This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json) Hash identifier: /LVJuAIyj7aqkh1OxvQ7LNXu0Buggybi7LBAEYVyeAc= Subject key identifier: 36:E6:D5:AC:C6:36:A9:91:2A:43:FE:58:A8:C2:3C:96:03:A4:74:50 Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16 Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116 Certificate serial: 019B0E24B0CA55BBEA894A2CDB9CC712C1C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 16:00:44 +0000 Manifest this update: Thu 11 Dec 2025 16:00:44 +0000 Manifest next update: Fri 12 Dec 2025 16:00:44 +0000 Files and hashes: 1: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: MEgxMToGeTjHI5TuFKPNjCGo8ip/rmLLGain1KUlJpo=) 2: oaiKe9BUmU6ux91XLaQvZC7XqN0.roa (hash: uC3IsodMVYaUiVMHtDRZahUGbsjXFHZTUvnA/e2zbi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:b0:ca:55:bb:ea:89:4a:2c:db:9c:c7:12:c1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116 Validity Not Before: Dec 11 16:00:44 2025 GMT Not After : Dec 12 16:00:44 2025 GMT Subject: CN=36e6d5acc636a9912a43fe58a8c23c9603a47450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:e0:57:5a:8f:b9:7c:c9:62:f1:25:c7:f3: c9:a9:9a:8f:92:0d:ce:15:71:60:fa:b1:78:45:17: b6:1d:19:41:d9:7e:21:75:4e:d8:37:87:59:0f:bc: d0:d8:b8:47:31:0d:1d:2b:fc:1d:a9:9d:00:92:8d: 9d:7e:d0:10:d1:54:7d:4e:9d:54:eb:eb:a2:b5:c7: 0b:99:fe:64:1d:0f:97:8e:f4:3a:d0:a1:ab:6d:f7: a1:b0:42:66:68:8b:1e:ae:7b:68:15:5a:9f:eb:64: 36:f3:c8:7c:d2:16:ea:03:42:14:fa:67:8e:92:f8: 8f:2d:a2:19:0c:1b:79:2f:b1:ab:fc:2a:26:06:ab: 0d:dd:90:13:62:27:71:cf:f5:31:a2:03:6b:e7:0f: 13:f3:87:37:0b:8c:71:3f:b9:c7:61:14:bc:e2:0e: e8:c9:20:c8:fc:96:81:93:69:ef:a3:47:fa:de:72: cd:ef:11:69:1b:ad:cf:94:c2:7b:c8:8f:65:4f:53: a1:c8:8c:fd:b5:c3:b9:eb:84:da:69:f9:cb:48:7e: 70:bc:58:b6:59:b3:d2:73:08:2d:2d:f8:14:27:55: dd:df:b7:a3:a9:54:ff:ac:70:a4:7d:9b:99:d5:cb: 96:21:d8:4a:c0:ff:d9:cb:72:5a:53:a3:9a:8c:c0: eb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E6:D5:AC:C6:36:A9:91:2A:43:FE:58:A8:C2:3C:96:03:A4:74:50 X509v3 Authority Key Identifier: keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:64:dc:94:c3:e5:6f:f1:89:8d:52:5f:1e:88:94:d1:53:3e: ce:39:05:5a:6b:58:ec:c2:ed:ca:32:12:26:8e:b4:fa:7b:5c: 9d:e5:b7:41:76:e8:87:73:f1:75:82:78:c9:0d:10:c9:cb:4b: a4:0c:2b:b7:a4:cb:76:55:13:30:9a:63:15:e6:a2:4f:84:da: a2:9a:1d:b1:1d:46:7f:34:79:a8:64:97:d4:b0:66:94:f9:8e: 27:e4:f6:9d:ec:bc:a2:85:d4:fb:c3:ca:ce:99:50:9f:e5:37: 32:a3:7d:31:93:02:6e:b4:88:33:fd:38:7c:f9:cb:b2:1c:ed: db:74:79:a9:0f:1b:4c:e0:02:db:2c:51:83:1e:a6:61:71:55: 34:b6:76:c4:8a:14:af:c2:f3:8a:28:39:c1:da:89:76:3b:8e: 81:22:a3:e8:e5:69:67:9b:a3:ff:54:37:b0:76:64:e5:78:25: 17:c4:f4:73:b5:98:41:58:7b:3e:74:68:74:02:17:1b:5e:4e: f0:d7:69:78:65:d4:65:95:5b:35:b2:42:b4:19:90:b7:40:bd: 20:ed:4f:63:aa:f3:a7:80:02:eb:46:60:db:75:b0:da:d6:d5: 5c:3a:69:03:d9:83:75:c4:eb:a3:de:64:1c:03:f0:9d:63:8a: 7e:1d:3a:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJLDKVbvqiUos25zHEsHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMDQzNmRkNjk4ZWJhM2VhYjVhOTJkYjFkNjRmMmYzMTRl ZDMxMTYwHhcNMjUxMjExMTYwMDQ0WhcNMjUxMjEyMTYwMDQ0WjAzMTEwLwYDVQQD EygzNmU2ZDVhY2M2MzZhOTkxMmE0M2ZlNThhOGMyM2M5NjAzYTQ3NDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YPgV1qPuXzJYvElx/PJqZqPkg3O FXFg+rF4RRe2HRlB2X4hdU7YN4dZD7zQ2LhHMQ0dK/wdqZ0Ako2dftAQ0VR9Tp1U 6+uitccLmf5kHQ+XjvQ60KGrbfehsEJmaIserntoFVqf62Q288h80hbqA0IU+meO kviPLaIZDBt5L7Gr/ComBqsN3ZATYidxz/UxogNr5w8T84c3C4xxP7nHYRS84g7o ySDI/JaBk2nvo0f63nLN7xFpG63PlMJ7yI9lT1OhyIz9tcO564TaafnLSH5wvFi2 WbPScwgtLfgUJ1Xd37ejqVT/rHCkfZuZ1cuWIdhKwP/Zy3JaU6OajMDr5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbm1azGNqmRKkP+WKjCPJYDpHRQMB8GA1UdIwQY MBaAFB4ENt1pjro+q1qS2x1k8vMU7TEWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zY2UwNDctZDg1OC00ZTdmLWEwNzAt ZDQzMTlkMTNjNzc1LzEvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8zY2UwNDctZDg1OC00ZTdmLWEwNzAtZDQzMTlkMTNjNzc1 LzEvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2TclMPl b/GJjVJfHoiU0VM+zjkFWmtY7MLtyjISJo60+ntcneW3QXboh3PxdYJ4yQ0QyctL pAwrt6TLdlUTMJpjFeaiT4TaopodsR1GfzR5qGSX1LBmlPmOJ+T2ney8ooXU+8PK zplQn+U3MqN9MZMCbrSIM/04fPnLshzt23R5qQ8bTOAC2yxRgx6mYXFVNLZ2xIoU r8Lziig5wdqJdjuOgSKj6OVpZ5uj/1Q3sHZk5XglF8T0c7WYQVh7PnRodAIXG15O 8NdpeGXUZZVbNbJCtBmQt0C9IO1PY6rzp4AC60Zg23Ww2tbVXDppA9mDdcTro95k HAPwnWOKfh06pQ== -----END CERTIFICATE-----Generated at Thu Dec 11 22:20:03 2025 by rpki-client