This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json) Hash identifier: /8AjQUS8/bDaH9OPRCpDxtrxrrHxP9x6vgztjWQRhW0= Subject key identifier: 2E:DA:A6:E1:51:3F:12:E8:2A:4F:4A:51:A6:1B:02:16:58:04:FC:27 Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0 Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0 Certificate serial: 019B194D48593FC62C245FA899FCDD4E8491 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft Manifest number: 1787 Signing time: Sat 13 Dec 2025 20:00:53 +0000 Manifest this update: Sat 13 Dec 2025 20:00:53 +0000 Manifest next update: Sun 14 Dec 2025 20:00:53 +0000 Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: Ria2jryklfhYZDbOBDNAgpLw1CWrKK2YjIVh3j5ix4I=) 2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=) 3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:48:59:3f:c6:2c:24:5f:a8:99:fc:dd:4e:84:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0 Validity Not Before: Dec 13 20:00:53 2025 GMT Not After : Dec 14 20:00:53 2025 GMT Subject: CN=2edaa6e1513f12e82a4f4a51a61b02165804fc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:f6:f4:f8:99:2c:f2:64:39:8a:f3:35:53: 40:b6:2d:7c:ba:bb:d5:68:02:01:3f:96:9d:da:9f: 70:49:69:a6:27:38:fa:dc:ab:a4:ff:a6:59:1e:d2: 21:aa:25:bf:15:86:9a:f8:40:4c:98:b0:0a:ac:20: 4c:78:ef:73:e1:1b:14:66:cf:04:ee:1b:61:dc:71: 59:58:b2:37:0e:51:51:07:12:37:7b:52:e2:fd:52: 40:0e:a8:6f:5e:f9:64:a9:ed:60:bb:13:bd:23:84: fd:4a:c0:c6:df:82:ee:bf:45:2a:6a:2f:42:25:cd: b5:1d:5b:82:e1:1d:9d:63:c4:ed:f4:65:f0:bf:37: b2:17:93:10:65:ad:e3:91:8c:3d:3a:73:7d:7b:ba: 3d:74:55:ea:fe:91:7f:0e:12:72:c7:65:25:52:cd: 14:b6:a2:1f:9b:f9:a4:68:b0:8e:9e:dd:41:4d:d8: 45:8c:38:63:1b:73:1a:8b:6b:6c:32:cc:b9:f8:08: e0:17:bb:d8:b5:b6:e7:ae:0d:2a:8f:80:0b:f5:71: 7d:c3:99:ac:9b:ea:39:6b:8c:1d:c4:6e:b6:77:ca: be:c6:94:69:6f:7e:f4:f0:f7:50:10:42:ad:62:91: 71:34:ff:32:f8:14:09:03:5c:92:84:a1:76:3a:e8: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DA:A6:E1:51:3F:12:E8:2A:4F:4A:51:A6:1B:02:16:58:04:FC:27 X509v3 Authority Key Identifier: keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b7:d1:3e:1e:1b:de:ed:2b:ad:15:5a:36:8f:4f:1e:d8:7f: c6:50:22:01:63:cb:e0:e0:b4:4f:e4:c2:07:6d:32:6c:e8:05: 57:d2:17:cd:8a:8b:e7:f8:dd:3f:2d:d6:49:b7:68:2b:8e:9f: fd:57:ec:db:a9:f9:00:d9:2c:c0:c0:11:42:18:b2:f9:c9:fe: 78:44:52:97:47:28:89:ea:e5:5e:f6:84:7b:dc:5d:14:e8:1f: 57:18:4a:54:31:76:c2:c9:66:8d:5f:71:d7:5c:e1:c1:cd:05: c6:97:73:1d:47:af:f3:95:63:1a:fc:f6:2f:f1:b3:25:55:1d: 2e:9c:0a:12:5b:60:50:4e:76:e8:74:9d:3d:63:cb:0a:ed:64: 32:df:75:0e:e9:d9:43:50:1b:9a:c1:70:3d:16:fa:d7:b8:bc: d0:a7:be:52:11:22:cc:a1:47:02:58:a8:ee:81:fa:4d:f1:e1: 26:e0:fc:d8:b1:fc:84:f1:a2:5f:7b:3b:68:04:dc:95:bc:90: 33:51:9f:34:a9:60:f7:e8:2e:af:3f:5d:cd:1d:cd:3c:79:d3: c5:f8:e9:26:19:98:d6:5e:cb:71:21:8f:b4:cc:98:88:dc:e8: 0e:0a:8c:7f:a8:ec:a5:c7:75:a7:b7:0c:bc:09:1e:12:a3:42: b8:25:38:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTUhZP8YsJF+omfzdToSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMGM3ZTdiYjI3YzUzM2E5OTdkMjc3Y2FkZDQxN2VjN2Jk Mjg0ZjAwHhcNMjUxMjEzMjAwMDUzWhcNMjUxMjE0MjAwMDUzWjAzMTEwLwYDVQQD EygyZWRhYTZlMTUxM2YxMmU4MmE0ZjRhNTFhNjFiMDIxNjU4MDRmYzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6H29PiZLPJkOYrzNVNAti18urvV aAIBP5ad2p9wSWmmJzj63Kuk/6ZZHtIhqiW/FYaa+EBMmLAKrCBMeO9z4RsUZs8E 7hth3HFZWLI3DlFRBxI3e1Li/VJADqhvXvlkqe1guxO9I4T9SsDG34Luv0Uqai9C Jc21HVuC4R2dY8Tt9GXwvzeyF5MQZa3jkYw9OnN9e7o9dFXq/pF/DhJyx2UlUs0U tqIfm/mkaLCOnt1BTdhFjDhjG3Mai2tsMsy5+AjgF7vYtbbnrg0qj4AL9XF9w5ms m+o5a4wdxG62d8q+xpRpb3708PdQEEKtYpFxNP8y+BQJA1yShKF2OugVbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7apuFRPxLoKk9KUaYbAhZYBPwnMB8GA1UdIwQY MBaAFB0MfnuyfFM6mX0nfK3UF+x70oTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEt YjI4ZjA3YjJmNDViLzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEtYjI4ZjA3YjJmNDVi LzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7fRPh4b 3u0rrRVaNo9PHth/xlAiAWPL4OC0T+TCB20ybOgFV9IXzYqL5/jdPy3WSbdoK46f /Vfs26n5ANkswMARQhiy+cn+eERSl0coierlXvaEe9xdFOgfVxhKVDF2wslmjV9x 11zhwc0FxpdzHUev85VjGvz2L/GzJVUdLpwKEltgUE526HSdPWPLCu1kMt91DunZ Q1AbmsFwPRb617i80Ke+UhEizKFHAlio7oH6TfHhJuD82LH8hPGiX3s7aATclbyQ M1GfNKlg9+gurz9dzR3NPHnTxfjpJhmY1l7LcSGPtMyYiNzoDgqMf6jspcd1p7cM vAkeEqNCuCU4lQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:26:02 2025 by rpki-client