxbrmQyEng72eNL4fR0yBoK3z3k= Subject key identifier: C9:02:E7:6D:E9:6D:B1:C5:C3:E6:B8:A1:B2:C4:0A:F9:F4:7B:05:22 Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b Certificate serial: 019AF352AA34D5ED4D95D08CBBF02C4942DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft Manifest number: 0C99 Signing time: Sat 06 Dec 2025 11:01:12 +0000 Manifest this update: Sat 06 Dec 2025 11:01:12 +0000 Manifest next update: Sun 07 Dec 2025 11:01:12 +0000 Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: FowiiMx0UkYX48w36G4OI+zOFtmnQEGZhimMxj7N3lM=) 2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:aa:34:d5:ed:4d:95:d0:8c:bb:f0:2c:49:42:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b Validity Not Before: Dec 6 11:01:12 2025 GMT Not After : Dec 7 11:01:12 2025 GMT Subject: CN=c902e76de96db1c5c3e6b8a1b2c40af9f47b0522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8c:10:23:18:49:ee:a2:38:36:b5:6b:8c:80: 66:2e:ac:ce:92:e8:c4:4b:d6:26:31:87:43:42:3c: 01:a1:a3:17:7a:59:ea:5f:a6:0c:cc:c3:d4:33:cd: e7:00:65:2a:47:19:4a:37:a1:b1:05:54:c1:9e:dc: 7b:d4:6e:dd:c2:72:59:2f:44:e2:33:96:7c:f1:7a: 6e:47:8c:03:14:3b:e7:44:71:4e:02:39:00:2b:0a: d0:f3:d0:c0:4d:97:49:9b:c0:a6:7e:a1:6b:06:68: 71:59:f3:b0:b9:9c:1d:3a:1a:c3:55:71:e1:c2:4f: 2d:5e:d1:8e:3a:8b:97:95:51:af:41:c6:03:ec:d5: 44:8f:0c:aa:d0:3d:fa:ba:c5:32:cb:2e:4a:bb:09: 93:81:89:5c:54:98:02:74:41:88:c8:30:8b:2f:98: fe:d6:04:43:fe:b4:fa:28:56:a5:ec:9d:b0:f2:68: 6b:67:fa:46:46:78:4e:1f:79:f9:c3:7f:7f:8a:14: 6d:53:f1:35:f9:a2:e0:5e:51:2f:8e:a8:ae:b7:01: e5:21:b1:e0:fe:4d:be:9f:77:f8:af:31:f3:60:de: cd:e9:19:ef:e9:81:f9:33:f0:1e:de:fe:8c:f7:7e: 7f:e1:a6:91:1f:69:3a:45:90:f4:d2:a2:cb:5e:5d: 2b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:02:E7:6D:E9:6D:B1:C5:C3:E6:B8:A1:B2:C4:0A:F9:F4:7B:05:22 X509v3 Authority Key Identifier: keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:9b:22:13:d9:cb:8c:ab:56:5d:72:cd:43:ea:06:50:9c:cf: 28:e1:a7:64:24:3f:cb:01:39:bd:f0:6d:3c:32:e8:d0:1f:68: 8e:ec:4d:fd:77:0a:4f:18:d6:43:bc:39:dc:35:a7:1a:df:7e: 1e:e6:bd:58:85:67:4d:c9:c7:63:c1:60:db:52:e3:9b:27:d9: d3:a5:34:70:a8:3d:d1:15:6e:d5:ee:4a:89:81:f2:b6:b3:cc: dc:f7:c8:45:e3:0f:9f:ec:85:c9:39:df:eb:e1:99:bd:1c:16: ef:c8:7e:1f:0a:92:a8:bb:42:52:58:87:94:5d:95:7c:7e:7d: 6d:1c:68:49:e8:d0:75:0a:f0:19:24:d4:a5:cb:97:03:c8:ea: 57:51:53:c0:96:14:a8:30:ca:46:74:88:75:31:a8:cd:d3:e5: 2d:cd:fe:71:c6:28:4e:4d:f4:70:18:40:8a:9f:89:df:57:a8: 43:06:b9:17:89:e6:31:b3:02:54:99:fc:46:7e:cf:a1:e0:7d: 0f:99:eb:5e:6f:00:10:ca:89:51:32:8d:4f:c4:1c:28:20:02: 68:5a:7c:78:06:36:cc:73:75:81:8a:ec:ba:c8:e3:28:af:8b: 64:c5:8e:14:70:dc:14:a8:4a:9a:ab:d5:cb:c1:23:2c:f0:3e: e5:b2:ea:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqo01e1NldCMu/AsSULdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTFmNTlhOTY3OTcyNzFlMWZkNjY3M2E5YzUzNDI1N2Rh ODhlNmIwHhcNMjUxMjA2MTEwMTEyWhcNMjUxMjA3MTEwMTEyWjAzMTEwLwYDVQQD EyhjOTAyZTc2ZGU5NmRiMWM1YzNlNmI4YTFiMmM0MGFmOWY0N2IwNTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIwQIxhJ7qI4NrVrjIBmLqzOkujE S9YmMYdDQjwBoaMXelnqX6YMzMPUM83nAGUqRxlKN6GxBVTBntx71G7dwnJZL0Ti M5Z88XpuR4wDFDvnRHFOAjkAKwrQ89DATZdJm8CmfqFrBmhxWfOwuZwdOhrDVXHh wk8tXtGOOouXlVGvQcYD7NVEjwyq0D36usUyyy5KuwmTgYlcVJgCdEGIyDCLL5j+ 1gRD/rT6KFal7J2w8mhrZ/pGRnhOH3n5w39/ihRtU/E1+aLgXlEvjqiutwHlIbHg /k2+n3f4rzHzYN7N6Rnv6YH5M/Ae3v6M935/4aaRH2k6RZD00qLLXl0rzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkC523pbbHFw+a4obLECvn0ewUiMB8GA1UdIwQY MBaAFB6h9ZqWeXJx4f1mc6nFNCV9qI5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmI1MDgtMWZhZC00Mjk5LTg3MjAt N2M0YWZiODhlMmYyLzEvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85MmI1MDgtMWZhZC00Mjk5LTg3MjAtN2M0YWZiODhlMmYy LzEvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJsiE9nL jKtWXXLNQ+oGUJzPKOGnZCQ/ywE5vfBtPDLo0B9ojuxN/XcKTxjWQ7w53DWnGt9+ Hua9WIVnTcnHY8Fg21LjmyfZ06U0cKg90RVu1e5KiYHytrPM3PfIReMPn+yFyTnf 6+GZvRwW78h+HwqSqLtCUliHlF2VfH59bRxoSejQdQrwGSTUpcuXA8jqV1FTwJYU qDDKRnSIdTGozdPlLc3+ccYoTk30cBhAip+J31eoQwa5F4nmMbMCVJn8Rn7PoeB9 D5nrXm8AEMqJUTKNT8QcKCACaFp8eAY2zHN1gYrsusjjKK+LZMWOFHDcFKhKmqvV y8EjLPA+5bLqUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:37 2025 by rpki-client