This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json) Hash identifier: 06cy3zgMymK/1RT6FFSsZfanCYnXO0i/1zE+wbVijt0= Subject key identifier: 27:97:21:6C:8F:99:D3:F1:03:B4:73:AC:85:9D:79:6F:05:9E:64:DA Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f Certificate serial: 019B3EDA787885172EBA7E136EF1561097A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft Manifest number: 12F6 Signing time: Sun 21 Dec 2025 03:01:03 +0000 Manifest this update: Sun 21 Dec 2025 03:01:03 +0000 Manifest next update: Mon 22 Dec 2025 03:01:03 +0000 Files and hashes: 1: 572na8_zoYemqPBejFGMRRPd8ps.roa (hash: vVsm+nWWBvjJ+3tIYusnSlDq71JJ2TZXjTfrysKXq88=) 2: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: bCPASgzWbKjk6FHXbl016j3xaup0coR0jFU6lrNnFpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:78:78:85:17:2e:ba:7e:13:6e:f1:56:10:97:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f Validity Not Before: Dec 21 03:01:03 2025 GMT Not After : Dec 22 03:01:03 2025 GMT Subject: CN=2797216c8f99d3f103b473ac859d796f059e64da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:85:c3:83:c2:28:22:e5:8c:95:ee:9b:93:0b: a3:db:45:2e:2d:da:c3:1f:af:31:00:b7:3b:92:d7: 89:2a:69:50:a4:cd:c7:8e:45:8a:03:50:f2:b5:8c: 31:25:a7:a4:69:27:35:cf:bd:32:2a:80:2f:ed:d7: e9:f1:2f:84:5b:76:22:a5:21:b1:36:bd:ac:4d:1e: 7d:2c:ba:0e:df:6d:3c:ae:6b:bd:d0:7d:36:b1:89: f0:b0:09:7f:cf:a6:ea:41:65:58:2c:88:74:8b:67: e5:e1:23:83:c2:dc:b3:01:43:ac:f7:74:10:ba:00: 4f:ab:f6:ac:2e:5f:ab:e7:8a:e7:50:04:ee:d0:86: 42:96:11:08:fa:2f:38:f3:ad:64:43:c2:46:6e:b9: 13:d9:70:33:ef:6b:82:c9:3c:ce:71:fa:45:68:67: 8a:d1:97:11:42:23:b6:65:b3:27:90:10:93:24:e3: 55:42:9d:4f:2d:c1:f1:96:5e:fc:0c:e0:5b:a6:15: 52:e5:c7:61:b6:b9:31:27:f6:0f:44:9f:7b:92:b0: 13:1a:f7:ab:62:3c:51:c2:b2:c4:f6:23:cb:b4:39: 16:a8:2a:3d:32:ee:e4:01:31:25:d0:29:57:f9:35: eb:50:63:e2:85:30:2a:92:ac:a0:f6:22:ab:f2:54: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:97:21:6C:8F:99:D3:F1:03:B4:73:AC:85:9D:79:6F:05:9E:64:DA X509v3 Authority Key Identifier: keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:11:40:b7:0e:ed:32:8e:83:3e:99:e7:a3:99:91:d1:7f:6e: 87:f2:ac:2b:c1:40:d1:f4:5b:f1:5e:5d:01:e9:5f:dd:aa:eb: ab:04:e5:65:de:11:dd:1a:27:5c:9d:26:3f:ef:3b:f5:2e:2c: 85:c0:46:20:1d:0a:b9:16:75:0a:4b:ee:2e:47:70:44:4a:5c: 65:85:29:99:77:c5:01:f7:a1:c2:73:33:48:75:59:f4:99:e0: a4:60:2d:68:7d:0f:0e:16:70:bb:f4:f8:f0:35:99:64:3f:98: 34:f8:0e:51:06:94:82:f1:b9:11:e5:02:42:bd:40:5b:22:c0: 6b:4b:fc:87:b5:02:fd:34:c9:fe:e7:43:71:89:46:b7:e1:23: 09:9b:15:95:b8:af:33:7c:75:bd:c9:13:17:ba:47:15:e8:99: a7:a6:95:2b:e3:ea:11:bd:e4:d9:b9:f7:ce:2a:ac:12:32:48: 76:26:08:74:03:a2:bc:e1:df:37:98:3b:e1:7e:28:bf:9e:72: fe:4f:97:32:78:0d:db:5b:4c:8e:38:f4:aa:9e:16:c8:9b:b8: 06:57:62:bc:f0:72:cd:70:b4:18:9b:ed:d2:43:49:e2:80:5d: 95:c0:b4:5e:40:b7:c3:79:16:81:94:6c:8c:bd:40:45:48:8d: fb:75:1b:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2nh4hRcuun4TbvFWEJelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDY3MmM5OWY4N2YwNWNkODNmMGI2MjdkMzE4NzFmZTgw YmUwMWYwHhcNMjUxMjIxMDMwMTAzWhcNMjUxMjIyMDMwMTAzWjAzMTEwLwYDVQQD EygyNzk3MjE2YzhmOTlkM2YxMDNiNDczYWM4NTlkNzk2ZjA1OWU2NGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oXDg8IoIuWMle6bkwuj20UuLdrD H68xALc7kteJKmlQpM3HjkWKA1DytYwxJaekaSc1z70yKoAv7dfp8S+EW3YipSGx Nr2sTR59LLoO3208rmu90H02sYnwsAl/z6bqQWVYLIh0i2fl4SODwtyzAUOs93QQ ugBPq/asLl+r54rnUATu0IZClhEI+i84861kQ8JGbrkT2XAz72uCyTzOcfpFaGeK 0ZcRQiO2ZbMnkBCTJONVQp1PLcHxll78DOBbphVS5cdhtrkxJ/YPRJ97krATGver YjxRwrLE9iPLtDkWqCo9Mu7kATEl0ClX+TXrUGPihTAqkqyg9iKr8lSWbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeXIWyPmdPxA7RzrIWdeW8FnmTaMB8GA1UdIwQY MBaAFB0Gcsmfh/Bc2D8LYn0xhx/oC+AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTIt NDk0ZjRjNGRhNDI2LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTItNDk0ZjRjNGRhNDI2 LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxFAtw7t Mo6DPpnno5mR0X9uh/KsK8FA0fRb8V5dAelf3arrqwTlZd4R3RonXJ0mP+879S4s hcBGIB0KuRZ1CkvuLkdwREpcZYUpmXfFAfehwnMzSHVZ9JngpGAtaH0PDhZwu/T4 8DWZZD+YNPgOUQaUgvG5EeUCQr1AWyLAa0v8h7UC/TTJ/udDcYlGt+EjCZsVlbiv M3x1vckTF7pHFeiZp6aVK+PqEb3k2bn3ziqsEjJIdiYIdAOivOHfN5g74X4ov55y /k+XMngN21tMjjj0qp4WyJu4BldivPByzXC0GJvt0kNJ4oBdlcC0XkC3w3kWgZRs jL1ARUiN+3UbbA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:59 2025 by rpki-client