This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json) Hash identifier: fGvZkMwmKKtYzXk4wTBhQ9oNzTdtpBXQjOJfGkjWSK0= Subject key identifier: CE:4F:B9:F4:9A:78:BE:BA:22:64:C5:5D:5E:48:F0:6A:67:DC:F1:D7 Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72 Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72 Certificate serial: 019B28C08170C107FD3542722A37173B9374 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft Manifest number: 06EE Signing time: Tue 16 Dec 2025 20:01:03 +0000 Manifest this update: Tue 16 Dec 2025 20:01:03 +0000 Manifest next update: Wed 17 Dec 2025 20:01:03 +0000 Files and hashes: 1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=) 2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: HiUGinKswGU0L3d/THVkHHeeLgHDP6CdHYFVaWprPmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:81:70:c1:07:fd:35:42:72:2a:37:17:3b:93:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72 Validity Not Before: Dec 16 20:01:03 2025 GMT Not After : Dec 17 20:01:03 2025 GMT Subject: CN=ce4fb9f49a78beba2264c55d5e48f06a67dcf1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:52:d4:9c:3c:c2:6c:7c:34:17:8b:62:00: e2:a7:e1:e7:f7:b1:af:2b:dc:f8:57:09:fd:f6:d1: 23:5f:e7:09:2d:63:89:1c:3a:df:9b:f6:0f:44:fe: 7a:b5:c3:0b:78:28:07:ab:59:99:88:d7:37:07:9e: f4:dd:76:0e:4b:a1:e3:d5:91:67:64:17:b8:16:5b: 13:c0:25:45:25:96:a6:30:50:67:fb:84:38:fc:8a: 14:17:85:6b:99:e0:2b:32:a7:42:b5:24:ac:5a:45: 8e:7e:63:c4:0b:8b:81:f7:4f:2d:18:1e:db:c0:06: 91:30:9e:55:8e:9d:63:97:2d:ea:d5:1f:94:0d:18: f0:ef:a3:00:b5:26:f0:59:29:99:12:10:2e:d9:82: fd:b3:71:1a:46:83:8a:1c:83:80:5d:26:1b:77:dc: 84:63:b3:f2:cb:55:3b:54:d8:b0:2c:31:be:ad:8c: 67:a3:9d:19:fe:e1:c7:2b:86:ca:ab:53:a4:64:1c: ed:05:29:ed:d4:f6:83:c5:ad:f4:da:c2:ed:22:6a: eb:41:da:9a:f2:72:15:9a:68:84:6f:7a:ad:ea:77: a0:0d:57:7d:1a:c3:04:97:4b:97:6c:1c:3b:73:e6: c1:e6:7e:65:37:10:fe:7f:37:24:27:a9:17:02:31: cd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4F:B9:F4:9A:78:BE:BA:22:64:C5:5D:5E:48:F0:6A:67:DC:F1:D7 X509v3 Authority Key Identifier: keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7b:6f:cf:cd:56:8c:3f:07:e4:d9:fc:20:c2:d5:6d:82:08: fc:d7:6d:54:d8:70:90:d1:4f:df:11:66:d6:ce:eb:85:24:72: e9:83:bb:b3:52:f5:4f:aa:ca:5c:bc:b3:63:70:5c:3d:67:4a: 96:b2:c2:a3:84:bb:05:2e:b5:8a:09:8f:8b:c7:1c:fa:ea:ea: 44:a4:8e:77:68:02:6e:fd:3d:4f:31:6e:32:19:4c:5c:d0:0e: 14:bc:67:18:58:b8:a0:cb:4e:b4:51:03:29:7e:20:48:7e:99: 61:8e:8b:52:3b:19:dd:6e:0f:4f:a9:e9:62:9b:1d:b0:84:f1: 0d:eb:6c:a5:e2:bb:83:e4:13:22:9f:85:e1:d0:1f:b3:1e:6b: 14:76:72:1d:42:6a:92:df:9b:44:1c:17:27:11:00:14:ab:0c: c1:79:c5:3f:de:d8:cd:1a:37:52:d0:40:8f:18:97:e7:25:a4: 24:ce:aa:bc:f8:c4:cc:98:00:1d:4d:7b:09:50:6d:97:a4:bc: bf:49:d6:98:a7:14:70:3f:5e:cc:e4:6a:4d:40:37:3e:b0:db: a5:87:ca:ca:64:14:b8:85:1e:a4:06:e5:b5:db:fb:8e:83:68: cc:38:97:c9:97:9a:69:d0:32:65:67:05:12:33:bf:f1:8b:25: 5f:e4:91:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowIFwwQf9NUJyKjcXO5N0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjcxNmVmMDlmYWU0OTBjYzdjZGJkMzYwOTRkYjVmM2Qw YTFjNzIwHhcNMjUxMjE2MjAwMTAzWhcNMjUxMjE3MjAwMTAzWjAzMTEwLwYDVQQD EyhjZTRmYjlmNDlhNzhiZWJhMjI2NGM1NWQ1ZTQ4ZjA2YTY3ZGNmMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgRS1Jw8wmx8NBeLYgDip+Hn97Gv K9z4Vwn99tEjX+cJLWOJHDrfm/YPRP56tcMLeCgHq1mZiNc3B5703XYOS6Hj1ZFn ZBe4FlsTwCVFJZamMFBn+4Q4/IoUF4VrmeArMqdCtSSsWkWOfmPEC4uB908tGB7b wAaRMJ5Vjp1jly3q1R+UDRjw76MAtSbwWSmZEhAu2YL9s3EaRoOKHIOAXSYbd9yE Y7Pyy1U7VNiwLDG+rYxno50Z/uHHK4bKq1OkZBztBSnt1PaDxa302sLtImrrQdqa 8nIVmmiEb3qt6negDVd9GsMEl0uXbBw7c+bB5n5lNxD+fzckJ6kXAjHN8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5PufSaeL66ImTFXV5I8Gpn3PHXMB8GA1UdIwQY MBaAFBwnFu8J+uSQzHzb02CU2189ChxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82YTdlYTItYWJmZC00NGQyLWE3YWUt MTRkMWFjMzRhNWYyLzEvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82YTdlYTItYWJmZC00NGQyLWE3YWUtMTRkMWFjMzRhNWYy LzEvSENjVzd3bjY1SkRNZk52VFlKVGJYejBLSEhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXtvz81W jD8H5Nn8IMLVbYII/NdtVNhwkNFP3xFm1s7rhSRy6YO7s1L1T6rKXLyzY3BcPWdK lrLCo4S7BS61igmPi8cc+urqRKSOd2gCbv09TzFuMhlMXNAOFLxnGFi4oMtOtFED KX4gSH6ZYY6LUjsZ3W4PT6npYpsdsITxDetspeK7g+QTIp+F4dAfsx5rFHZyHUJq kt+bRBwXJxEAFKsMwXnFP97YzRo3UtBAjxiX5yWkJM6qvPjEzJgAHU17CVBtl6S8 v0nWmKcUcD9ezORqTUA3PrDbpYfKymQUuIUepAbltdv7joNozDiXyZeaadAyZWcF EjO/8YslX+SRrQ== -----END CERTIFICATE-----Generated at Wed Dec 17 03:44:02 2025 by rpki-client