This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft File: HNq3BST9UTE7hPXY9GNio9jICBQ.mft (raw, json) Hash identifier: rTgfZ1Ym29HmRDokUC4Lo9PMhD/KIEcnDCklcpcWGHk= Subject key identifier: D5:69:42:66:45:B3:16:AA:6E:6D:5F:75:C0:03:B1:B1:B3:1B:96:0C Authority key identifier: 1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14 Certificate issuer: /CN=1cdab70524fd51313b84f5d8f46362a3d8c80814 Certificate serial: 019B43256E3FE6A782F44B1001C9207A7A0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 23:01:25 +0000 Manifest this update: Sun 21 Dec 2025 23:01:25 +0000 Manifest next update: Mon 22 Dec 2025 23:01:25 +0000 Files and hashes: 1: 8H6vwz49R0kM-gbNtDLGiXSOgWE.roa (hash: 7d11KfsVtGX7lu3CgRTWP0J/PhStNQboteNSMa34UZE=) 2: HNq3BST9UTE7hPXY9GNio9jICBQ.crl (hash: +VgXfx0QRqdyWxko57K0Ii2QAWQUx522BtP8c1eBZX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:6e:3f:e6:a7:82:f4:4b:10:01:c9:20:7a:7a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cdab70524fd51313b84f5d8f46362a3d8c80814 Validity Not Before: Dec 21 23:01:25 2025 GMT Not After : Dec 22 23:01:25 2025 GMT Subject: CN=d569426645b316aa6e6d5f75c003b1b1b31b960c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:ce:d9:96:99:1c:6b:b6:08:bd:70:c3:64: cd:ee:64:29:cb:3b:01:5d:80:08:58:f1:e0:3c:70: c0:f1:a8:bd:b7:a0:5b:67:ea:ae:e0:d5:36:2a:a3: 8f:2d:43:11:fc:29:b4:ff:54:6e:70:9d:1f:02:8e: 43:8c:9e:57:47:4d:16:9a:a0:66:e8:6d:ea:3a:dd: dc:82:8a:d8:01:3a:4c:11:7a:f8:ca:56:25:f8:14: 68:9a:e1:81:de:98:59:c1:25:45:c5:f3:a1:dc:60: 31:d3:66:79:69:ca:17:61:dc:69:71:5d:06:6c:a0: 10:51:14:e5:32:1c:1a:b4:6e:0d:d8:9d:c2:3f:30: 14:bb:42:80:4b:06:64:59:17:bb:81:02:7c:7e:31: 33:43:a7:80:bd:a9:8d:1f:03:33:09:e5:ca:b1:16: 9e:0c:b0:74:80:0c:ca:49:6d:13:51:8b:c6:aa:23: e5:f6:43:c6:e6:4a:cd:d8:18:1e:45:83:da:1a:c1: 3e:1d:0f:8b:3c:cb:17:ee:b9:14:6c:dc:11:21:c1: bf:33:51:15:f5:eb:c4:b8:63:4d:5a:f8:d8:99:2a: d6:9e:21:cc:c8:8e:89:86:41:a3:42:3e:d3:76:c7: 32:68:6b:f6:dd:01:9f:33:bf:f0:c7:64:b3:49:60: df:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:69:42:66:45:B3:16:AA:6E:6D:5F:75:C0:03:B1:B1:B3:1B:96:0C X509v3 Authority Key Identifier: keyid:1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:2b:d7:a7:d1:91:a2:92:38:c5:86:21:cb:72:1d:f1:fa:86: e0:e2:d2:c9:4d:00:6c:00:28:a8:73:62:20:a0:43:3f:4e:1b: eb:e6:8d:e8:14:c4:b1:03:83:95:5b:71:ce:5c:6a:15:8c:02: 69:56:d4:26:94:18:b0:26:f2:d5:ee:b8:47:0e:85:cb:7e:fd: 70:da:bb:24:a3:f5:d3:9c:4b:e5:01:b9:ca:8d:42:91:05:7b: 48:ff:b9:17:3a:b1:ed:1a:b4:9e:bb:e0:26:02:da:11:12:fe: 55:a8:37:d2:b0:38:9b:4b:fe:62:47:ca:1b:c8:ca:bf:f8:d8: fa:3c:5e:91:a6:3f:d0:ab:00:0a:db:1c:ad:fc:84:ff:0b:50: ec:b7:45:34:2c:6f:81:8e:83:aa:44:b3:41:cb:d7:5e:35:0a: e3:54:d6:d4:70:55:86:46:34:71:ca:07:72:a5:64:2c:ee:f5: a8:45:9f:4e:c9:29:0c:3a:53:58:42:05:35:4d:39:34:1c:da: aa:f2:74:25:c7:1d:0c:ca:5e:ac:b4:bb:f5:7c:9d:b9:06:c1: 04:40:93:77:90:81:c8:e2:c0:fb:10:24:bd:35:c2:00:83:79: 4d:f3:86:90:43:08:16:ee:56:53:d0:fd:92:6d:5f:28:a3:59: f3:c4:e8:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJW4/5qeC9EsQAckgenoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZGFiNzA1MjRmZDUxMzEzYjg0ZjVkOGY0NjM2MmEzZDhj ODA4MTQwHhcNMjUxMjIxMjMwMTI1WhcNMjUxMjIyMjMwMTI1WjAzMTEwLwYDVQQD EyhkNTY5NDI2NjQ1YjMxNmFhNmU2ZDVmNzVjMDAzYjFiMWIzMWI5NjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHzO2ZaZHGu2CL1ww2TN7mQpyzsB XYAIWPHgPHDA8ai9t6BbZ+qu4NU2KqOPLUMR/Cm0/1RucJ0fAo5DjJ5XR00WmqBm 6G3qOt3cgorYATpMEXr4ylYl+BRomuGB3phZwSVFxfOh3GAx02Z5acoXYdxpcV0G bKAQURTlMhwatG4N2J3CPzAUu0KASwZkWRe7gQJ8fjEzQ6eAvamNHwMzCeXKsRae DLB0gAzKSW0TUYvGqiPl9kPG5krN2BgeRYPaGsE+HQ+LPMsX7rkUbNwRIcG/M1EV 9evEuGNNWvjYmSrWniHMyI6JhkGjQj7TdscyaGv23QGfM7/wx2SzSWDfoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVpQmZFsxaqbm1fdcADsbGzG5YMMB8GA1UdIwQY MBaAFBzatwUk/VExO4T12PRjYqPYyAgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE5xM0JTVDlVVEU3aFBYWTlHTmlvOWpJQ0JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xOTAxN2EtNGZjYy00ZmFkLWE1NzIt OTlmNjkzZTQ1MDYxLzEvSE5xM0JTVDlVVEU3aFBYWTlHTmlvOWpJQ0JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8xOTAxN2EtNGZjYy00ZmFkLWE1NzItOTlmNjkzZTQ1MDYx LzEvSE5xM0JTVDlVVEU3aFBYWTlHTmlvOWpJQ0JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSvXp9GR opI4xYYhy3Id8fqG4OLSyU0AbAAoqHNiIKBDP04b6+aN6BTEsQODlVtxzlxqFYwC aVbUJpQYsCby1e64Rw6Fy379cNq7JKP105xL5QG5yo1CkQV7SP+5Fzqx7Rq0nrvg JgLaERL+Vag30rA4m0v+YkfKG8jKv/jY+jxekaY/0KsACtscrfyE/wtQ7LdFNCxv gY6DqkSzQcvXXjUK41TW1HBVhkY0ccoHcqVkLO71qEWfTskpDDpTWEIFNU05NBza qvJ0JccdDMperLS79XyduQbBBECTd5CByOLA+xAkvTXCAIN5TfOGkEMIFu5WU9D9 km1fKKNZ88To1g== -----END CERTIFICATE-----Generated at Mon Dec 22 08:33:17 2025 by rpki-client