This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json) Hash identifier: +rVA7AoBaaFYtRt3Pra0UPzpGLub2Xo7P1E6Z9+E5UQ= Subject key identifier: 79:7D:0E:69:0E:0B:86:44:67:83:11:F0:EC:0F:19:28:B7:00:74:D2 Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b Certificate serial: 019B5976D97CA4D3A5AD5C9083A77513270C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft Manifest number: 0875 Signing time: Fri 26 Dec 2025 07:01:59 +0000 Manifest this update: Fri 26 Dec 2025 07:01:59 +0000 Manifest next update: Sat 27 Dec 2025 07:01:59 +0000 Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: ZUQOjvF/T+kzw0Nz9dJ5dUigcuF8XjgiQ0yFKj+Vu7M=) 2: zBo_iKzjdrZH1koNuXflz2DEVFo.roa (hash: oSU216GFvs9sVu0bzYiGAj3iuq0J8sZNKxXjgiMItjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:d9:7c:a4:d3:a5:ad:5c:90:83:a7:75:13:27:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b Validity Not Before: Dec 26 07:01:59 2025 GMT Not After : Dec 27 07:01:59 2025 GMT Subject: CN=797d0e690e0b8644678311f0ec0f1928b70074d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2a:dc:de:90:96:14:7e:c9:8f:74:73:e0:39: ac:12:ca:e1:22:95:2a:7a:cc:9f:6b:cf:c2:e2:cb: b9:ea:ef:56:e6:d5:0a:ce:34:ba:04:fe:2b:7d:7c: ee:be:63:4d:e4:bf:93:b8:7f:4b:fe:a4:a5:7f:71: 3c:38:28:f1:69:05:1f:5c:24:6f:30:bf:7f:15:ca: bb:fa:fc:6f:f7:69:3b:95:b2:e1:75:54:1d:0b:17: ae:0b:d8:81:59:9b:4b:fd:c7:ec:e8:fa:c9:0c:8a: d9:33:48:18:2c:fd:67:73:88:e0:60:1a:c3:f9:66: 75:90:88:60:29:6e:18:82:14:11:60:21:03:82:01: 56:ab:f1:70:d0:1f:72:a6:71:8b:df:d7:7b:3a:6e: 5c:d1:97:f0:01:29:af:47:3b:f3:d3:f4:5b:a3:79: 09:54:90:47:20:71:90:98:ed:65:fc:c1:0e:25:fb: 40:7e:fb:90:71:65:72:55:7e:bc:90:73:16:b3:c0: 5d:a9:01:7f:56:05:66:01:25:a1:8b:45:f8:ff:73: b9:9f:72:a5:26:8d:d6:7e:63:a5:bf:83:ad:b9:80: ad:b6:65:4a:35:6c:37:f0:17:9f:a7:ac:c5:67:83: c3:b9:12:b5:c9:af:92:f9:35:f7:a2:14:ed:1c:40: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7D:0E:69:0E:0B:86:44:67:83:11:F0:EC:0F:19:28:B7:00:74:D2 X509v3 Authority Key Identifier: keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:dd:2c:9c:c3:ca:cf:af:0c:6e:6b:13:d5:5a:5d:a8:1a:1f: 0f:92:54:37:f3:84:ac:98:ab:32:87:b2:54:50:73:9a:82:02: 21:fa:06:3f:c7:58:27:23:0e:a5:9b:51:f9:6c:c5:11:d0:ca: 23:8b:26:66:9b:71:f3:57:c3:76:c4:05:7a:b1:b2:be:9a:08: 72:05:93:00:ea:1b:49:9b:83:40:f8:4b:7c:1b:b8:4c:96:0a: 84:2b:62:7a:a1:b3:93:9e:11:45:30:33:7f:14:25:71:18:cd: 1f:8b:d8:af:ba:ee:54:7d:03:e3:e0:c2:8c:56:14:ee:0a:66: bb:0e:7b:3a:c3:a7:da:f6:e2:36:4e:e4:ad:97:24:00:2b:b0: 5a:08:97:56:8e:7c:50:48:1c:97:96:8c:a9:45:10:8e:26:b3: 70:c3:79:f5:48:a0:d6:b5:6f:dd:94:21:77:1d:7e:fe:b9:2f: e1:10:6c:30:f6:46:96:22:84:6c:bc:87:6d:20:a2:2c:72:eb: d3:84:b1:45:28:da:c4:b1:a2:d3:53:63:e6:c3:c7:8e:1c:73: b9:91:d0:6c:3d:80:10:e9:be:16:ce:aa:95:31:35:50:e9:60: ca:40:02:bf:07:9f:a4:9e:6c:fc:a0:fb:85:ba:4c:a6:f0:fb: 74:4e:23:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdtl8pNOlrVyQg6d1EycMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMmQzNzU1YTM1MDFiOWNiMGQ1ZWJhYTQ5OWU1ZWExNDli Y2YwOGIwHhcNMjUxMjI2MDcwMTU5WhcNMjUxMjI3MDcwMTU5WjAzMTEwLwYDVQQD Eyg3OTdkMGU2OTBlMGI4NjQ0Njc4MzExZjBlYzBmMTkyOGI3MDA3NGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmirc3pCWFH7Jj3Rz4DmsEsrhIpUq esyfa8/C4su56u9W5tUKzjS6BP4rfXzuvmNN5L+TuH9L/qSlf3E8OCjxaQUfXCRv ML9/Fcq7+vxv92k7lbLhdVQdCxeuC9iBWZtL/cfs6PrJDIrZM0gYLP1nc4jgYBrD +WZ1kIhgKW4YghQRYCEDggFWq/Fw0B9ypnGL39d7Om5c0ZfwASmvRzvz0/Rbo3kJ VJBHIHGQmO1l/MEOJftAfvuQcWVyVX68kHMWs8BdqQF/VgVmASWhi0X4/3O5n3Kl Jo3WfmOlv4OtuYCttmVKNWw38Befp6zFZ4PDuRK1ya+S+TX3ohTtHEDxSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHl9DmkOC4ZEZ4MR8OwPGSi3AHTSMB8GA1UdIwQY MBaAFBwtN1WjUBucsNXrqkmeXqFJvPCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82N2M2MDUtMDEwZi00NTkyLWE5MTkt OWVjZTBiMjU2NThlLzEvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC82N2M2MDUtMDEwZi00NTkyLWE5MTktOWVjZTBiMjU2NThl LzEvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhN0snMPK z68MbmsT1VpdqBofD5JUN/OErJirMoeyVFBzmoICIfoGP8dYJyMOpZtR+WzFEdDK I4smZptx81fDdsQFerGyvpoIcgWTAOobSZuDQPhLfBu4TJYKhCtieqGzk54RRTAz fxQlcRjNH4vYr7ruVH0D4+DCjFYU7gpmuw57OsOn2vbiNk7krZckACuwWgiXVo58 UEgcl5aMqUUQjiazcMN59Uig1rVv3ZQhdx1+/rkv4RBsMPZGliKEbLyHbSCiLHLr 04SxRSjaxLGi01Nj5sPHjhxzuZHQbD2AEOm+Fs6qlTE1UOlgykACvwefpJ5s/KD7 hbpMpvD7dE4jJA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:58:08 2025 by rpki-client