This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json) Hash identifier: lVZiuZqyoDwUY2rTMFzKOCI/foBO7R+jWb4rvkW5DeY= Subject key identifier: 33:37:64:AD:AF:F1:A9:57:DC:78:D5:66:E3:80:8B:13:D4:1D:92:61 Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07 Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007 Certificate serial: 019B3A9063E9BC0D8F663821571A0C5BE992 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft Manifest number: 1539 Signing time: Sat 20 Dec 2025 07:01:39 +0000 Manifest this update: Sat 20 Dec 2025 07:01:39 +0000 Manifest next update: Sun 21 Dec 2025 07:01:39 +0000 Files and hashes: 1: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: xDcJkiDJXLzxXYpF/HNw5H7+4VwMRWFesgY3dixLEOY=) 2: ub3jhWL8KmU55QyzLWlOgggBar8.roa (hash: uMoRi+7KkYToPIHx+yE4FpiPieRkes7ACBQfGkW0VCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:63:e9:bc:0d:8f:66:38:21:57:1a:0c:5b:e9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007 Validity Not Before: Dec 20 07:01:39 2025 GMT Not After : Dec 21 07:01:39 2025 GMT Subject: CN=333764adaff1a957dc78d566e3808b13d41d9261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a2:e2:4a:c2:27:b1:b9:6a:f0:cf:2f:17:92: 93:fd:d0:d0:2c:72:2b:06:79:d5:81:ea:4c:76:de: f0:27:eb:68:49:d9:cd:48:bc:7a:1e:87:1b:1d:a0: c7:38:49:f2:77:b8:7a:a5:db:09:4a:9a:5c:be:fb: d2:a4:6a:7b:26:a0:5b:61:da:11:ea:fd:a6:6c:18: 25:c8:3c:32:45:da:21:a6:1c:d0:1b:2c:64:22:57: 2b:ac:b7:13:84:7e:77:d2:7f:57:7a:6b:0e:64:06: 43:1a:a2:a5:c5:46:36:39:60:57:6a:3b:5f:4c:15: 6b:91:29:81:e9:7e:a3:b3:4d:d4:a8:68:46:b5:ee: 1d:8e:6c:50:1e:c5:36:44:7d:41:c6:61:64:f3:79: 7c:6d:36:c3:78:79:8b:43:ed:48:e2:07:dd:69:d7: 48:e7:ba:02:97:3f:af:9d:1b:4b:b2:9c:2d:ad:ef: 98:f5:43:71:dd:7e:34:86:91:d0:e7:90:7f:d3:88: ce:cc:cd:f7:11:93:c2:af:fe:2b:79:83:e2:82:ee: 6e:b7:b2:4a:2e:d4:bc:24:8a:5c:16:76:c5:5a:e9: c9:a9:65:0b:2f:56:19:34:0f:87:5a:1a:31:fb:28: 63:6a:84:1e:3c:2e:d9:42:60:92:da:64:15:d5:b7: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:37:64:AD:AF:F1:A9:57:DC:78:D5:66:E3:80:8B:13:D4:1D:92:61 X509v3 Authority Key Identifier: keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:45:44:4d:9c:34:13:9a:b2:21:b7:c7:27:06:19:f8:0d:1a: f2:a9:66:fc:d8:93:8d:0b:3c:45:78:5c:1d:26:a0:00:4d:9d: 1d:0a:ed:2d:27:8a:0e:08:1e:62:24:f4:2d:cd:4a:93:a7:da: 71:17:88:73:d3:31:1a:a3:70:11:e9:05:1c:cc:e6:08:69:07: a3:11:9f:74:ee:32:62:8a:db:25:c8:d6:38:9a:2f:9c:36:bb: f4:3f:1c:09:f5:b8:20:ce:a2:86:22:e9:bd:15:59:0d:d1:97: 7c:ea:dc:de:5c:5f:e6:30:26:e7:ff:50:cc:aa:a9:a2:c2:ce: 6f:bf:3b:63:c2:ef:03:90:0d:96:0e:0c:39:86:21:53:a4:fb: 1b:b5:96:57:9c:6e:e1:8c:7a:6a:a8:bb:48:39:f6:34:a9:1e: 67:14:dd:df:19:79:34:74:47:6a:d3:f2:05:f4:c5:b9:3d:f0: e0:db:5e:22:7a:f3:fc:19:9e:5a:d7:32:0d:94:d1:a3:7e:d4: c4:bb:2b:67:19:6d:57:90:2a:ff:c3:5b:d7:7a:10:1c:54:e8: 32:60:d5:60:9a:7a:6f:eb:d5:58:f2:8f:a1:8e:a8:eb:ef:38: 27:e0:aa:b4:18:3d:04:41:f9:c5:85:54:19:e2:10:eb:51:06: c6:7d:d1:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kGPpvA2PZjghVxoMW+mSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWIwMTI5M2M5ZGJkMWE5ZDZhZGM4NjE4MmI1MjBjZDE3 NmMwMDcwHhcNMjUxMjIwMDcwMTM5WhcNMjUxMjIxMDcwMTM5WjAzMTEwLwYDVQQD EygzMzM3NjRhZGFmZjFhOTU3ZGM3OGQ1NjZlMzgwOGIxM2Q0MWQ5MjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaLiSsInsblq8M8vF5KT/dDQLHIr BnnVgepMdt7wJ+toSdnNSLx6HocbHaDHOEnyd7h6pdsJSppcvvvSpGp7JqBbYdoR 6v2mbBglyDwyRdohphzQGyxkIlcrrLcThH530n9XemsOZAZDGqKlxUY2OWBXajtf TBVrkSmB6X6js03UqGhGte4djmxQHsU2RH1BxmFk83l8bTbDeHmLQ+1I4gfdaddI 57oClz+vnRtLspwtre+Y9UNx3X40hpHQ55B/04jOzM33EZPCr/4reYPigu5ut7JK LtS8JIpcFnbFWunJqWULL1YZNA+HWhox+yhjaoQePC7ZQmCS2mQV1bfGewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDM3ZK2v8alX3HjVZuOAixPUHZJhMB8GA1UdIwQY MBaAFB6rASk8nb0anWrchhgrUgzRdsAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjct ZTAzYWM1ODlhMDNmLzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjctZTAzYWM1ODlhMDNm LzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvUVETZw0 E5qyIbfHJwYZ+A0a8qlm/NiTjQs8RXhcHSagAE2dHQrtLSeKDggeYiT0Lc1Kk6fa cReIc9MxGqNwEekFHMzmCGkHoxGfdO4yYorbJcjWOJovnDa79D8cCfW4IM6ihiLp vRVZDdGXfOrc3lxf5jAm5/9QzKqposLOb787Y8LvA5ANlg4MOYYhU6T7G7WWV5xu 4Yx6aqi7SDn2NKkeZxTd3xl5NHRHatPyBfTFuT3w4NteInrz/BmeWtcyDZTRo37U xLsrZxltV5Aq/8Nb13oQHFToMmDVYJp6b+vVWPKPoY6o6+84J+CqtBg9BEH5xYVU GeIQ61EGxn3R7w== -----END CERTIFICATE-----Generated at Sat Dec 20 15:58:19 2025 by rpki-client