This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json) Hash identifier: Ta3PZAbb85U2zGqL691IukTC6LS1cDy+N75F8j4bCDY= Subject key identifier: 13:24:92:D1:F3:8F:88:B9:2F:BE:23:18:C3:1B:F6:F7:1C:D1:F0:4A Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6 Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6 Certificate serial: 019B074702B4E1F8066085392EB2461D6944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft Manifest number: 1387 Signing time: Wed 10 Dec 2025 08:00:52 +0000 Manifest this update: Wed 10 Dec 2025 08:00:52 +0000 Manifest next update: Thu 11 Dec 2025 08:00:52 +0000 Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: Xnxz4PgPnQFrdupS5MX0m7NiijTgyjhn3YmRS1uGJ+c=) 2: m1rDa4mFSS7DgxLKEUuhg1KKIME.roa (hash: P+gAWygPgYFKaEAocSrD9brqA8mxvT8s5Q0PR3R+oc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:47:02:b4:e1:f8:06:60:85:39:2e:b2:46:1d:69:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6 Validity Not Before: Dec 10 08:00:52 2025 GMT Not After : Dec 11 08:00:52 2025 GMT Subject: CN=132492d1f38f88b92fbe2318c31bf6f71cd1f04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8c:90:2c:c1:7b:ed:c9:09:02:5c:90:55:54: 01:de:cd:37:5c:e7:2f:00:f7:7c:d0:dd:95:0a:2a: 0e:6d:82:6b:b8:4c:20:bb:c6:8d:b1:99:f1:ee:9d: db:ca:de:0e:20:98:1a:d5:7d:4a:da:13:32:82:ee: 5f:3d:40:42:1f:b6:5e:9e:f1:62:94:fc:2e:da:68: 18:04:eb:51:99:7a:b5:94:ab:c2:29:48:7c:ba:fd: c3:2f:01:c1:fe:15:c6:a5:b1:9d:73:a2:d2:bb:7a: 0c:79:17:28:23:87:9b:8a:ab:ab:53:e0:17:09:a7: f6:1c:9a:24:4b:da:eb:4a:24:e5:c3:c4:12:5e:3a: 7a:6a:7f:a1:00:18:5e:aa:1f:25:40:4b:15:fb:b4: fb:b0:40:dc:58:4d:b0:76:9a:2c:23:d1:fa:cb:f2: 06:07:5a:f8:f7:cf:c0:fa:92:df:20:ec:33:06:a9: 5f:18:65:cd:19:1b:b4:cc:a6:60:38:c2:87:8b:ba: d7:44:48:95:9d:e3:19:2f:9a:f4:33:bd:4a:ce:5f: 39:e1:c5:37:b2:a6:a0:65:66:de:1e:0d:ed:f5:4e: 15:ed:69:92:e6:d3:8c:37:2d:b2:ec:b3:d5:e6:a9: cf:9c:1c:e9:f3:d5:1c:38:9c:08:b0:56:54:38:52: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:24:92:D1:F3:8F:88:B9:2F:BE:23:18:C3:1B:F6:F7:1C:D1:F0:4A X509v3 Authority Key Identifier: keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:cb:af:19:97:99:b2:0f:33:51:55:13:90:0a:70:9a:73:96: 09:2d:ef:e2:12:40:90:27:87:08:62:9c:fb:2d:33:6e:52:2c: ab:1c:41:6d:0c:62:13:62:5d:96:6a:19:01:33:c4:03:0e:56: a3:26:52:db:a1:a9:fa:cd:6d:bc:c2:29:82:e8:ab:b8:8a:9c: 76:3a:17:68:46:b2:a4:c5:42:ed:8c:b9:8c:f0:d7:12:09:81: ad:00:1c:c4:36:79:fc:0f:51:16:8d:09:b6:8e:ab:7f:97:29: 55:0a:ee:14:26:1a:96:9e:99:66:42:ce:57:a1:16:d7:33:b3: 17:88:fe:cf:2e:7b:e4:50:4d:3e:13:4c:c9:f1:c0:ca:fc:59: 82:b1:62:7c:3d:3c:26:67:ce:88:f4:31:13:00:63:df:45:60: d2:e5:48:4e:1e:32:5f:89:69:93:d6:62:91:41:b5:2e:5d:7d: 80:e7:00:6d:c9:cc:14:9a:c2:9d:8c:e8:03:bf:f8:6c:70:2e: 4f:5c:07:80:b9:ca:10:34:83:7e:6c:6e:4b:14:60:d7:54:b6: 40:6d:24:ce:fc:bf:41:1a:91:ca:09:e0:53:2b:5f:4f:d0:46: 66:1b:c5:03:6f:53:9f:31:74:de:05:c8:4a:e7:62:cc:4c:36: b5:e5:f0:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHRwK04fgGYIU5LrJGHWlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNmZkMjk3Zjk1NTMxZmViODJjOTY0ZmQ2N2Y2Yzk0MzIw OTM4ZjYwHhcNMjUxMjEwMDgwMDUyWhcNMjUxMjExMDgwMDUyWjAzMTEwLwYDVQQD EygxMzI0OTJkMWYzOGY4OGI5MmZiZTIzMThjMzFiZjZmNzFjZDFmMDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoyQLMF77ckJAlyQVVQB3s03XOcv APd80N2VCioObYJruEwgu8aNsZnx7p3byt4OIJga1X1K2hMygu5fPUBCH7ZenvFi lPwu2mgYBOtRmXq1lKvCKUh8uv3DLwHB/hXGpbGdc6LSu3oMeRcoI4ebiqurU+AX Caf2HJokS9rrSiTlw8QSXjp6an+hABheqh8lQEsV+7T7sEDcWE2wdposI9H6y/IG B1r498/A+pLfIOwzBqlfGGXNGRu0zKZgOMKHi7rXREiVneMZL5r0M71Kzl854cU3 sqagZWbeHg3t9U4V7WmS5tOMNy2y7LPV5qnPnBzp89UcOJwIsFZUOFL7gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMkktHzj4i5L74jGMMb9vcc0fBKMB8GA1UdIwQY MBaAFBxv0pf5VTH+uCyWT9Z/bJQyCTj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81YmQyNmMtYmJjZS00MGMwLTg5ZDct ZWY3OGE4YTc2MDZjLzEvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi81YmQyNmMtYmJjZS00MGMwLTg5ZDctZWY3OGE4YTc2MDZj LzEvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8uvGZeZ sg8zUVUTkApwmnOWCS3v4hJAkCeHCGKc+y0zblIsqxxBbQxiE2JdlmoZATPEAw5W oyZS26Gp+s1tvMIpguiruIqcdjoXaEaypMVC7Yy5jPDXEgmBrQAcxDZ5/A9RFo0J to6rf5cpVQruFCYalp6ZZkLOV6EW1zOzF4j+zy575FBNPhNMyfHAyvxZgrFifD08 JmfOiPQxEwBj30Vg0uVITh4yX4lpk9ZikUG1Ll19gOcAbcnMFJrCnYzoA7/4bHAu T1wHgLnKEDSDfmxuSxRg11S2QG0kzvy/QRqRygngUytfT9BGZhvFA29TnzF03gXI SudizEw2teXwyg== -----END CERTIFICATE-----Generated at Wed Dec 10 16:08:05 2025 by rpki-client