This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft File: HLRkugOLwLu-5ADz6QjfUUgsUbs.mft (raw, json) Hash identifier: OfqGQPdS6fJ8ILiIDGHfgmPZ/47Qc9cVORbjRD/u/lI= Subject key identifier: F3:6A:BE:9E:5F:15:BD:E0:BF:4F:E6:E7:58:5F:C1:CA:2D:88:B8:56 Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB Certificate issuer: /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb Certificate serial: 019ABD0A5C66BCF3783C92DAED8369B3575A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft Manifest number: 1636 Signing time: Tue 25 Nov 2025 22:02:43 +0000 Manifest this update: Tue 25 Nov 2025 22:02:43 +0000 Manifest next update: Wed 26 Nov 2025 22:02:43 +0000 Files and hashes: 1: HLRkugOLwLu-5ADz6QjfUUgsUbs.crl (hash: AakFYZ7BOzYGAxrBnOfURKzpeVcyVCd2SuXWrmiL8/s=) 2: W-OtDTrcD4enIHqlL53Q8gJVqVg.roa (hash: MIoWyZfzBnM9tbFHcQ1uCgLljDFhySK8a9b/Bqx5jVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 22:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bd:0a:5c:66:bc:f3:78:3c:92:da:ed:83:69:b3:57:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb Validity Not Before: Nov 25 22:02:43 2025 GMT Not After : Nov 26 22:02:43 2025 GMT Subject: CN=f36abe9e5f15bde0bf4fe6e7585fc1ca2d88b856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:92:64:bb:08:75:8b:13:9b:17:51:4c:ab:63: 51:8e:c0:73:2e:0b:f9:9d:3b:4e:8c:b2:99:ad:96: 9a:d7:fc:90:d0:70:8c:cc:56:a6:1d:73:e1:a5:f0: 3d:dd:ab:73:37:bd:35:19:4b:7c:84:9e:73:74:aa: a6:75:80:6c:ef:94:68:f7:ac:22:fb:1e:f5:e4:82: e5:cc:84:85:3b:a6:57:8e:03:fe:1d:dc:98:46:b4: 93:7b:d6:9a:b5:30:58:40:95:6c:32:1c:c3:14:5b: 92:fa:2b:13:2f:3a:f9:f7:ed:b2:71:8e:3b:66:2c: 26:7b:cb:22:c3:55:21:ce:35:86:55:7e:35:5a:4d: 0a:5f:77:ef:41:0e:1d:9b:f8:df:42:94:08:a3:1d: fb:91:04:83:0d:5d:d7:23:46:d1:94:cc:ce:2c:bc: 5b:28:ad:43:f9:e8:9f:10:75:be:94:03:24:3d:80: 11:73:5f:f2:63:18:10:f5:71:e3:fe:52:d9:e8:0a: be:7f:53:b6:0f:8c:0e:90:ee:88:64:a1:06:ff:cb: ba:22:d6:23:db:ef:93:4f:41:cd:1c:b1:81:67:fd: 9d:92:84:f7:ea:13:e5:ef:23:36:9d:5c:84:58:ad: 5e:ef:db:e2:cf:34:c9:ed:21:b6:ff:08:90:55:45: ee:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6A:BE:9E:5F:15:BD:E0:BF:4F:E6:E7:58:5F:C1:CA:2D:88:B8:56 X509v3 Authority Key Identifier: keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:50:58:e6:05:63:62:d0:51:3b:0b:03:04:95:18:35:c8:9a: 01:c4:b8:c0:bf:ee:22:58:3c:14:f3:ae:be:3c:71:44:9d:bd: b7:cf:bb:fa:44:81:eb:3f:76:d9:fd:e1:b6:72:69:52:0d:c0: 47:b5:74:28:d6:b2:fd:b3:98:75:85:82:a6:93:48:f6:d3:0f: da:03:3b:53:71:77:79:e1:07:9b:1e:0d:46:f7:7f:32:ae:0f: 99:30:c7:88:95:3d:61:ed:1a:89:73:a4:06:91:9d:89:ba:fc: 39:2a:10:63:ed:4f:25:d7:dd:35:3c:73:74:8f:fb:4a:2b:f2: 23:41:43:7d:05:57:5c:be:ad:1b:e1:17:c4:19:67:31:02:05: bf:cc:4d:19:80:ab:4b:66:df:1c:5b:2b:9f:40:1c:38:b9:95: 8c:bc:e1:6c:73:22:61:2b:eb:aa:ff:7f:25:aa:6d:92:4e:4f: 55:fb:c9:57:1c:01:b6:af:7e:d3:a5:8e:00:cc:ae:5c:9a:66: 0c:a7:bc:3b:13:d2:b6:11:bf:ed:6c:b7:26:d0:43:9e:9c:99: 6e:57:05:61:23:7b:c7:50:1f:db:b9:7b:29:a9:af:05:53:b1: be:c6:60:05:6e:9c:49:0c:e8:4f:2a:aa:05:62:81:20:3e:13: ad:73:0f:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq9ClxmvPN4PJLa7YNps1daMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYjQ2NGJhMDM4YmMwYmJiZWU0MDBmM2U5MDhkZjUxNDgy YzUxYmIwHhcNMjUxMTI1MjIwMjQzWhcNMjUxMTI2MjIwMjQzWjAzMTEwLwYDVQQD EyhmMzZhYmU5ZTVmMTViZGUwYmY0ZmU2ZTc1ODVmYzFjYTJkODhiODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppJkuwh1ixObF1FMq2NRjsBzLgv5 nTtOjLKZrZaa1/yQ0HCMzFamHXPhpfA93atzN701GUt8hJ5zdKqmdYBs75Ro96wi +x715ILlzISFO6ZXjgP+HdyYRrSTe9aatTBYQJVsMhzDFFuS+isTLzr59+2ycY47 Ziwme8siw1UhzjWGVX41Wk0KX3fvQQ4dm/jfQpQIox37kQSDDV3XI0bRlMzOLLxb KK1D+eifEHW+lAMkPYARc1/yYxgQ9XHj/lLZ6Aq+f1O2D4wOkO6IZKEG/8u6ItYj 2++TT0HNHLGBZ/2dkoT36hPl7yM2nVyEWK1e79vizzTJ7SG2/wiQVUXutQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNqvp5fFb3gv0/m51hfwcotiLhWMB8GA1UdIwQY MBaAFBy0ZLoDi8C7vuQA8+kI31FILFG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSExSa3VnT0x3THUtNUFEejZRamZVVWdzVWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wODcyOWYtNzlhNi00OGQwLWIyZTEt YmIyNjE0M2M1ZWRjLzEvSExSa3VnT0x3THUtNUFEejZRamZVVWdzVWJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wODcyOWYtNzlhNi00OGQwLWIyZTEtYmIyNjE0M2M1ZWRj LzEvSExSa3VnT0x3THUtNUFEejZRamZVVWdzVWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVBY5gVj YtBROwsDBJUYNciaAcS4wL/uIlg8FPOuvjxxRJ29t8+7+kSB6z922f3htnJpUg3A R7V0KNay/bOYdYWCppNI9tMP2gM7U3F3eeEHmx4NRvd/Mq4PmTDHiJU9Ye0aiXOk BpGdibr8OSoQY+1PJdfdNTxzdI/7SivyI0FDfQVXXL6tG+EXxBlnMQIFv8xNGYCr S2bfHFsrn0AcOLmVjLzhbHMiYSvrqv9/Japtkk5PVfvJVxwBtq9+06WOAMyuXJpm DKe8OxPSthG/7Wy3JtBDnpyZblcFYSN7x1Af27l7KamvBVOxvsZgBW6cSQzoTyqq BWKBID4TrXMPiA== -----END CERTIFICATE-----Generated at Wed Nov 26 02:06:49 2025 by rpki-client