This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft File: HlqvPQaD3IoNWMZDgm4WbTwozKk.mft (raw, json) Hash identifier: 95hMLCyPC2aRKRFuIqXAoI50lbljGdKcoVnvhApk8kE= Subject key identifier: 25:18:55:F1:6F:9F:43:E1:90:B0:90:9C:6C:F0:58:8D:B3:38:D1:1F Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9 Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9 Certificate serial: 019B34FB2CB0384211401028F79FF4FAAC28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft Manifest number: 178E Signing time: Fri 19 Dec 2025 05:00:34 +0000 Manifest this update: Fri 19 Dec 2025 05:00:34 +0000 Manifest next update: Sat 20 Dec 2025 05:00:34 +0000 Files and hashes: 1: HlqvPQaD3IoNWMZDgm4WbTwozKk.crl (hash: j38H9W7BnTb7NouCEMVxDLBQ2ioWPsLS5INbfiVw4Go=) 2: RKyzB9bUwZYi5TsxSj7CGxt394k.roa (hash: Hh9WM4Bb/ik/WwsavUvg8LAp8Fn8QkXbUV4e4PeWt3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:2c:b0:38:42:11:40:10:28:f7:9f:f4:fa:ac:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9 Validity Not Before: Dec 19 05:00:34 2025 GMT Not After : Dec 20 05:00:34 2025 GMT Subject: CN=251855f16f9f43e190b0909c6cf0588db338d11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3c:da:e6:af:bb:70:d3:42:60:f6:16:0a:e2: 40:d7:58:16:b7:70:4c:2f:3a:ab:c5:e6:11:bc:7b: b8:b2:25:52:f5:92:32:ea:34:19:a2:84:75:7a:8a: 01:60:3e:f4:06:d4:f1:25:70:ca:da:6c:7d:14:42: a1:cf:b0:b3:a8:41:75:1d:f3:20:27:10:ce:27:3c: b2:96:56:cd:c1:01:e1:d9:39:e1:6f:0e:13:02:c0: 9f:8a:7d:28:0b:94:21:1f:7a:13:41:57:df:8c:13: 2c:ec:36:70:53:6b:dd:32:e6:cc:0f:79:0f:78:81: 79:0e:8a:74:ae:13:26:c4:5d:93:5b:64:74:4d:7f: 90:da:62:21:c4:4c:61:22:69:53:b7:1e:48:b1:bf: 28:6b:4c:42:be:46:14:ae:d1:6f:b8:2b:40:3d:46: 41:7c:e7:3e:5c:99:13:b8:80:48:c6:4a:60:da:91: d2:8e:90:1e:12:a0:fb:f4:c8:cb:94:af:4f:1e:67: 5c:8c:41:8b:ba:93:85:ee:d0:a8:f0:d1:e8:1f:fd: e9:c6:d3:e8:27:c7:61:28:2d:ba:bc:fa:78:ae:3d: 70:63:c7:cf:d0:86:6d:37:35:ba:7c:bf:3f:f2:89: 4f:2f:73:9c:45:04:b4:e0:2c:a4:83:85:92:c5:8e: c1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:18:55:F1:6F:9F:43:E1:90:B0:90:9C:6C:F0:58:8D:B3:38:D1:1F X509v3 Authority Key Identifier: keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:de:65:ef:e2:fe:d0:1f:6c:c3:8a:09:74:8c:33:d6:c1:71: 7e:90:2e:e3:6c:85:b7:06:9d:6d:3b:79:6e:b8:75:3e:fc:b0: 9e:ed:6a:95:a3:1f:63:cc:45:3e:a6:10:d2:f7:7c:74:02:60: b9:46:88:b3:61:16:94:95:d8:b3:2d:2e:f3:54:d3:f8:fe:65: bb:b7:63:20:c6:f0:98:e0:03:b3:d3:2b:70:4b:0b:37:b4:00: da:f7:7b:14:ab:f9:40:60:8a:8a:53:9c:c3:93:04:43:d6:d4: d6:d5:9d:b6:e5:c9:c0:07:43:48:1d:cb:9a:7b:70:3b:8a:04: fa:2a:00:bc:ca:fc:0a:b8:e3:e5:c9:33:af:d3:08:83:58:c4: c5:66:68:b7:03:fe:e6:5f:eb:4a:4f:cd:a5:cb:c9:6f:b9:72: 68:f7:4d:44:cc:6e:36:23:71:11:38:c2:27:19:80:13:b7:1e: 3f:5e:04:b2:b0:9f:41:57:59:44:ea:00:cf:7f:f6:0f:3b:57: 48:11:01:fd:ea:33:fa:53:fb:28:2e:f2:c9:e7:0f:c5:81:05: d7:17:9f:c1:7d:d5:71:9e:0b:d3:a7:14:18:12:31:25:f4:f9: e9:af:15:c3:7f:56:f8:99:74:88:da:ee:41:4c:9a:83:85:83: 34:2d:aa:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+yywOEIRQBAo95/0+qwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWFhZjNkMDY4M2RjOGEwZDU4YzY0MzgyNmUxNjZkM2My OGNjYTkwHhcNMjUxMjE5MDUwMDM0WhcNMjUxMjIwMDUwMDM0WjAzMTEwLwYDVQQD EygyNTE4NTVmMTZmOWY0M2UxOTBiMDkwOWM2Y2YwNTg4ZGIzMzhkMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTza5q+7cNNCYPYWCuJA11gWt3BM LzqrxeYRvHu4siVS9ZIy6jQZooR1eooBYD70BtTxJXDK2mx9FEKhz7CzqEF1HfMg JxDOJzyyllbNwQHh2Tnhbw4TAsCfin0oC5QhH3oTQVffjBMs7DZwU2vdMubMD3kP eIF5Dop0rhMmxF2TW2R0TX+Q2mIhxExhImlTtx5Isb8oa0xCvkYUrtFvuCtAPUZB fOc+XJkTuIBIxkpg2pHSjpAeEqD79MjLlK9PHmdcjEGLupOF7tCo8NHoH/3pxtPo J8dhKC26vPp4rj1wY8fP0IZtNzW6fL8/8olPL3OcRQS04Cykg4WSxY7BSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUYVfFvn0PhkLCQnGzwWI2zONEfMB8GA1UdIwQY MBaAFB5arz0Gg9yKDVjGQ4JuFm08KMypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxxdlBRYUQzSW9OV01aRGdtNFdiVHdvektrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84M2RmNWItZDE1My00Y2I2LWJhZjMt NGNkMzhiNzU4ZDVjLzEvSGxxdlBRYUQzSW9OV01aRGdtNFdiVHdvektrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84M2RmNWItZDE1My00Y2I2LWJhZjMtNGNkMzhiNzU4ZDVj LzEvSGxxdlBRYUQzSW9OV01aRGdtNFdiVHdvektrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL95l7+L+ 0B9sw4oJdIwz1sFxfpAu42yFtwadbTt5brh1Pvywnu1qlaMfY8xFPqYQ0vd8dAJg uUaIs2EWlJXYsy0u81TT+P5lu7djIMbwmOADs9MrcEsLN7QA2vd7FKv5QGCKilOc w5MEQ9bU1tWdtuXJwAdDSB3LmntwO4oE+ioAvMr8Crjj5ckzr9MIg1jExWZotwP+ 5l/rSk/NpcvJb7lyaPdNRMxuNiNxETjCJxmAE7ceP14EsrCfQVdZROoAz3/2DztX SBEB/eoz+lP7KC7yyecPxYEF1xefwX3VcZ4L06cUGBIxJfT56a8Vw39W+Jl0iNru QUyag4WDNC2qrA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:29:40 2025 by rpki-client