This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json) Hash identifier: wqRAvc/DsEbXxddyqKhUdXXjHiTDDB/A7ym3qKeVn98= Subject key identifier: 85:D2:B3:F8:7C:58:00:B6:7E:46:FB:A5:D1:B7:1D:29:01:64:A2:3B Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f Certificate serial: 019B2F6764531F0D83892FBCCAAFBD04E319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft Manifest number: 12EE Signing time: Thu 18 Dec 2025 03:01:03 +0000 Manifest this update: Thu 18 Dec 2025 03:01:03 +0000 Manifest next update: Fri 19 Dec 2025 03:01:03 +0000 Files and hashes: 1: 572na8_zoYemqPBejFGMRRPd8ps.roa (hash: vVsm+nWWBvjJ+3tIYusnSlDq71JJ2TZXjTfrysKXq88=) 2: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: k9UHrejDXPfOxMkCGKEZyoOZt3ie5w+39zh6/F0VQmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:64:53:1f:0d:83:89:2f:bc:ca:af:bd:04:e3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f Validity Not Before: Dec 18 03:01:03 2025 GMT Not After : Dec 19 03:01:03 2025 GMT Subject: CN=85d2b3f87c5800b67e46fba5d1b71d290164a23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:b0:21:2b:62:ee:28:0d:fa:08:63:1b:00: a0:5e:36:13:fb:95:b7:0f:45:79:f9:02:99:1b:84: 64:f9:25:ad:7a:8c:8a:a3:4c:e2:55:ef:ec:27:52: 36:d8:b1:75:fa:02:6b:b9:2a:4a:b8:cb:c8:0c:2c: 84:9c:59:ec:bf:3c:c9:a4:d6:19:c0:28:4f:2f:b3: 10:f6:45:38:39:45:bb:6a:f2:42:71:c6:58:03:a8: 92:76:32:72:26:19:08:20:1d:a9:e9:dc:2a:88:83: ee:56:df:55:c2:5f:35:76:01:28:7a:d9:63:f8:05: ce:d9:1f:00:a6:85:12:12:37:87:83:0f:77:03:75: ad:f4:49:3a:59:1d:5b:b9:e2:36:58:36:5b:61:fc: e0:8d:fc:1f:cb:cd:32:97:98:b4:e8:b4:85:f0:6a: 0c:71:89:8d:10:4d:ea:a2:2c:e0:6f:53:86:37:e7: 65:ee:b6:bd:00:8c:9b:c2:d3:10:44:e8:60:be:5d: 2b:a7:e7:64:7f:7e:51:fb:aa:f1:0c:1c:ff:1e:7d: 20:e9:3e:6e:c3:a2:17:2c:97:7f:8c:ca:55:04:b0: 82:4e:e2:33:c7:ce:d4:90:48:de:77:dd:e4:62:3e: e2:3c:e8:bf:a7:87:92:15:80:71:f1:74:e0:58:4c: 0e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D2:B3:F8:7C:58:00:B6:7E:46:FB:A5:D1:B7:1D:29:01:64:A2:3B X509v3 Authority Key Identifier: keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f2:1e:60:74:27:70:69:62:31:55:9f:53:2a:22:d6:e0:ea: 6c:2b:b4:b8:a7:80:39:31:d8:60:a5:9a:0b:5d:30:6e:9f:f0: 58:bb:92:02:95:ce:77:9e:7f:c8:fe:c6:09:04:d0:c7:ae:59: 7e:5d:31:86:b0:a0:ad:c0:62:73:49:7e:84:16:cb:c5:6a:c6: 8b:3f:c3:48:5d:59:00:94:7a:6d:a3:44:49:0d:22:a6:ef:28: f7:3f:65:eb:c8:fa:5f:28:c0:fd:1f:ad:c3:f4:d4:7b:bf:c8: 2c:42:52:ef:31:14:bd:02:25:ac:c0:5b:1d:97:c5:da:a9:71: 56:7a:2e:ec:50:4e:3d:9f:4c:55:d1:8d:f3:05:13:3e:94:1e: a9:b2:a6:0c:25:e8:2e:0e:1b:78:e7:08:4d:ea:d8:de:61:9e: 8a:1f:26:5c:75:a7:4e:0f:12:b6:4c:74:bb:15:17:42:84:d2: d9:56:83:01:aa:49:57:ea:9d:79:d1:ad:20:61:24:c3:94:4e: 98:12:1e:16:bf:24:b2:6d:ba:cb:ed:4e:c7:4c:26:f2:59:d8: 89:43:b9:71:74:3c:3d:42:6b:c2:4f:41:2d:79:eb:9b:6d:3e: e5:8b:06:47:aa:d4:57:4f:94:91:6c:a4:1f:18:eb:f0:44:4e: 0d:15:31:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ2RTHw2DiS+8yq+9BOMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDY3MmM5OWY4N2YwNWNkODNmMGI2MjdkMzE4NzFmZTgw YmUwMWYwHhcNMjUxMjE4MDMwMTAzWhcNMjUxMjE5MDMwMTAzWjAzMTEwLwYDVQQD Eyg4NWQyYjNmODdjNTgwMGI2N2U0NmZiYTVkMWI3MWQyOTAxNjRhMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyouwISti7igN+ghjGwCgXjYT+5W3 D0V5+QKZG4Rk+SWteoyKo0ziVe/sJ1I22LF1+gJruSpKuMvIDCyEnFnsvzzJpNYZ wChPL7MQ9kU4OUW7avJCccZYA6iSdjJyJhkIIB2p6dwqiIPuVt9Vwl81dgEoetlj +AXO2R8ApoUSEjeHgw93A3Wt9Ek6WR1bueI2WDZbYfzgjfwfy80yl5i06LSF8GoM cYmNEE3qoizgb1OGN+dl7ra9AIybwtMQROhgvl0rp+dkf35R+6rxDBz/Hn0g6T5u w6IXLJd/jMpVBLCCTuIzx87UkEjed93kYj7iPOi/p4eSFYBx8XTgWEwOSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXSs/h8WAC2fkb7pdG3HSkBZKI7MB8GA1UdIwQY MBaAFB0Gcsmfh/Bc2D8LYn0xhx/oC+AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTIt NDk0ZjRjNGRhNDI2LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTItNDk0ZjRjNGRhNDI2 LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvIeYHQn cGliMVWfUyoi1uDqbCu0uKeAOTHYYKWaC10wbp/wWLuSApXOd55/yP7GCQTQx65Z fl0xhrCgrcBic0l+hBbLxWrGiz/DSF1ZAJR6baNESQ0ipu8o9z9l68j6XyjA/R+t w/TUe7/ILEJS7zEUvQIlrMBbHZfF2qlxVnou7FBOPZ9MVdGN8wUTPpQeqbKmDCXo Lg4beOcITerY3mGeih8mXHWnTg8Stkx0uxUXQoTS2VaDAapJV+qdedGtIGEkw5RO mBIeFr8ksm26y+1Ox0wm8lnYiUO5cXQ8PUJrwk9BLXnrm20+5YsGR6rUV0+UkWyk Hxjr8ERODRUxvg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:32:02 2025 by rpki-client