This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json) Hash identifier: 0iwD/CHorwp6D9Anof3d0ayhjir9vNvtgMzNAdhHkos= Subject key identifier: 27:60:5C:01:A8:99:16:08:0B:52:35:50:F2:46:CB:E8:D4:82:20:0C Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62 Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62 Certificate serial: 019B47A672D14782903B5D1621DF43894E89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft Manifest number: 0621 Signing time: Mon 22 Dec 2025 20:00:49 +0000 Manifest this update: Mon 22 Dec 2025 20:00:49 +0000 Manifest next update: Tue 23 Dec 2025 20:00:49 +0000 Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: P2qLJHhGDFY4oKXgAjbTcyJZBUqk5oiaPV7cv+pp8Dk=) 2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:72:d1:47:82:90:3b:5d:16:21:df:43:89:4e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62 Validity Not Before: Dec 22 20:00:49 2025 GMT Not After : Dec 23 20:00:49 2025 GMT Subject: CN=27605c01a89916080b523550f246cbe8d482200c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ca:15:68:6d:1c:1b:50:bd:4a:38:31:bb:ec: 0c:f5:07:4b:73:73:f7:46:91:56:70:1c:04:fa:6b: 47:db:35:e2:e9:24:87:f8:b2:e0:52:47:d5:c4:6f: 73:38:ff:10:cc:d1:6f:41:5a:38:17:9c:2a:4c:16: e1:ae:be:b3:7e:c3:9c:34:18:31:f8:a3:c2:b3:0f: fa:db:19:d9:5b:02:be:5e:df:de:79:70:47:b8:0f: 66:be:88:9f:18:86:1c:b1:b9:a2:54:f4:a3:27:bc: e8:ad:04:c7:ce:59:c6:cb:25:a4:e3:54:17:d4:51: 02:e3:2b:57:a2:f0:d6:94:62:77:a2:41:03:9a:3b: 50:af:bb:6b:ed:a2:36:43:6a:14:b8:49:59:98:b0: 6c:e2:e1:ae:76:3d:58:c7:a0:d7:b0:2c:44:f3:f7: 2b:37:2b:9f:fb:18:97:33:fa:a5:7a:d8:b9:16:be: 0f:60:9a:1d:21:6e:4c:0e:7e:81:19:d6:1b:38:ef: 19:49:89:2e:d7:90:26:e0:6d:50:8f:96:60:c4:85: de:f4:e2:15:22:3f:a4:e3:32:2c:90:cf:9e:df:92: 82:96:8c:94:4a:48:c8:ec:25:38:47:65:e6:1c:a2: fb:38:76:b2:81:7b:8c:36:bd:30:02:28:8f:3b:7c: e5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:60:5C:01:A8:99:16:08:0B:52:35:50:F2:46:CB:E8:D4:82:20:0C X509v3 Authority Key Identifier: keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:cf:19:35:16:c7:a0:36:46:40:25:81:ce:e4:0b:69:2b:2d: c8:92:d1:5e:52:7e:32:ca:5b:2b:e3:8e:e4:48:95:2c:26:0d: 86:fa:94:17:81:7d:8f:32:dc:55:8b:82:a4:bb:cb:0b:c4:77: 19:0d:98:5b:0b:c0:c5:a5:10:6b:5c:02:e2:c8:1c:0d:45:1e: fc:6c:0f:c7:ff:78:43:29:f6:b8:f5:d0:ec:6e:84:c9:ab:51: 9d:28:44:e4:fc:42:e7:4f:95:b4:e4:5e:67:11:4f:6f:ce:08: 87:51:55:ce:93:a8:ee:fa:b1:54:52:70:69:68:6c:27:a9:9f: ff:72:06:81:95:22:37:42:29:7f:ac:5d:c7:e0:90:f5:7f:8b: 76:f6:b4:70:6d:5a:d2:92:2a:ec:cc:1f:64:17:79:74:48:b1: 75:5a:23:f8:58:b3:5b:12:30:04:a8:6c:cb:99:41:72:ad:69: 5e:9a:c0:00:a6:d3:c0:2d:35:4d:bd:c7:40:0c:fb:fa:03:88: e6:ea:e4:9c:d5:c7:a7:71:c0:65:7b:da:91:68:9c:7e:34:3f: 9e:e7:c7:0d:5e:88:b1:f6:af:ae:95:3c:42:c7:9e:e6:b3:3d: fe:0c:af:c1:e4:1c:13:ab:a7:0e:c8:d0:60:ea:31:88:aa:d0: 99:63:8e:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpnLRR4KQO10WId9DiU6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjY2FhYjBiMGRlZmM5M2MzMmY4MGM0NGIwODJmYjI5MDVm MjNjNjIwHhcNMjUxMjIyMjAwMDQ5WhcNMjUxMjIzMjAwMDQ5WjAzMTEwLwYDVQQD EygyNzYwNWMwMWE4OTkxNjA4MGI1MjM1NTBmMjQ2Y2JlOGQ0ODIyMDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsoVaG0cG1C9Sjgxu+wM9QdLc3P3 RpFWcBwE+mtH2zXi6SSH+LLgUkfVxG9zOP8QzNFvQVo4F5wqTBbhrr6zfsOcNBgx +KPCsw/62xnZWwK+Xt/eeXBHuA9mvoifGIYcsbmiVPSjJ7zorQTHzlnGyyWk41QX 1FEC4ytXovDWlGJ3okEDmjtQr7tr7aI2Q2oUuElZmLBs4uGudj1Yx6DXsCxE8/cr Nyuf+xiXM/qleti5Fr4PYJodIW5MDn6BGdYbOO8ZSYku15Am4G1Qj5ZgxIXe9OIV Ij+k4zIskM+e35KCloyUSkjI7CU4R2XmHKL7OHaygXuMNr0wAiiPO3zl1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdgXAGomRYIC1I1UPJGy+jUgiAMMB8GA1UdIwQY MBaAFBzKqwsN78k8MvgMRLCC+ykF8jxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQt Njk0N2YwMmFjNmFmLzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQtNjk0N2YwMmFjNmFm LzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwM8ZNRbH oDZGQCWBzuQLaSstyJLRXlJ+MspbK+OO5EiVLCYNhvqUF4F9jzLcVYuCpLvLC8R3 GQ2YWwvAxaUQa1wC4sgcDUUe/GwPx/94Qyn2uPXQ7G6EyatRnShE5PxC50+VtORe ZxFPb84Ih1FVzpOo7vqxVFJwaWhsJ6mf/3IGgZUiN0Ipf6xdx+CQ9X+Ldva0cG1a 0pIq7MwfZBd5dEixdVoj+FizWxIwBKhsy5lBcq1pXprAAKbTwC01Tb3HQAz7+gOI 5urknNXHp3HAZXvakWicfjQ/nufHDV6IsfavrpU8Qsee5rM9/gyvweQcE6unDsjQ YOoxiKrQmWOO2g== -----END CERTIFICATE-----Generated at Tue Dec 23 00:44:45 2025 by rpki-client