This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft File: HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json) Hash identifier: OJa9zdv6QHZX2TAwbwHsJJXUNIDvQK5AxcdOb1w4goU= Subject key identifier: A8:FD:8D:1E:20:2B:E9:D3:97:2B:C5:BA:CA:FC:4B:11:23:20:CA:D6 Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE Certificate issuer: /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace Certificate serial: 019AF8AF6403EEB61EE11B38D27EC6D8F317 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft Manifest number: 38 Signing time: Sun 07 Dec 2025 12:00:35 +0000 Manifest this update: Sun 07 Dec 2025 12:00:35 +0000 Manifest next update: Mon 08 Dec 2025 12:00:35 +0000 Files and hashes: 1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: z9m1TU1wpRE2IA372TlCOywdxusNG18vaYaxQLyQ0/Q=) 2: Tf9luNXyEq9QxysMyYE_MI2T-Dw.roa (hash: JCTZRaYwg2Dc/NrGs0vNosIbeSst/kpqGq9Ss3robz0=) 3: unFfRVZsvRvkohGxQoSgq95x_UY.roa (hash: tSXKguvWUmVfGHfR9KLHr2lCBC0TGZziW3nPkjH31gQ=) 4: vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa (hash: TYWXQ81PwJFaPM/v0IBTjfWfvW7fjHxqu9IT+A6xBqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:af:64:03:ee:b6:1e:e1:1b:38:d2:7e:c6:d8:f3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace Validity Not Before: Dec 7 12:00:35 2025 GMT Not After : Dec 8 12:00:35 2025 GMT Subject: CN=a8fd8d1e202be9d3972bc5bacafc4b112320cad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f6:72:9a:2c:14:8c:36:3e:48:df:c7:59:7d: 68:89:6b:d2:0c:2f:15:72:f4:4d:30:74:4c:e1:0d: 4e:66:dd:fc:a3:59:e1:f8:1b:fb:3e:fc:1e:66:5e: 88:22:7a:e5:19:66:2f:bf:96:25:6a:fb:93:a2:9b: 1f:22:af:9f:ac:c7:b3:5e:87:22:b1:12:13:75:2c: ba:d3:6c:5b:8b:50:a0:f8:e4:64:fb:b4:a4:a7:86: 7a:d8:23:38:74:4e:2f:65:ff:22:30:a6:a0:f6:b1: 63:27:b9:1f:fe:19:bd:10:b6:bb:45:95:48:37:ad: 7f:44:68:83:53:fa:27:9a:3a:3c:e3:d5:d5:f0:a6: 39:76:06:75:82:b1:72:99:6d:b7:ff:9c:e8:64:91: a4:28:4a:fd:cd:2a:e2:52:fc:0c:82:fa:68:fa:d9: d2:e7:e3:bc:c2:d3:56:67:d5:26:35:25:28:c9:b2: 3b:d8:6c:cf:bb:9f:0a:50:79:72:34:92:81:11:36: fb:23:8e:69:70:98:72:95:3d:59:f7:14:e6:d3:5f: 11:41:54:a4:b5:15:59:a0:c4:9d:f4:a0:43:df:39: 90:e7:42:27:80:00:d9:3d:f5:3e:3e:63:73:b6:66: d5:6f:f4:8c:16:65:20:c7:fd:ee:d2:58:8c:4f:ad: 1f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FD:8D:1E:20:2B:E9:D3:97:2B:C5:BA:CA:FC:4B:11:23:20:CA:D6 X509v3 Authority Key Identifier: keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f8:16:cb:7f:2f:55:79:f8:a2:dc:cb:25:2b:f5:fc:7c:ca: 35:88:c9:87:3c:f0:18:41:cd:f2:d9:33:bc:86:73:50:77:d9: 08:d9:b4:d6:a2:5b:6a:9f:7b:4e:59:5d:62:54:88:40:ba:93: eb:b3:36:6b:9c:a1:36:99:bb:3a:6c:fe:b2:25:49:72:0e:fa: 84:50:7d:19:7d:77:5b:0f:09:2c:73:c9:83:61:f9:0c:f6:91: da:15:66:a2:dd:92:4f:51:a6:7e:4b:bb:93:78:d6:1b:c2:5b: fc:8d:5e:40:b7:8f:bc:44:d0:a7:d6:eb:2a:4b:b6:7e:5f:13: 6c:26:2e:47:77:b4:19:e2:10:2c:54:c3:6a:cc:85:3c:88:64: 68:19:01:d1:4c:73:11:6b:c0:ad:1c:8a:71:78:fa:43:45:1b: fc:60:54:2a:c1:0d:9f:f3:ce:87:5c:94:13:b3:7a:c1:61:5d: 82:61:59:00:1e:42:42:3e:c9:d9:28:91:b9:8c:d7:d7:eb:d9: d8:02:a7:c0:7e:09:7d:a3:53:dd:d6:f8:ed:db:d0:74:a4:38: 3d:62:06:e2:e7:21:1f:4d:b2:78:6b:03:09:ba:c6:6b:e0:45: 04:87:e0:dd:bf:fc:9b:cf:31:36:b4:f2:44:86:5b:1c:ba:93: 49:3f:1b:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4r2QD7rYe4Rs40n7G2PMXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDRhZjI4ZjhmN2FhODU4ZTI3ZDhlMmM3NjExNGM2ZmY0 OWJhY2UwHhcNMjUxMjA3MTIwMDM1WhcNMjUxMjA4MTIwMDM1WjAzMTEwLwYDVQQD EyhhOGZkOGQxZTIwMmJlOWQzOTcyYmM1YmFjYWZjNGIxMTIzMjBjYWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/ZymiwUjDY+SN/HWX1oiWvSDC8V cvRNMHRM4Q1OZt38o1nh+Bv7PvweZl6IInrlGWYvv5YlavuTopsfIq+frMezXoci sRITdSy602xbi1Cg+ORk+7Skp4Z62CM4dE4vZf8iMKag9rFjJ7kf/hm9ELa7RZVI N61/RGiDU/onmjo849XV8KY5dgZ1grFymW23/5zoZJGkKEr9zSriUvwMgvpo+tnS 5+O8wtNWZ9UmNSUoybI72GzPu58KUHlyNJKBETb7I45pcJhylT1Z9xTm018RQVSk tRVZoMSd9KBD3zmQ50IngADZPfU+PmNztmbVb/SMFmUgx/3u0liMT60fMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKj9jR4gK+nTlyvFusr8SxEjIMrWMB8GA1UdIwQY MBaAFB0Eryj496qFjifY4sdhFMb/SbrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUt NzBiNGUwYjNmYzllLzEvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUtNzBiNGUwYjNmYzll LzEvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/gWy38v VXn4otzLJSv1/HzKNYjJhzzwGEHN8tkzvIZzUHfZCNm01qJbap97TlldYlSIQLqT 67M2a5yhNpm7Omz+siVJcg76hFB9GX13Ww8JLHPJg2H5DPaR2hVmot2ST1Gmfku7 k3jWG8Jb/I1eQLePvETQp9brKku2fl8TbCYuR3e0GeIQLFTDasyFPIhkaBkB0Uxz EWvArRyKcXj6Q0Ub/GBUKsENn/POh1yUE7N6wWFdgmFZAB5CQj7J2SiRuYzX1+vZ 2AKnwH4JfaNT3db47dvQdKQ4PWIG4uchH02yeGsDCbrGa+BFBIfg3b/8m88xNrTy RIZbHLqTST8bcw== -----END CERTIFICATE-----Generated at Sun Dec 7 16:56:40 2025 by rpki-client