This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft File: HCz1cnHCuPBLqn5jqbgQPVID1_g.mft (raw, json) Hash identifier: WpqhaRPzrqXr03Lg8WNoXNgv8DxibCLNfI5jMc+YpYk= Subject key identifier: 9B:12:18:A4:53:30:6C:F0:1E:FA:99:E3:23:B8:13:9F:9F:CC:A8:07 Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8 Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8 Certificate serial: 019B484BA0B2AD6263F6BD4ECBDCAB1788F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft Manifest number: 0FE9 Signing time: Mon 22 Dec 2025 23:01:14 +0000 Manifest this update: Mon 22 Dec 2025 23:01:14 +0000 Manifest next update: Tue 23 Dec 2025 23:01:14 +0000 Files and hashes: 1: HCz1cnHCuPBLqn5jqbgQPVID1_g.crl (hash: Jq9bpj8HX9+pyQU7IMeBcAp6vht+5SVbR2yy2Bkuo5k=) 2: vH3uZ08iyiY8zb-A3dRrracn6LQ.roa (hash: zmUAFJf99C5ECEtVBxVkr25oo8bxiW5B47UWFtDZGZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:a0:b2:ad:62:63:f6:bd:4e:cb:dc:ab:17:88:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8 Validity Not Before: Dec 22 23:01:14 2025 GMT Not After : Dec 23 23:01:14 2025 GMT Subject: CN=9b1218a453306cf01efa99e323b8139f9fcca807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:1d:77:de:c0:cf:00:b3:4b:31:20:a7:f1: 20:a3:b0:75:0c:c2:28:ec:c2:a2:34:db:e7:88:4b: 1c:d3:d6:59:e4:d2:e9:50:a3:18:30:59:97:ac:09: 26:37:57:2a:85:44:d5:f7:19:d8:7f:cf:96:c0:2a: 47:83:fc:de:36:df:42:78:30:1a:29:d3:cc:9f:35: e3:53:ce:9d:23:0d:59:43:b2:86:5c:c7:50:0c:43: ab:09:29:17:9d:cc:15:f8:b3:68:5b:54:f4:cd:19: f8:29:ea:c5:23:3f:d8:0d:b7:b4:72:20:58:44:ab: e6:7e:81:2b:3c:66:37:14:33:39:e6:d9:d8:58:e8: 98:65:19:05:11:f0:55:ab:50:93:79:5a:32:73:88: 29:5d:23:90:9a:32:41:c3:56:a0:84:71:f5:84:70: e8:5d:3d:ea:5d:45:e0:b6:0d:0e:c6:bf:57:8b:83: 7f:8a:2c:7d:ee:c6:66:c0:79:a5:e3:26:0e:27:03: 58:b4:13:2e:c6:e4:e4:5b:17:e0:c0:fa:41:f1:8d: fd:9b:67:ea:de:df:d7:e4:f2:ee:5a:76:21:20:9d: 46:3a:5d:82:c6:e0:83:93:c1:27:9b:85:87:96:a8: 46:05:8a:27:42:d1:36:36:3c:de:e8:9c:73:1b:6a: 37:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:12:18:A4:53:30:6C:F0:1E:FA:99:E3:23:B8:13:9F:9F:CC:A8:07 X509v3 Authority Key Identifier: keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fd:e1:54:50:34:fe:3a:10:a9:e2:e5:df:69:4f:d0:0e:9f: d8:98:00:53:21:2c:31:06:ee:ac:b4:b8:bf:b1:1d:c6:ca:fd: a2:dc:1d:8f:9c:39:5e:c9:55:74:ad:b8:ac:f0:a4:77:6d:58: 21:4c:96:7e:25:90:39:f9:b9:90:1e:75:07:67:70:ff:8a:db: 1a:ed:51:21:f3:5a:08:65:9c:a8:05:fc:0b:94:cf:a8:dd:cd: 92:00:98:38:40:de:2e:0a:fd:c2:41:08:43:a1:8d:89:9c:fc: 3b:4d:7e:e3:92:ee:cc:e0:e7:78:bb:01:ab:2d:d4:34:5a:75: f0:28:9b:0e:48:0a:e1:03:20:1a:68:4e:6e:a0:e8:62:35:8f: 0f:e4:73:8a:a8:43:c6:0b:6d:d6:04:c5:a3:8c:4d:72:01:61: a9:b6:b2:4f:2f:64:61:17:15:5f:69:68:3c:0b:85:a7:d8:ae: f2:5d:a3:77:8f:17:d6:9a:83:64:e5:4e:89:0c:3f:48:a9:59: f1:7e:a5:1c:6e:a6:4e:03:6f:8f:01:d2:44:a4:7f:e5:42:a1: 2a:75:ff:93:47:de:91:2c:e0:3e:ad:ed:de:96:30:f7:0d:3a: 54:03:4e:b8:1c:d5:2f:e8:4a:d3:f1:63:87:9c:2c:43:1c:c9: b0:8b:af:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS6CyrWJj9r1Oy9yrF4jzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMmNmNTcyNzFjMmI4ZjA0YmFhN2U2M2E5YjgxMDNkNTIw M2Q3ZjgwHhcNMjUxMjIyMjMwMTE0WhcNMjUxMjIzMjMwMTE0WjAzMTEwLwYDVQQD Eyg5YjEyMThhNDUzMzA2Y2YwMWVmYTk5ZTMyM2I4MTM5ZjlmY2NhODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxMdd97AzwCzSzEgp/Ego7B1DMIo 7MKiNNvniEsc09ZZ5NLpUKMYMFmXrAkmN1cqhUTV9xnYf8+WwCpHg/zeNt9CeDAa KdPMnzXjU86dIw1ZQ7KGXMdQDEOrCSkXncwV+LNoW1T0zRn4KerFIz/YDbe0ciBY RKvmfoErPGY3FDM55tnYWOiYZRkFEfBVq1CTeVoyc4gpXSOQmjJBw1aghHH1hHDo XT3qXUXgtg0Oxr9Xi4N/iix97sZmwHml4yYOJwNYtBMuxuTkWxfgwPpB8Y39m2fq 3t/X5PLuWnYhIJ1GOl2CxuCDk8Enm4WHlqhGBYonQtE2Njze6JxzG2o39wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsSGKRTMGzwHvqZ4yO4E5+fzKgHMB8GA1UdIwQY MBaAFBws9XJxwrjwS6p+Y6m4ED1SA9f4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81YWJjOTItZjU1YS00NTQ4LTlhMDAt NWI0NTM2YTc5ZTgyLzEvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy81YWJjOTItZjU1YS00NTQ4LTlhMDAtNWI0NTM2YTc5ZTgy LzEvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALP3hVFA0 /joQqeLl32lP0A6f2JgAUyEsMQburLS4v7Edxsr9otwdj5w5XslVdK24rPCkd21Y IUyWfiWQOfm5kB51B2dw/4rbGu1RIfNaCGWcqAX8C5TPqN3NkgCYOEDeLgr9wkEI Q6GNiZz8O01+45LuzODneLsBqy3UNFp18CibDkgK4QMgGmhObqDoYjWPD+RziqhD xgtt1gTFo4xNcgFhqbayTy9kYRcVX2loPAuFp9iu8l2jd48X1pqDZOVOiQw/SKlZ 8X6lHG6mTgNvjwHSRKR/5UKhKnX/k0fekSzgPq3t3pYw9w06VANOuBzVL+hK0/Fj h5wsQxzJsIuvzg== -----END CERTIFICATE-----Generated at Tue Dec 23 08:42:22 2025 by rpki-client