This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft File: HQXcdA9vS7W8SwM4fptHUwhQdDw.mft (raw, json) Hash identifier: bLyhQhSCYbU0QWG7Bf4STEqBWqA9P+fN4ZL0JD//Ji4= Subject key identifier: E5:FC:3C:5A:09:B4:6C:AE:D2:BF:06:3C:F0:2E:E5:AB:AA:F7:24:7E Authority key identifier: 1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C Certificate issuer: /CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c Certificate serial: 019B1EAAEC4B82FAAD7A4F48576BB7528D27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft Manifest number: 27 Signing time: Sun 14 Dec 2025 21:01:16 +0000 Manifest this update: Sun 14 Dec 2025 21:01:16 +0000 Manifest next update: Mon 15 Dec 2025 21:01:16 +0000 Files and hashes: 1: 1-G0EJ3RxyGrfpOewrxyNUksn-_s.roa (hash: tsw4bxcurhO+Kj73Cy+Fcmen52mveN4PcUB84BuL1BY=) 2: HQXcdA9vS7W8SwM4fptHUwhQdDw.crl (hash: 0c/rM6cGydUpU+0txhMdAhbXlVeRR+YJnJg+Kpl0oT0=) 3: r93z9Jq8KCMy95hIpMR2wPfgXIg.roa (hash: QV/odSgO66kvDHRkk8MAxym1rf6ROxdaLHUmKl3Yctk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:ec:4b:82:fa:ad:7a:4f:48:57:6b:b7:52:8d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c Validity Not Before: Dec 14 21:01:16 2025 GMT Not After : Dec 15 21:01:16 2025 GMT Subject: CN=e5fc3c5a09b46caed2bf063cf02ee5abaaf7247e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:98:73:79:3c:fa:eb:4f:b2:a7:70:a9:2d:12: 78:62:0e:17:e3:f3:92:14:f5:6b:19:40:64:b8:09: 39:ac:9e:75:7f:4e:95:22:be:de:26:d3:90:84:6c: 02:8b:03:57:53:50:ea:f5:91:35:56:30:06:7f:42: 38:bc:f4:ac:79:4d:f0:7e:8e:7a:7e:a4:3a:ff:9b: 9a:8c:12:9a:71:23:39:8b:53:06:47:d2:3c:94:1f: 97:92:42:6a:bf:54:20:ea:ec:71:f4:1b:f1:34:0f: 3b:8c:6a:47:c7:e7:53:b1:47:9a:4a:26:95:22:2c: fd:7e:d8:cf:a1:ef:16:fb:91:7b:67:f9:c9:98:cb: 2b:23:53:e5:1b:2e:20:be:e6:c1:c4:54:3e:67:66: a6:39:12:68:01:d0:b8:1c:48:93:05:6f:10:3e:ec: da:92:e9:08:d0:b6:d9:54:87:72:06:7a:19:d7:ea: df:b5:df:f0:6d:f4:0c:09:f6:86:a1:24:6b:42:ee: 0f:13:67:d9:27:84:27:b1:25:17:59:d2:39:f9:bc: 16:44:38:1b:c2:8c:a0:23:9c:c2:19:9c:f1:81:b2: ad:d6:77:e7:40:d1:45:f9:bf:a2:e5:43:f4:a5:97: 5d:c5:5e:68:dc:d3:b3:b9:db:11:05:8d:de:ca:dc: f4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FC:3C:5A:09:B4:6C:AE:D2:BF:06:3C:F0:2E:E5:AB:AA:F7:24:7E X509v3 Authority Key Identifier: keyid:1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7f:82:d8:50:a4:48:14:80:21:e1:b6:94:db:a4:44:86:c0: f9:ef:bc:24:6f:c0:ac:46:66:58:47:f5:ac:b4:30:3e:c5:92: 6f:2a:31:8a:7a:dc:01:23:bb:8b:ae:3e:24:7e:32:f4:04:1a: 99:d7:97:50:3e:44:9b:6c:b0:57:64:e2:2b:55:38:58:6d:6b: 00:16:2d:f2:48:6d:a6:c9:7f:03:6f:8c:f2:a1:5d:5a:68:c7: b6:2a:35:ac:0c:f0:fd:d7:d1:0d:90:62:e4:dc:c2:c3:23:d1: 15:a3:59:70:67:62:4e:47:3f:62:af:dc:e0:2a:8c:6c:e7:2d: d0:4d:ab:70:f0:5a:35:7f:73:55:33:89:64:47:97:79:87:8b: 62:7e:e7:cf:2f:fc:b1:c4:be:6f:1a:4c:bf:bf:b1:30:47:33: 19:22:f3:9f:e5:5d:2a:ac:0d:10:70:ca:64:cd:ca:53:6a:5c: 92:e7:7f:a9:72:d8:b8:97:a8:51:8f:70:24:23:df:16:c2:79: 91:cb:99:ed:df:e8:8c:ca:68:4e:c6:99:dd:7d:01:ec:38:3d: 76:c4:ee:9a:a4:ca:e5:6a:d3:ff:91:d0:51:a3:29:82:64:53: 0a:7e:92:8c:4f:5a:49:e9:22:22:ee:02:62:eb:92:61:42:a9: eb:41:4a:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsequxLgvqtek9IV2u3Uo0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDVkYzc0MGY2ZjRiYjViYzRiMDMzODdlOWI0NzUzMDg1 MDc0M2MwHhcNMjUxMjE0MjEwMTE2WhcNMjUxMjE1MjEwMTE2WjAzMTEwLwYDVQQD EyhlNWZjM2M1YTA5YjQ2Y2FlZDJiZjA2M2NmMDJlZTVhYmFhZjcyNDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJhzeTz660+yp3CpLRJ4Yg4X4/OS FPVrGUBkuAk5rJ51f06VIr7eJtOQhGwCiwNXU1Dq9ZE1VjAGf0I4vPSseU3wfo56 fqQ6/5uajBKacSM5i1MGR9I8lB+XkkJqv1Qg6uxx9BvxNA87jGpHx+dTsUeaSiaV Iiz9ftjPoe8W+5F7Z/nJmMsrI1PlGy4gvubBxFQ+Z2amORJoAdC4HEiTBW8QPuza kukI0LbZVIdyBnoZ1+rftd/wbfQMCfaGoSRrQu4PE2fZJ4QnsSUXWdI5+bwWRDgb woygI5zCGZzxgbKt1nfnQNFF+b+i5UP0pZddxV5o3NOzudsRBY3eytz0EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOX8PFoJtGyu0r8GPPAu5auq9yR+MB8GA1UdIwQY MBaAFB0F3HQPb0u1vEsDOH6bR1MIUHQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFYY2RBOXZTN1c4U3dNNGZwdEhVd2hRZER3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wNGU0YzYtMzM0OS00YWVkLTg4YmMt NWVlNTM0ZmRiMzliLzEvSFFYY2RBOXZTN1c4U3dNNGZwdEhVd2hRZER3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8wNGU0YzYtMzM0OS00YWVkLTg4YmMtNWVlNTM0ZmRiMzli LzEvSFFYY2RBOXZTN1c4U3dNNGZwdEhVd2hRZER3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3+C2FCk SBSAIeG2lNukRIbA+e+8JG/ArEZmWEf1rLQwPsWSbyoxinrcASO7i64+JH4y9AQa mdeXUD5Em2ywV2TiK1U4WG1rABYt8khtpsl/A2+M8qFdWmjHtio1rAzw/dfRDZBi 5NzCwyPRFaNZcGdiTkc/Yq/c4CqMbOct0E2rcPBaNX9zVTOJZEeXeYeLYn7nzy/8 scS+bxpMv7+xMEczGSLzn+VdKqwNEHDKZM3KU2pckud/qXLYuJeoUY9wJCPfFsJ5 kcuZ7d/ojMpoTsaZ3X0B7Dg9dsTumqTK5WrT/5HQUaMpgmRTCn6SjE9aSekiIu4C YuuSYUKp60FK9A== -----END CERTIFICATE-----Generated at Sun Dec 14 23:00:04 2025 by rpki-client