This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json) Hash identifier: kbbRQgCPFZ8tjk4rmJ8kQoLJq4c8inVro7oaLXgf/Xw= Subject key identifier: 77:5D:86:1E:0B:D7:C8:F6:D2:A4:FD:F8:7F:61:BC:90:3F:9E:AB:52 Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3 Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3 Certificate serial: 019B49270E6BD40056EDD0650F42F07BC59E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft Manifest number: 0AD2 Signing time: Tue 23 Dec 2025 03:00:54 +0000 Manifest this update: Tue 23 Dec 2025 03:00:54 +0000 Manifest next update: Wed 24 Dec 2025 03:00:54 +0000 Files and hashes: 1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: Kkud1h83PGIm/hWAZDf/p9Cg2+9bYIT7dAxjEAE86CI=) 2: lyeOPA3Hi3kUGDVfoF3VE8weizo.roa (hash: SK0Hu8MdGQh3m28Nprb3+ZaMXzQS8vnNx8UerT7YIyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:0e:6b:d4:00:56:ed:d0:65:0f:42:f0:7b:c5:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3 Validity Not Before: Dec 23 03:00:54 2025 GMT Not After : Dec 24 03:00:54 2025 GMT Subject: CN=775d861e0bd7c8f6d2a4fdf87f61bc903f9eab52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:97:69:c4:4e:15:52:bf:92:1f:3a:4e:1c: 78:59:48:99:e3:88:16:01:78:83:61:7b:29:36:24: 53:83:f1:8c:38:d7:54:2e:f8:e4:6b:5a:9c:29:45: e9:3f:da:25:db:8b:a4:95:3f:68:c0:b8:ed:4d:9c: 03:18:c1:32:90:1f:be:d9:f4:3a:01:5c:8a:03:88: e4:7c:18:ff:74:dc:f9:a5:d6:52:66:c1:6f:8b:43: 5c:49:c0:83:55:25:fd:a0:08:af:c7:7f:32:ec:6f: 8c:43:2f:b8:91:9f:5e:6d:45:57:9a:ac:5b:fd:1d: a2:10:d3:37:1c:88:59:77:26:bc:58:0c:c2:93:ca: 68:29:79:5b:97:bd:e6:e9:5a:f4:00:ca:ce:4f:68: e1:00:d0:e1:16:e6:52:f8:29:8d:0c:92:32:5a:40: 08:a3:9a:e9:57:d9:18:ab:ac:27:08:fa:40:16:60: fe:73:6f:84:c9:5a:13:6d:dc:47:b8:f0:fc:e3:81: 62:bc:34:cd:0d:a4:b7:0f:38:1b:ed:7b:63:b4:07: 43:bd:ba:3c:11:41:90:9e:4a:a9:95:e5:a7:65:dc: 4d:62:cb:a4:73:68:4f:3c:01:0a:a9:1a:ff:fd:cc: fa:f3:29:74:82:60:77:13:a6:14:b8:45:67:ef:ec: 05:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5D:86:1E:0B:D7:C8:F6:D2:A4:FD:F8:7F:61:BC:90:3F:9E:AB:52 X509v3 Authority Key Identifier: keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:3a:bf:a1:a8:9a:c7:0a:4e:53:26:98:50:64:86:ee:ad:01: bd:c2:0f:6a:50:39:40:1e:2d:5c:e9:eb:3e:0e:dd:7e:a3:dd: 1a:37:32:11:d9:f9:2d:f9:42:46:29:5e:a7:08:11:dc:eb:b3: 43:a2:40:e8:72:0a:99:a9:1a:36:bc:5f:e4:d9:66:5a:fb:94: 4f:35:85:44:75:f2:fc:fd:a3:b2:52:12:65:f3:a9:1a:be:50: 45:79:33:27:02:13:d4:4f:3e:7b:62:aa:06:f7:4f:20:43:c7: 02:50:bc:01:8e:f1:92:f7:89:2f:f9:ab:a8:b9:b1:dd:eb:ad: 36:2e:87:31:d1:73:08:47:b8:7f:c9:d7:4e:8b:fa:08:2d:46: ae:2b:12:f3:60:b1:30:09:26:a2:6c:c8:4b:4b:d5:d4:2d:71: 77:b7:26:51:ee:e1:94:93:11:ed:39:62:f6:8d:22:ce:50:6a: 43:93:fd:bf:55:78:f4:51:17:66:9a:a3:42:3f:f0:99:04:c5: 2a:39:f9:c8:94:7c:2c:89:0a:41:5c:7e:b2:a4:17:d4:a1:11: ac:40:84:2f:be:18:65:54:50:d1:57:2a:01:5e:ea:93:cf:4f: bb:2b:d3:b1:82:44:d5:3e:85:0b:aa:e5:ee:8f:a7:91:24:2b: 39:8e:f5:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJw5r1ABW7dBlD0Lwe8WeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjQyZjJlOTQ1YzZhNzJlZTI4ZjhjODBlODBkNDg4NDMz ZTM3YTMwHhcNMjUxMjIzMDMwMDU0WhcNMjUxMjI0MDMwMDU0WjAzMTEwLwYDVQQD Eyg3NzVkODYxZTBiZDdjOGY2ZDJhNGZkZjg3ZjYxYmM5MDNmOWVhYjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoKXacROFVK/kh86Thx4WUiZ44gW AXiDYXspNiRTg/GMONdULvjka1qcKUXpP9ol24uklT9owLjtTZwDGMEykB++2fQ6 AVyKA4jkfBj/dNz5pdZSZsFvi0NcScCDVSX9oAivx38y7G+MQy+4kZ9ebUVXmqxb /R2iENM3HIhZdya8WAzCk8poKXlbl73m6Vr0AMrOT2jhANDhFuZS+CmNDJIyWkAI o5rpV9kYq6wnCPpAFmD+c2+EyVoTbdxHuPD844FivDTNDaS3Dzgb7XtjtAdDvbo8 EUGQnkqpleWnZdxNYsukc2hPPAEKqRr//cz68yl0gmB3E6YUuEVn7+wFrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHddhh4L18j20qT9+H9hvJA/nqtSMB8GA1UdIwQY MBaAFBwkLy6UXGpy7ij4yA6A1IhDPjejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEt Y2E3OGVmNTgyNmNhLzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEtY2E3OGVmNTgyNmNh LzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTq/oaia xwpOUyaYUGSG7q0BvcIPalA5QB4tXOnrPg7dfqPdGjcyEdn5LflCRilepwgR3Ouz Q6JA6HIKmakaNrxf5NlmWvuUTzWFRHXy/P2jslISZfOpGr5QRXkzJwIT1E8+e2Kq BvdPIEPHAlC8AY7xkveJL/mrqLmx3eutNi6HMdFzCEe4f8nXTov6CC1GrisS82Cx MAkmomzIS0vV1C1xd7cmUe7hlJMR7Tli9o0izlBqQ5P9v1V49FEXZpqjQj/wmQTF Kjn5yJR8LIkKQVx+sqQX1KERrECEL74YZVRQ0VcqAV7qk89PuyvTsYJE1T6FC6rl 7o+nkSQrOY71Mg== -----END CERTIFICATE-----Generated at Tue Dec 23 09:14:09 2025 by rpki-client