This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json) Hash identifier: 0I9MQEXGtkl9xwBjr1Py1h/gbAQKI7OpXZBUvia5d1E= Subject key identifier: C9:1B:FB:56:D8:0C:E0:B6:AF:E6:CB:7C:26:CE:B0:CE:59:73:A9:2B Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b Certificate serial: 019B1803682C0B7AF20302F2257D3B61A0DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft Manifest number: 0CAC Signing time: Sat 13 Dec 2025 14:00:34 +0000 Manifest this update: Sat 13 Dec 2025 14:00:34 +0000 Manifest next update: Sun 14 Dec 2025 14:00:34 +0000 Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: aDWGlMj7hOFfH5BZG8QH8y/EJH1E6o1QWUXWuy2DEFo=) 2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:03:68:2c:0b:7a:f2:03:02:f2:25:7d:3b:61:a0:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b Validity Not Before: Dec 13 14:00:34 2025 GMT Not After : Dec 14 14:00:34 2025 GMT Subject: CN=c91bfb56d80ce0b6afe6cb7c26ceb0ce5973a92b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:80:b8:ab:cb:9c:d4:5a:64:4c:7a:f9:f3: 97:b1:e7:38:c7:6e:eb:c8:dd:46:de:30:78:2e:8a: 36:f7:b2:19:d8:9b:9d:4f:83:ed:54:b1:f7:bd:1f: d6:58:1b:62:c7:aa:9f:f0:5f:9e:41:6a:ba:3a:e6: 51:63:c2:ea:15:45:39:ed:c0:1e:47:26:aa:05:9a: 3e:99:bf:91:2b:81:96:6e:5f:62:f1:89:7d:4a:e5: ba:c3:c4:04:e0:97:cb:c4:9f:b5:70:d1:47:bb:40: e3:f7:51:b3:04:d6:d0:e9:92:89:6d:b3:cc:41:6f: b0:24:45:ac:76:11:19:42:cb:af:12:38:e5:7c:48: 3d:a6:fd:7e:74:94:64:d8:ac:84:a8:f5:f6:83:3c: 34:6f:0a:82:f6:03:62:be:c4:c3:27:48:1d:b8:f8: 31:1c:d6:78:f0:c3:38:eb:05:3a:a6:b9:68:89:74: c0:35:f4:45:5c:ea:bc:f7:f0:5b:0f:b5:7a:2d:8b: 45:7b:cb:09:94:fc:cb:1a:8a:8c:07:ba:95:39:32: 47:17:7c:ac:79:10:04:2d:a6:fb:2f:98:22:46:d7: 3e:d4:7c:55:4f:cf:01:4e:05:fd:f9:80:31:9e:bf: a6:e1:70:e1:86:0b:bc:0f:a6:85:d0:18:56:33:ae: 95:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1B:FB:56:D8:0C:E0:B6:AF:E6:CB:7C:26:CE:B0:CE:59:73:A9:2B X509v3 Authority Key Identifier: keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:55:e9:2a:8e:cf:d9:8d:7f:da:5c:d1:5b:c4:fe:a3:d1:a0: be:ee:8f:59:64:f4:96:70:fb:38:30:ad:f3:ad:48:64:b7:ee: 57:c3:02:8c:81:85:5b:83:ab:22:52:41:2e:db:33:85:97:27: 76:10:b1:eb:07:10:00:5a:12:e7:5b:5f:2e:8d:5e:1c:98:45: bf:75:ca:a2:55:06:6a:f1:47:d3:1a:77:1a:01:96:65:e2:db: a4:87:39:9b:af:66:6c:ee:e8:02:24:51:8d:f1:da:e0:da:6d: e9:e8:50:4a:77:ed:be:af:f1:f1:b0:24:6c:34:4d:6f:b9:f0: 59:a5:f7:d7:50:d8:f5:59:3e:2c:47:bd:b0:45:ce:e7:e7:4c: 22:a1:74:4f:42:e6:46:5e:55:e5:cf:23:c0:18:ea:68:55:3e: e2:50:3a:b3:75:93:3a:28:36:5d:d6:98:39:db:dd:df:58:20: 0c:04:46:2a:11:b7:34:ee:e7:70:a8:08:e5:86:09:77:e3:5e: ab:8d:02:18:c7:88:de:55:88:e9:b7:eb:8c:65:94:34:f5:f5: 2b:98:10:84:7e:30:27:16:8f:1d:7f:26:36:df:f8:43:67:ae: f0:48:6e:2d:15:02:ff:53:63:8f:d0:3f:49:7b:9b:fc:b8:47: e8:94:1b:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYA2gsC3ryAwLyJX07YaDfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTFmNTlhOTY3OTcyNzFlMWZkNjY3M2E5YzUzNDI1N2Rh ODhlNmIwHhcNMjUxMjEzMTQwMDM0WhcNMjUxMjE0MTQwMDM0WjAzMTEwLwYDVQQD EyhjOTFiZmI1NmQ4MGNlMGI2YWZlNmNiN2MyNmNlYjBjZTU5NzNhOTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusKAuKvLnNRaZEx6+fOXsec4x27r yN1G3jB4Loo297IZ2JudT4PtVLH3vR/WWBtix6qf8F+eQWq6OuZRY8LqFUU57cAe RyaqBZo+mb+RK4GWbl9i8Yl9SuW6w8QE4JfLxJ+1cNFHu0Dj91GzBNbQ6ZKJbbPM QW+wJEWsdhEZQsuvEjjlfEg9pv1+dJRk2KyEqPX2gzw0bwqC9gNivsTDJ0gduPgx HNZ48MM46wU6prloiXTANfRFXOq89/BbD7V6LYtFe8sJlPzLGoqMB7qVOTJHF3ys eRAELab7L5giRtc+1HxVT88BTgX9+YAxnr+m4XDhhgu8D6aF0BhWM66V5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkb+1bYDOC2r+bLfCbOsM5Zc6krMB8GA1UdIwQY MBaAFB6h9ZqWeXJx4f1mc6nFNCV9qI5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmI1MDgtMWZhZC00Mjk5LTg3MjAt N2M0YWZiODhlMmYyLzEvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85MmI1MDgtMWZhZC00Mjk5LTg3MjAtN2M0YWZiODhlMmYy LzEvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVXpKo7P 2Y1/2lzRW8T+o9Ggvu6PWWT0lnD7ODCt861IZLfuV8MCjIGFW4OrIlJBLtszhZcn dhCx6wcQAFoS51tfLo1eHJhFv3XKolUGavFH0xp3GgGWZeLbpIc5m69mbO7oAiRR jfHa4Npt6ehQSnftvq/x8bAkbDRNb7nwWaX311DY9Vk+LEe9sEXO5+dMIqF0T0Lm Rl5V5c8jwBjqaFU+4lA6s3WTOig2XdaYOdvd31ggDARGKhG3NO7ncKgI5YYJd+Ne q40CGMeI3lWI6bfrjGWUNPX1K5gQhH4wJxaPHX8mNt/4Q2eu8EhuLRUC/1Njj9A/ SXub/LhH6JQbgw== -----END CERTIFICATE-----Generated at Sat Dec 13 21:21:08 2025 by rpki-client