This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft File: hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json) Hash identifier: guT0B+4jgimyD2wcWB1ZSydCKnKhQ2AmL5wBruRIgZo= Subject key identifier: 23:20:85:D6:B9:1C:9A:20:0B:AD:1B:27:32:3E:16:61:78:CD:02:A4 Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8 Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8 Certificate serial: 019AC9E8D2FB4356849184FE5586810562B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft Manifest number: 174E Signing time: Fri 28 Nov 2025 10:01:09 +0000 Manifest this update: Fri 28 Nov 2025 10:01:09 +0000 Manifest next update: Sat 29 Nov 2025 10:01:09 +0000 Files and hashes: 1: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: OVPGkEF2tOPXBfKkn4XGk4x/B1veMoeXwQHz6MG9Wd0=) 2: iM7SCQycar1nudDnDJd9cpfWE14.roa (hash: 7fSKbbU/ayenSU9Vz0FeCegebZtfdQUaQXiUz4lT3zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:e8:d2:fb:43:56:84:91:84:fe:55:86:81:05:62:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8 Validity Not Before: Nov 28 10:01:09 2025 GMT Not After : Nov 29 10:01:09 2025 GMT Subject: CN=232085d6b91c9a200bad1b27323e166178cd02a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:19:7a:9f:2f:25:31:84:ad:b1:b5:eb:7a: ad:1b:51:e7:fb:ce:f3:fe:4d:66:65:00:22:38:14: e8:2e:7e:3d:fe:ba:bd:aa:d7:19:15:0f:65:7b:c9: c3:b9:d1:c2:19:8b:4e:34:c0:2f:29:43:de:50:c5: bc:76:c4:50:c2:c1:44:ce:ed:4c:33:b7:1d:c0:74: 5f:57:2b:2f:76:92:f9:c8:f1:88:b9:36:0f:74:42: a5:b5:8b:89:29:7c:00:0c:8f:7f:75:18:c0:aa:1d: 0e:bb:66:56:9f:d0:cc:d6:30:01:04:61:bb:17:a0: b2:74:e0:16:58:cb:a2:dd:e8:b8:32:b6:95:ab:08: f6:67:37:5e:96:25:37:98:61:c3:b1:27:49:cb:0b: ad:5b:6b:0f:1c:74:7c:75:e1:72:42:bc:3a:09:a6: c9:23:bc:97:c5:2c:56:e5:fa:37:bb:c2:29:be:3c: 57:8f:f6:21:f6:d7:78:43:65:f1:7a:97:9c:ff:59: 11:ac:3b:b3:fb:95:fe:2a:1f:f0:48:5f:c1:71:4f: 3b:17:04:eb:06:43:84:32:18:1d:28:d1:cf:bb:15: af:ae:6c:24:c0:14:c5:af:5f:50:5b:fd:ce:76:72: c9:14:2f:18:bf:05:ae:c3:29:eb:50:3e:f2:b8:66: aa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:20:85:D6:B9:1C:9A:20:0B:AD:1B:27:32:3E:16:61:78:CD:02:A4 X509v3 Authority Key Identifier: keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:aa:ca:66:ad:bd:06:c4:41:07:38:bc:b5:aa:9e:15:6d:f5: 03:08:4f:4f:ad:62:c8:4b:19:0e:1c:c2:41:ed:8e:dc:fb:6e: c3:f1:d8:ec:68:25:2e:50:2f:ed:ec:61:62:a2:55:65:da:9b: 4b:bf:5c:38:66:fe:82:34:72:44:f4:2f:ba:2f:da:65:5b:7f: d0:c1:73:c4:db:ec:b5:87:75:2e:60:3e:89:e6:4a:f5:da:d9: b2:1e:31:1d:bb:5a:62:59:f0:ec:88:08:c6:ca:e0:a8:77:88: 63:a2:68:bd:b9:78:10:30:2c:47:a8:03:7a:88:23:57:06:94: d8:4f:cf:23:29:15:3b:1f:67:1d:48:6b:54:60:79:84:f7:9f: 6f:3b:5d:d2:60:26:92:6c:d7:a2:e8:36:4f:06:ad:d9:f4:f9: 21:27:bd:d1:5e:89:eb:8f:7e:94:ab:89:0a:d7:c6:90:82:44: 72:00:1c:5f:0f:fa:89:0f:7e:0a:64:b9:33:53:e6:7f:0e:5c: 4a:95:fe:31:cb:89:88:95:a8:a0:10:bf:cb:2e:0f:b0:fb:3a: 5f:93:3c:94:47:c8:a4:58:82:59:e6:67:bb:e5:78:72:41:cb: f9:c4:27:33:93:17:80:ea:db:51:8d:f3:42:cb:33:4c:8b:d9: 19:f3:93:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrJ6NL7Q1aEkYT+VYaBBWK0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGMwZGIwMDY1ODQ0ZDk1OTRkZmU4ZGQ4ZWZkNzdlZDFl NDkzZjgwHhcNMjUxMTI4MTAwMTA5WhcNMjUxMTI5MTAwMTA5WjAzMTEwLwYDVQQD EygyMzIwODVkNmI5MWM5YTIwMGJhZDFiMjczMjNlMTY2MTc4Y2QwMmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2IZep8vJTGErbG163qtG1Hn+87z /k1mZQAiOBToLn49/rq9qtcZFQ9le8nDudHCGYtONMAvKUPeUMW8dsRQwsFEzu1M M7cdwHRfVysvdpL5yPGIuTYPdEKltYuJKXwADI9/dRjAqh0Ou2ZWn9DM1jABBGG7 F6CydOAWWMui3ei4MraVqwj2ZzdeliU3mGHDsSdJywutW2sPHHR8deFyQrw6CabJ I7yXxSxW5fo3u8IpvjxXj/Yh9td4Q2Xxepec/1kRrDuz+5X+Kh/wSF/BcU87FwTr BkOEMhgdKNHPuxWvrmwkwBTFr19QW/3OdnLJFC8YvwWuwynrUD7yuGaqBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMghda5HJogC60bJzI+FmF4zQKkMB8GA1UdIwQY MBaAFIVMDbAGWETZWU3+jdjv137R5JP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQt NjBiOTM1OTViYWM5LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQtNjBiOTM1OTViYWM5 LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKrKZq29 BsRBBzi8taqeFW31AwhPT61iyEsZDhzCQe2O3Ptuw/HY7GglLlAv7exhYqJVZdqb S79cOGb+gjRyRPQvui/aZVt/0MFzxNvstYd1LmA+ieZK9drZsh4xHbtaYlnw7IgI xsrgqHeIY6Jovbl4EDAsR6gDeogjVwaU2E/PIykVOx9nHUhrVGB5hPefbztd0mAm kmzXoug2Twat2fT5ISe90V6J649+lKuJCtfGkIJEcgAcXw/6iQ9+CmS5M1Pmfw5c SpX+McuJiJWooBC/yy4PsPs6X5M8lEfIpFiCWeZnu+V4ckHL+cQnM5MXgOrbUY3z QsszTIvZGfOTlg== -----END CERTIFICATE-----Generated at Fri Nov 28 14:42:03 2025 by rpki-client