This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json) Hash identifier: FVJ5aiHSDv6v3AFar4YMda/OLstt4R0HZG9N3f7XB6k= Subject key identifier: B8:DD:FF:18:97:64:81:2F:16:85:86:87:A5:A1:22:E9:1C:84:E7:3B Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Certificate serial: 019B3F11CEEDAC7FF9D2B3EE481AF31BAC5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 04:01:30 +0000 Manifest this update: Sun 21 Dec 2025 04:01:30 +0000 Manifest next update: Mon 22 Dec 2025 04:01:30 +0000 Files and hashes: 1: 1WUnRPC7TQDCpNLBGqvpavEUfIY.roa (hash: 9QvvOYrRTeWxJPVmSD6bFU7GJTKQU/1G/slvGit4Jc8=) 2: RNRuwUDah5HvDqZL8fLpyHsOiSQ.roa (hash: IBeeTINphPH0VAeRRmwtztVgI3ETdvS9ro285LvOBzI=) 3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: HA6iIy7pNq3f3vQQ32AiRCH1f/aqCcEmWpxQZfurvCE=) 4: vNe83EC6bSzw91lQkjOMncRB1Rc.roa (hash: qNN6BcyomHcOioxsu8jwQV4wilKffmNHmTxNu0m5mU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:ce:ed:ac:7f:f9:d2:b3:ee:48:1a:f3:1b:ac:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Validity Not Before: Dec 21 04:01:30 2025 GMT Not After : Dec 22 04:01:30 2025 GMT Subject: CN=b8ddff189764812f16858687a5a122e91c84e73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:74:18:b3:17:6d:23:67:f9:b8:eb:75:97:c9: 93:fb:da:b3:d5:f2:8e:9f:35:23:66:83:88:69:08: af:57:f6:2b:90:82:8b:94:e9:6d:fb:cf:b5:11:45: cf:c8:24:b5:1a:36:6e:3f:73:47:a8:6d:37:62:dc: 32:a5:f8:d0:be:56:29:f9:5f:4c:28:7c:13:3f:a3: 22:c1:47:7f:52:be:97:4a:07:0a:eb:c8:09:36:a7: 3c:8b:fc:16:de:c8:07:90:e9:05:92:f1:60:ab:6e: 7c:6e:24:79:5a:9b:63:29:a4:bd:be:b9:1b:9b:5a: 42:fd:c7:af:7c:80:eb:cf:f4:fa:3f:6c:f9:b5:84: 01:fb:6d:81:67:d4:e9:ac:af:f1:0b:db:21:bb:cd: 44:a4:bc:e6:50:dd:8b:91:e3:db:7a:14:37:a4:8a: 3f:45:76:72:f4:3d:70:92:c6:72:91:23:fe:40:5a: 01:40:34:d3:83:87:f5:f6:c7:c0:8b:17:6b:93:e7: 4d:8a:ec:12:27:db:d0:92:00:3a:5e:b6:ec:61:24: 57:0e:65:a1:14:45:b0:1f:9a:f2:4d:26:93:38:2c: bf:ad:cb:dd:34:4f:5b:eb:8f:ac:34:01:28:4f:fd: 10:6c:22:e4:70:7e:48:93:c5:fd:41:b6:df:1b:09: 9e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DD:FF:18:97:64:81:2F:16:85:86:87:A5:A1:22:E9:1C:84:E7:3B X509v3 Authority Key Identifier: keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9c:49:83:c7:bf:23:12:19:8a:e6:dd:80:5b:78:af:1e:70: ab:86:5c:6c:7f:bf:42:15:33:ac:38:17:6b:f4:9d:d8:f9:ce: 23:73:b7:aa:9c:f2:06:fa:74:61:a3:60:8b:53:82:6c:bd:f9: 14:f9:af:9f:f2:e2:67:a8:9e:2c:36:19:bf:cb:39:04:9c:ff: 53:cc:52:83:84:9c:23:a9:5c:1b:a3:01:74:6f:f5:94:63:e2: dd:7d:56:c2:21:c1:14:78:95:71:b2:bb:cf:f9:05:c6:7d:51: 3c:ab:c9:43:09:d8:78:76:8f:aa:5b:6d:5b:43:8c:6c:28:30: d6:0a:d6:78:88:dd:d3:98:11:a7:0d:b9:49:ec:c6:c6:da:32: e2:a9:fc:be:97:af:40:53:68:3e:dd:22:74:7e:22:4b:8f:ab: 7a:61:9b:0f:57:21:15:ed:4b:6a:b7:88:e0:c2:d9:dc:aa:0b: 3f:81:90:cb:e5:c6:8e:60:cd:a6:48:62:ec:b3:77:47:c9:eb: 29:b0:43:b1:bb:eb:3a:56:78:16:f3:ff:1a:b9:fc:48:11:59: f9:18:6a:55:40:26:f7:06:31:ac:92:a0:fa:65:e4:c3:0a:55: 19:b1:95:4e:69:dc:89:31:89:c7:2b:17:6e:44:2c:e8:be:15: b3:fd:0a:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/Ec7trH/50rPuSBrzG6xdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh ZDJmMDkwHhcNMjUxMjIxMDQwMTMwWhcNMjUxMjIyMDQwMTMwWjAzMTEwLwYDVQQD EyhiOGRkZmYxODk3NjQ4MTJmMTY4NTg2ODdhNWExMjJlOTFjODRlNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3QYsxdtI2f5uOt1l8mT+9qz1fKO nzUjZoOIaQivV/YrkIKLlOlt+8+1EUXPyCS1GjZuP3NHqG03YtwypfjQvlYp+V9M KHwTP6MiwUd/Ur6XSgcK68gJNqc8i/wW3sgHkOkFkvFgq258biR5WptjKaS9vrkb m1pC/cevfIDrz/T6P2z5tYQB+22BZ9TprK/xC9shu81EpLzmUN2LkePbehQ3pIo/ RXZy9D1wksZykSP+QFoBQDTTg4f19sfAixdrk+dNiuwSJ9vQkgA6XrbsYSRXDmWh FEWwH5ryTSaTOCy/rcvdNE9b64+sNAEoT/0QbCLkcH5Ik8X9QbbfGwmeqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjd/xiXZIEvFoWGh6WhIukchOc7MB8GA1UdIwQY MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt MDZhNDk5NjhjMmQzLzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5xJg8e/ IxIZiubdgFt4rx5wq4ZcbH+/QhUzrDgXa/Sd2PnOI3O3qpzyBvp0YaNgi1OCbL35 FPmvn/LiZ6ieLDYZv8s5BJz/U8xSg4ScI6lcG6MBdG/1lGPi3X1WwiHBFHiVcbK7 z/kFxn1RPKvJQwnYeHaPqlttW0OMbCgw1grWeIjd05gRpw25SezGxtoy4qn8vpev QFNoPt0idH4iS4+remGbD1chFe1LareI4MLZ3KoLP4GQy+XGjmDNpkhi7LN3R8nr KbBDsbvrOlZ4FvP/Grn8SBFZ+RhqVUAm9wYxrJKg+mXkwwpVGbGVTmnciTGJxysX bkQs6L4Vs/0K7g== -----END CERTIFICATE-----Generated at Sun Dec 21 07:18:56 2025 by rpki-client