This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json) Hash identifier: zz3bJCCwW2jYeI4sDGLeD9fOa0gLzRLuERaWL7zC6t8= Subject key identifier: FF:4D:BB:5B:55:9F:66:BF:E9:FC:DF:46:4A:11:48:9C:88:82:86:ED Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51 Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551 Certificate serial: 019B1A605026B5618C55628ECF1EE3EB4BD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft Manifest number: 0E36 Signing time: Sun 14 Dec 2025 01:01:18 +0000 Manifest this update: Sun 14 Dec 2025 01:01:18 +0000 Manifest next update: Mon 15 Dec 2025 01:01:18 +0000 Files and hashes: 1: 2X95sls0uWU5PgwEsuvbZMPdH28.roa (hash: WAXbNwzmu9B4g0l97d8oAvrkNfSo32YmgajceOiYDlc=) 2: 44WcjUyhdWbouJas9-vY_4pr1wA.roa (hash: Qx8y85cpYAiQ8a63DXW295iCOgGuHySiBFYnU925DiI=) 3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: EDFLWoYAFSepuvKEUBrMW8MJ8gqSxK/1tKgXOca0pfM=) 4: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:60:50:26:b5:61:8c:55:62:8e:cf:1e:e3:eb:4b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551 Validity Not Before: Dec 14 01:01:18 2025 GMT Not After : Dec 15 01:01:18 2025 GMT Subject: CN=ff4dbb5b559f66bfe9fcdf464a11489c888286ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e4:d1:ac:4d:3c:9d:a1:39:5e:28:8c:6f:19: 42:ad:25:ce:6c:96:3e:0b:e5:da:53:00:d4:04:91: 1b:4e:29:cc:9e:8e:31:53:54:30:74:da:7a:3d:28: 42:89:65:d2:3d:83:cf:c3:69:24:02:17:07:c0:c7: d8:4c:19:85:d6:d5:31:24:6e:fd:30:bf:72:ed:af: dc:95:0d:72:e6:82:9e:60:c2:e2:61:27:fc:ad:cf: 9a:f4:28:b0:e0:7b:82:66:f6:5e:85:ac:01:26:d8: ca:39:e4:cb:29:49:c4:ae:ec:34:a5:4c:27:47:0e: 74:5d:66:88:9c:3d:aa:b9:73:12:f7:f1:4b:54:d4: c7:60:49:94:83:32:68:24:5d:14:36:2a:c6:03:c2: 6d:2e:31:a7:aa:e9:fe:74:97:e6:05:66:4e:6e:a9: ab:b5:d4:d1:1f:69:ff:29:a7:e6:2e:2f:78:28:50: 24:0a:10:74:29:d1:f7:00:45:ea:28:28:cf:98:a3: ac:3f:e3:ce:b6:c9:1b:0d:22:e8:f8:fa:e0:da:df: db:8a:95:57:99:32:f4:c0:b4:2c:d5:20:eb:c7:a0: b3:7e:fb:8c:24:5a:9d:d3:44:8e:ca:8b:23:75:ac: 9f:3f:4f:ce:95:f3:66:96:57:da:79:eb:b9:f9:04: 31:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4D:BB:5B:55:9F:66:BF:E9:FC:DF:46:4A:11:48:9C:88:82:86:ED X509v3 Authority Key Identifier: keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:62:bc:5a:74:5e:85:4e:a3:0c:17:2c:c1:c0:54:81:ad:17: b4:02:02:0c:1a:dd:9e:9f:50:66:7d:68:0e:e6:49:53:2c:92: 7d:af:97:55:e0:a1:cf:d4:25:c8:00:86:5c:02:50:5c:06:de: 5b:80:bf:db:37:d9:61:bf:19:1c:19:56:dd:87:cb:ce:47:fb: 7c:60:23:0d:9b:9b:a6:6f:c4:93:c2:af:6d:31:27:da:e5:fd: ca:34:b5:c8:90:4c:d7:07:f2:85:cf:62:81:e6:e3:3a:54:c1: c3:94:17:c6:3a:89:db:de:78:3f:f8:29:52:0c:57:8c:48:a1: e6:6d:07:19:6e:6e:e2:ab:3e:c9:1b:31:0c:79:5e:c0:e5:2e: d0:70:a7:95:02:67:fd:e7:3b:29:9a:64:9c:5c:cb:4d:2d:dd: ef:00:5b:62:c5:4f:10:a4:4c:91:46:4a:7e:8f:49:aa:98:49: 6f:93:d4:05:6d:6b:c5:cd:82:50:35:3e:ed:5b:f4:6e:5c:d0: 25:8f:8b:19:53:9e:b6:4c:43:20:45:fe:32:da:58:dd:ea:39: c4:3b:af:98:65:c7:8c:b9:dc:00:ab:94:a9:20:52:ad:bd:ff: b4:23:c2:8e:22:34:a9:09:11:de:4e:50:39:b1:54:de:88:6e: db:d8:70:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaYFAmtWGMVWKOzx7j60vRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTBhOWViNDdkODI0YjUxZjE1NDQ0MjQ4MWEyNTcxNjgz OTQ1NTEwHhcNMjUxMjE0MDEwMTE4WhcNMjUxMjE1MDEwMTE4WjAzMTEwLwYDVQQD EyhmZjRkYmI1YjU1OWY2NmJmZTlmY2RmNDY0YTExNDg5Yzg4ODI4NmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+TRrE08naE5XiiMbxlCrSXObJY+ C+XaUwDUBJEbTinMno4xU1QwdNp6PShCiWXSPYPPw2kkAhcHwMfYTBmF1tUxJG79 ML9y7a/clQ1y5oKeYMLiYSf8rc+a9Ciw4HuCZvZehawBJtjKOeTLKUnEruw0pUwn Rw50XWaInD2quXMS9/FLVNTHYEmUgzJoJF0UNirGA8JtLjGnqun+dJfmBWZObqmr tdTRH2n/KafmLi94KFAkChB0KdH3AEXqKCjPmKOsP+POtskbDSLo+Prg2t/bipVX mTL0wLQs1SDrx6CzfvuMJFqd00SOyosjdayfP0/OlfNmllfaeeu5+QQxrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9Nu1tVn2a/6fzfRkoRSJyIgobtMB8GA1UdIwQY MBaAFB6gqetH2CS1HxVEQkgaJXFoOUVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzkt ODQxOGE5NmY2Nzk1LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzktODQxOGE5NmY2Nzk1 LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmK8WnRe hU6jDBcswcBUga0XtAICDBrdnp9QZn1oDuZJUyySfa+XVeChz9QlyACGXAJQXAbe W4C/2zfZYb8ZHBlW3YfLzkf7fGAjDZubpm/Ek8KvbTEn2uX9yjS1yJBM1wfyhc9i gebjOlTBw5QXxjqJ2954P/gpUgxXjEih5m0HGW5u4qs+yRsxDHlewOUu0HCnlQJn /ec7KZpknFzLTS3d7wBbYsVPEKRMkUZKfo9JqphJb5PUBW1rxc2CUDU+7Vv0blzQ JY+LGVOetkxDIEX+MtpY3eo5xDuvmGXHjLncAKuUqSBSrb3/tCPCjiI0qQkR3k5Q ObFU3ohu29hwag== -----END CERTIFICATE-----Generated at Sun Dec 14 10:21:49 2025 by rpki-client