This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json) Hash identifier: ds1NX4epHzVoIG8EhfQZFYoT68AXY5H08q/crq+nLoY= Subject key identifier: 16:9A:7B:C3:81:50:BE:40:B4:09:E8:74:DF:33:4E:FB:1A:EC:A1:A2 Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16 Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916 Certificate serial: 019AACB9B19340C57FA8781828DCF535C1D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft Manifest number: 0114 Signing time: Sat 22 Nov 2025 18:00:42 +0000 Manifest this update: Sat 22 Nov 2025 18:00:42 +0000 Manifest next update: Sun 23 Nov 2025 18:00:42 +0000 Files and hashes: 1: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: Vbcz9IWTuW0+7wGHFjvN0PoY7IkWJybwZjQ3+91ogS8=) 2: ZvRCCsKN95gmwnkeFWd_hv2YiV0.roa (hash: MACXjV2P5VU/BibCYAFkD9NxL0EyNPN+9PRqLhlQfhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:b1:93:40:c5:7f:a8:78:18:28:dc:f5:35:c1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916 Validity Not Before: Nov 22 18:00:42 2025 GMT Not After : Nov 23 18:00:42 2025 GMT Subject: CN=169a7bc38150be40b409e874df334efb1aeca1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2a:26:bc:02:fc:06:b7:19:fd:9e:14:4b:dd: f8:4a:27:37:8d:9a:8e:62:47:3f:70:c3:24:dd:cf: 1b:7a:a1:42:5e:d7:61:22:28:fd:14:e3:35:87:10: 02:34:b8:a2:ca:01:14:a5:90:10:30:15:6c:46:e7: 3f:5d:f9:05:b6:a4:53:30:a2:3e:c5:74:fe:9c:b6: 7c:67:aa:a7:99:0d:de:86:dd:bc:4a:8e:ac:7a:85: ac:0e:de:b4:c0:d6:aa:95:78:02:09:42:32:2f:10: db:d3:a6:89:55:8b:a5:80:29:bb:7a:97:31:ea:27: bf:7e:c8:e3:c9:3c:b1:92:01:77:f1:19:ac:e0:7e: ab:64:34:43:97:7e:b8:b7:dd:79:e7:8f:13:ad:a8: ef:f1:74:ad:97:35:ce:5e:4e:14:b8:9e:f1:d6:db: 07:09:40:66:7a:49:81:6b:fd:23:2f:e5:a0:b2:cf: b4:b6:f6:61:c7:a4:72:50:5f:8b:f5:22:e8:ea:a3: 7c:24:76:72:09:c5:81:7a:6f:a2:17:e6:77:b8:22: 38:4d:88:1e:1c:d8:89:d9:20:a0:57:84:be:e2:03: 4b:b9:f7:7a:b2:d0:fe:04:d6:9f:48:b5:23:57:bf: 3e:46:33:a9:04:05:21:fa:f0:73:25:fd:0f:96:6c: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9A:7B:C3:81:50:BE:40:B4:09:E8:74:DF:33:4E:FB:1A:EC:A1:A2 X509v3 Authority Key Identifier: keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d2:e8:9a:93:e8:9f:19:7f:22:60:a2:7a:bc:cc:9f:c8:cd: 04:20:df:d4:ef:2b:34:aa:ab:ae:95:93:01:e8:30:d7:e6:b4: 70:ca:11:b7:17:12:4f:0c:18:9c:95:04:14:c1:13:c9:e0:a4: 00:a6:32:86:82:9c:e2:20:d1:ac:c8:09:d9:55:72:18:ce:19: 97:d8:66:d5:50:bc:03:cf:b8:4f:39:37:38:ab:13:25:49:21: c3:a1:7f:66:49:f0:2e:af:ac:be:18:c9:49:12:27:49:dd:c4: 20:6d:5b:e9:61:7e:fd:8f:34:ed:f1:02:f4:3f:1a:65:39:0e: 22:bd:30:d3:4c:00:27:61:da:4d:f7:fe:04:ec:b8:26:a5:e1: 68:e2:f4:25:91:81:ad:d0:c3:9c:b3:b7:e7:ff:b2:4f:f4:e2: d5:e4:fb:ce:1e:ec:1e:c9:e6:47:9c:a7:4a:0c:56:6c:c0:d1: 23:44:28:54:39:72:99:59:98:61:1f:12:06:07:de:f1:4a:a6: b6:53:63:bc:6f:f2:e1:ec:8b:b2:18:4b:6d:ad:c0:48:dc:3e: 26:ec:2d:f7:67:10:02:a4:77:c3:82:02:ba:5e:68:3a:62:ce: 30:53:aa:0b:be:c8:7a:be:b5:1e:27:95:91:b4:41:b6:ca:ff: 2b:ac:c0:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsubGTQMV/qHgYKNz1NcHYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNGU2YTFkM2NjMWU0ZjNkYzAxYWI5NmM5NDE5NmI5YzQ5 ZDI5MTYwHhcNMjUxMTIyMTgwMDQyWhcNMjUxMTIzMTgwMDQyWjAzMTEwLwYDVQQD EygxNjlhN2JjMzgxNTBiZTQwYjQwOWU4NzRkZjMzNGVmYjFhZWNhMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSomvAL8BrcZ/Z4US934Sic3jZqO Ykc/cMMk3c8beqFCXtdhIij9FOM1hxACNLiiygEUpZAQMBVsRuc/XfkFtqRTMKI+ xXT+nLZ8Z6qnmQ3eht28So6seoWsDt60wNaqlXgCCUIyLxDb06aJVYulgCm7epcx 6ie/fsjjyTyxkgF38Rms4H6rZDRDl364t915548Trajv8XStlzXOXk4UuJ7x1tsH CUBmekmBa/0jL+Wgss+0tvZhx6RyUF+L9SLo6qN8JHZyCcWBem+iF+Z3uCI4TYge HNiJ2SCgV4S+4gNLufd6stD+BNafSLUjV78+RjOpBAUh+vBzJf0PlmwTTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaae8OBUL5AtAnodN8zTvsa7KGiMB8GA1UdIwQY MBaAFBxOah08weTz3AGrlslBlrnEnSkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYt MWE0MmY2MzJjMzA3LzEvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYtMWE0MmY2MzJjMzA3 LzEvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtLompPo nxl/ImCierzMn8jNBCDf1O8rNKqrrpWTAegw1+a0cMoRtxcSTwwYnJUEFMETyeCk AKYyhoKc4iDRrMgJ2VVyGM4Zl9hm1VC8A8+4Tzk3OKsTJUkhw6F/ZknwLq+svhjJ SRInSd3EIG1b6WF+/Y807fEC9D8aZTkOIr0w00wAJ2HaTff+BOy4JqXhaOL0JZGB rdDDnLO35/+yT/Ti1eT7zh7sHsnmR5ynSgxWbMDRI0QoVDlymVmYYR8SBgfe8Uqm tlNjvG/y4eyLshhLba3ASNw+Juwt92cQAqR3w4ICul5oOmLOMFOqC77Ier61HieV kbRBtsr/K6zA4A== -----END CERTIFICATE-----Generated at Sat Nov 22 21:50:02 2025 by rpki-client