This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft File: HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json) Hash identifier: 6nz/No92+DIYpNvvQ9sZTLrwyEjj42NFN9v6HYv57+Y= Subject key identifier: A3:0E:5B:29:3B:82:D1:2A:30:27:A7:43:24:70:5D:6F:73:4C:2F:2D Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa Certificate serial: 019B0DB6B44FE225DA3C1BACF65BC52144FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft Manifest number: 1774 Signing time: Thu 11 Dec 2025 14:00:35 +0000 Manifest this update: Thu 11 Dec 2025 14:00:35 +0000 Manifest next update: Fri 12 Dec 2025 14:00:35 +0000 Files and hashes: 1: 3_exLez2c6RtEvnfTNzKi4Hkk5s.roa (hash: My7qt21+jNuMKjyzC8y2c2BBa1kohFZiD1+qyo1M/9o=) 2: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: eynEDKLa5rEin2ZvHUlaG4Hot1OG9gLIRiHsnobswHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:b4:4f:e2:25:da:3c:1b:ac:f6:5b:c5:21:44:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa Validity Not Before: Dec 11 14:00:35 2025 GMT Not After : Dec 12 14:00:35 2025 GMT Subject: CN=a30e5b293b82d12a3027a74324705d6f734c2f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:58:d4:5d:cf:3a:fd:79:9e:bd:9c:7d:d6: b5:a0:83:be:0f:c9:d9:1f:8f:aa:58:77:8d:13:cc: 3b:0d:5a:6c:87:7f:20:c9:35:83:8c:e5:37:97:48: b6:bb:c6:6a:68:51:3a:97:4e:87:d8:3e:f0:3b:d0: 60:27:bd:51:bb:20:aa:35:33:be:50:cf:ff:ff:21: 90:e8:b8:cd:64:d1:c7:b8:00:42:24:73:1f:c2:1f: 39:27:79:08:1b:6e:23:26:5e:e4:e6:b1:ce:7c:14: e2:b0:0d:cb:d3:59:dc:22:ec:e4:c6:9d:b8:69:b3: 74:c6:d0:ab:79:fa:7c:47:4f:e4:cb:01:4e:d1:bd: a1:f6:2f:d1:a2:09:cc:db:16:d9:89:e5:55:01:68: 12:04:8e:9b:08:d2:6e:35:ed:a2:de:26:d8:57:61: 21:23:39:d2:43:ef:c7:c3:15:fb:dc:43:d0:6b:43: 57:09:f2:5a:21:db:4a:6e:8b:1b:ba:ab:db:59:ee: 30:74:4c:e3:0b:d7:ca:65:0c:15:20:c6:e6:07:e1: 64:fe:f5:9c:a9:52:81:32:12:2e:f1:27:3e:2a:0c: bd:91:1f:16:c6:05:cd:95:86:b8:1d:79:d3:1d:a3: b9:37:fd:26:50:3a:09:57:04:99:2f:8a:8e:71:1e: dc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0E:5B:29:3B:82:D1:2A:30:27:A7:43:24:70:5D:6F:73:4C:2F:2D X509v3 Authority Key Identifier: keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:77:3e:65:e5:4a:35:68:aa:a0:92:64:3e:34:2a:c4:7e:2d: 5e:08:2f:b0:1d:42:82:17:10:ee:e2:ee:74:9c:93:01:27:7c: dc:ed:e1:19:4b:5f:16:dd:6a:e6:8f:cc:ae:93:8c:7f:18:c5: ef:2f:de:c3:59:e4:12:47:8b:18:70:e5:23:da:93:81:1e:71: b8:79:f9:60:31:0f:89:50:ef:b1:1f:ab:ed:77:49:a7:9a:3b: d5:d5:64:02:61:14:b6:95:ef:b6:48:fc:aa:c9:a8:bc:9e:f0: b8:11:a6:b0:73:69:c1:21:19:84:2e:5b:c0:7d:a0:6e:b2:b1: 3f:eb:83:5d:63:23:b6:14:86:49:17:55:bb:14:d9:05:20:3c: 19:bd:d7:ee:fe:7c:6f:ac:2b:3f:39:70:c4:ba:96:33:b8:51: 37:d3:2a:dd:43:d6:bb:0e:6f:6b:83:b7:46:1e:ef:b1:86:f0: 8b:bc:24:d8:3b:6b:12:5b:34:d8:79:10:bb:ee:1f:eb:5e:d0: 6d:4d:58:2c:75:f8:3d:ec:aa:0e:ef:4a:db:e3:70:08:ed:0b: 43:29:25:9b:1a:62:46:90:4d:41:3c:9c:ba:c3:d8:b6:14:dd: b8:a2:da:4c:3d:e7:32:0a:98:a2:5d:51:78:d0:18:6b:00:09: f6:f3:65:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtrRP4iXaPBus9lvFIUT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMjM0MjQyOTU3YmIxYmUxMjk2ODE3MjFmOWMyY2QwOGRm MDdiYWEwHhcNMjUxMjExMTQwMDM1WhcNMjUxMjEyMTQwMDM1WjAzMTEwLwYDVQQD EyhhMzBlNWIyOTNiODJkMTJhMzAyN2E3NDMyNDcwNWQ2ZjczNGMyZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApshY1F3POv15nr2cfda1oIO+D8nZ H4+qWHeNE8w7DVpsh38gyTWDjOU3l0i2u8ZqaFE6l06H2D7wO9BgJ71RuyCqNTO+ UM///yGQ6LjNZNHHuABCJHMfwh85J3kIG24jJl7k5rHOfBTisA3L01ncIuzkxp24 abN0xtCrefp8R0/kywFO0b2h9i/RognM2xbZieVVAWgSBI6bCNJuNe2i3ibYV2Eh IznSQ+/HwxX73EPQa0NXCfJaIdtKbosbuqvbWe4wdEzjC9fKZQwVIMbmB+Fk/vWc qVKBMhIu8Sc+Kgy9kR8WxgXNlYa4HXnTHaO5N/0mUDoJVwSZL4qOcR7cewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMOWyk7gtEqMCenQyRwXW9zTC8tMB8GA1UdIwQY MBaAFB4jQkKVe7G+EpaBch+cLNCN8HuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMt NTYzODUyNmZmNjQxLzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMtNTYzODUyNmZmNjQx LzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnc+ZeVK NWiqoJJkPjQqxH4tXggvsB1CghcQ7uLudJyTASd83O3hGUtfFt1q5o/MrpOMfxjF 7y/ew1nkEkeLGHDlI9qTgR5xuHn5YDEPiVDvsR+r7XdJp5o71dVkAmEUtpXvtkj8 qsmovJ7wuBGmsHNpwSEZhC5bwH2gbrKxP+uDXWMjthSGSRdVuxTZBSA8Gb3X7v58 b6wrPzlwxLqWM7hRN9Mq3UPWuw5va4O3Rh7vsYbwi7wk2DtrEls02HkQu+4f617Q bU1YLHX4PeyqDu9K2+NwCO0LQyklmxpiRpBNQTycusPYthTduKLaTD3nMgqYol1R eNAYawAJ9vNlkg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:28:55 2025 by rpki-client