This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft File: HDepAm5Fto_kc1pGm3VjYTCtElw.mft (raw, json) Hash identifier: 3gBVU4O1AAPvOhBXoWtI4a8XBaC9Simn+gS75PTJ5CY= Subject key identifier: CE:EE:8A:C1:E3:D2:C9:6F:91:B8:FD:90:2A:E7:51:F4:C7:0E:A1:25 Authority key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C Certificate issuer: /CN=1c37a9026e45b68fe4735a469b75636130ad125c Certificate serial: 019AF5778C3AFB46021C5383AD431400E3F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft Manifest number: 0A9C Signing time: Sat 06 Dec 2025 21:00:43 +0000 Manifest this update: Sat 06 Dec 2025 21:00:43 +0000 Manifest next update: Sun 07 Dec 2025 21:00:43 +0000 Files and hashes: 1: HDepAm5Fto_kc1pGm3VjYTCtElw.crl (hash: UA7X1Y9IHkH3ne8mwC3jVpgLHsluW0DHj6+hkBVd7Ms=) 2: uaDvodSl9Qqt6SU3QvEP4PKpm0c.roa (hash: KfFNiihZ95ffen8bkT+elj9FXLgX4E04ZxK55q4T9Kw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:8c:3a:fb:46:02:1c:53:83:ad:43:14:00:e3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c37a9026e45b68fe4735a469b75636130ad125c Validity Not Before: Dec 6 21:00:43 2025 GMT Not After : Dec 7 21:00:43 2025 GMT Subject: CN=ceee8ac1e3d2c96f91b8fd902ae751f4c70ea125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e0:d7:4c:89:24:b9:ae:0c:48:3e:ae:0f:dc: 9d:d9:31:e6:61:76:42:99:4d:3c:3f:7f:c4:f4:29: 03:09:7a:5b:09:85:3f:1a:e3:32:9c:8e:73:24:86: a0:8e:b3:76:18:e0:e6:e8:6c:ad:72:f6:9d:5c:f6: 48:19:f9:93:a3:0d:94:5a:39:9e:36:91:48:61:80: c9:fe:18:11:b8:96:13:96:e4:26:e0:0e:f2:3f:b1: 1b:2b:03:63:92:d7:6a:5a:fb:98:30:12:af:ea:da: 25:29:2e:f0:f3:d9:cf:90:2e:85:73:d6:80:07:99: 1b:a4:fc:22:38:28:c2:ec:8f:25:f3:4a:a6:9f:57: d6:cc:ab:8a:06:15:61:6b:bb:86:81:9d:e9:8f:c9: db:e5:cd:b4:cd:6b:09:25:15:dd:da:92:d9:e4:07: bc:5d:d6:85:98:c0:f2:26:32:a3:bd:ad:de:71:73: 02:42:f0:a0:7e:55:f0:e5:94:ed:df:7c:0e:70:a3: 43:b9:88:53:e2:b0:e6:f2:90:85:b2:48:80:6a:a8: 73:51:2b:a8:a6:36:51:c2:5d:31:40:97:74:6c:93: ca:f7:06:ce:7f:e3:6b:a4:74:52:7c:3e:9e:db:61: f0:27:89:4a:a4:9b:d8:f2:2b:44:73:f1:ec:61:79: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EE:8A:C1:E3:D2:C9:6F:91:B8:FD:90:2A:E7:51:F4:C7:0E:A1:25 X509v3 Authority Key Identifier: keyid:1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:cb:46:7f:94:05:67:d0:2e:87:13:62:28:d1:14:36:44:55: c2:82:4a:e9:d7:c4:06:99:d1:72:da:c1:52:94:87:a1:1f:4e: 1e:2f:0e:b1:35:ec:8c:b8:34:57:4c:56:0a:8b:fb:7e:6e:ec: 28:10:db:64:63:6d:72:e0:1a:cd:4f:32:45:4c:bd:e3:d2:88: 4d:12:4b:95:02:1e:37:0b:63:f9:6d:d9:cf:65:1c:75:f6:01: 53:01:9a:84:d3:cc:e2:00:76:23:84:5d:54:28:23:c7:03:45: 71:9f:93:d5:6a:2e:af:62:e7:94:bb:4e:d8:6a:c1:b8:11:c8: 14:e5:11:b8:15:76:c1:6a:e8:42:34:62:dc:68:6c:50:14:2c: 1a:88:12:92:e0:69:f0:ac:a7:61:31:68:f6:9d:a8:40:52:b9: b3:9c:61:e7:4b:e9:53:d8:6d:c3:ae:c1:67:a1:ab:3f:a0:65: 9f:63:06:f2:9e:3c:05:54:98:ba:73:7f:93:82:f2:1b:e6:76: cc:c9:79:81:22:83:90:da:44:02:ea:02:38:dd:ba:c0:d7:d5: 87:51:d8:60:bc:ee:6e:66:9f:ae:20:9a:15:09:1d:d3:03:fc: ce:e3:00:e1:2d:ee:52:34:b1:b4:e0:33:19:7e:ee:90:5d:87: dc:86:ad:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d4w6+0YCHFODrUMUAOPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMzdhOTAyNmU0NWI2OGZlNDczNWE0NjliNzU2MzYxMzBh ZDEyNWMwHhcNMjUxMjA2MjEwMDQzWhcNMjUxMjA3MjEwMDQzWjAzMTEwLwYDVQQD EyhjZWVlOGFjMWUzZDJjOTZmOTFiOGZkOTAyYWU3NTFmNGM3MGVhMTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uDXTIkkua4MSD6uD9yd2THmYXZC mU08P3/E9CkDCXpbCYU/GuMynI5zJIagjrN2GODm6GytcvadXPZIGfmTow2UWjme NpFIYYDJ/hgRuJYTluQm4A7yP7EbKwNjktdqWvuYMBKv6tolKS7w89nPkC6Fc9aA B5kbpPwiOCjC7I8l80qmn1fWzKuKBhVha7uGgZ3pj8nb5c20zWsJJRXd2pLZ5Ae8 XdaFmMDyJjKjva3ecXMCQvCgflXw5ZTt33wOcKNDuYhT4rDm8pCFskiAaqhzUSuo pjZRwl0xQJd0bJPK9wbOf+NrpHRSfD6e22HwJ4lKpJvY8itEc/HsYXnLUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7uisHj0slvkbj9kCrnUfTHDqElMB8GA1UdIwQY MBaAFBw3qQJuRbaP5HNaRpt1Y2EwrRJcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSERlcEFtNUZ0b19rYzFwR20zVmpZVEN0RWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yYmI2MDMtZjQ3OS00MGNiLTgyZDQt NDhkNjcyOTczYjEzLzEvSERlcEFtNUZ0b19rYzFwR20zVmpZVEN0RWx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8yYmI2MDMtZjQ3OS00MGNiLTgyZDQtNDhkNjcyOTczYjEz LzEvSERlcEFtNUZ0b19rYzFwR20zVmpZVEN0RWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5stGf5QF Z9AuhxNiKNEUNkRVwoJK6dfEBpnRctrBUpSHoR9OHi8OsTXsjLg0V0xWCov7fm7s KBDbZGNtcuAazU8yRUy949KITRJLlQIeNwtj+W3Zz2UcdfYBUwGahNPM4gB2I4Rd VCgjxwNFcZ+T1Wour2LnlLtO2GrBuBHIFOURuBV2wWroQjRi3GhsUBQsGogSkuBp 8KynYTFo9p2oQFK5s5xh50vpU9htw67BZ6GrP6Bln2MG8p48BVSYunN/k4LyG+Z2 zMl5gSKDkNpEAuoCON26wNfVh1HYYLzubmafriCaFQkd0wP8zuMA4S3uUjSxtOAz GX7ukF2H3Iat7A== -----END CERTIFICATE-----Generated at Sun Dec 7 00:15:09 2025 by rpki-client