This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json) Hash identifier: IdbjICdgu80SvgS2rIWXMVG5ynLChGwwB+8bWdVJGHE= Subject key identifier: 4F:74:CC:B4:B3:B5:72:E8:84:24:AC:A2:FA:79:0C:D5:EE:67:E3:14 Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08 Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08 Certificate serial: 019B3C7DFACF4F630DDDC29C264D918C857B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft Manifest number: 14AB Signing time: Sat 20 Dec 2025 16:00:47 +0000 Manifest this update: Sat 20 Dec 2025 16:00:47 +0000 Manifest next update: Sun 21 Dec 2025 16:00:47 +0000 Files and hashes: 1: 9zhTOpiuNqKnk778yI8rOgQQ8-A.roa (hash: ABWXF/FnYjdj8H9UnlqrtLWEbBYpls+daSI459eMuZM=) 2: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: /nBwd8rB8IZe6xoqpEY+GPV1Fj2nRgcVwUUNdFrk2ZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:fa:cf:4f:63:0d:dd:c2:9c:26:4d:91:8c:85:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08 Validity Not Before: Dec 20 16:00:47 2025 GMT Not After : Dec 21 16:00:47 2025 GMT Subject: CN=4f74ccb4b3b572e88424aca2fa790cd5ee67e314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:a6:74:09:5f:8b:bf:84:1a:3d:52:7a:76: 34:f9:9d:93:c4:5d:d9:a4:38:a4:1b:18:c7:d7:62: 91:62:52:d1:ec:bb:f7:32:96:30:98:b5:f1:bb:b8: 61:2e:9b:ca:f9:47:19:75:23:1d:65:28:f1:05:18: 2e:0c:7b:c2:14:53:bf:9e:2e:aa:29:97:f3:95:44: e0:8c:15:29:c9:32:15:3a:1f:e0:84:29:0f:77:91: 41:e4:8a:68:3a:a3:b7:e0:9e:83:43:d1:9a:56:29: ad:da:8a:f3:9f:b0:5c:5a:e6:65:d1:7c:5e:79:a0: 4d:f3:ee:9c:02:c2:d8:33:30:91:81:d7:9a:ed:66: 7e:71:65:ac:49:b8:b2:e2:32:10:93:1a:72:f3:d7: a8:44:78:d0:e5:7e:a0:30:ff:21:72:1f:1e:c4:85: db:c5:8e:12:00:97:40:89:73:2e:15:eb:86:9c:31: 07:67:8f:31:a4:34:67:97:2b:95:98:44:b8:8c:ea: 65:76:f7:f6:57:22:b2:d2:79:a2:4c:43:cd:62:58: c4:9b:2f:df:ba:38:e5:ca:43:a4:bf:40:87:21:96: cc:db:04:0c:6b:bc:cc:a4:63:cb:b9:e6:09:f2:1d: e0:3a:f6:ca:39:fd:6c:bc:1d:1a:3d:11:7e:b5:7b: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:74:CC:B4:B3:B5:72:E8:84:24:AC:A2:FA:79:0C:D5:EE:67:E3:14 X509v3 Authority Key Identifier: keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bf:49:49:50:57:c2:68:37:f2:fd:46:83:47:95:a7:cf:be: 0a:8b:6c:d5:eb:74:23:2f:c6:58:47:8e:6e:b1:ad:9d:1f:c5: bb:85:dd:00:a9:d5:2d:ed:35:45:61:21:d6:3a:75:e3:fd:69: e5:32:2e:79:83:1e:9c:71:6c:1d:e5:8d:4a:51:c5:ed:65:28: a8:e8:96:ee:4a:1d:59:29:39:ad:6e:9a:6b:ba:06:e9:db:fb: dd:65:70:7d:83:dc:36:38:7d:12:09:18:f6:84:3f:7a:41:00: 63:d5:c4:e7:cc:e7:55:ff:8d:d3:65:88:66:2d:8d:d8:87:e4: 51:2b:e3:aa:9d:63:78:8b:89:c1:3f:ea:07:44:2b:cf:06:92: c4:26:b4:75:91:87:02:b1:99:e7:ba:17:38:34:da:40:54:a9: 02:4e:8d:3e:0c:59:93:3e:eb:98:35:d0:0c:ad:fd:0d:29:78: de:f1:f1:29:2d:5d:6a:e9:91:2f:06:ab:83:89:b9:d2:7a:4f: 1b:1b:cc:73:cf:cf:f5:b6:32:30:f4:aa:19:e0:2a:46:0a:39: e5:c6:cf:bb:f1:53:90:19:47:11:14:ef:31:bd:0f:eb:8c:f8: 2e:f7:e4:e8:79:bd:29:43:c2:fb:15:be:b9:12:35:17:b6:a1: 1d:6e:b3:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ffrPT2MN3cKcJk2RjIV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMGFjZWVhMTdmNTNkZTcwOGY5YTczYWJjMGM4NzE2NGQy MDdkMDgwHhcNMjUxMjIwMTYwMDQ3WhcNMjUxMjIxMTYwMDQ3WjAzMTEwLwYDVQQD Eyg0Zjc0Y2NiNGIzYjU3MmU4ODQyNGFjYTJmYTc5MGNkNWVlNjdlMzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT+mdAlfi7+EGj1SenY0+Z2TxF3Z pDikGxjH12KRYlLR7Lv3MpYwmLXxu7hhLpvK+UcZdSMdZSjxBRguDHvCFFO/ni6q KZfzlUTgjBUpyTIVOh/ghCkPd5FB5IpoOqO34J6DQ9GaVimt2orzn7BcWuZl0Xxe eaBN8+6cAsLYMzCRgdea7WZ+cWWsSbiy4jIQkxpy89eoRHjQ5X6gMP8hch8exIXb xY4SAJdAiXMuFeuGnDEHZ48xpDRnlyuVmES4jOpldvf2VyKy0nmiTEPNYljEmy/f ujjlykOkv0CHIZbM2wQMa7zMpGPLueYJ8h3gOvbKOf1svB0aPRF+tXvGIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE90zLSztXLohCSsovp5DNXuZ+MUMB8GA1UdIwQY MBaAFB0KzuoX9T3nCPmnOrwMhxZNIH0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYTU2ZjYtMWNmMi00Mzg4LTk2ZmEt YzZiY2NhNzIxNDcxLzEvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kYTU2ZjYtMWNmMi00Mzg4LTk2ZmEtYzZiY2NhNzIxNDcx LzEvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm79JSVBX wmg38v1Gg0eVp8++Cots1et0Iy/GWEeObrGtnR/Fu4XdAKnVLe01RWEh1jp14/1p 5TIueYMenHFsHeWNSlHF7WUoqOiW7kodWSk5rW6aa7oG6dv73WVwfYPcNjh9EgkY 9oQ/ekEAY9XE58znVf+N02WIZi2N2IfkUSvjqp1jeIuJwT/qB0QrzwaSxCa0dZGH ArGZ57oXODTaQFSpAk6NPgxZkz7rmDXQDK39DSl43vHxKS1daumRLwarg4m50npP GxvMc8/P9bYyMPSqGeAqRgo55cbPu/FTkBlHERTvMb0P64z4Lvfk6Hm9KUPC+xW+ uRI1F7ahHW6zmA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:12:04 2025 by rpki-client