This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json) Hash identifier: sC0nW1SM+izmwEkzjierPjZp5lx0gbKo9WKww1LJE5c= Subject key identifier: 7B:58:DE:6A:C9:BA:A8:3B:67:A5:16:9E:96:84:1C:F8:A6:27:D2:D3 Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e Certificate serial: 019B0DB736D0C6FD7080AFF38E80AA556E78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft Manifest number: 10DC Signing time: Thu 11 Dec 2025 14:01:09 +0000 Manifest this update: Thu 11 Dec 2025 14:01:09 +0000 Manifest next update: Fri 12 Dec 2025 14:01:09 +0000 Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: s6cyIdR9cBz+KhWWjyysayG66BV4qzyIJLmHYKDqMnk=) 2: LjvscEK241_TnXIZYmD9gfa2eq0.roa (hash: 0euqfqSMh1dqgtwiYuyK1jN/xv8/2F/xzn29uxLt1Bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:36:d0:c6:fd:70:80:af:f3:8e:80:aa:55:6e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e Validity Not Before: Dec 11 14:01:09 2025 GMT Not After : Dec 12 14:01:09 2025 GMT Subject: CN=7b58de6ac9baa83b67a5169e96841cf8a627d2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e2:28:4b:8c:c0:b5:74:79:ab:96:4e:00:f7: 50:b7:b6:6a:f9:8e:2a:89:45:8b:3a:0e:04:d6:25: 06:75:12:17:98:26:24:e6:13:8c:93:f9:df:ee:a0: 46:c2:81:8a:e0:80:51:b5:dc:4e:02:c2:84:bf:c8: 6c:04:e8:97:50:f0:e8:25:a4:2f:53:45:18:13:df: 97:ae:97:9d:48:1c:d5:5e:88:e8:c0:51:63:85:0c: cb:3b:97:3c:5f:f1:35:38:83:6f:50:6a:65:f7:d6: 85:81:92:df:ce:1c:23:b8:b3:65:81:22:d6:a7:54: ff:23:25:a6:95:f6:a6:9c:36:2e:88:46:25:38:b6: 3b:5a:76:a7:d1:19:da:02:38:9b:32:8c:1d:ca:07: ae:b6:7a:82:50:e4:98:c4:8e:f3:7c:3b:3b:54:2c: de:84:13:4a:54:6d:bb:e4:91:c5:e6:e3:08:8a:d5: ed:21:21:60:70:30:6c:27:7f:3c:72:84:d5:46:aa: 5f:79:2a:b0:a1:23:9f:e3:33:70:c1:5d:3d:f1:3b: b1:5a:6b:de:b2:e3:6c:58:bc:3f:fe:4f:8f:18:1b: 78:7d:a1:46:d8:d7:65:60:6d:04:76:57:ac:38:ba: 84:f4:f4:0b:55:12:1d:96:39:80:54:61:9e:0e:9b: a1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:58:DE:6A:C9:BA:A8:3B:67:A5:16:9E:96:84:1C:F8:A6:27:D2:D3 X509v3 Authority Key Identifier: keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:eb:41:5b:97:1d:a9:a6:00:7c:f3:14:3a:e8:6c:fd:b1:67: c1:63:d5:25:38:9b:d3:9e:5b:54:63:fb:95:21:ec:a7:8a:f0: bc:10:92:ad:c8:48:81:e3:11:f2:b3:7b:7f:60:0c:88:10:5e: a8:7c:97:7b:11:31:97:26:ae:37:43:01:21:68:f4:f5:ef:c4: 78:6b:72:20:e3:0c:c4:4f:47:66:e0:4f:d8:82:77:1b:2d:39: 42:49:78:60:ae:48:31:ef:6b:55:e2:a8:e3:b5:3e:53:f4:35: 75:85:b9:ff:9a:82:f8:b8:2b:93:d3:6c:d7:29:a9:d1:f8:d8: d1:c0:d1:33:2c:2b:9c:04:be:5e:ff:38:89:63:dd:29:58:ea: d9:45:64:e4:f0:a5:cf:cf:64:2f:93:80:2e:11:93:ac:f4:45: 43:64:c2:c2:ff:69:dc:8c:6a:5b:92:8a:cc:f5:11:77:3b:40: 72:91:3f:51:4f:2d:fd:75:86:2b:d4:8e:9d:96:59:3c:5c:bb: b6:69:7b:ae:b0:df:3c:18:94:92:c3:22:97:ba:8d:c5:1a:9a: 69:17:a6:a9:e4:45:5d:cb:d6:df:c4:9a:88:2e:2d:a6:69:7e: e4:2b:8f:73:65:3d:a5:69:b6:c2:eb:29:10:23:a6:40:30:f1: 47:5f:bd:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtzbQxv1wgK/zjoCqVW54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMmIyYjM2ZmI3MjI1MDk0NjVlZDlkOTQ4YzJiZjg5MTE2 MGNkMGUwHhcNMjUxMjExMTQwMTA5WhcNMjUxMjEyMTQwMTA5WjAzMTEwLwYDVQQD Eyg3YjU4ZGU2YWM5YmFhODNiNjdhNTE2OWU5Njg0MWNmOGE2MjdkMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uIoS4zAtXR5q5ZOAPdQt7Zq+Y4q iUWLOg4E1iUGdRIXmCYk5hOMk/nf7qBGwoGK4IBRtdxOAsKEv8hsBOiXUPDoJaQv U0UYE9+XrpedSBzVXojowFFjhQzLO5c8X/E1OINvUGpl99aFgZLfzhwjuLNlgSLW p1T/IyWmlfamnDYuiEYlOLY7Wnan0RnaAjibMowdygeutnqCUOSYxI7zfDs7VCze hBNKVG275JHF5uMIitXtISFgcDBsJ388coTVRqpfeSqwoSOf4zNwwV098TuxWmve suNsWLw//k+PGBt4faFG2NdlYG0EdlesOLqE9PQLVRIdljmAVGGeDpuhhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtY3mrJuqg7Z6UWnpaEHPimJ9LTMB8GA1UdIwQY MBaAFBwrKzb7ciUJRl7Z2UjCv4kRYM0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUt YzIwMmY3MTdkNDQ3LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUtYzIwMmY3MTdkNDQ3 LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOtBW5cd qaYAfPMUOuhs/bFnwWPVJTib055bVGP7lSHsp4rwvBCSrchIgeMR8rN7f2AMiBBe qHyXexExlyauN0MBIWj09e/EeGtyIOMMxE9HZuBP2IJ3Gy05Qkl4YK5IMe9rVeKo 47U+U/Q1dYW5/5qC+Lgrk9Ns1ymp0fjY0cDRMywrnAS+Xv84iWPdKVjq2UVk5PCl z89kL5OALhGTrPRFQ2TCwv9p3IxqW5KKzPURdztAcpE/UU8t/XWGK9SOnZZZPFy7 tml7rrDfPBiUksMil7qNxRqaaRemqeRFXcvW38SaiC4tpml+5CuPc2U9pWm2wusp ECOmQDDxR1+9CA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:11:06 2025 by rpki-client