This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft File: HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json) Hash identifier: fWNJQpnD9++kin2KjvU8QxcOasawkOth10FNkIvbCyY= Subject key identifier: 9C:B8:DF:A0:CC:9F:66:D3:EA:E6:96:94:FD:23:30:BB:5F:E3:37:11 Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c Certificate serial: 019AAC158B417F4DB2B4324D5E02359172B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft Manifest number: 1741 Signing time: Sat 22 Nov 2025 15:01:24 +0000 Manifest this update: Sat 22 Nov 2025 15:01:24 +0000 Manifest next update: Sun 23 Nov 2025 15:01:24 +0000 Files and hashes: 1: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: 2+IHfuqktPwNf9RmnqpvLZHO958Krf7KJF230vl/Y3U=) 2: LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa (hash: Jtc+IuVms0/thPHj5bGPRIMsxU7hFLPzHKxvZdogizk=) 3: aWalfbOeEBKlHFJV-ENu8MAsZo4.roa (hash: EdxjZs6zvCXnFCAeiNpfiVYwCGvEbmMbWMZx7J9tRCc=) 4: ucuU-Uq0Xb62o4XqDQOup7WMShY.roa (hash: bTCTTFwhaYZdJywJ5h4MOhDury0ZGVdUw5QGOuUV0Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:15:8b:41:7f:4d:b2:b4:32:4d:5e:02:35:91:72:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c Validity Not Before: Nov 22 15:01:24 2025 GMT Not After : Nov 23 15:01:24 2025 GMT Subject: CN=9cb8dfa0cc9f66d3eae69694fd2330bb5fe33711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:79:22:47:71:15:62:a5:d2:3c:82:83:9f:4e: 88:93:89:75:98:28:39:ce:b3:5c:d5:74:f1:e8:51: 42:a3:1c:6c:7f:c1:77:c1:54:39:d0:cb:7f:7c:11: 7e:4e:2f:09:66:2b:59:1e:2a:67:45:e1:8d:3c:68: 9b:c3:9d:73:fd:63:e5:23:80:a0:09:a1:04:d3:62: fa:b6:f8:ce:b6:73:c0:96:66:45:71:ff:cb:ef:e7: 03:83:c7:60:f2:8e:b9:b6:05:46:64:8b:1b:76:16: 07:67:33:54:b7:67:ad:07:3a:5f:58:7b:89:ac:48: 33:8c:4a:c6:b9:b8:9e:d0:2e:43:1e:7f:1f:2d:21: 23:23:c1:7f:12:97:fd:f1:32:cb:65:04:1f:ed:e7: 45:32:db:2a:7a:e9:e6:d8:0f:49:61:a4:f4:ea:c8: e4:0e:5b:62:c2:ae:a5:f9:0c:71:cc:ac:a4:1e:75: ef:72:76:e3:7c:00:93:fd:60:9f:df:59:47:14:a2: 68:67:0a:c8:69:3e:e5:5d:e8:c3:0b:4a:b0:5a:81: 6e:da:11:c5:a4:c5:b1:9f:5c:a2:62:14:c4:b9:da: 0a:cc:8f:0b:82:b7:19:60:a7:75:87:df:66:8b:0b: 71:65:f9:56:9a:4c:35:b4:96:b2:f7:b2:c4:4e:19: d0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B8:DF:A0:CC:9F:66:D3:EA:E6:96:94:FD:23:30:BB:5F:E3:37:11 X509v3 Authority Key Identifier: keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:df:9d:0c:fb:f3:36:ec:b2:49:19:3d:38:cd:50:b3:01:26: b4:40:68:b0:4a:39:4f:4a:cd:a4:f6:10:30:2c:41:ed:93:2d: 67:a3:e4:c6:9a:c7:b8:88:d3:a7:c1:d5:86:f5:26:e6:72:76: df:93:37:27:ad:63:1e:b5:c3:f0:83:04:af:b2:89:d7:39:00: a6:44:06:c0:18:28:3d:d7:49:a3:83:5c:10:76:60:63:99:48: 35:29:fc:3e:45:30:f1:ee:d3:3c:04:77:60:48:2f:26:d7:d4: 83:06:f9:7a:92:78:d2:bd:08:b2:6d:22:72:74:16:31:a3:12: 0c:9e:d1:62:50:6b:41:9f:bc:87:4c:71:15:fb:ef:8f:c5:6d: 7b:1d:ac:47:84:27:00:d0:80:ab:6d:27:0b:85:f6:ab:18:b8: 9e:68:c8:a6:df:8e:54:d7:c3:9e:61:14:ad:39:38:13:60:79: 1c:2a:92:a5:38:01:03:64:d6:73:f1:7d:03:f8:6f:70:c9:d2: 95:38:ff:92:d8:81:26:54:c3:c0:4c:79:63:96:ca:2b:ff:ac: c5:69:e3:e2:5d:46:9b:e0:10:7b:0a:54:dd:57:48:f9:8e:2d: c0:9a:f4:06:a6:2c:45:7a:55:e6:9d:a6:e1:49:42:0a:be:cf: da:91:4c:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFYtBf02ytDJNXgI1kXKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDg3MWZjMmU5OTg5MmVhMTExNWEzMDIxMzhlMWQzMmE2 MjE4MmMwHhcNMjUxMTIyMTUwMTI0WhcNMjUxMTIzMTUwMTI0WjAzMTEwLwYDVQQD Eyg5Y2I4ZGZhMGNjOWY2NmQzZWFlNjk2OTRmZDIzMzBiYjVmZTMzNzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HkiR3EVYqXSPIKDn06Ik4l1mCg5 zrNc1XTx6FFCoxxsf8F3wVQ50Mt/fBF+Ti8JZitZHipnReGNPGibw51z/WPlI4Cg CaEE02L6tvjOtnPAlmZFcf/L7+cDg8dg8o65tgVGZIsbdhYHZzNUt2etBzpfWHuJ rEgzjErGubie0C5DHn8fLSEjI8F/Epf98TLLZQQf7edFMtsqeunm2A9JYaT06sjk Dltiwq6l+QxxzKykHnXvcnbjfACT/WCf31lHFKJoZwrIaT7lXejDC0qwWoFu2hHF pMWxn1yiYhTEudoKzI8LgrcZYKd1h99miwtxZflWmkw1tJay97LEThnQxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJy436DMn2bT6uaWlP0jMLtf4zcRMB8GA1UdIwQY MBaAFB0IcfwumYkuoRFaMCE44dMqYhgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAt NGYzZTViMmUwYzU2LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAtNGYzZTViMmUwYzU2 LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAct+dDPvz NuyySRk9OM1QswEmtEBosEo5T0rNpPYQMCxB7ZMtZ6PkxprHuIjTp8HVhvUm5nJ2 35M3J61jHrXD8IMEr7KJ1zkApkQGwBgoPddJo4NcEHZgY5lINSn8PkUw8e7TPAR3 YEgvJtfUgwb5epJ40r0Ism0icnQWMaMSDJ7RYlBrQZ+8h0xxFfvvj8Vtex2sR4Qn ANCAq20nC4X2qxi4nmjIpt+OVNfDnmEUrTk4E2B5HCqSpTgBA2TWc/F9A/hvcMnS lTj/ktiBJlTDwEx5Y5bKK/+sxWnj4l1Gm+AQewpU3VdI+Y4twJr0BqYsRXpV5p2m 4UlCCr7P2pFMNQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:55:46 2025 by rpki-client