This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft File: HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json) Hash identifier: 42b64HkYK9EPljyWwWE5JDBcq4sGrupyMhwktcnImF0= Subject key identifier: A7:39:06:7F:D9:77:5F:18:1B:5E:8E:0C:6C:F8:D3:EC:79:DE:60:AB Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa Certificate serial: 019B3FEC9E53EACAAA17B13139A49489BFF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 08:00:30 +0000 Manifest this update: Sun 21 Dec 2025 08:00:30 +0000 Manifest next update: Mon 22 Dec 2025 08:00:30 +0000 Files and hashes: 1: 3_exLez2c6RtEvnfTNzKi4Hkk5s.roa (hash: My7qt21+jNuMKjyzC8y2c2BBa1kohFZiD1+qyo1M/9o=) 2: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: YDFmQJTgC40QnsYTH2EgU0iAgDgi/2ilVWEAv9qiqco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:9e:53:ea:ca:aa:17:b1:31:39:a4:94:89:bf:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa Validity Not Before: Dec 21 08:00:30 2025 GMT Not After : Dec 22 08:00:30 2025 GMT Subject: CN=a739067fd9775f181b5e8e0c6cf8d3ec79de60ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a6:22:85:2e:b6:0c:6e:74:0b:cc:7c:e3:7c: f2:5f:36:78:69:dd:be:6b:ab:14:be:c1:87:99:55: 8b:db:8d:14:97:07:3c:39:9a:c1:b6:ed:c3:64:e3: 14:71:80:54:4d:c0:e1:ba:13:21:93:69:80:0c:cf: 9a:00:6e:9c:53:07:22:3d:45:31:8a:43:02:6c:56: 5c:7f:9b:c0:50:6c:2f:e9:6e:f5:42:34:69:a6:a0: 21:40:7b:50:f1:db:08:75:4b:fe:48:bb:90:05:6f: 19:59:de:02:f3:f8:1a:dd:4a:e6:fb:aa:ae:e9:2a: 82:97:7b:58:ac:a3:ee:71:b5:a6:70:cc:c5:7d:e9: c0:2a:eb:6d:bb:56:0e:35:76:79:77:6d:91:16:98: 3a:af:3d:ed:ef:30:05:39:ce:c6:83:39:3b:c2:69: c8:be:c0:04:4d:3e:61:6d:1d:19:ab:eb:33:aa:82: 8f:fc:e8:de:49:2b:57:69:11:82:c9:03:01:f2:f7: 09:06:a4:c1:db:52:52:5c:b5:f4:6a:ef:57:72:63: 04:2d:d8:7d:ed:54:be:5c:39:96:d7:c7:0b:8b:a9: f0:60:e0:0e:b8:be:a0:c9:8a:1c:45:fd:78:3b:db: b8:ae:d3:59:00:b4:d7:60:59:46:ba:62:7e:4c:9a: 5a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:39:06:7F:D9:77:5F:18:1B:5E:8E:0C:6C:F8:D3:EC:79:DE:60:AB X509v3 Authority Key Identifier: keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e9:f1:55:77:a0:32:6e:0d:9b:95:48:d3:eb:c6:a9:46:4e: 0b:cb:fd:4c:0b:1c:4b:ea:bb:06:46:1c:c6:d4:48:6f:d3:8d: 54:96:9e:ce:24:bd:23:60:eb:b2:ac:cc:9f:3b:80:e4:c8:d4: cb:23:cc:06:c6:4b:ca:d9:5d:d0:9f:e7:62:63:64:6b:ad:52: d6:74:9d:e1:03:93:81:81:14:66:09:44:1b:c6:0f:e4:ef:f9: ec:26:4e:e2:e8:c4:3b:b8:9b:6b:5e:f0:c3:61:e4:11:2b:95: 24:e7:03:3a:af:20:57:07:5a:cf:68:33:30:7e:7c:47:e0:88: c9:b0:af:9d:60:f5:6f:86:71:cb:c0:b9:2a:7b:0b:44:11:4d: d4:3f:ca:38:dc:46:29:a0:29:d0:36:05:9a:04:e3:93:1e:90: 12:15:69:4e:d0:52:79:af:74:30:6c:e9:ea:da:36:8d:45:2f: 3f:37:87:02:ac:2b:59:b4:c5:cb:ea:86:ce:8b:4a:ee:d9:9f: c9:c3:71:b9:37:a3:ad:38:df:5d:a3:c9:02:c5:3f:fb:94:4e: 5c:7e:71:60:d1:4a:a2:b4:75:c3:cd:1b:99:db:e8:d5:54:5f: fc:33:6d:2c:22:4a:cc:30:fc:9a:19:ef:ca:cc:bb:b9:6a:82: c9:2d:2e:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7J5T6sqqF7ExOaSUib/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMjM0MjQyOTU3YmIxYmUxMjk2ODE3MjFmOWMyY2QwOGRm MDdiYWEwHhcNMjUxMjIxMDgwMDMwWhcNMjUxMjIyMDgwMDMwWjAzMTEwLwYDVQQD EyhhNzM5MDY3ZmQ5Nzc1ZjE4MWI1ZThlMGM2Y2Y4ZDNlYzc5ZGU2MGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaYihS62DG50C8x843zyXzZ4ad2+ a6sUvsGHmVWL240Ulwc8OZrBtu3DZOMUcYBUTcDhuhMhk2mADM+aAG6cUwciPUUx ikMCbFZcf5vAUGwv6W71QjRppqAhQHtQ8dsIdUv+SLuQBW8ZWd4C8/ga3Urm+6qu 6SqCl3tYrKPucbWmcMzFfenAKuttu1YONXZ5d22RFpg6rz3t7zAFOc7Ggzk7wmnI vsAETT5hbR0Zq+szqoKP/OjeSStXaRGCyQMB8vcJBqTB21JSXLX0au9XcmMELdh9 7VS+XDmW18cLi6nwYOAOuL6gyYocRf14O9u4rtNZALTXYFlGumJ+TJpaiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKc5Bn/Zd18YG16ODGz40+x53mCrMB8GA1UdIwQY MBaAFB4jQkKVe7G+EpaBch+cLNCN8HuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMt NTYzODUyNmZmNjQxLzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMtNTYzODUyNmZmNjQx LzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApunxVXeg Mm4Nm5VI0+vGqUZOC8v9TAscS+q7BkYcxtRIb9ONVJaeziS9I2DrsqzMnzuA5MjU yyPMBsZLytld0J/nYmNka61S1nSd4QOTgYEUZglEG8YP5O/57CZO4ujEO7iba17w w2HkESuVJOcDOq8gVwdaz2gzMH58R+CIybCvnWD1b4Zxy8C5KnsLRBFN1D/KONxG KaAp0DYFmgTjkx6QEhVpTtBSea90MGzp6to2jUUvPzeHAqwrWbTFy+qGzotK7tmf ycNxuTejrTjfXaPJAsU/+5ROXH5xYNFKorR1w80bmdvo1VRf/DNtLCJKzDD8mhnv ysy7uWqCyS0uKA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:01:58 2025 by rpki-client