This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft File: HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json) Hash identifier: 3ns6IYmnR7KuidFMwJx0SacruzzqJYM0tmQ5RNTZFUE= Subject key identifier: C5:FC:D7:A0:62:7B:99:33:05:F1:DB:6C:2A:8A:A5:D1:2C:F5:E6:E9 Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa Certificate serial: 019B3C0FD97D29D048EFE4E2C5AC2FDD70A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 14:00:30 +0000 Manifest this update: Sat 20 Dec 2025 14:00:30 +0000 Manifest next update: Sun 21 Dec 2025 14:00:30 +0000 Files and hashes: 1: 3_exLez2c6RtEvnfTNzKi4Hkk5s.roa (hash: My7qt21+jNuMKjyzC8y2c2BBa1kohFZiD1+qyo1M/9o=) 2: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: RtJBGIHyv/V85ocj9DEgeFUo3rDVbokxfiQlZD8XBKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:d9:7d:29:d0:48:ef:e4:e2:c5:ac:2f:dd:70:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa Validity Not Before: Dec 20 14:00:30 2025 GMT Not After : Dec 21 14:00:30 2025 GMT Subject: CN=c5fcd7a0627b993305f1db6c2a8aa5d12cf5e6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:a1:45:8d:6b:b6:21:ba:0b:45:8f:7d:80: 4e:05:ca:8a:a7:86:0a:fe:b5:f6:c9:82:a0:99:ed: 3e:5d:3f:5a:15:1b:0a:09:e8:cf:8b:33:f3:25:53: ca:a4:e7:56:af:57:fb:75:7b:6c:7f:ba:8f:5e:1e: 45:86:54:7e:3b:3a:8c:c7:b8:3f:f1:6b:81:77:2b: 60:04:3b:12:45:50:5e:36:53:db:c1:71:15:84:2f: 55:55:0d:57:61:f9:cc:a4:92:e6:21:a7:50:be:2f: 34:67:a9:69:06:fb:d6:50:fc:92:f9:5b:e5:10:9d: b4:78:82:3d:e8:0b:75:b4:a0:67:9e:21:32:b2:89: d0:37:c4:19:e3:9a:55:fe:1f:08:14:03:dc:bd:48: e9:ae:83:74:a7:6b:b9:e6:4b:66:98:a8:fb:9c:84: 03:74:13:fe:06:4a:2f:ad:71:b7:12:c7:40:44:a2: 3a:40:af:52:f3:4e:02:08:e1:11:b4:6e:2e:5c:0e: 9b:c8:49:9f:d6:5a:80:d4:29:db:ee:f0:da:4a:b5: 9e:3f:be:b4:27:ea:78:f5:35:d0:fa:62:64:e7:90: 96:d7:40:00:c7:d1:12:a8:74:10:5a:81:9c:60:8c: 96:d5:ad:a1:f5:ef:05:3a:04:7f:29:ee:cc:0a:f2: ca:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FC:D7:A0:62:7B:99:33:05:F1:DB:6C:2A:8A:A5:D1:2C:F5:E6:E9 X509v3 Authority Key Identifier: keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:66:a5:22:17:ae:a8:81:32:bc:21:9a:7b:8f:4f:43:a3:0e: ad:38:65:2c:7e:48:af:74:63:1b:75:e7:6d:16:56:b4:1f:11: 04:2c:0b:f2:bc:fa:a5:3d:07:bb:44:b6:98:b6:5c:4d:ad:ae: f9:c7:0e:5b:31:d9:89:07:3e:13:5c:0e:42:93:04:a8:65:3d: fc:37:cb:39:eb:29:a7:3c:11:d3:28:25:7e:91:76:86:7d:b5: 3f:41:7c:de:14:74:28:7c:1f:1b:53:e8:cb:08:ac:a2:3c:d3: 99:25:75:5a:6b:e7:d2:88:db:65:8f:e9:58:2e:2b:a7:60:01: 0d:dc:1f:f2:f6:6b:e0:3b:fb:ad:ef:c8:75:ce:81:cb:54:09: 42:3a:7a:3c:0a:87:5d:a1:5a:04:00:5c:0a:56:96:1a:ba:8c: fa:fa:3b:9a:99:78:da:47:a3:68:30:c3:37:0b:9d:0b:29:8d: 33:d2:24:2f:cd:0f:1f:26:13:2b:37:56:81:d6:8f:2f:8d:86: a8:fc:53:b9:7a:14:db:a3:4b:a2:2a:aa:fb:c4:e3:8e:45:e3: 05:67:02:6f:a2:36:44:f1:ed:6e:0e:cf:37:ab:fa:30:4b:9c: 98:c1:00:35:30:3d:a9:ab:7b:b3:60:66:04:6f:27:06:b7:26: 9a:c3:d9:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D9l9KdBI7+Tixawv3XCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMjM0MjQyOTU3YmIxYmUxMjk2ODE3MjFmOWMyY2QwOGRm MDdiYWEwHhcNMjUxMjIwMTQwMDMwWhcNMjUxMjIxMTQwMDMwWjAzMTEwLwYDVQQD EyhjNWZjZDdhMDYyN2I5OTMzMDVmMWRiNmMyYThhYTVkMTJjZjVlNmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLahRY1rtiG6C0WPfYBOBcqKp4YK /rX2yYKgme0+XT9aFRsKCejPizPzJVPKpOdWr1f7dXtsf7qPXh5FhlR+OzqMx7g/ 8WuBdytgBDsSRVBeNlPbwXEVhC9VVQ1XYfnMpJLmIadQvi80Z6lpBvvWUPyS+Vvl EJ20eII96At1tKBnniEysonQN8QZ45pV/h8IFAPcvUjproN0p2u55ktmmKj7nIQD dBP+BkovrXG3EsdARKI6QK9S804CCOERtG4uXA6byEmf1lqA1Cnb7vDaSrWeP760 J+p49TXQ+mJk55CW10AAx9ESqHQQWoGcYIyW1a2h9e8FOgR/Ke7MCvLK4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMX816Bie5kzBfHbbCqKpdEs9ebpMB8GA1UdIwQY MBaAFB4jQkKVe7G+EpaBch+cLNCN8HuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMt NTYzODUyNmZmNjQxLzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMtNTYzODUyNmZmNjQx LzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGalIheu qIEyvCGae49PQ6MOrThlLH5Ir3RjG3XnbRZWtB8RBCwL8rz6pT0Hu0S2mLZcTa2u +ccOWzHZiQc+E1wOQpMEqGU9/DfLOesppzwR0yglfpF2hn21P0F83hR0KHwfG1Po ywisojzTmSV1Wmvn0ojbZY/pWC4rp2ABDdwf8vZr4Dv7re/Idc6By1QJQjp6PAqH XaFaBABcClaWGrqM+vo7mpl42kejaDDDNwudCymNM9IkL80PHyYTKzdWgdaPL42G qPxTuXoU26NLoiqq+8TjjkXjBWcCb6I2RPHtbg7PN6v6MEucmMEANTA9qat7s2Bm BG8nBrcmmsPZ8g== -----END CERTIFICATE-----Generated at Sat Dec 20 23:11:59 2025 by rpki-client