This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft File: HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json) Hash identifier: X58A//6yy2VLLDg9Y8wFvH+saQC6mpVVMxAsnjmlqyg= Subject key identifier: 92:B6:DA:78:95:4C:D8:C2:54:44:F8:8C:C5:CE:F1:8D:3F:FA:6B:8E Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c Certificate serial: 019B353215035E7F834E6E96592F93FCEA25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 06:00:33 +0000 Manifest this update: Fri 19 Dec 2025 06:00:33 +0000 Manifest next update: Sat 20 Dec 2025 06:00:33 +0000 Files and hashes: 1: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: LP8VLvkCPe4rzSp0qpPxSApfupQVJhx8+NAKSNq698o=) 2: LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa (hash: Jtc+IuVms0/thPHj5bGPRIMsxU7hFLPzHKxvZdogizk=) 3: aWalfbOeEBKlHFJV-ENu8MAsZo4.roa (hash: EdxjZs6zvCXnFCAeiNpfiVYwCGvEbmMbWMZx7J9tRCc=) 4: ucuU-Uq0Xb62o4XqDQOup7WMShY.roa (hash: bTCTTFwhaYZdJywJ5h4MOhDury0ZGVdUw5QGOuUV0Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:15:03:5e:7f:83:4e:6e:96:59:2f:93:fc:ea:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c Validity Not Before: Dec 19 06:00:33 2025 GMT Not After : Dec 20 06:00:33 2025 GMT Subject: CN=92b6da78954cd8c25444f88cc5cef18d3ffa6b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7f:e7:02:31:79:28:b9:b4:df:fd:a2:94:4d: 25:f1:4c:73:6c:7d:90:27:4d:97:f3:0f:88:f1:13: dc:39:a3:e1:53:20:67:84:12:6e:ac:c6:98:24:50: fd:19:b6:17:d4:10:52:bf:75:f1:de:83:2d:e7:9a: 16:92:2a:04:54:5c:bb:d0:92:aa:0e:65:3f:6a:72: 9a:67:96:4f:40:28:c2:7d:58:2a:2d:57:66:60:8b: 89:ae:d0:0e:0a:72:14:d3:cf:d8:50:c2:b8:63:dc: 36:98:ad:59:aa:e0:d4:6f:f5:2b:7d:bf:1f:79:67: 50:90:85:50:0f:cc:2b:63:68:62:17:78:d1:16:46: 1a:99:27:1e:de:87:ea:ce:d1:14:39:be:b4:85:c4: ba:52:6b:a2:15:9d:aa:fe:4d:35:80:75:5c:f5:23: f7:4b:3a:cf:b3:1d:70:72:ca:1e:b1:45:6b:9e:1b: b4:9f:57:0d:d3:02:d1:97:45:83:90:f2:fe:e2:13: c3:19:eb:0a:34:d8:0e:2c:68:6b:26:bf:b0:90:8f: dd:78:75:bc:80:ce:1d:bb:1a:ec:a2:0f:86:44:0b: ac:18:5f:7d:79:91:a1:87:32:e3:60:96:f8:0c:95: 82:9e:a0:fb:08:fe:69:7a:dc:87:48:96:cf:57:bf: 20:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B6:DA:78:95:4C:D8:C2:54:44:F8:8C:C5:CE:F1:8D:3F:FA:6B:8E X509v3 Authority Key Identifier: keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:79:f6:de:ed:ee:b6:57:d7:de:4f:53:cf:78:49:28:68:32: 1a:31:3b:a3:ba:8d:e2:72:00:0b:ac:35:30:0f:27:87:59:96: 5e:52:81:7a:de:c6:e6:36:96:e4:de:3c:3c:04:40:bc:44:d5: 1b:3e:68:07:7d:24:91:d9:27:65:cc:9a:c8:a2:96:54:20:13: 5b:9f:f2:97:80:7a:ad:75:36:4c:6d:ad:00:85:33:5b:89:83: fd:b1:9e:4a:54:83:80:bd:67:9f:9d:8a:da:0d:9c:93:2e:ae: 9e:dd:64:66:a8:36:7e:4b:9e:38:e8:26:ee:9e:51:c5:c3:2a: 1c:73:44:d0:b4:e2:50:83:9e:f6:94:7b:16:50:29:01:f5:04: 44:d9:0a:49:da:d6:ee:47:ab:4b:6e:b0:4e:60:68:00:66:0f: d2:c1:17:b0:9c:24:4c:c9:36:92:d7:a5:ff:76:3b:4a:47:a1: e4:63:03:b4:e8:c5:29:a8:fc:09:9c:77:88:d2:51:b8:1e:f5: f5:07:30:3e:ca:c8:3a:c2:9b:8d:5c:a0:3d:db:02:8f:1b:6a: 4f:a6:b4:0d:b9:0c:1c:8b:a5:cb:69:c9:5e:81:29:97:64:75: 83:40:60:38:59:e7:5d:73:7f:c0:d8:71:b5:e7:09:b3:be:80: 0d:e3:a5:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MhUDXn+DTm6WWS+T/OolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDg3MWZjMmU5OTg5MmVhMTExNWEzMDIxMzhlMWQzMmE2 MjE4MmMwHhcNMjUxMjE5MDYwMDMzWhcNMjUxMjIwMDYwMDMzWjAzMTEwLwYDVQQD Eyg5MmI2ZGE3ODk1NGNkOGMyNTQ0NGY4OGNjNWNlZjE4ZDNmZmE2YjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn/nAjF5KLm03/2ilE0l8UxzbH2Q J02X8w+I8RPcOaPhUyBnhBJurMaYJFD9GbYX1BBSv3Xx3oMt55oWkioEVFy70JKq DmU/anKaZ5ZPQCjCfVgqLVdmYIuJrtAOCnIU08/YUMK4Y9w2mK1ZquDUb/Urfb8f eWdQkIVQD8wrY2hiF3jRFkYamSce3ofqztEUOb60hcS6UmuiFZ2q/k01gHVc9SP3 SzrPsx1wcsoesUVrnhu0n1cN0wLRl0WDkPL+4hPDGesKNNgOLGhrJr+wkI/deHW8 gM4duxrsog+GRAusGF99eZGhhzLjYJb4DJWCnqD7CP5petyHSJbPV78gbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJK22niVTNjCVET4jMXO8Y0/+muOMB8GA1UdIwQY MBaAFB0IcfwumYkuoRFaMCE44dMqYhgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAt NGYzZTViMmUwYzU2LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAtNGYzZTViMmUwYzU2 LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXn23u3u tlfX3k9Tz3hJKGgyGjE7o7qN4nIAC6w1MA8nh1mWXlKBet7G5jaW5N48PARAvETV Gz5oB30kkdknZcyayKKWVCATW5/yl4B6rXU2TG2tAIUzW4mD/bGeSlSDgL1nn52K 2g2cky6unt1kZqg2fkueOOgm7p5RxcMqHHNE0LTiUIOe9pR7FlApAfUERNkKSdrW 7kerS26wTmBoAGYP0sEXsJwkTMk2ktel/3Y7Skeh5GMDtOjFKaj8CZx3iNJRuB71 9QcwPsrIOsKbjVygPdsCjxtqT6a0DbkMHIuly2nJXoEpl2R1g0BgOFnnXXN/wNhx tecJs76ADeOlIQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:31:41 2025 by rpki-client