This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft File: HCM-7mJMGSxsfa2hQy3gueeLCbo.mft (raw, json) Hash identifier: z8qDALYk2KLJL/jEADChacHe6FpVcu8qbuchx4R9yV8= Subject key identifier: 98:52:74:8E:A9:C2:E8:78:D9:86:13:B3:8A:50:6B:3C:3E:DC:3A:47 Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA Certificate issuer: /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba Certificate serial: 019B5A51EE7106E99B1BF6F6CD02EAF9227C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft Manifest number: 179D Signing time: Fri 26 Dec 2025 11:01:17 +0000 Manifest this update: Fri 26 Dec 2025 11:01:17 +0000 Manifest next update: Sat 27 Dec 2025 11:01:17 +0000 Files and hashes: 1: HCM-7mJMGSxsfa2hQy3gueeLCbo.crl (hash: xdXjRsqmEXJ0VqrNbfayWPurYzT/wHcUm+RkZRm0VEw=) 2: K45e82x9WOXI8E3rbiZhpm6Y1c8.roa (hash: b1lnr/cxWdJYHM4gx0SMdfk+T7jlT+eQyoUM+qzNzCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:ee:71:06:e9:9b:1b:f6:f6:cd:02:ea:f9:22:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba Validity Not Before: Dec 26 11:01:17 2025 GMT Not After : Dec 27 11:01:17 2025 GMT Subject: CN=9852748ea9c2e878d98613b38a506b3c3edc3a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a9:14:63:a6:10:fe:ac:1f:a0:3e:3a:bd:92: 56:ee:8a:7c:90:ff:5a:db:64:08:b9:c2:3d:4a:1f: be:48:50:ce:01:c1:6e:d9:28:10:48:6a:c8:78:ed: 97:39:a6:82:95:a9:14:c6:b0:54:bd:02:fb:35:4e: df:df:57:05:1f:35:52:6b:6f:f9:5d:6a:d7:6a:7b: 7d:38:ad:60:ca:69:e1:99:02:01:bc:af:29:37:57: 78:ec:31:4e:c0:3e:a3:94:7f:04:9a:12:ac:c1:dd: 71:71:55:6d:63:bd:2b:15:9e:12:d0:f3:52:a4:45: d7:02:f3:ae:87:60:2e:a4:ef:1d:90:26:85:64:45: 7d:aa:a6:4b:d1:60:a8:34:5f:b6:8e:14:ea:ee:36: 13:9a:49:4f:49:80:e7:29:95:61:0c:ba:01:ff:22: 13:62:d6:a2:72:8a:d9:bf:3c:f6:d6:d7:e4:94:ab: e5:8f:b2:83:ed:24:d9:36:6c:19:d8:0c:3c:c9:a0: 15:8e:e0:af:2d:94:6b:fc:59:4b:ec:d9:94:cf:9b: f6:61:6d:fd:9a:da:2d:03:52:58:df:32:88:86:30: 18:d8:3b:53:8b:24:c1:36:3b:14:cb:b0:ba:5f:9d: 8f:16:e9:97:78:c1:e0:e0:05:b9:a5:e4:0b:f8:3f: ff:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:52:74:8E:A9:C2:E8:78:D9:86:13:B3:8A:50:6B:3C:3E:DC:3A:47 X509v3 Authority Key Identifier: keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b2:98:12:fd:1f:85:10:e3:ed:0f:8d:d8:46:0b:3e:08:fd: 70:43:e1:f6:1e:58:55:12:95:81:d2:7c:aa:e7:dc:1b:21:a6: e9:78:ce:27:08:42:e3:a1:c6:cd:39:63:66:eb:ec:dc:f8:3e: a1:59:4f:a9:28:dc:53:ed:8d:f9:24:1b:5f:00:aa:80:03:ce: b5:bb:00:5e:c1:d2:17:2a:c8:b2:3e:71:f9:22:8d:f9:14:72: 36:b5:98:15:c2:e3:4c:92:54:d9:09:a0:d7:e0:71:34:70:38: bd:a2:e0:45:96:e0:ed:c3:52:68:4e:68:6c:69:e8:d4:7b:e9: 16:85:12:11:3a:5d:3f:62:85:d0:48:bc:8f:12:37:06:39:de: 57:a1:21:11:bd:85:fe:04:f6:41:6d:b1:c5:de:09:41:21:af: 2d:52:0d:19:60:42:53:14:b4:c7:13:56:79:d0:c6:56:c9:1c: a0:44:1a:25:66:ae:ef:db:84:a0:79:3e:a2:1e:c5:9d:15:7d: 36:24:6c:61:a3:65:e9:bc:c4:9d:01:e3:cc:fb:f9:fe:0a:d1: 3c:e8:88:48:a1:12:32:e9:c9:f0:e2:bb:ed:72:06:f2:33:b9: c8:6a:dd:b2:dc:34:04:ab:41:5f:61:a2:e9:95:0b:24:45:0b: 75:4f:19:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUe5xBumbG/b2zQLq+SJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjMzZWVlNjI0YzE5MmM2YzdkYWRhMTQzMmRlMGI5ZTc4 YjA5YmEwHhcNMjUxMjI2MTEwMTE3WhcNMjUxMjI3MTEwMTE3WjAzMTEwLwYDVQQD Eyg5ODUyNzQ4ZWE5YzJlODc4ZDk4NjEzYjM4YTUwNmIzYzNlZGMzYTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKkUY6YQ/qwfoD46vZJW7op8kP9a 22QIucI9Sh++SFDOAcFu2SgQSGrIeO2XOaaClakUxrBUvQL7NU7f31cFHzVSa2/5 XWrXant9OK1gymnhmQIBvK8pN1d47DFOwD6jlH8EmhKswd1xcVVtY70rFZ4S0PNS pEXXAvOuh2AupO8dkCaFZEV9qqZL0WCoNF+2jhTq7jYTmklPSYDnKZVhDLoB/yIT YtaicorZvzz21tfklKvlj7KD7STZNmwZ2Aw8yaAVjuCvLZRr/FlL7NmUz5v2YW39 mtotA1JY3zKIhjAY2DtTiyTBNjsUy7C6X52PFumXeMHg4AW5peQL+D//jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhSdI6pwuh42YYTs4pQazw+3DpHMB8GA1UdIwQY MBaAFBwjPu5iTBksbH2toUMt4Lnniwm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNWJlZjctMjViMy00NDYzLWIzYmYt NTdhOTUxZjQ5OTMwLzEvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jNWJlZjctMjViMy00NDYzLWIzYmYtNTdhOTUxZjQ5OTMw LzEvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLKYEv0f hRDj7Q+N2EYLPgj9cEPh9h5YVRKVgdJ8qufcGyGm6XjOJwhC46HGzTljZuvs3Pg+ oVlPqSjcU+2N+SQbXwCqgAPOtbsAXsHSFyrIsj5x+SKN+RRyNrWYFcLjTJJU2Qmg 1+BxNHA4vaLgRZbg7cNSaE5obGno1HvpFoUSETpdP2KF0Ei8jxI3BjneV6EhEb2F /gT2QW2xxd4JQSGvLVINGWBCUxS0xxNWedDGVskcoEQaJWau79uEoHk+oh7FnRV9 NiRsYaNl6bzEnQHjzPv5/grRPOiISKESMunJ8OK77XIG8jO5yGrdstw0BKtBX2Gi 6ZULJEULdU8Z2w== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:25 2025 by rpki-client