This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft File: HGce_RKBEUKXWJ51k6fgUFTZJVs.mft (raw, json) Hash identifier: GPMq/rG5nA3yXNnFVQsI83zC1hC/wcBSsvaIkZ4P/Cg= Subject key identifier: 2D:A4:AC:AE:AE:B1:62:8C:91:89:79:12:19:11:F6:4E:AB:A6:2D:47 Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B Certificate issuer: /CN=1c671efd1281114297589e7593a7e05054d9255b Certificate serial: 019B59E45D5EFD72BD06A1C548CB0D665926 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft Manifest number: 1297 Signing time: Fri 26 Dec 2025 09:01:36 +0000 Manifest this update: Fri 26 Dec 2025 09:01:36 +0000 Manifest next update: Sat 27 Dec 2025 09:01:36 +0000 Files and hashes: 1: HGce_RKBEUKXWJ51k6fgUFTZJVs.crl (hash: Uqe/cA/qX4LbaDaAf1uLyMxAo83fT74uVrx9tFrNjYg=) 2: quzeBvB4K-uCJUdGNl5lumOg01g.roa (hash: NUc87tmJZd1YHslvV2s3oIDhhEPpWQvZDbTgS+MJ6oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:5d:5e:fd:72:bd:06:a1:c5:48:cb:0d:66:59:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b Validity Not Before: Dec 26 09:01:36 2025 GMT Not After : Dec 27 09:01:36 2025 GMT Subject: CN=2da4acaeaeb1628c918979121911f64eaba62d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:45:7c:8f:38:fa:4b:88:be:c9:73:a4:a6:4b: 2f:12:38:8c:21:25:63:0a:61:44:ee:25:c6:b1:ad: cf:fd:57:34:de:04:8a:52:66:19:4f:36:ba:09:65: 34:e8:a1:64:81:e3:b2:ec:cc:7e:4b:77:2a:0a:32: e3:df:93:7a:ec:f0:6a:f6:3a:14:5a:22:d4:05:c1: 68:c0:6f:e7:52:b4:b8:8f:70:11:73:a1:32:f9:1d: d7:d8:08:7a:37:d9:37:e4:a3:3a:a6:d3:45:c3:14: 79:04:72:4e:6a:44:be:af:6a:52:71:cb:ef:de:91: 80:81:27:df:90:76:47:73:b2:1d:57:82:a2:72:80: b6:82:1b:b1:81:32:90:44:a0:86:5f:f5:a3:f0:b8: bf:30:59:10:fd:a8:f6:8c:83:71:0d:1b:a0:fd:92: 08:cb:eb:6d:ad:3f:19:d8:3b:f1:51:c2:c7:8d:e4: 9c:7e:15:1e:57:36:36:cc:29:04:ec:e4:52:b3:99: 04:5c:4f:5a:d3:15:08:ed:f4:63:69:ee:b0:8f:50: b9:6f:df:4a:62:f1:9d:c4:7f:f5:78:06:42:07:60: 4e:69:14:78:a4:43:e8:09:28:68:d4:c9:dd:f1:01: fd:49:e1:11:9a:b4:ae:4b:21:5c:cc:63:c7:aa:cb: 64:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A4:AC:AE:AE:B1:62:8C:91:89:79:12:19:11:F6:4E:AB:A6:2D:47 X509v3 Authority Key Identifier: keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d5:fa:b3:eb:d5:70:45:6d:a7:af:18:e1:36:14:31:15:5b: 06:7b:6b:9a:7f:50:e7:a9:a3:04:4b:3f:8c:45:9b:73:84:7e: 34:e3:5d:a0:2a:d7:b9:1e:20:b6:9c:c6:a3:2a:1d:2d:dd:ef: 41:d6:a9:91:0a:bb:d5:ea:a5:a3:01:ea:bd:5c:b0:16:d0:c8: 44:27:76:25:f4:42:cd:1b:28:b2:ad:63:5f:91:e4:a1:6f:a4: f4:8c:8f:be:fe:2a:28:e9:3f:9f:6d:49:ed:11:48:81:9b:98: bb:fc:b2:c7:fe:37:ce:8c:75:a9:43:81:49:84:55:15:f8:8a: 81:2c:9c:ff:11:de:eb:95:9b:de:57:a9:f1:56:71:ce:62:d3: 0a:70:94:81:02:5a:c6:91:39:4e:7a:93:56:6d:4f:f6:34:79: fb:a7:cc:2f:30:bb:85:53:dc:78:b6:e0:fd:2c:67:49:3b:9a: 7a:cd:79:0e:e8:95:ef:d9:ab:d8:b0:09:10:87:c6:10:ce:66: fc:2a:79:04:d3:dd:b3:67:5a:56:41:2f:b8:63:32:e9:09:30: 61:ce:55:fe:ee:01:4a:b9:57:6a:5f:31:82:4e:33:45:ba:11: 3a:06:b9:51:65:51:64:88:1c:2d:4a:92:81:dc:0e:b6:9e:5c: f8:c3:bb:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5F1e/XK9BqHFSMsNZlkmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNjcxZWZkMTI4MTExNDI5NzU4OWU3NTkzYTdlMDUwNTRk OTI1NWIwHhcNMjUxMjI2MDkwMTM2WhcNMjUxMjI3MDkwMTM2WjAzMTEwLwYDVQQD EygyZGE0YWNhZWFlYjE2MjhjOTE4OTc5MTIxOTExZjY0ZWFiYTYyZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UV8jzj6S4i+yXOkpksvEjiMISVj CmFE7iXGsa3P/Vc03gSKUmYZTza6CWU06KFkgeOy7Mx+S3cqCjLj35N67PBq9joU WiLUBcFowG/nUrS4j3ARc6Ey+R3X2Ah6N9k35KM6ptNFwxR5BHJOakS+r2pSccvv 3pGAgSffkHZHc7IdV4KicoC2ghuxgTKQRKCGX/Wj8Li/MFkQ/aj2jINxDRug/ZII y+ttrT8Z2DvxUcLHjeScfhUeVzY2zCkE7ORSs5kEXE9a0xUI7fRjae6wj1C5b99K YvGdxH/1eAZCB2BOaRR4pEPoCSho1Mnd8QH9SeERmrSuSyFczGPHqstkFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2krK6usWKMkYl5EhkR9k6rpi1HMB8GA1UdIwQY MBaAFBxnHv0SgRFCl1iedZOn4FBU2SVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEdjZV9SS0JFVUtYV0o1MWs2ZmdVRlRaSlZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mZGIwMDMtZmFlMy00YTY5LTljOTEt ZTNkMmY2NGZkZGQ0LzEvSEdjZV9SS0JFVUtYV0o1MWs2ZmdVRlRaSlZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mZGIwMDMtZmFlMy00YTY5LTljOTEtZTNkMmY2NGZkZGQ0 LzEvSEdjZV9SS0JFVUtYV0o1MWs2ZmdVRlRaSlZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9X6s+vV cEVtp68Y4TYUMRVbBntrmn9Q56mjBEs/jEWbc4R+NONdoCrXuR4gtpzGoyodLd3v QdapkQq71eqlowHqvVywFtDIRCd2JfRCzRsosq1jX5HkoW+k9IyPvv4qKOk/n21J 7RFIgZuYu/yyx/43zox1qUOBSYRVFfiKgSyc/xHe65Wb3lep8VZxzmLTCnCUgQJa xpE5TnqTVm1P9jR5+6fMLzC7hVPceLbg/SxnSTuaes15DuiV79mr2LAJEIfGEM5m /Cp5BNPds2daVkEvuGMy6QkwYc5V/u4BSrlXal8xgk4zRboROga5UWVRZIgcLUqS gdwOtp5c+MO7HA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:52 2025 by rpki-client