This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft File: HqzGEKc4PxkkhnIDC9mkR80JQck.mft (raw, json) Hash identifier: vGVJxcRvcBTsidS6z4Y9RAzynFdJTs9ze76yQAcXZT4= Subject key identifier: DE:D2:1F:AB:45:D9:B1:57:B9:BA:F4:55:D5:78:1B:9E:65:7A:47:DE Authority key identifier: 1E:AC:C6:10:A7:38:3F:19:24:86:72:03:0B:D9:A4:47:CD:09:41:C9 Certificate issuer: /CN=1eacc610a7383f19248672030bd9a447cd0941c9 Certificate serial: 019B5A1AF259D778D6092B313FDC516E869E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft Manifest number: BD Signing time: Fri 26 Dec 2025 10:01:14 +0000 Manifest this update: Fri 26 Dec 2025 10:01:14 +0000 Manifest next update: Sat 27 Dec 2025 10:01:14 +0000 Files and hashes: 1: HqzGEKc4PxkkhnIDC9mkR80JQck.crl (hash: Ppbw8hSD9bndNyiK+lO5oY8O3Woz+nte3YbBqOUo7Ng=) 2: NN7HcWfwho6Wg205AV2VgvpmbLU.roa (hash: +KCs1tl2HUeqWBjr2lOeJY8VcQb8CSyBUASdC9OhN/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.crl rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:f2:59:d7:78:d6:09:2b:31:3f:dc:51:6e:86:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eacc610a7383f19248672030bd9a447cd0941c9 Validity Not Before: Dec 26 10:01:14 2025 GMT Not After : Dec 27 10:01:14 2025 GMT Subject: CN=ded21fab45d9b157b9baf455d5781b9e657a47de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:97:b8:b0:5d:96:32:9e:e3:48:01:b9:73: 74:51:9d:08:98:c7:0c:cb:3b:01:fd:68:3a:61:b1: b2:d0:e9:17:57:dc:cf:37:42:7c:ee:89:4d:da:67: 2d:a7:86:35:31:88:94:32:ae:20:46:9b:c8:f3:35: f2:b7:48:0a:0c:8d:fc:32:01:80:b6:39:47:07:8c: 34:b3:12:5d:be:2d:65:03:4d:0d:0a:3a:e8:4b:50: 0b:66:ed:fd:a8:e3:ef:c2:98:12:9f:4a:56:24:ef: 71:00:15:a1:f9:f6:f6:1e:a0:43:a0:15:c2:b0:ed: 12:16:e7:10:0d:d2:73:14:56:b2:9e:a4:4b:ed:78: 59:f9:83:3d:61:28:e1:0e:6c:70:53:37:f4:1c:a2: 61:b5:03:53:7e:eb:bb:bb:fa:f4:39:3f:4c:12:c9: 53:57:45:6d:1c:0b:64:66:c0:be:e6:67:b2:13:8c: 71:72:64:ad:0c:b5:e8:3a:0e:8d:f0:f9:10:01:c9: aa:ee:bf:96:c8:cd:9c:3e:fb:f9:92:cf:3e:2c:b7: c2:bf:45:73:4b:d1:a9:f3:7f:d2:b7:62:64:67:16: f9:67:4b:70:6f:e3:7d:62:60:4c:fd:7e:3a:bb:da: c0:0e:32:f7:bf:d5:cb:a1:3d:c6:7e:5c:ac:80:00: bf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D2:1F:AB:45:D9:B1:57:B9:BA:F4:55:D5:78:1B:9E:65:7A:47:DE X509v3 Authority Key Identifier: keyid:1E:AC:C6:10:A7:38:3F:19:24:86:72:03:0B:D9:A4:47:CD:09:41:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:7c:25:76:89:11:2c:9e:35:4b:7f:93:c0:22:8a:b3:52:17: f2:4a:5a:ba:b6:41:15:25:25:8c:c4:fc:10:83:2b:32:97:8e: 12:ae:cb:a7:78:96:2a:7b:09:d9:c1:ba:44:e6:d8:ef:2c:ea: 3a:8c:1d:84:1f:2c:bb:02:89:4e:e9:0e:63:77:5d:cc:fb:a5: 5d:25:9d:4e:9f:15:ae:d1:a7:d1:7b:d1:65:0d:6f:c9:7d:d3: fa:f5:f5:48:69:42:ef:b1:d9:a8:3e:81:7f:08:f5:2f:8c:46: ac:d4:4b:db:fd:a1:c8:a8:b5:8b:22:73:b7:ac:97:74:fc:3b: 00:14:e3:4f:37:ce:09:5d:41:b4:da:ab:8c:08:6b:af:33:c9: 55:ba:46:b8:bb:19:c8:c0:8b:0c:42:07:19:d9:29:10:15:6e: a1:42:fe:13:05:b6:49:27:8a:05:a4:94:39:07:db:2f:8a:68: 9c:39:44:8d:57:a3:be:34:d5:a6:ed:45:27:76:1e:fc:33:77: 2a:7d:d2:5e:a0:81:10:fa:bb:c8:c2:51:c0:21:7b:cf:de:ae: ff:86:e6:14:5e:11:01:d7:a3:dd:63:dc:e3:ba:2d:78:c5:84: ab:05:ff:dd:e3:5a:84:89:b1:95:5d:92:d4:d3:18:aa:a6:88: b8:9e:fe:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGvJZ13jWCSsxP9xRboaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWNjNjEwYTczODNmMTkyNDg2NzIwMzBiZDlhNDQ3Y2Qw OTQxYzkwHhcNMjUxMjI2MTAwMTE0WhcNMjUxMjI3MTAwMTE0WjAzMTEwLwYDVQQD EyhkZWQyMWZhYjQ1ZDliMTU3YjliYWY0NTVkNTc4MWI5ZTY1N2E0N2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfWXuLBdljKe40gBuXN0UZ0ImMcM yzsB/Wg6YbGy0OkXV9zPN0J87olN2mctp4Y1MYiUMq4gRpvI8zXyt0gKDI38MgGA tjlHB4w0sxJdvi1lA00NCjroS1ALZu39qOPvwpgSn0pWJO9xABWh+fb2HqBDoBXC sO0SFucQDdJzFFaynqRL7XhZ+YM9YSjhDmxwUzf0HKJhtQNTfuu7u/r0OT9MEslT V0VtHAtkZsC+5meyE4xxcmStDLXoOg6N8PkQAcmq7r+WyM2cPvv5ks8+LLfCv0Vz S9Gp83/St2JkZxb5Z0twb+N9YmBM/X46u9rADjL3v9XLoT3GflysgAC/SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7SH6tF2bFXubr0VdV4G55lekfeMB8GA1UdIwQY MBaAFB6sxhCnOD8ZJIZyAwvZpEfNCUHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHF6R0VLYzRQeGtraG5JREM5bWtSODBKUWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC83ZjNkMjktNDE4ZS00MTM2LThiNTIt ZmU1MDI1OTkzNjllLzEvSHF6R0VLYzRQeGtraG5JREM5bWtSODBKUWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC83ZjNkMjktNDE4ZS00MTM2LThiNTItZmU1MDI1OTkzNjll LzEvSHF6R0VLYzRQeGtraG5JREM5bWtSODBKUWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA13wldokR LJ41S3+TwCKKs1IX8kpaurZBFSUljMT8EIMrMpeOEq7Lp3iWKnsJ2cG6RObY7yzq OowdhB8suwKJTukOY3ddzPulXSWdTp8VrtGn0XvRZQ1vyX3T+vX1SGlC77HZqD6B fwj1L4xGrNRL2/2hyKi1iyJzt6yXdPw7ABTjTzfOCV1BtNqrjAhrrzPJVbpGuLsZ yMCLDEIHGdkpEBVuoUL+EwW2SSeKBaSUOQfbL4ponDlEjVejvjTVpu1FJ3Ye/DN3 Kn3SXqCBEPq7yMJRwCF7z96u/4bmFF4RAdej3WPc47oteMWEqwX/3eNahImxlV2S 1NMYqqaIuJ7+DA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:14 2025 by rpki-client