This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft File: HcKeV0nukcWjOujjC33J__OV_-Y.mft (raw, json) Hash identifier: jG0bgInaoP/8Wl4YE9PoAXXr5UNP3uo3byDO8CKtn5A= Subject key identifier: E6:84:51:E5:A5:FE:9A:BE:ED:62:5D:3A:79:FE:27:A5:CD:5B:94:38 Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6 Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6 Certificate serial: 019B2EFACFD140776C061A461FC9ABDC66EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 01:02:27 +0000 Manifest this update: Thu 18 Dec 2025 01:02:27 +0000 Manifest next update: Fri 19 Dec 2025 01:02:27 +0000 Files and hashes: 1: HcKeV0nukcWjOujjC33J__OV_-Y.crl (hash: BPFbEI3yXVWnNLOK4GtEEKfcLVvw4dJk0GppDXKkr4s=) 2: z6MmCrjG_M-ly3NSz9op9zn2Kp8.roa (hash: RhWaGG++pr/cOsZo3DpIE+m6eX6qqpoZxRcmwUA1c6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:cf:d1:40:77:6c:06:1a:46:1f:c9:ab:dc:66:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6 Validity Not Before: Dec 18 01:02:27 2025 GMT Not After : Dec 19 01:02:27 2025 GMT Subject: CN=e68451e5a5fe9abeed625d3a79fe27a5cd5b9438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:7a:e8:00:b9:3a:ff:ef:33:b3:af:81:54: 2c:d6:0f:cf:3a:21:69:48:25:66:c8:21:4e:90:23: d7:5c:fb:50:cf:62:9e:8b:34:53:18:46:15:ed:b6: b0:41:0e:a7:71:30:7b:70:10:3d:5b:84:fb:3b:b2: e8:31:a7:48:0a:fd:fe:17:4f:fa:c2:24:ab:dc:68: 3f:f8:7d:2d:3b:5b:b6:5d:6f:3f:63:8c:67:37:64: 4f:ad:bd:dd:d1:ed:4e:2a:ae:b4:73:db:cc:ec:5f: 43:da:ba:c9:c1:20:ec:2e:cd:a8:01:80:01:72:95: 36:17:7a:a5:46:6f:fa:ce:23:22:0f:c4:fd:09:d4: e4:1e:70:a5:37:77:bc:e6:82:50:17:cd:a6:87:90: af:65:e3:e7:d6:b9:61:74:97:17:a0:74:02:29:73: dc:08:6f:74:16:d2:b2:ca:d3:28:9d:33:c5:8d:eb: fc:3a:52:ba:9c:6c:31:80:9a:49:bd:54:76:c9:ef: 27:b6:06:5a:1d:a2:c4:a0:64:af:c7:ab:64:39:a0: 22:27:82:3c:4a:d9:1f:fe:11:d0:d5:24:20:91:e2: 53:90:b1:e3:15:8a:a7:cb:8f:58:2b:d4:fa:7d:0a: 36:54:2b:d7:f4:84:8c:4d:cb:b4:34:97:81:0e:21: e2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:84:51:E5:A5:FE:9A:BE:ED:62:5D:3A:79:FE:27:A5:CD:5B:94:38 X509v3 Authority Key Identifier: keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:99:8d:a5:1f:99:3e:58:74:2e:59:b5:82:f6:03:67:82:5a: 17:99:a9:ca:de:4c:db:79:02:4c:c4:0a:bb:69:14:98:81:98: 84:35:82:42:5f:3a:da:96:34:e0:32:45:3e:ff:e0:84:e5:cd: 53:1e:63:7b:a3:d2:05:0c:06:11:d9:3c:0c:e8:9d:9a:ac:c9: 73:c5:71:10:56:fe:99:e2:f7:9b:05:ed:84:ac:39:35:ca:fd: e5:0b:55:c0:89:b8:a4:c2:33:7b:1f:e0:02:dc:0e:62:28:f8: d5:4c:f5:03:59:cc:0d:d3:71:25:cf:e1:dd:cc:e9:e4:7e:10: 77:fb:77:10:d0:27:3f:fd:33:09:f4:ec:7d:dd:4d:12:c5:80: 8f:2b:c4:a8:38:88:2b:3c:3f:30:8b:04:1c:b7:17:ee:da:f3: b6:a4:53:12:bd:9c:47:99:cc:26:9b:c6:0d:73:24:ef:54:27: 56:a8:58:42:7a:68:dd:0c:e5:de:30:d6:be:46:cd:20:e4:5e: ad:64:b5:56:40:5b:68:16:19:6d:76:18:2d:e5:84:62:c2:76: b0:b9:c6:66:52:7b:cd:7b:93:e0:ba:62:9e:58:28:b0:84:d0: 39:6d:2e:2f:d4:98:c3:7a:a8:bd:1e:37:94:13:60:d7:ae:ca: 0f:42:3c:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+s/RQHdsBhpGH8mr3GbuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYzI5ZTU3NDllZTkxYzVhMzNhZThlMzBiN2RjOWZmZjM5 NWZmZTYwHhcNMjUxMjE4MDEwMjI3WhcNMjUxMjE5MDEwMjI3WjAzMTEwLwYDVQQD EyhlNjg0NTFlNWE1ZmU5YWJlZWQ2MjVkM2E3OWZlMjdhNWNkNWI5NDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXJ66AC5Ov/vM7OvgVQs1g/POiFp SCVmyCFOkCPXXPtQz2KeizRTGEYV7bawQQ6ncTB7cBA9W4T7O7LoMadICv3+F0/6 wiSr3Gg/+H0tO1u2XW8/Y4xnN2RPrb3d0e1OKq60c9vM7F9D2rrJwSDsLs2oAYAB cpU2F3qlRm/6ziMiD8T9CdTkHnClN3e85oJQF82mh5CvZePn1rlhdJcXoHQCKXPc CG90FtKyytMonTPFjev8OlK6nGwxgJpJvVR2ye8ntgZaHaLEoGSvx6tkOaAiJ4I8 Stkf/hHQ1SQgkeJTkLHjFYqny49YK9T6fQo2VCvX9ISMTcu0NJeBDiHirwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaEUeWl/pq+7WJdOnn+J6XNW5Q4MB8GA1UdIwQY MBaAFB3CnldJ7pHFozro4wt9yf/zlf/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jMWQ5N2EtNWI5ZC00MGJiLTliMjct NTNmZmE1Zjk5ODVjLzEvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9jMWQ5N2EtNWI5ZC00MGJiLTliMjctNTNmZmE1Zjk5ODVj LzEvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJmNpR+Z Plh0Llm1gvYDZ4JaF5mpyt5M23kCTMQKu2kUmIGYhDWCQl862pY04DJFPv/ghOXN Ux5je6PSBQwGEdk8DOidmqzJc8VxEFb+meL3mwXthKw5Ncr95QtVwIm4pMIzex/g AtwOYij41Uz1A1nMDdNxJc/h3czp5H4Qd/t3ENAnP/0zCfTsfd1NEsWAjyvEqDiI Kzw/MIsEHLcX7trztqRTEr2cR5nMJpvGDXMk71QnVqhYQnpo3Qzl3jDWvkbNIORe rWS1VkBbaBYZbXYYLeWEYsJ2sLnGZlJ7zXuT4LpinlgosITQOW0uL9SYw3qovR43 lBNg167KD0I8RQ== -----END CERTIFICATE-----Generated at Thu Dec 18 08:03:15 2025 by rpki-client