This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft File: hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft (raw, json) Hash identifier: kD9tQO8K64wbFUHSBFYGZRFkZTSI7ZK2gTiUpAyZ7tw= Subject key identifier: B3:6D:4B:CC:7D:0F:C4:40:13:D7:CE:E6:C9:DD:A3:1F:39:E4:90:8F Authority key identifier: 85:02:8F:90:14:28:3B:34:9D:16:CA:FD:C9:4B:7F:5E:F1:53:0E:4D Certificate issuer: /CN=85028f9014283b349d16cafdc94b7f5ef1530e4d Certificate serial: 019B1B04A43AF4607449652D6809B6E65AA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft Manifest number: 050D Signing time: Sun 14 Dec 2025 04:00:47 +0000 Manifest this update: Sun 14 Dec 2025 04:00:47 +0000 Manifest next update: Mon 15 Dec 2025 04:00:47 +0000 Files and hashes: 1: hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl (hash: lehckAvMs0obAqkDBJMpue/fQp/sOWhF1yX7+9CawB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:04:a4:3a:f4:60:74:49:65:2d:68:09:b6:e6:5a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85028f9014283b349d16cafdc94b7f5ef1530e4d Validity Not Before: Dec 14 04:00:47 2025 GMT Not After : Dec 15 04:00:47 2025 GMT Subject: CN=b36d4bcc7d0fc44013d7cee6c9dda31f39e4908f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:8b:90:dd:a1:65:2d:27:fd:88:71:37:2b: 0d:79:c3:71:f9:b9:f1:32:e9:fc:9f:2e:a7:83:6d: b6:13:b8:d9:74:61:83:74:94:b3:13:aa:9c:4e:74: 4c:c3:ef:0a:df:ac:9e:cc:bd:82:f7:a7:25:80:44: 78:fb:b2:0a:80:52:23:27:20:ff:3c:f7:65:e1:ac: 2d:26:08:cb:4f:79:1d:94:a2:cf:f9:3f:9c:9b:c8: 7b:5c:95:5d:40:bc:7b:fd:a1:ae:3e:a7:b6:00:9a: fd:ff:13:fb:92:16:8b:d1:5b:5e:9e:44:36:14:5a: f6:79:0b:02:7c:37:a4:5f:73:3c:75:f7:62:98:03: f5:63:d8:f4:2f:84:27:68:20:a9:fb:60:e4:28:47: db:f5:cf:6a:76:d1:01:f7:f0:4b:0c:64:fc:f2:8f: f0:91:95:a2:41:a0:f3:ac:ea:6f:de:25:c1:10:71: 86:7c:2b:48:e4:63:53:a0:c7:20:e9:e7:a8:fb:c8: cc:1f:3a:98:f1:9d:fc:17:61:12:01:8f:f5:08:6e: 67:f3:c9:6f:f2:56:d3:27:1e:83:b6:6f:ff:5b:f8: f7:9c:8b:6d:2b:c7:0e:2e:8e:85:39:12:3a:8e:1f: be:67:b1:45:a8:2b:9c:6f:2a:73:cc:21:87:90:f9: 9c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6D:4B:CC:7D:0F:C4:40:13:D7:CE:E6:C9:DD:A3:1F:39:E4:90:8F X509v3 Authority Key Identifier: keyid:85:02:8F:90:14:28:3B:34:9D:16:CA:FD:C9:4B:7F:5E:F1:53:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:39:5c:eb:e1:bc:07:e3:db:00:00:6c:29:cc:92:fe:e2:94: 62:83:1b:5e:9a:0f:95:e7:62:b6:f4:e9:a1:72:45:b1:b3:d1: 89:62:a4:b1:f8:3b:b9:68:7e:91:bb:2a:4a:f3:61:23:2c:d2: ef:18:fd:70:d3:96:89:8e:ea:f1:5e:a5:31:fb:8b:72:34:ca: 1f:76:95:6c:e5:5b:dd:cd:db:1c:0f:e6:6d:30:56:c8:15:7c: e0:6e:51:d8:89:53:50:f7:c6:e0:2d:8b:62:5b:2b:f2:0a:16: 50:41:ae:08:53:2a:b5:e8:32:d9:a4:cd:85:ff:b2:a8:d2:8e: 6c:6f:40:0b:d3:a7:d4:d5:e0:83:e8:bb:38:86:45:bd:5c:20: 25:57:40:72:67:9e:b7:d5:47:cb:2e:49:3a:ad:5e:45:9b:1a: 92:cb:c8:37:47:3e:4c:04:21:ea:ca:52:a2:44:ff:e3:ea:58: 6c:a1:af:0a:66:02:a6:f4:db:87:4c:8c:0e:c5:0f:e7:dc:3d: 43:3c:5d:45:ac:bc:31:87:d9:04:d1:87:c3:75:96:0d:05:36: b7:f4:5d:d1:c7:f1:29:c5:5e:98:f1:54:d2:ec:44:0f:4d:fa: 02:06:77:9b:4d:8d:c6:40:70:b8:de:b7:d8:22:32:c9:3c:fa: 85:d5:41:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBKQ69GB0SWUtaAm25lqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MDI4ZjkwMTQyODNiMzQ5ZDE2Y2FmZGM5NGI3ZjVlZjE1 MzBlNGQwHhcNMjUxMjE0MDQwMDQ3WhcNMjUxMjE1MDQwMDQ3WjAzMTEwLwYDVQQD EyhiMzZkNGJjYzdkMGZjNDQwMTNkN2NlZTZjOWRkYTMxZjM5ZTQ5MDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaeLkN2hZS0n/YhxNysNecNx+bnx Mun8ny6ng222E7jZdGGDdJSzE6qcTnRMw+8K36yezL2C96clgER4+7IKgFIjJyD/ PPdl4awtJgjLT3kdlKLP+T+cm8h7XJVdQLx7/aGuPqe2AJr9/xP7khaL0VtenkQ2 FFr2eQsCfDekX3M8dfdimAP1Y9j0L4QnaCCp+2DkKEfb9c9qdtEB9/BLDGT88o/w kZWiQaDzrOpv3iXBEHGGfCtI5GNToMcg6eeo+8jMHzqY8Z38F2ESAY/1CG5n88lv 8lbTJx6Dtm//W/j3nIttK8cOLo6FORI6jh++Z7FFqCucbypzzCGHkPmcGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNtS8x9D8RAE9fO5sndox855JCPMB8GA1UdIwQY MBaAFIUCj5AUKDs0nRbK/clLf17xUw5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFFLUGtCUW9PelNkRnNyOXlVdF9YdkZURGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lNzBmY2UtOTYxMi00MDQ3LTkyZTEt ODYzOWU1ZGE5N2U3LzEvaFFLUGtCUW9PelNkRnNyOXlVdF9YdkZURGswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9lNzBmY2UtOTYxMi00MDQ3LTkyZTEtODYzOWU1ZGE5N2U3 LzEvaFFLUGtCUW9PelNkRnNyOXlVdF9YdkZURGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDlc6+G8 B+PbAABsKcyS/uKUYoMbXpoPleditvTpoXJFsbPRiWKksfg7uWh+kbsqSvNhIyzS 7xj9cNOWiY7q8V6lMfuLcjTKH3aVbOVb3c3bHA/mbTBWyBV84G5R2IlTUPfG4C2L Ylsr8goWUEGuCFMqtegy2aTNhf+yqNKObG9AC9On1NXgg+i7OIZFvVwgJVdAcmee t9VHyy5JOq1eRZsaksvIN0c+TAQh6spSokT/4+pYbKGvCmYCpvTbh0yMDsUP59w9 QzxdRay8MYfZBNGHw3WWDQU2t/Rd0cfxKcVemPFU0uxED036AgZ3m02NxkBwuN63 2CIyyTz6hdVBfQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:53 2025 by rpki-client