This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json) Hash identifier: 2MQIPbq9bFcMuhdhNVf44P3lGMuOyuQljhQR1P/xVdE= Subject key identifier: EF:C4:05:F9:A7:02:48:4B:FB:33:27:C2:40:1A:6E:3D:41:64:41:94 Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa Certificate serial: 019B3A21793B061BF61CD7597C87B772163B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft Manifest number: 028C Signing time: Sat 20 Dec 2025 05:00:30 +0000 Manifest this update: Sat 20 Dec 2025 05:00:30 +0000 Manifest next update: Sun 21 Dec 2025 05:00:30 +0000 Files and hashes: 1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: K3ruJY4mhwzeqrDQQW7ya0ytJU5PWoJRMdO4jSA7S4U=) 2: _Nik0ILMWiY-Lkg3eSFYx1wzEfA.roa (hash: QByoOOal5rCcpZU9uENOAkBjvkiFCQ20AYgJc/azBtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:79:3b:06:1b:f6:1c:d7:59:7c:87:b7:72:16:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa Validity Not Before: Dec 20 05:00:30 2025 GMT Not After : Dec 21 05:00:30 2025 GMT Subject: CN=efc405f9a702484bfb3327c2401a6e3d41644194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:46:4e:4b:c5:7c:93:92:23:09:4c:91:65: 34:00:e2:56:8d:ae:08:05:c2:93:9e:ce:be:64:69: 60:36:ea:71:51:d5:11:4c:3f:73:47:34:36:e4:83: ba:28:52:d1:54:c6:87:6d:f9:60:4f:bc:40:63:86: 1c:28:35:38:25:28:b6:54:70:c9:e1:0d:0b:07:24: a2:7c:99:64:76:21:42:77:ff:d9:68:2e:4d:eb:38: 2e:60:66:1c:c1:88:cd:32:5e:1f:24:97:34:67:9f: 16:b9:88:2b:c1:7c:82:02:2e:fc:c4:82:c1:28:6f: 72:3f:c1:3f:38:84:4c:d3:3b:52:24:1f:f0:51:cf: f9:5b:af:7e:68:49:a4:fc:35:f5:1f:b9:4c:16:10: 40:14:04:e8:dd:9d:e0:fb:33:a2:13:85:61:ac:00: 7d:c9:28:be:06:2c:7c:b8:8b:b4:16:2e:2e:52:fc: f5:f3:b9:3d:16:5f:64:ba:c1:e4:ac:18:5c:e1:18: f4:b6:a5:c4:e1:4c:da:0e:4a:ac:b2:8a:80:91:18: ef:9e:5a:74:ed:8e:7b:7a:88:a9:af:8a:dd:0c:41: 93:f1:ce:71:72:aa:d8:56:60:69:53:9a:fe:d2:81: 10:59:c0:aa:b8:4d:8e:63:03:49:1a:65:a9:6f:92: 9f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C4:05:F9:A7:02:48:4B:FB:33:27:C2:40:1A:6E:3D:41:64:41:94 X509v3 Authority Key Identifier: keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:36:d8:9b:4f:45:1a:de:e7:df:e7:1f:7b:b9:ff:b3:18:ed: 9b:e7:34:54:26:84:b1:96:bc:87:9e:bd:52:f4:d8:eb:71:d7: 10:32:90:39:58:28:2e:15:00:e8:0e:a8:d4:ee:43:80:4c:1c: cc:8c:c5:cd:63:78:4e:f8:08:c3:f4:f2:42:96:6c:08:55:a7: b7:bd:62:99:98:cf:94:54:ed:c5:c6:10:11:08:e4:24:5b:19: c3:5a:6b:70:fe:f3:a4:b8:fd:91:64:07:3c:da:3f:4e:20:eb: 9f:52:13:fe:7a:ef:f9:11:4a:4f:3b:61:b7:57:89:74:1e:6b: fa:e4:68:8f:29:d3:8b:8a:00:0d:40:3b:0d:03:1c:76:18:6e: d4:c5:fe:df:76:18:61:de:85:97:a3:15:27:7c:a5:d5:28:53: 04:42:dc:db:cb:d1:61:4d:4c:d0:43:16:a3:e0:75:63:cd:53: bf:9b:ce:73:92:e2:a9:39:07:4e:f4:91:a6:23:09:3c:19:4d: 58:23:c1:7f:f9:d5:72:97:53:c8:01:15:34:99:ad:91:e2:10: 5f:c8:44:07:31:af:1a:0e:b4:3b:40:2a:ba:04:2d:bf:a0:59: ef:10:53:d1:2e:a7:1c:68:a9:42:94:e3:c5:d7:1d:ea:e7:36: 3f:6a:c3:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IXk7Bhv2HNdZfIe3chY7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZDcwODhkOWRhMjIxZjA1NjVlYjE3ODQ0MzYwMDE3MWU3 OTc3YWEwHhcNMjUxMjIwMDUwMDMwWhcNMjUxMjIxMDUwMDMwWjAzMTEwLwYDVQQD EyhlZmM0MDVmOWE3MDI0ODRiZmIzMzI3YzI0MDFhNmUzZDQxNjQ0MTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMdGTkvFfJOSIwlMkWU0AOJWja4I BcKTns6+ZGlgNupxUdURTD9zRzQ25IO6KFLRVMaHbflgT7xAY4YcKDU4JSi2VHDJ 4Q0LBySifJlkdiFCd//ZaC5N6zguYGYcwYjNMl4fJJc0Z58WuYgrwXyCAi78xILB KG9yP8E/OIRM0ztSJB/wUc/5W69+aEmk/DX1H7lMFhBAFATo3Z3g+zOiE4VhrAB9 ySi+Bix8uIu0Fi4uUvz187k9Fl9kusHkrBhc4Rj0tqXE4UzaDkqssoqAkRjvnlp0 7Y57eoipr4rdDEGT8c5xcqrYVmBpU5r+0oEQWcCquE2OYwNJGmWpb5Kf5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/EBfmnAkhL+zMnwkAabj1BZEGUMB8GA1UdIwQY MBaAFB3XCI2doiHwVl6xeEQ2ABceeXeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Nzk5NjgtMTFlOS00OWE1LWIxZDEt ZTBiZTE0OGM0MDk3LzEvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS82Nzk5NjgtMTFlOS00OWE1LWIxZDEtZTBiZTE0OGM0MDk3 LzEvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTbYm09F Gt7n3+cfe7n/sxjtm+c0VCaEsZa8h569UvTY63HXEDKQOVgoLhUA6A6o1O5DgEwc zIzFzWN4TvgIw/TyQpZsCFWnt71imZjPlFTtxcYQEQjkJFsZw1prcP7zpLj9kWQH PNo/TiDrn1IT/nrv+RFKTztht1eJdB5r+uRojynTi4oADUA7DQMcdhhu1MX+33YY Yd6Fl6MVJ3yl1ShTBELc28vRYU1M0EMWo+B1Y81Tv5vOc5LiqTkHTvSRpiMJPBlN WCPBf/nVcpdTyAEVNJmtkeIQX8hEBzGvGg60O0AqugQtv6BZ7xBT0S6nHGipQpTj xdcd6uc2P2rDrQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:32:57 2025 by rpki-client