This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json) Hash identifier: uioLURGrIPRF0wMjbuIZR/9XUTSBcKgZhK9zh49BG2Y= Subject key identifier: 15:22:3B:FD:D5:EE:2D:4F:EA:6F:B6:8A:C3:D0:33:14:D4:97:D7:C4 Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08 Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08 Certificate serial: 019B32D6148CFFB5034C6414BD997A0AD0FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft Manifest number: 14A6 Signing time: Thu 18 Dec 2025 19:00:49 +0000 Manifest this update: Thu 18 Dec 2025 19:00:49 +0000 Manifest next update: Fri 19 Dec 2025 19:00:49 +0000 Files and hashes: 1: 9zhTOpiuNqKnk778yI8rOgQQ8-A.roa (hash: ABWXF/FnYjdj8H9UnlqrtLWEbBYpls+daSI459eMuZM=) 2: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: wGfrrq9freLyP0ldN/sOp9J4v2N6dycxG3Mys6bBwHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:14:8c:ff:b5:03:4c:64:14:bd:99:7a:0a:d0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08 Validity Not Before: Dec 18 19:00:49 2025 GMT Not After : Dec 19 19:00:49 2025 GMT Subject: CN=15223bfdd5ee2d4fea6fb68ac3d03314d497d7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:76:a4:0f:72:bb:7f:fd:cd:88:54:9f:59:f0: 3d:2d:2c:30:6f:e3:0a:ee:13:ce:00:88:7f:bf:a2: 42:f1:d3:fd:69:91:a7:a1:aa:69:3e:5c:b3:05:dd: 21:06:4c:63:d3:e9:1c:9e:f6:ce:dc:63:b9:55:2d: 50:66:77:84:ec:64:f4:a1:3c:74:8c:dd:b7:79:92: bf:a9:54:c1:f1:75:3d:99:85:05:75:e5:61:2c:ac: 33:15:c7:09:bd:52:4c:08:2b:e3:99:55:15:ba:50: e6:56:67:6e:d7:32:ad:03:62:06:91:76:5d:b8:0c: e5:a0:b6:7a:49:f2:0d:7f:d5:ef:94:51:f5:4e:73: 39:59:e7:08:7a:c3:a2:26:90:65:d0:a7:1a:e0:27: 7a:5b:9f:43:60:64:b4:d9:35:2d:64:b5:af:b3:78: 85:14:92:a3:c0:f0:ad:2d:36:cf:b6:8b:2e:41:77: 38:9a:5b:06:e1:cf:ae:3a:b5:3c:7b:91:c4:d2:1b: 78:21:8a:d0:26:bd:0e:e0:a2:75:ea:fd:16:00:9d: 25:06:e8:49:47:9a:d6:0f:bc:fd:44:81:3e:70:25: 1a:3d:9d:44:38:00:eb:b5:61:3a:55:90:85:58:2f: a7:88:7e:6e:97:17:19:18:25:cc:8d:5b:3f:65:91: 7e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:22:3B:FD:D5:EE:2D:4F:EA:6F:B6:8A:C3:D0:33:14:D4:97:D7:C4 X509v3 Authority Key Identifier: keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:db:54:00:f2:48:12:5f:05:f0:1b:ab:e8:2a:a0:25:c4:12: f0:2c:74:9f:dc:79:b3:9f:c9:11:00:c0:a1:82:5e:90:46:ef: 10:70:7e:4a:7e:a1:b2:ad:0f:29:45:a7:ed:36:f2:6c:a6:3c: 27:f6:0c:89:21:2c:23:6a:a4:ae:cf:da:1c:ac:b7:85:b1:cb: 08:6d:29:37:38:fd:f0:46:43:1c:35:5e:99:fa:56:9b:d4:2f: a7:65:e9:24:df:a5:9c:8a:ab:68:3c:6d:c0:c4:e4:56:ee:e5: 1e:5f:de:be:b9:82:6b:99:7e:ab:74:1f:e0:2e:7a:18:33:0e: 65:c0:c1:87:c4:82:85:99:ab:bc:c0:23:51:3b:e5:55:71:14: 7f:ef:99:1c:f5:b1:73:f0:6e:46:b5:26:74:0a:33:6c:52:ed: 00:8b:e4:c0:2f:e9:d7:e8:d0:fd:37:46:54:83:ba:76:95:a4: 20:18:b8:c2:45:0e:ca:28:9d:9c:38:f3:b3:aa:7a:67:09:a9: 00:43:38:56:de:07:93:c7:0a:a2:c1:98:53:32:0b:20:46:76: 21:0d:f4:f2:c2:0f:22:bf:6b:57:e9:51:68:61:bf:58:03:e0: e4:52:33:7b:09:59:e4:9a:eb:29:30:d7:9f:26:8c:89:4b:fd: d1:f1:a2:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1hSM/7UDTGQUvZl6CtD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMGFjZWVhMTdmNTNkZTcwOGY5YTczYWJjMGM4NzE2NGQy MDdkMDgwHhcNMjUxMjE4MTkwMDQ5WhcNMjUxMjE5MTkwMDQ5WjAzMTEwLwYDVQQD EygxNTIyM2JmZGQ1ZWUyZDRmZWE2ZmI2OGFjM2QwMzMxNGQ0OTdkN2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHakD3K7f/3NiFSfWfA9LSwwb+MK 7hPOAIh/v6JC8dP9aZGnoappPlyzBd0hBkxj0+kcnvbO3GO5VS1QZneE7GT0oTx0 jN23eZK/qVTB8XU9mYUFdeVhLKwzFccJvVJMCCvjmVUVulDmVmdu1zKtA2IGkXZd uAzloLZ6SfINf9XvlFH1TnM5WecIesOiJpBl0Kca4Cd6W59DYGS02TUtZLWvs3iF FJKjwPCtLTbPtosuQXc4mlsG4c+uOrU8e5HE0ht4IYrQJr0O4KJ16v0WAJ0lBuhJ R5rWD7z9RIE+cCUaPZ1EOADrtWE6VZCFWC+niH5ulxcZGCXMjVs/ZZF+AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUiO/3V7i1P6m+2isPQMxTUl9fEMB8GA1UdIwQY MBaAFB0KzuoX9T3nCPmnOrwMhxZNIH0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYTU2ZjYtMWNmMi00Mzg4LTk2ZmEt YzZiY2NhNzIxNDcxLzEvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kYTU2ZjYtMWNmMi00Mzg4LTk2ZmEtYzZiY2NhNzIxNDcx LzEvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdtUAPJI El8F8Bur6CqgJcQS8Cx0n9x5s5/JEQDAoYJekEbvEHB+Sn6hsq0PKUWn7TbybKY8 J/YMiSEsI2qkrs/aHKy3hbHLCG0pNzj98EZDHDVemfpWm9Qvp2XpJN+lnIqraDxt wMTkVu7lHl/evrmCa5l+q3Qf4C56GDMOZcDBh8SChZmrvMAjUTvlVXEUf++ZHPWx c/BuRrUmdAozbFLtAIvkwC/p1+jQ/TdGVIO6dpWkIBi4wkUOyiidnDjzs6p6Zwmp AEM4Vt4Hk8cKosGYUzILIEZ2IQ308sIPIr9rV+lRaGG/WAPg5FIzewlZ5JrrKTDX nyaMiUv90fGiyw== -----END CERTIFICATE-----Generated at Fri Dec 19 02:02:32 2025 by rpki-client