This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json) Hash identifier: i+LvDrM9W1uPoLXeHcQLC2ADipDOsR/WRJjSwkS1ydY= Subject key identifier: 46:6B:98:19:09:4E:5C:25:C4:9F:FE:51:8C:08:63:9E:A5:C7:FB:00 Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08 Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08 Certificate serial: 019B101323992D6FC81660CEE754A553CE56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft Manifest number: 1494 Signing time: Fri 12 Dec 2025 01:00:48 +0000 Manifest this update: Fri 12 Dec 2025 01:00:48 +0000 Manifest next update: Sat 13 Dec 2025 01:00:48 +0000 Files and hashes: 1: 9zhTOpiuNqKnk778yI8rOgQQ8-A.roa (hash: ABWXF/FnYjdj8H9UnlqrtLWEbBYpls+daSI459eMuZM=) 2: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: pZZQraVehYTHhCpM6ZGlt7YhGxFv7NR3KDAlaeOSTZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:23:99:2d:6f:c8:16:60:ce:e7:54:a5:53:ce:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08 Validity Not Before: Dec 12 01:00:48 2025 GMT Not After : Dec 13 01:00:48 2025 GMT Subject: CN=466b9819094e5c25c49ffe518c08639ea5c7fb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:54:3d:63:43:92:31:29:e8:a0:2c:d0:c6:d9: b1:49:3c:7c:ca:47:e5:25:9a:51:da:f5:48:75:bc: 42:4d:a5:6e:6d:6a:18:05:f6:75:7d:59:90:93:dd: ed:c1:03:50:fc:08:11:42:6c:73:bc:30:e8:52:53: 82:b6:87:82:00:ae:f3:e0:d9:d6:01:f0:a4:61:ae: 63:00:38:c8:9a:c0:8e:7e:b4:4b:50:6e:d1:48:f6: e3:7c:90:9e:d2:5a:7a:09:09:f0:20:89:27:74:36: 15:64:8e:5b:56:0b:d5:86:7e:46:62:f5:a4:91:52: 99:d8:64:e6:26:7b:5c:a5:0d:55:ad:02:0f:3d:00: e2:d2:89:29:c0:5e:85:ff:55:73:66:88:4e:83:a7: 55:2f:90:e8:bc:0b:67:6f:ec:b1:5d:5f:8c:3b:7b: dc:3d:10:8b:6e:d7:70:6e:ee:4e:0a:38:9d:1c:16: e0:4a:c2:fe:73:85:a2:58:3d:6b:b8:b9:1a:5f:1c: da:68:56:b1:b5:1d:bd:61:27:40:ac:0b:aa:60:40: 7c:1a:9e:7f:05:98:92:f6:58:0e:3e:87:9b:b5:7d: b0:79:8e:64:b4:c3:c1:d5:3a:f3:fa:e0:cb:d6:2a: 1f:cf:c2:97:e9:65:bf:cd:37:05:de:68:b7:6b:3e: b1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6B:98:19:09:4E:5C:25:C4:9F:FE:51:8C:08:63:9E:A5:C7:FB:00 X509v3 Authority Key Identifier: keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:e8:72:98:74:5b:03:9e:8b:1a:81:ec:e2:96:87:25:93:16: 03:a7:36:cb:c6:06:28:91:2f:6d:ae:90:f1:7e:a6:fa:35:90: 0f:a0:37:c9:72:79:5c:68:07:8d:3d:9a:bd:a6:0a:ee:84:f6: d7:64:b6:c0:dc:da:e2:7c:85:f8:7e:b7:dc:13:c5:f2:ea:fd: fe:a9:37:c9:34:84:2c:26:b6:36:0d:85:3e:65:52:66:81:92: fd:96:97:4a:55:3c:45:21:e1:b0:63:d8:bb:a2:66:fe:50:4c: 69:c4:b9:ee:b2:64:76:79:c0:d0:95:b9:60:71:fe:1b:54:de: 45:75:ac:02:2e:92:1e:72:60:70:68:fa:f1:3d:5b:26:fd:3c: 4b:01:80:dd:04:f3:f7:8e:d8:50:3b:e7:d8:dc:48:6d:6e:fa: 04:a0:61:5a:da:06:08:c0:eb:bb:73:16:e5:ff:d3:80:da:f9: c7:51:85:5f:5c:67:19:76:b9:fb:30:47:f1:dc:73:9a:cc:c2: 0a:95:23:a6:8e:89:1a:0f:18:f1:f9:5c:7c:93:75:5d:6b:61: 7b:a8:11:ed:87:a5:45:44:04:b0:76:96:10:3e:b5:e9:78:65: 84:b2:9c:5c:71:ce:a7:aa:56:d6:a6:91:92:b7:1d:21:f0:99: 5e:b3:ce:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEyOZLW/IFmDO51SlU85WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMGFjZWVhMTdmNTNkZTcwOGY5YTczYWJjMGM4NzE2NGQy MDdkMDgwHhcNMjUxMjEyMDEwMDQ4WhcNMjUxMjEzMDEwMDQ4WjAzMTEwLwYDVQQD Eyg0NjZiOTgxOTA5NGU1YzI1YzQ5ZmZlNTE4YzA4NjM5ZWE1YzdmYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VQ9Y0OSMSnooCzQxtmxSTx8ykfl JZpR2vVIdbxCTaVubWoYBfZ1fVmQk93twQNQ/AgRQmxzvDDoUlOCtoeCAK7z4NnW AfCkYa5jADjImsCOfrRLUG7RSPbjfJCe0lp6CQnwIIkndDYVZI5bVgvVhn5GYvWk kVKZ2GTmJntcpQ1VrQIPPQDi0okpwF6F/1VzZohOg6dVL5DovAtnb+yxXV+MO3vc PRCLbtdwbu5OCjidHBbgSsL+c4WiWD1ruLkaXxzaaFaxtR29YSdArAuqYEB8Gp5/ BZiS9lgOPoebtX2weY5ktMPB1Trz+uDL1iofz8KX6WW/zTcF3mi3az6xBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZrmBkJTlwlxJ/+UYwIY56lx/sAMB8GA1UdIwQY MBaAFB0KzuoX9T3nCPmnOrwMhxZNIH0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYTU2ZjYtMWNmMi00Mzg4LTk2ZmEt YzZiY2NhNzIxNDcxLzEvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kYTU2ZjYtMWNmMi00Mzg4LTk2ZmEtYzZiY2NhNzIxNDcx LzEvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy+hymHRb A56LGoHs4paHJZMWA6c2y8YGKJEvba6Q8X6m+jWQD6A3yXJ5XGgHjT2avaYK7oT2 12S2wNza4nyF+H633BPF8ur9/qk3yTSELCa2Ng2FPmVSZoGS/ZaXSlU8RSHhsGPY u6Jm/lBMacS57rJkdnnA0JW5YHH+G1TeRXWsAi6SHnJgcGj68T1bJv08SwGA3QTz 947YUDvn2NxIbW76BKBhWtoGCMDru3MW5f/TgNr5x1GFX1xnGXa5+zBH8dxzmszC CpUjpo6JGg8Y8flcfJN1XWthe6gR7YelRUQEsHaWED616XhlhLKcXHHOp6pW1qaR krcdIfCZXrPORg== -----END CERTIFICATE-----Generated at Fri Dec 12 08:00:35 2025 by rpki-client