This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json) Hash identifier: hiv+D9zNek0/tdQaavg7xTIDloAScL7qtoBq0iMrs40= Subject key identifier: 2D:F3:5D:5F:DA:C3:A2:C8:29:40:2E:20:CA:F6:C9:03:58:03:BC:19 Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3 Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3 Certificate serial: 019B416D88682C21F7B86F7517EAE778D872 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft Manifest number: 0ACE Signing time: Sun 21 Dec 2025 15:00:55 +0000 Manifest this update: Sun 21 Dec 2025 15:00:55 +0000 Manifest next update: Mon 22 Dec 2025 15:00:55 +0000 Files and hashes: 1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: vYeg0nYhMSTB3dd8wkcLCw30WKHL2dmBIaNfj+ooxFA=) 2: lyeOPA3Hi3kUGDVfoF3VE8weizo.roa (hash: SK0Hu8MdGQh3m28Nprb3+ZaMXzQS8vnNx8UerT7YIyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:88:68:2c:21:f7:b8:6f:75:17:ea:e7:78:d8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3 Validity Not Before: Dec 21 15:00:55 2025 GMT Not After : Dec 22 15:00:55 2025 GMT Subject: CN=2df35d5fdac3a2c829402e20caf6c9035803bc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e8:42:74:89:bf:76:8d:c7:86:6a:6a:64:30: a1:92:f4:f6:8f:5a:b0:cc:fc:8b:12:28:27:4c:d8: b7:39:ff:e6:e0:1c:f7:ca:ae:48:63:e7:00:5a:9b: c3:7e:27:76:1e:9c:cd:b4:4d:8e:e6:cb:aa:08:25: 75:b1:2d:96:ca:7b:a1:c9:3a:bc:d7:86:94:9c:7f: 5d:2e:1c:ec:96:64:b7:a1:9e:06:3d:94:be:70:82: ec:e7:2a:88:66:7b:96:60:9b:19:8d:f4:d9:d7:1d: e9:44:f6:00:15:ae:07:85:b3:e1:94:8f:c8:9f:63: f8:76:d0:46:e7:7a:4e:b5:72:70:1c:5e:13:f6:0b: ec:d6:5a:38:f1:46:57:29:b4:31:b2:a0:c8:a7:56: 1f:aa:fa:d2:aa:60:54:c9:8c:26:40:77:cd:8c:43: c9:f9:0c:09:4b:a5:b2:06:bf:41:df:f1:e5:bc:a1: a6:3a:9b:b2:13:a5:bf:86:07:57:c3:63:39:1c:20: 57:b8:fb:15:18:40:bc:29:99:10:3b:f9:c7:28:a3: 64:22:fd:af:9b:00:b6:ed:9c:6b:19:8d:c9:28:6e: 2a:2a:5d:8f:21:f2:c2:9b:2a:77:fc:43:87:b5:d0: 25:f9:70:d5:4c:9b:bc:95:00:85:ce:78:80:d9:2e: ed:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F3:5D:5F:DA:C3:A2:C8:29:40:2E:20:CA:F6:C9:03:58:03:BC:19 X509v3 Authority Key Identifier: keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:6d:dc:6c:40:ef:98:5d:d9:0a:7b:b2:d0:e6:98:56:95:da: df:fe:08:a9:c8:b4:d4:ea:c3:98:6a:96:ae:25:16:18:1e:69: 50:b9:e3:76:0e:e2:64:d2:e9:7f:c7:b7:e6:d9:ad:7f:6b:60: 10:4a:e5:db:59:75:ae:39:78:e3:08:85:db:3b:fa:b2:25:7e: c1:2a:89:d1:06:e0:df:ab:f5:a0:4a:55:06:cf:d5:ee:6c:3e: d8:eb:a1:74:1f:2d:29:a2:31:29:1f:20:43:67:88:e4:49:f8: 66:ab:37:2c:93:70:f0:4f:32:6a:d9:b2:47:f7:5b:25:9b:ed: 06:15:2c:83:30:a6:74:a7:e1:b8:10:8e:a6:bd:4b:3a:f2:a4: c2:03:c5:2d:d1:0a:a5:4c:0e:96:4a:38:87:c3:27:ee:9d:39: 76:ba:8d:0f:a9:51:e6:8d:3b:dd:6c:55:dc:d4:38:28:cd:01: dd:58:3b:30:26:ad:ec:24:52:e4:ee:a5:0e:b2:3b:0e:ca:8a: 7d:ab:88:74:91:e2:f8:d3:fb:b3:58:74:3b:2d:2e:ae:bc:31: 64:49:e5:9e:5b:12:c6:a9:94:6c:fc:bd:a0:73:14:18:31:4f: 44:55:d2:b8:1a:6f:ff:ac:48:78:41:ed:93:54:63:13:4a:d5: 6f:f9:61:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbYhoLCH3uG91F+rneNhyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjQyZjJlOTQ1YzZhNzJlZTI4ZjhjODBlODBkNDg4NDMz ZTM3YTMwHhcNMjUxMjIxMTUwMDU1WhcNMjUxMjIyMTUwMDU1WjAzMTEwLwYDVQQD EygyZGYzNWQ1ZmRhYzNhMmM4Mjk0MDJlMjBjYWY2YzkwMzU4MDNiYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquhCdIm/do3HhmpqZDChkvT2j1qw zPyLEignTNi3Of/m4Bz3yq5IY+cAWpvDfid2HpzNtE2O5suqCCV1sS2WynuhyTq8 14aUnH9dLhzslmS3oZ4GPZS+cILs5yqIZnuWYJsZjfTZ1x3pRPYAFa4HhbPhlI/I n2P4dtBG53pOtXJwHF4T9gvs1lo48UZXKbQxsqDIp1YfqvrSqmBUyYwmQHfNjEPJ +QwJS6WyBr9B3/HlvKGmOpuyE6W/hgdXw2M5HCBXuPsVGEC8KZkQO/nHKKNkIv2v mwC27ZxrGY3JKG4qKl2PIfLCmyp3/EOHtdAl+XDVTJu8lQCFzniA2S7t2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3zXV/aw6LIKUAuIMr2yQNYA7wZMB8GA1UdIwQY MBaAFBwkLy6UXGpy7ij4yA6A1IhDPjejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEt Y2E3OGVmNTgyNmNhLzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEtY2E3OGVmNTgyNmNh LzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA123cbEDv mF3ZCnuy0OaYVpXa3/4Iqci01OrDmGqWriUWGB5pULnjdg7iZNLpf8e35tmtf2tg EErl21l1rjl44wiF2zv6siV+wSqJ0Qbg36v1oEpVBs/V7mw+2OuhdB8tKaIxKR8g Q2eI5En4Zqs3LJNw8E8yatmyR/dbJZvtBhUsgzCmdKfhuBCOpr1LOvKkwgPFLdEK pUwOlko4h8Mn7p05drqND6lR5o073WxV3NQ4KM0B3Vg7MCat7CRS5O6lDrI7DsqK fauIdJHi+NP7s1h0Oy0urrwxZEnlnlsSxqmUbPy9oHMUGDFPRFXSuBpv/6xIeEHt k1RjE0rVb/lhlQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:15:38 2025 by rpki-client