This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft File: HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json) Hash identifier: l5bWqBn5mw3H8w5z5w1jh+slH0vWHOTjJJPX7siKrmc= Subject key identifier: B8:34:A5:DC:5B:0E:01:EF:1A:BB:AB:4C:34:C3:08:34:21:9A:0B:9F Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd Certificate serial: 019AF3890CB9E6A4E5C4192CAD48163D15AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft Manifest number: 17AC Signing time: Sat 06 Dec 2025 12:00:36 +0000 Manifest this update: Sat 06 Dec 2025 12:00:36 +0000 Manifest next update: Sun 07 Dec 2025 12:00:36 +0000 Files and hashes: 1: 4VZ9cyXhGhxm5Tn9Idx--URlnKM.roa (hash: Cia+lcB5DKt9KwiNDJP0PQVbg2qQjwIiWHZ3vsXGfh8=) 2: 4e2_MxEbAwSKyK_yMLyvMMWQTvc.roa (hash: Nw78uZqDKd/Z7FYgKDCdKH3T/mzlREHr9wc28wcO45A=) 3: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: sedJS5hNu9Ps/y1FpuMjiCyBOeOiJ00UIdcZ0f9xAsc=) 4: zG080oPzQ7rUD2R7hxV-XMU_OR0.roa (hash: KCxH/ifXlQAl04FGcXC3J2HL9Sc2PbI+s4bKHHGNkKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:0c:b9:e6:a4:e5:c4:19:2c:ad:48:16:3d:15:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd Validity Not Before: Dec 6 12:00:36 2025 GMT Not After : Dec 7 12:00:36 2025 GMT Subject: CN=b834a5dc5b0e01ef1abbab4c34c30834219a0b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9b:41:82:68:b6:d7:1a:78:78:9f:73:3c:37: 2f:c8:aa:00:11:55:7b:37:f0:51:58:20:a1:df:dc: 27:c1:0f:a5:d1:21:dd:c8:c8:59:8e:65:e4:24:d2: b8:a3:19:0c:ec:34:0a:ff:10:02:b4:5b:f1:3e:a1: 9d:5a:66:be:c2:6f:71:11:80:04:a2:51:f0:34:d8: 99:00:15:87:f4:c5:74:f6:bb:f8:01:69:b9:5b:0a: a2:9c:36:2d:9b:36:a5:70:59:fd:40:78:4d:9c:6c: f2:16:9b:c2:6a:d0:cf:01:19:c5:dd:42:be:86:bd: 19:f1:84:60:ac:ae:4f:c7:21:79:01:d7:4c:04:a7: 56:ee:d0:66:fe:68:01:7f:e9:f6:a7:c4:20:18:08: 87:0d:3a:a9:0a:3b:51:29:3a:2c:f6:23:82:05:17: 48:03:55:bf:02:e1:b9:44:ae:69:35:1b:b5:df:d5: 1f:2f:8c:92:b5:f8:89:ee:49:9e:42:44:1b:da:cb: f2:96:1b:8c:e6:e1:bb:ed:ae:f8:0e:00:c9:c5:dc: ea:4c:95:f2:39:11:9c:69:08:98:cb:36:05:e9:20: ae:62:4e:e6:dd:2e:0c:2f:c9:7e:6a:17:b5:79:85: 67:57:63:72:bb:c0:69:f1:b8:e0:45:ca:5d:51:00: 2c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:34:A5:DC:5B:0E:01:EF:1A:BB:AB:4C:34:C3:08:34:21:9A:0B:9F X509v3 Authority Key Identifier: keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:aa:e4:c5:2a:f7:10:92:cd:4d:39:e8:3d:1b:c3:81:09:a3: 43:b7:db:7a:06:58:e5:86:8a:92:3f:92:6f:da:98:78:c2:19: 42:45:5e:c0:d5:b8:be:75:c3:e2:70:1d:9b:8b:e8:3e:de:40: 95:a1:3b:2d:b3:d2:05:a2:9b:20:66:a7:3d:d8:64:54:10:39: b6:d5:87:3e:de:97:42:18:47:50:c3:46:0f:ac:cd:42:77:d3: 96:65:b2:ef:6b:6f:2e:f8:b7:b4:7f:d5:4b:70:5b:42:1e:59: 91:02:c5:ac:df:f5:ed:bb:2a:4d:1d:ec:e8:6c:d2:61:2a:1c: 6a:2a:34:2b:94:55:e1:e8:4d:9a:e8:7d:ca:cb:e1:73:b0:35: 38:4b:50:e8:3f:ee:c6:38:95:8d:e6:dc:e1:e0:7d:d0:0a:b5: c4:1c:a1:6b:4e:c7:b2:a9:f2:39:af:31:22:7b:4d:e5:8e:62: 1c:a2:a1:fb:0c:32:e7:da:4e:85:bf:b2:02:a6:49:60:5d:8b: 02:bb:fd:7b:6e:6e:4a:ca:ec:7c:93:f0:69:7c:01:f7:6a:8e: cf:26:f8:a5:cf:d4:b6:52:5c:47:fa:fd:e2:02:5a:c2:e0:3e: a7:2d:7d:8c:1d:11:89:07:9d:49:4b:13:59:a7:73:ea:a5:81: eb:a3:d3:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQy55qTlxBksrUgWPRWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDFmNGRmZmQ2ZmJhNjZjZGY4YzM3NGM5YjBmMDQ3NTUy NzA1ZGQwHhcNMjUxMjA2MTIwMDM2WhcNMjUxMjA3MTIwMDM2WjAzMTEwLwYDVQQD EyhiODM0YTVkYzViMGUwMWVmMWFiYmFiNGMzNGMzMDgzNDIxOWEwYjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJtBgmi21xp4eJ9zPDcvyKoAEVV7 N/BRWCCh39wnwQ+l0SHdyMhZjmXkJNK4oxkM7DQK/xACtFvxPqGdWma+wm9xEYAE olHwNNiZABWH9MV09rv4AWm5WwqinDYtmzalcFn9QHhNnGzyFpvCatDPARnF3UK+ hr0Z8YRgrK5PxyF5AddMBKdW7tBm/mgBf+n2p8QgGAiHDTqpCjtRKTos9iOCBRdI A1W/AuG5RK5pNRu139UfL4yStfiJ7kmeQkQb2svylhuM5uG77a74DgDJxdzqTJXy ORGcaQiYyzYF6SCuYk7m3S4ML8l+ahe1eYVnV2Nyu8Bp8bjgRcpdUQAskQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLg0pdxbDgHvGrurTDTDCDQhmgufMB8GA1UdIwQY MBaAFB0B9N/9b7pmzfjDdMmw8EdVJwXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iODAzODQtZjJmZS00NDU2LTljYWUt ZmU0YTAyY2FlZjdmLzEvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iODAzODQtZjJmZS00NDU2LTljYWUtZmU0YTAyY2FlZjdm LzEvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6rkxSr3 EJLNTTnoPRvDgQmjQ7fbegZY5YaKkj+Sb9qYeMIZQkVewNW4vnXD4nAdm4voPt5A laE7LbPSBaKbIGanPdhkVBA5ttWHPt6XQhhHUMNGD6zNQnfTlmWy72tvLvi3tH/V S3BbQh5ZkQLFrN/17bsqTR3s6GzSYSocaio0K5RV4ehNmuh9ysvhc7A1OEtQ6D/u xjiVjebc4eB90Aq1xByha07HsqnyOa8xIntN5Y5iHKKh+wwy59pOhb+yAqZJYF2L Arv9e25uSsrsfJPwaXwB92qOzyb4pc/UtlJcR/r94gJawuA+py19jB0RiQedSUsT Wadz6qWB66PTQA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:43:37 2025 by rpki-client