This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft File: HNq3BST9UTE7hPXY9GNio9jICBQ.mft (raw, json) Hash identifier: d2L/IzsmgpTqYxx4kASIgyLXVNTD4BcNHMP2tmATDaA= Subject key identifier: 9E:57:A1:ED:7F:88:F0:9B:37:EB:EE:91:C3:9C:BD:99:54:B2:27:25 Authority key identifier: 1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14 Certificate issuer: /CN=1cdab70524fd51313b84f5d8f46362a3d8c80814 Certificate serial: 019AF3F7D3D7900F5AF67CD63D02C46A11DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 14:01:36 +0000 Manifest this update: Sat 06 Dec 2025 14:01:36 +0000 Manifest next update: Sun 07 Dec 2025 14:01:36 +0000 Files and hashes: 1: 8H6vwz49R0kM-gbNtDLGiXSOgWE.roa (hash: 7d11KfsVtGX7lu3CgRTWP0J/PhStNQboteNSMa34UZE=) 2: HNq3BST9UTE7hPXY9GNio9jICBQ.crl (hash: wyuaJ0DxXDRwGksweV9Q4wfD4Lw7p8C3FTI2gJdZMQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:d3:d7:90:0f:5a:f6:7c:d6:3d:02:c4:6a:11:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cdab70524fd51313b84f5d8f46362a3d8c80814 Validity Not Before: Dec 6 14:01:36 2025 GMT Not After : Dec 7 14:01:36 2025 GMT Subject: CN=9e57a1ed7f88f09b37ebee91c39cbd9954b22725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:95:0b:51:48:64:d3:f0:45:30:ca:c3:6c:35: f8:97:25:07:42:c7:fe:47:df:26:8f:25:c0:3b:f0: 06:cc:6e:ad:3e:bb:0b:0e:9c:94:2a:e4:e2:a9:1d: 25:36:a5:14:36:7c:0c:a0:11:68:dd:3c:4d:80:60: 67:d4:df:2a:01:ca:ab:cc:6b:a1:31:14:bd:63:0c: 0e:3d:bd:21:35:df:29:48:b6:4d:0d:e4:7c:ce:c1: e8:8f:af:f6:9a:9b:88:71:83:4e:6e:99:06:f5:b3: 62:43:ee:d4:01:b5:31:1a:f5:76:a4:53:7a:53:ac: e6:06:e8:ab:d4:f6:d2:1f:aa:0e:40:b0:a8:44:f0: 64:41:85:8e:f9:2d:24:57:44:54:81:7f:68:97:e8: 0d:32:c7:2a:75:7f:e3:d4:b7:4d:45:04:11:db:4e: 81:97:59:29:9d:cc:6a:f9:ce:7c:d2:02:57:21:96: 74:84:af:e8:f7:ff:e1:de:5e:af:68:3c:ed:17:99: 4c:c2:4e:8d:e6:12:d8:00:ef:3c:c2:b9:56:36:7b: 44:58:f2:fc:3c:3e:7a:6b:9d:cf:6f:fa:d4:5a:c6: 26:d4:04:71:a8:a5:7c:ff:e9:1a:3c:d6:80:5c:e3: b1:0a:94:0d:90:c7:d3:23:fd:21:80:12:81:08:74: 3f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:57:A1:ED:7F:88:F0:9B:37:EB:EE:91:C3:9C:BD:99:54:B2:27:25 X509v3 Authority Key Identifier: keyid:1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:25:1f:b0:9b:e4:49:66:1c:d2:89:19:e9:ab:bb:9b:7b:a4: 57:ef:b6:c5:8d:c1:c3:36:6d:cb:61:23:23:22:83:82:c2:0e: 59:b6:bf:41:30:b8:d3:b0:ef:d9:48:6b:92:69:6e:6c:21:05: a8:e7:fd:94:c8:1b:c7:72:3b:bb:9a:fb:a4:a1:44:f1:c1:33: e1:49:a0:44:0b:2c:da:3e:bb:28:91:8a:e1:ca:ae:44:7f:bb: 62:d0:a7:37:c6:ea:58:51:30:cc:14:06:b3:e0:55:a0:91:e9: 2b:dc:99:d9:4f:60:e0:de:78:32:65:44:96:a8:a2:24:a2:43: 11:51:5f:5a:14:66:52:78:19:6b:a4:c1:16:9a:db:35:fc:00: 4b:63:ff:23:b6:2e:6d:00:c0:3b:47:ff:77:1c:d8:b8:f0:6b: dd:95:64:45:47:ce:6d:c9:a6:67:db:a4:86:39:80:d0:07:90: af:88:00:ed:06:74:7e:f6:0a:b3:91:f9:58:6d:dc:23:ee:aa: 8a:ab:84:65:7f:c6:98:e0:ed:bb:ba:2e:ca:ff:ae:a8:79:1c: 86:10:a0:ee:28:da:c8:33:d5:f5:1b:34:36:5b:22:3a:76:58: 49:c1:b2:83:6d:3e:b2:4e:29:49:77:27:bc:88:e6:17:fd:a2: 39:6f:a7:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99PXkA9a9nzWPQLEahHcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZGFiNzA1MjRmZDUxMzEzYjg0ZjVkOGY0NjM2MmEzZDhj ODA4MTQwHhcNMjUxMjA2MTQwMTM2WhcNMjUxMjA3MTQwMTM2WjAzMTEwLwYDVQQD Eyg5ZTU3YTFlZDdmODhmMDliMzdlYmVlOTFjMzljYmQ5OTU0YjIyNzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15ULUUhk0/BFMMrDbDX4lyUHQsf+ R98mjyXAO/AGzG6tPrsLDpyUKuTiqR0lNqUUNnwMoBFo3TxNgGBn1N8qAcqrzGuh MRS9YwwOPb0hNd8pSLZNDeR8zsHoj6/2mpuIcYNObpkG9bNiQ+7UAbUxGvV2pFN6 U6zmBuir1PbSH6oOQLCoRPBkQYWO+S0kV0RUgX9ol+gNMscqdX/j1LdNRQQR206B l1kpncxq+c580gJXIZZ0hK/o9//h3l6vaDztF5lMwk6N5hLYAO88wrlWNntEWPL8 PD56a53Pb/rUWsYm1ARxqKV8/+kaPNaAXOOxCpQNkMfTI/0hgBKBCHQ/lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5Xoe1/iPCbN+vukcOcvZlUsiclMB8GA1UdIwQY MBaAFBzatwUk/VExO4T12PRjYqPYyAgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE5xM0JTVDlVVEU3aFBYWTlHTmlvOWpJQ0JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xOTAxN2EtNGZjYy00ZmFkLWE1NzIt OTlmNjkzZTQ1MDYxLzEvSE5xM0JTVDlVVEU3aFBYWTlHTmlvOWpJQ0JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8xOTAxN2EtNGZjYy00ZmFkLWE1NzItOTlmNjkzZTQ1MDYx LzEvSE5xM0JTVDlVVEU3aFBYWTlHTmlvOWpJQ0JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSUfsJvk SWYc0okZ6au7m3ukV++2xY3BwzZty2EjIyKDgsIOWba/QTC407Dv2UhrkmlubCEF qOf9lMgbx3I7u5r7pKFE8cEz4UmgRAss2j67KJGK4cquRH+7YtCnN8bqWFEwzBQG s+BVoJHpK9yZ2U9g4N54MmVElqiiJKJDEVFfWhRmUngZa6TBFprbNfwAS2P/I7Yu bQDAO0f/dxzYuPBr3ZVkRUfObcmmZ9ukhjmA0AeQr4gA7QZ0fvYKs5H5WG3cI+6q iquEZX/GmODtu7ouyv+uqHkchhCg7ijayDPV9Rs0NlsiOnZYScGyg20+sk4pSXcn vIjmF/2iOW+now== -----END CERTIFICATE-----Generated at Sat Dec 6 22:21:27 2025 by rpki-client