This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json) Hash identifier: 9HPSRpUwIVLQNoBPEn5GhKl8t6HMkoPIZDug9QQTdqc= Subject key identifier: 39:03:89:DD:54:91:AA:7B:73:0F:F7:4C:29:B6:E2:11:FF:0D:00:A9 Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e Certificate serial: 019B3268C7732B22D0856E6A9806AA7E2112 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft Manifest number: 10EF Signing time: Thu 18 Dec 2025 17:01:26 +0000 Manifest this update: Thu 18 Dec 2025 17:01:26 +0000 Manifest next update: Fri 19 Dec 2025 17:01:26 +0000 Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: NTD4nhboNSwDQzc8xv0hcc55roP0m/yCefcIRtZ/1TI=) 2: LjvscEK241_TnXIZYmD9gfa2eq0.roa (hash: 0euqfqSMh1dqgtwiYuyK1jN/xv8/2F/xzn29uxLt1Bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:c7:73:2b:22:d0:85:6e:6a:98:06:aa:7e:21:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e Validity Not Before: Dec 18 17:01:26 2025 GMT Not After : Dec 19 17:01:26 2025 GMT Subject: CN=390389dd5491aa7b730ff74c29b6e211ff0d00a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ad:6b:47:5d:6b:b2:9a:93:55:98:67:d4:f5: be:dd:07:3f:27:21:a1:94:87:8a:66:75:d9:03:ad: d6:2e:bf:25:9b:99:3e:c7:76:b2:64:35:85:bb:f5: d3:3a:e7:22:5c:84:1b:91:9c:3a:98:14:d0:f1:58: eb:10:15:61:8a:f2:bb:4c:42:e0:4e:ee:d9:a1:03: a5:50:e2:64:a0:90:70:50:47:59:32:6d:96:a2:b9: 9a:48:07:2e:9a:cb:41:3e:33:73:a9:fe:f5:6c:f1: 04:a4:19:90:37:83:76:a6:17:d5:f0:df:0e:d9:74: 26:f6:45:35:58:bc:89:84:69:0a:12:57:7b:69:bb: 3f:d9:d9:46:79:b6:59:e4:35:df:e9:ac:69:bf:73: 6a:28:9c:80:07:13:1e:d1:ae:cc:47:2b:fc:ef:26: 8a:7d:51:2b:ed:74:7a:3d:22:5f:90:99:d9:4e:2b: d6:2e:1f:a4:b6:7f:9a:2b:82:f2:22:98:fb:a1:d6: 5a:5f:07:cc:64:8b:f3:3a:8a:1f:62:93:09:c3:d1: 0d:27:16:b1:cb:63:07:48:f6:f8:05:ef:70:ac:c2: 0e:ba:ab:53:9a:18:4c:bb:65:b0:72:ee:57:8c:d0: 59:b9:09:a1:5e:2b:c3:48:6b:35:57:da:4f:0d:21: 77:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:03:89:DD:54:91:AA:7B:73:0F:F7:4C:29:B6:E2:11:FF:0D:00:A9 X509v3 Authority Key Identifier: keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:70:89:d7:d4:c7:af:49:b9:bc:3a:67:8d:bd:29:21:23:41: cd:3b:41:16:ab:ea:5f:25:2a:ba:c8:42:ca:2a:ff:03:11:f2: e8:53:00:5e:0e:8c:35:ef:0c:64:72:52:5a:a6:b2:94:55:b5: 7e:c8:06:26:de:c0:51:11:4d:69:06:d9:df:0b:00:79:37:b4: a6:90:e2:b2:59:b2:90:de:9b:e1:3d:40:d1:77:41:ab:62:b2: 48:05:cb:59:a7:bd:cb:1c:ad:91:8f:6d:73:aa:e8:f8:a0:ab: 7a:ac:0c:00:1a:d9:0f:36:fd:c2:d6:a2:d5:e5:5e:e4:bb:c6: 0e:98:3c:9f:dd:9d:1d:df:83:2d:9d:2f:37:e5:63:b1:50:25: eb:28:51:04:c4:11:8e:fe:6a:c1:c2:f8:68:4d:6f:71:68:18: 47:49:3d:a7:30:85:f6:5b:b4:ef:34:4c:0b:6a:98:40:3d:0f: 7a:06:24:7d:22:2c:bc:19:49:18:5e:ff:0e:2d:40:00:6d:d3: 8c:cb:96:64:c0:9a:fa:21:f9:f9:7d:5f:5c:8f:c7:f9:1a:15: 92:9d:38:eb:55:39:c1:1e:6a:70:6e:bb:76:2c:c5:c8:97:91: 62:28:33:43:2a:1d:49:ac:04:bc:db:ed:f5:ec:e0:c6:5d:0c: 6f:36:0b:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaMdzKyLQhW5qmAaqfiESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMmIyYjM2ZmI3MjI1MDk0NjVlZDlkOTQ4YzJiZjg5MTE2 MGNkMGUwHhcNMjUxMjE4MTcwMTI2WhcNMjUxMjE5MTcwMTI2WjAzMTEwLwYDVQQD EygzOTAzODlkZDU0OTFhYTdiNzMwZmY3NGMyOWI2ZTIxMWZmMGQwMGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA561rR11rspqTVZhn1PW+3Qc/JyGh lIeKZnXZA63WLr8lm5k+x3ayZDWFu/XTOuciXIQbkZw6mBTQ8VjrEBVhivK7TELg Tu7ZoQOlUOJkoJBwUEdZMm2WormaSAcumstBPjNzqf71bPEEpBmQN4N2phfV8N8O 2XQm9kU1WLyJhGkKEld7abs/2dlGebZZ5DXf6axpv3NqKJyABxMe0a7MRyv87yaK fVEr7XR6PSJfkJnZTivWLh+ktn+aK4LyIpj7odZaXwfMZIvzOoofYpMJw9ENJxax y2MHSPb4Be9wrMIOuqtTmhhMu2Wwcu5XjNBZuQmhXivDSGs1V9pPDSF32QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkDid1Ukap7cw/3TCm24hH/DQCpMB8GA1UdIwQY MBaAFBwrKzb7ciUJRl7Z2UjCv4kRYM0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUt YzIwMmY3MTdkNDQ3LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUtYzIwMmY3MTdkNDQ3 LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXCJ19TH r0m5vDpnjb0pISNBzTtBFqvqXyUqushCyir/AxHy6FMAXg6MNe8MZHJSWqaylFW1 fsgGJt7AURFNaQbZ3wsAeTe0ppDislmykN6b4T1A0XdBq2KySAXLWae9yxytkY9t c6ro+KCreqwMABrZDzb9wtai1eVe5LvGDpg8n92dHd+DLZ0vN+VjsVAl6yhRBMQR jv5qwcL4aE1vcWgYR0k9pzCF9lu07zRMC2qYQD0PegYkfSIsvBlJGF7/Di1AAG3T jMuWZMCa+iH5+X1fXI/H+RoVkp0461U5wR5qcG67dizFyJeRYigzQyodSawEvNvt 9ezgxl0MbzYL1Q== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:24 2025 by rpki-client