This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft File: HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json) Hash identifier: jmtn91G6SiTnCy9t1z09sOHEPmTb7uEiNtE5uJRsi4E= Subject key identifier: 12:96:F0:2F:B1:65:F6:D3:83:77:C4:4E:E0:03:CA:20:2B:CD:28:41 Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c Certificate serial: 019AF389B2C8A02C66126BD7F3B68CA1A92A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 12:01:18 +0000 Manifest this update: Sat 06 Dec 2025 12:01:18 +0000 Manifest next update: Sun 07 Dec 2025 12:01:18 +0000 Files and hashes: 1: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: R5yJmzrc6rntrko/qCRmcx4M1l8kdDcgiy6gSv1bzgA=) 2: LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa (hash: Jtc+IuVms0/thPHj5bGPRIMsxU7hFLPzHKxvZdogizk=) 3: aWalfbOeEBKlHFJV-ENu8MAsZo4.roa (hash: EdxjZs6zvCXnFCAeiNpfiVYwCGvEbmMbWMZx7J9tRCc=) 4: ucuU-Uq0Xb62o4XqDQOup7WMShY.roa (hash: bTCTTFwhaYZdJywJ5h4MOhDury0ZGVdUw5QGOuUV0Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:b2:c8:a0:2c:66:12:6b:d7:f3:b6:8c:a1:a9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c Validity Not Before: Dec 6 12:01:18 2025 GMT Not After : Dec 7 12:01:18 2025 GMT Subject: CN=1296f02fb165f6d38377c44ee003ca202bcd2841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:cc:ea:7e:46:03:22:4f:ff:33:50:cc:99: 05:a3:50:a1:78:5a:bb:38:af:37:d6:a7:8c:60:97: a3:af:c3:fb:a5:55:b8:9d:a7:60:a3:2c:8f:4c:a0: 84:ee:42:94:2f:15:de:9e:a4:87:3c:9f:2c:66:18: fa:8f:5d:70:cf:b7:82:da:c7:cc:09:1b:ff:aa:c2: 40:de:cc:d5:c3:03:23:cd:0c:f4:b8:6b:d9:35:5c: 20:d2:7b:6f:f0:2d:da:4b:44:e0:52:69:72:99:6a: af:92:01:6b:a6:93:0d:2d:dd:f3:b5:f2:af:9b:f5: cb:b3:96:fc:d9:b5:54:e7:35:23:5b:91:30:33:48: 5a:ee:22:46:47:bc:0c:78:08:20:9f:a3:cf:8e:a7: a1:c7:29:5a:22:5b:7c:7b:93:62:e4:97:75:0d:2e: fe:87:82:55:7f:aa:c4:e1:11:74:f8:82:7a:45:c9: 50:62:1f:69:40:dc:85:d4:0e:3b:4f:94:95:1b:1a: f4:d2:a8:45:57:5b:ba:a9:33:5f:90:51:59:e3:17: d4:d8:c0:3e:a4:70:ee:b2:26:08:0a:9c:29:77:32: 58:31:71:01:60:c7:4e:e1:9b:8f:af:5a:df:4c:72: bd:89:7b:17:ad:62:90:d7:dd:fe:07:55:eb:f3:a1: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:96:F0:2F:B1:65:F6:D3:83:77:C4:4E:E0:03:CA:20:2B:CD:28:41 X509v3 Authority Key Identifier: keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d4:c4:9c:48:e9:5d:97:6c:24:0b:24:6f:ab:f1:63:11:d0: 9c:52:2c:71:a8:22:47:3f:72:cf:50:d7:56:b9:87:de:b0:07: 59:e6:e8:e0:a8:fd:f4:75:28:8d:43:67:8b:80:f1:06:87:fb: 89:8e:98:b4:5d:d0:ae:6e:04:4a:c2:6e:e6:27:f4:f7:64:64: e6:29:67:9f:06:08:ef:7a:bc:ec:d3:89:1b:f2:35:c3:78:3e: 38:a9:d7:de:97:c9:5c:c9:ab:da:0d:f3:5f:ab:ea:85:c0:db: e1:c9:94:88:3b:cb:0f:8c:c4:4d:79:b8:99:36:b8:0e:d6:53: 00:ee:34:c3:6a:1e:c6:ff:73:78:db:f4:c2:8e:b8:a8:0f:1a: f0:ed:98:a4:f4:2e:41:24:6c:56:dc:bb:42:e7:17:db:a7:ae: 1b:60:4f:82:95:69:b6:76:98:ae:0b:4c:99:8f:2c:b6:31:fe: 53:2a:b6:14:88:32:e6:28:08:51:b6:01:ba:da:ba:40:58:ca: 44:e8:c4:33:29:9e:94:88:06:9f:45:fd:22:3d:d1:47:cf:35: be:44:6c:eb:0a:7f:53:e5:36:4d:8a:75:4f:58:7e:de:4b:45: 23:75:56:58:9a:01:ec:35:13:ad:42:2b:51:8f:be:54:ac:85: 43:ab:30:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibLIoCxmEmvX87aMoakqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDg3MWZjMmU5OTg5MmVhMTExNWEzMDIxMzhlMWQzMmE2 MjE4MmMwHhcNMjUxMjA2MTIwMTE4WhcNMjUxMjA3MTIwMTE4WjAzMTEwLwYDVQQD EygxMjk2ZjAyZmIxNjVmNmQzODM3N2M0NGVlMDAzY2EyMDJiY2QyODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurrM6n5GAyJP/zNQzJkFo1CheFq7 OK831qeMYJejr8P7pVW4nadgoyyPTKCE7kKULxXenqSHPJ8sZhj6j11wz7eC2sfM CRv/qsJA3szVwwMjzQz0uGvZNVwg0ntv8C3aS0TgUmlymWqvkgFrppMNLd3ztfKv m/XLs5b82bVU5zUjW5EwM0ha7iJGR7wMeAggn6PPjqehxylaIlt8e5Ni5Jd1DS7+ h4JVf6rE4RF0+IJ6RclQYh9pQNyF1A47T5SVGxr00qhFV1u6qTNfkFFZ4xfU2MA+ pHDusiYICpwpdzJYMXEBYMdO4ZuPr1rfTHK9iXsXrWKQ193+B1Xr86Gu1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKW8C+xZfbTg3fETuADyiArzShBMB8GA1UdIwQY MBaAFB0IcfwumYkuoRFaMCE44dMqYhgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAt NGYzZTViMmUwYzU2LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAtNGYzZTViMmUwYzU2 LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdTEnEjp XZdsJAskb6vxYxHQnFIscagiRz9yz1DXVrmH3rAHWebo4Kj99HUojUNni4DxBof7 iY6YtF3Qrm4ESsJu5if092Rk5ilnnwYI73q87NOJG/I1w3g+OKnX3pfJXMmr2g3z X6vqhcDb4cmUiDvLD4zETXm4mTa4DtZTAO40w2oexv9zeNv0wo64qA8a8O2YpPQu QSRsVty7QucX26euG2BPgpVptnaYrgtMmY8stjH+Uyq2FIgy5igIUbYButq6QFjK ROjEMymelIgGn0X9Ij3RR881vkRs6wp/U+U2TYp1T1h+3ktFI3VWWJoB7DUTrUIr UY++VKyFQ6swFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:27:28 2025 by rpki-client