This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json) Hash identifier: 9v2Bjkf3y/JIVHEFL4i2bEJOOksR8pyQFAQ+Xdt2Bhc= Subject key identifier: A2:0D:6C:8C:EB:3C:BD:06:A6:BC:B5:D6:19:C8:76:1A:3E:03:D0:0F Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92 Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892 Certificate serial: 019AEE9A1289CD713499BF6004E6F0D35C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft Manifest number: 18 Signing time: Fri 05 Dec 2025 13:01:05 +0000 Manifest this update: Fri 05 Dec 2025 13:01:05 +0000 Manifest next update: Sat 06 Dec 2025 13:01:05 +0000 Files and hashes: 1: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: WnqmpUKn0TjiN5EpXGFAMzqEInCn033mN/NnpDSK7oA=) 2: eydd9b9yJG4u8PDoXh8HYchwXcQ.asa (hash: XLJ8T9Pn5PjpqOyDdfyyg17qfr7NWdf6Z89qNT5NgvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:9a:12:89:cd:71:34:99:bf:60:04:e6:f0:d3:5c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892 Validity Not Before: Dec 5 13:01:05 2025 GMT Not After : Dec 6 13:01:05 2025 GMT Subject: CN=a20d6c8ceb3cbd06a6bcb5d619c8761a3e03d00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:3f:80:d2:99:7a:e2:25:2f:b3:74:d8:25: e8:73:c3:17:80:9a:f9:29:bf:80:c4:89:64:62:74: 2a:bf:cc:23:43:6e:e4:82:a0:4d:d8:cc:64:e4:a8: 98:5b:f9:f5:c9:f7:1f:3c:b3:57:02:66:59:fd:61: 93:d4:64:60:4f:37:80:aa:07:60:3d:9f:83:7e:bc: 50:ba:03:c7:8b:bb:cb:0a:12:45:d4:9b:3d:b8:06: 70:23:e1:61:75:ff:1f:27:da:7c:61:5c:61:c5:5e: 4c:11:89:fc:d2:99:c4:93:12:ca:4c:dd:10:40:3d: 00:dc:19:09:11:93:72:4e:29:37:87:be:80:6b:da: 78:aa:ed:2e:17:53:71:81:a3:b5:7d:7a:5e:b0:c3: 02:39:d4:38:ca:6a:26:17:17:03:ca:02:5f:0e:10: f9:31:6e:fb:df:cd:01:22:16:32:1c:a0:e2:97:ae: 47:8e:fc:6c:bd:2e:2d:16:4e:c4:1d:ac:7f:f9:c5: 39:2c:9a:b4:03:cf:92:4b:32:5d:4f:5e:ba:c2:87: 9c:a4:64:9f:b9:b0:e6:98:65:71:d0:0a:dd:ae:1b: 7f:23:45:c8:53:f8:df:67:c5:cd:0c:b0:ec:c3:41: f2:08:b8:b4:4e:29:a2:26:9c:a5:b4:5c:96:fd:b5: 8a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0D:6C:8C:EB:3C:BD:06:A6:BC:B5:D6:19:C8:76:1A:3E:03:D0:0F X509v3 Authority Key Identifier: keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:25:ea:a5:e7:d3:4d:2b:20:31:d0:4d:fc:55:17:51:48:9c: 1c:da:f3:c0:9f:e8:e5:9c:dd:0d:5e:fa:38:46:6d:82:07:91: 0b:c7:9d:15:b9:04:0b:79:4b:39:4b:7e:33:21:fa:f0:b1:8e: 95:72:8d:49:ba:dc:8e:66:7c:04:0d:d3:f1:87:cd:f3:c1:7b: ca:6c:0f:d6:dd:9d:89:5c:ea:9f:c7:5a:df:be:1a:c8:b4:92: bd:92:aa:d1:12:7f:07:0c:64:4c:64:ea:4c:62:ee:87:c2:0a: 30:9e:8c:28:fb:e6:c6:84:52:08:ff:f9:89:24:d7:50:eb:d0: fc:7d:c5:db:3b:fb:42:b7:96:b3:61:a5:98:d3:7e:48:bc:30: 83:75:d9:18:09:bd:69:e0:f5:5c:6e:bc:cc:08:a6:45:06:a2: 10:56:8a:65:3c:95:3c:ed:f0:17:a5:07:52:8c:96:79:a2:7a: f1:bc:c8:c9:c0:94:52:32:08:07:96:93:be:8f:66:d8:cb:a0: 49:98:cd:1b:49:d4:ef:34:9a:db:52:98:de:a6:4f:98:e2:bd: ad:43:31:65:4b:71:6c:11:9b:48:4b:7d:ca:6c:3e:88:dc:e1: 8e:e5:0b:b5:33:a9:82:3d:95:df:0f:c8:64:8a:17:29:23:da: 8a:bb:2a:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrumhKJzXE0mb9gBObw01xGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYzFlZjYzNzQ5OThhODRlODBlNWUzMGRhMDlhNjlmNGZm ZWE4OTIwHhcNMjUxMjA1MTMwMTA1WhcNMjUxMjA2MTMwMTA1WjAzMTEwLwYDVQQD EyhhMjBkNmM4Y2ViM2NiZDA2YTZiY2I1ZDYxOWM4NzYxYTNlMDNkMDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/o/gNKZeuIlL7N02CXoc8MXgJr5 Kb+AxIlkYnQqv8wjQ27kgqBN2Mxk5KiYW/n1yfcfPLNXAmZZ/WGT1GRgTzeAqgdg PZ+DfrxQugPHi7vLChJF1Js9uAZwI+Fhdf8fJ9p8YVxhxV5MEYn80pnEkxLKTN0Q QD0A3BkJEZNyTik3h76Aa9p4qu0uF1NxgaO1fXpesMMCOdQ4ymomFxcDygJfDhD5 MW77380BIhYyHKDil65HjvxsvS4tFk7EHax/+cU5LJq0A8+SSzJdT166woecpGSf ubDmmGVx0Ardrht/I0XIU/jfZ8XNDLDsw0HyCLi0TimiJpyltFyW/bWKEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKINbIzrPL0Gpry11hnIdho+A9APMB8GA1UdIwQY MBaAFB3B72N0mYqE6A5eMNoJpp9P/qiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQt MTQ2Yzk0NzNiNmNiLzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQtMTQ2Yzk0NzNiNmNi LzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiXqpefT TSsgMdBN/FUXUUicHNrzwJ/o5ZzdDV76OEZtggeRC8edFbkEC3lLOUt+MyH68LGO lXKNSbrcjmZ8BA3T8YfN88F7ymwP1t2diVzqn8da374ayLSSvZKq0RJ/BwxkTGTq TGLuh8IKMJ6MKPvmxoRSCP/5iSTXUOvQ/H3F2zv7QreWs2GlmNN+SLwwg3XZGAm9 aeD1XG68zAimRQaiEFaKZTyVPO3wF6UHUoyWeaJ68bzIycCUUjIIB5aTvo9m2Mug SZjNG0nU7zSa21KY3qZPmOK9rUMxZUtxbBGbSEt9ymw+iNzhjuULtTOpgj2V3w/I ZIoXKSPairsqWQ== -----END CERTIFICATE-----Generated at Fri Dec 5 19:34:12 2025 by rpki-client