This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft File: HNPDCTm5BqRRWhxlwIg2gptqMok.mft (raw, json) Hash identifier: Lmigds1Fg57M/a12+kGI/gywrVHw8AbvrBXAEtx2c4o= Subject key identifier: CD:EE:42:23:15:39:D0:DB:FF:70:34:69:48:09:92:B1:BB:7F:AC:ED Authority key identifier: 1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89 Certificate issuer: /CN=1cd3c30939b906a4515a1c65c08836829b6a3289 Certificate serial: 019AF35256E20F8DA0937F80C2F81A00CAD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:00:50 +0000 Manifest this update: Sat 06 Dec 2025 11:00:50 +0000 Manifest next update: Sun 07 Dec 2025 11:00:50 +0000 Files and hashes: 1: HNPDCTm5BqRRWhxlwIg2gptqMok.crl (hash: MTcgMoov+6034JKLNhkYXIqzxutqAIthWSnCLHtQ7eQ=) 2: zraU6JUbMiPLRortKHmXEnAo1OE.roa (hash: HMXC6yKtO8g8Ym91NRBLoqlps2ZqE/0U22YJBVZue4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:56:e2:0f:8d:a0:93:7f:80:c2:f8:1a:00:ca:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cd3c30939b906a4515a1c65c08836829b6a3289 Validity Not Before: Dec 6 11:00:50 2025 GMT Not After : Dec 7 11:00:50 2025 GMT Subject: CN=cdee42231539d0dbff703469480992b1bb7faced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d9:ae:c0:a3:94:e6:b7:3a:73:02:04:94:89: b6:6d:f6:4b:a3:9c:aa:b1:3b:6f:9c:d1:76:58:ea: 61:07:81:10:5a:6d:33:c5:7d:e9:47:c3:fb:bb:45: 56:16:f3:c0:3c:b2:c7:7f:73:db:b3:ba:1c:20:f6: 03:d0:7f:a5:97:31:84:6e:24:1d:cd:ff:8f:51:a1: 05:fd:4b:86:57:78:92:67:09:35:2a:0c:ed:4b:b2: 71:0d:3f:71:41:92:20:37:42:6f:6d:05:1e:b9:0d: db:34:16:8b:79:d5:14:1d:0e:a2:56:5a:1f:06:be: 60:e1:10:9a:69:33:04:eb:52:b7:92:78:90:4a:99: f0:0d:1b:ec:af:1e:b0:58:77:52:93:12:a9:00:c0: 49:2a:cd:d1:89:e4:8f:1b:56:e3:76:45:30:55:01: ac:86:ff:cf:fa:3f:b2:56:52:5c:21:6e:f2:02:01: 1b:ea:44:f5:e0:df:a7:73:ba:60:b1:62:38:d1:2d: ed:f4:f3:43:ee:d5:a4:78:80:96:35:c8:39:04:56: d5:d8:67:35:6a:c7:eb:1c:c6:d7:d8:93:63:fc:4b: 92:f6:09:3a:db:47:f7:00:9f:56:01:df:dd:04:53: 9f:b8:77:e3:cf:ad:d8:69:99:7e:86:8a:d6:42:43: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EE:42:23:15:39:D0:DB:FF:70:34:69:48:09:92:B1:BB:7F:AC:ED X509v3 Authority Key Identifier: keyid:1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5d:92:60:4f:f8:b1:3a:e3:83:66:09:ec:5c:99:26:b5:e0: 70:68:b2:08:46:e9:5c:70:9b:c1:1f:ea:34:f3:b9:e7:03:b0: b0:90:7c:79:b5:ea:21:47:44:ea:f2:f8:51:df:66:b1:72:22: 7e:97:b3:d2:8d:3a:9a:68:cc:98:c8:ef:50:cf:76:36:ca:cb: 03:98:7a:b5:3d:12:90:74:d8:15:33:64:c1:25:3f:b3:d5:dc: 92:1e:77:a2:36:fd:a6:2d:a2:58:d9:b2:29:f0:e9:bc:78:7e: c6:04:23:08:d2:3a:83:f2:51:a0:d4:1b:78:0a:5f:f5:e0:9b: 01:49:ff:05:40:58:c2:f9:b2:a1:1b:0e:78:c5:16:3e:9f:23: 03:af:4c:4d:b5:d4:b6:0c:16:6c:3a:13:27:99:2b:26:16:38: ff:51:3f:e2:4d:83:f6:5d:6b:cf:ac:5f:8a:f8:71:4c:d7:43: cd:67:35:3a:f9:69:7a:0f:38:cc:01:aa:11:e5:91:b7:2b:14: a0:d1:0e:60:4f:2a:83:b2:59:2c:3d:04:5a:a4:8f:87:80:07: 29:8d:b2:18:4e:ac:4a:a5:db:95:ac:6d:1c:f6:aa:05:5b:e8: 7c:62:25:1e:a6:ad:cc:e5:92:9a:34:11:a8:bb:bd:f3:0f:4f: de:c4:fe:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUlbiD42gk3+AwvgaAMrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZDNjMzA5MzliOTA2YTQ1MTVhMWM2NWMwODgzNjgyOWI2 YTMyODkwHhcNMjUxMjA2MTEwMDUwWhcNMjUxMjA3MTEwMDUwWjAzMTEwLwYDVQQD EyhjZGVlNDIyMzE1MzlkMGRiZmY3MDM0Njk0ODA5OTJiMWJiN2ZhY2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89muwKOU5rc6cwIElIm2bfZLo5yq sTtvnNF2WOphB4EQWm0zxX3pR8P7u0VWFvPAPLLHf3Pbs7ocIPYD0H+llzGEbiQd zf+PUaEF/UuGV3iSZwk1KgztS7JxDT9xQZIgN0JvbQUeuQ3bNBaLedUUHQ6iVlof Br5g4RCaaTME61K3kniQSpnwDRvsrx6wWHdSkxKpAMBJKs3RieSPG1bjdkUwVQGs hv/P+j+yVlJcIW7yAgEb6kT14N+nc7pgsWI40S3t9PND7tWkeICWNcg5BFbV2Gc1 asfrHMbX2JNj/EuS9gk620f3AJ9WAd/dBFOfuHfjz63YaZl+horWQkO2WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3uQiMVOdDb/3A0aUgJkrG7f6ztMB8GA1UdIwQY MBaAFBzTwwk5uQakUVocZcCINoKbajKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQt MGZmODZlZjk1ZTBmLzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQtMGZmODZlZjk1ZTBm LzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjV2SYE/4 sTrjg2YJ7FyZJrXgcGiyCEbpXHCbwR/qNPO55wOwsJB8ebXqIUdE6vL4Ud9msXIi fpez0o06mmjMmMjvUM92NsrLA5h6tT0SkHTYFTNkwSU/s9Xckh53ojb9pi2iWNmy KfDpvHh+xgQjCNI6g/JRoNQbeApf9eCbAUn/BUBYwvmyoRsOeMUWPp8jA69MTbXU tgwWbDoTJ5krJhY4/1E/4k2D9l1rz6xfivhxTNdDzWc1Ovlpeg84zAGqEeWRtysU oNEOYE8qg7JZLD0EWqSPh4AHKY2yGE6sSqXblaxtHPaqBVvofGIlHqatzOWSmjQR qLu98w9P3sT+vQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:02:22 2025 by rpki-client