This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json) Hash identifier: UFPf725ee2jmYsbr7VbkwtCKWNgf4Tq95pfY4nfwszI= Subject key identifier: 48:3E:3F:4B:6D:8E:DA:1E:91:94:C7:16:7C:7A:FA:22:1E:5F:FC:F3 Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62 Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62 Certificate serial: 019B2106FB318092121488902F521C52B8B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft Manifest number: 060D Signing time: Mon 15 Dec 2025 08:01:04 +0000 Manifest this update: Mon 15 Dec 2025 08:01:04 +0000 Manifest next update: Tue 16 Dec 2025 08:01:04 +0000 Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: MiE2mO9TEXUlc1aFJWDcTtn9RubZ0TrYof9fTCWXSRY=) 2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:06:fb:31:80:92:12:14:88:90:2f:52:1c:52:b8:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62 Validity Not Before: Dec 15 08:01:04 2025 GMT Not After : Dec 16 08:01:04 2025 GMT Subject: CN=483e3f4b6d8eda1e9194c7167c7afa221e5ffcf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:76:33:0a:7f:ac:1d:3b:41:e5:10:8f:54:8b: 19:a8:3a:f0:48:6c:a6:ec:d7:93:a2:91:c4:e3:28: aa:96:1d:11:14:73:99:f4:d4:2e:40:04:c1:57:41: e5:d3:ea:c3:c7:8e:f1:b1:cc:44:6a:98:23:21:99: 81:65:8c:2c:8a:a2:b9:65:0e:d0:b5:21:c8:63:ea: c1:8e:54:13:00:ed:c6:9e:3c:ec:d1:52:59:49:c8: ec:fe:ed:e4:06:bd:ac:5b:36:b6:7e:29:f6:3f:dc: ae:73:42:cb:0e:e8:df:b9:3f:8a:a4:f2:6c:04:1c: 66:2f:79:36:db:fa:df:c7:42:f5:67:a3:62:bc:a6: 3f:5d:1b:eb:f7:9d:f7:af:89:2a:a4:f9:dd:51:46: f3:54:1f:ac:1c:1a:26:15:77:5b:05:1f:f3:7a:b3: f7:8d:a6:71:3d:9a:15:14:98:2c:93:e0:ba:6d:01: b0:cc:7d:50:ea:9d:74:f5:ed:b9:a7:af:be:e8:35: 2e:2e:13:9b:65:97:99:a3:15:9e:c4:6b:a4:52:88: 43:fc:e3:b3:6d:ed:4c:ca:68:8d:54:a8:8c:28:e3: 3a:43:40:9a:0b:ff:b9:a1:24:da:d4:46:39:48:6e: b2:89:24:13:2b:cc:44:4a:43:69:e4:7c:0c:90:79: c7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3E:3F:4B:6D:8E:DA:1E:91:94:C7:16:7C:7A:FA:22:1E:5F:FC:F3 X509v3 Authority Key Identifier: keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:17:9d:d7:a9:11:94:17:b2:cd:7a:dc:8d:95:fc:5b:8f:58: c1:d2:0b:49:c8:a7:ad:9a:1b:4b:ad:f9:10:06:f2:6a:da:46: b8:d1:f9:96:27:4a:7e:2e:6b:41:70:cd:ef:6d:43:16:44:a4: 3f:a1:30:fb:6f:34:ee:aa:52:e1:56:26:19:a1:9b:5f:64:78: 50:45:9e:19:76:be:dd:c0:d6:2a:7e:12:da:b5:5b:7d:c7:db: bc:e8:df:35:74:ea:25:d6:b5:8a:cc:2c:ed:8a:3a:e4:72:51: 62:2e:62:61:88:1b:82:77:e1:d0:76:c3:7f:15:52:07:93:09: 30:a0:69:6d:16:09:d7:2c:7b:8b:2e:a1:b5:f3:0f:a4:4e:77: 77:2d:ca:fd:be:c3:0d:4a:af:20:61:40:ef:d6:1f:cf:f0:17: 84:b4:76:68:4e:82:93:24:cc:9e:18:34:61:38:d9:50:1a:a1: 23:e9:d7:b4:8f:d2:fb:b9:83:63:18:71:a7:c6:ed:c4:51:90: ed:f2:63:7c:4d:a0:ca:fc:5d:75:da:e7:7f:50:0f:19:b9:e4: fd:bb:77:fd:7a:1f:db:f1:39:c0:7e:8a:86:41:55:7b:93:85: 7b:09:38:22:aa:5c:5c:bd:37:6e:8f:d9:7b:e5:32:10:42:37: 49:1e:4a:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshBvsxgJISFIiQL1IcUri1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjY2FhYjBiMGRlZmM5M2MzMmY4MGM0NGIwODJmYjI5MDVm MjNjNjIwHhcNMjUxMjE1MDgwMTA0WhcNMjUxMjE2MDgwMTA0WjAzMTEwLwYDVQQD Eyg0ODNlM2Y0YjZkOGVkYTFlOTE5NGM3MTY3YzdhZmEyMjFlNWZmY2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nYzCn+sHTtB5RCPVIsZqDrwSGym 7NeTopHE4yiqlh0RFHOZ9NQuQATBV0Hl0+rDx47xscxEapgjIZmBZYwsiqK5ZQ7Q tSHIY+rBjlQTAO3Gnjzs0VJZScjs/u3kBr2sWza2fin2P9yuc0LLDujfuT+KpPJs BBxmL3k22/rfx0L1Z6NivKY/XRvr9533r4kqpPndUUbzVB+sHBomFXdbBR/zerP3 jaZxPZoVFJgsk+C6bQGwzH1Q6p109e25p6++6DUuLhObZZeZoxWexGukUohD/OOz be1MymiNVKiMKOM6Q0CaC/+5oSTa1EY5SG6yiSQTK8xESkNp5HwMkHnHHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEg+P0ttjtoekZTHFnx6+iIeX/zzMB8GA1UdIwQY MBaAFBzKqwsN78k8MvgMRLCC+ykF8jxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQt Njk0N2YwMmFjNmFmLzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQtNjk0N2YwMmFjNmFm LzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRed16kR lBeyzXrcjZX8W49YwdILScinrZobS635EAbyatpGuNH5lidKfi5rQXDN721DFkSk P6Ew+2807qpS4VYmGaGbX2R4UEWeGXa+3cDWKn4S2rVbfcfbvOjfNXTqJda1isws 7Yo65HJRYi5iYYgbgnfh0HbDfxVSB5MJMKBpbRYJ1yx7iy6htfMPpE53dy3K/b7D DUqvIGFA79Yfz/AXhLR2aE6CkyTMnhg0YTjZUBqhI+nXtI/S+7mDYxhxp8btxFGQ 7fJjfE2gyvxdddrnf1APGbnk/bt3/Xof2/E5wH6KhkFVe5OFewk4IqpcXL03bo/Z e+UyEEI3SR5KNg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:15:39 2025 by rpki-client