This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft File: HgUGRdac54HkkMDzxJle5tTmB4s.mft (raw, json) Hash identifier: sOBhAHuCfyaT4dwR2JdY/X1IH30CRMA+eyqc1Iqw+c8= Subject key identifier: 70:33:57:60:E7:71:5F:D5:C3:18:84:3E:EA:4E:6F:32:3C:A3:29:29 Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b Certificate serial: 019B5DC0BB34AF8610378E13245378467587 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft Manifest number: 0973 Signing time: Sat 27 Dec 2025 03:01:10 +0000 Manifest this update: Sat 27 Dec 2025 03:01:10 +0000 Manifest next update: Sun 28 Dec 2025 03:01:10 +0000 Files and hashes: 1: Cng8TcnIXSMG5gaf3EVbnwwbQjk.roa (hash: SlPAu0/v+q9AU8NTLPmY4PB0nlmzfGz86P4I7oW5+Ns=) 2: HgUGRdac54HkkMDzxJle5tTmB4s.crl (hash: 962+8IwhANahH3VIeQ9e6ZMXXRZlrWVBlQoXfuXPIGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:bb:34:af:86:10:37:8e:13:24:53:78:46:75:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b Validity Not Before: Dec 27 03:01:10 2025 GMT Not After : Dec 28 03:01:10 2025 GMT Subject: CN=70335760e7715fd5c318843eea4e6f323ca32929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:b0:97:93:ad:51:d6:dc:55:82:af:a6:50: f4:e4:6a:38:8f:00:1e:0c:bb:b7:e9:c4:a2:05:39: dc:aa:74:5d:f8:2d:37:e3:c9:15:43:02:09:f9:05: 02:b9:9e:49:0b:0b:5b:09:d2:1d:8a:c5:08:d2:cc: 18:5d:4d:27:c9:f5:2c:a5:f1:fb:01:d5:ff:2c:f4: 8f:7a:71:6d:28:36:35:87:bf:0d:eb:5e:d8:aa:5c: f4:7a:44:f4:1a:b8:f6:e6:d1:c0:15:32:d1:7d:ba: c3:e6:54:6b:17:51:ec:32:af:e5:0f:43:23:10:4e: d0:b6:25:d5:65:4f:5c:11:f0:64:41:04:79:26:86: 3c:68:d1:5f:8a:3b:4d:4a:ff:f4:a3:2d:0e:87:09: bd:96:e8:eb:45:0f:9d:c9:78:00:36:2f:db:d0:87: 14:df:c1:79:de:79:71:c1:cc:8c:48:50:df:66:22: d8:9c:12:bf:29:9a:e3:f1:a5:cd:b3:0b:31:7a:8e: dd:df:af:05:60:65:d3:2a:94:0d:69:9f:6a:bb:43: a7:a7:cd:ec:c6:e6:30:bb:8a:9a:b5:bc:9b:4e:9e: 96:d8:ec:ab:ba:59:0c:99:2a:b1:dd:9e:bf:39:29: 23:d2:03:5a:72:91:8e:6a:b4:fd:59:fd:18:6f:bf: 39:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:33:57:60:E7:71:5F:D5:C3:18:84:3E:EA:4E:6F:32:3C:A3:29:29 X509v3 Authority Key Identifier: keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:6f:b1:72:d8:28:f5:4a:b1:b9:c5:1b:94:5c:0e:c3:89:fd: cf:70:50:58:07:d9:b8:d6:ae:db:85:64:79:26:cd:22:ac:34: 65:71:bd:78:e1:83:20:8f:7d:2e:dc:ee:33:4f:24:bb:18:2e: 52:f1:0f:a1:6b:11:5f:96:fd:ef:6d:51:26:ed:77:8b:4c:76: 0e:99:b0:f4:a2:11:8e:5b:3d:5b:3b:f1:bd:ff:a3:72:cb:d8: 55:ce:88:bc:22:78:ac:89:30:c2:cd:a7:0f:6b:da:bd:ad:1d: a0:aa:4b:6f:5d:29:cd:51:6d:c0:67:ce:2e:15:9e:d5:ce:8e: d4:78:ec:50:55:cf:44:53:d2:18:aa:8e:44:7e:b5:79:aa:54: f7:f4:ea:4b:fd:f8:3f:58:14:b4:af:7d:da:84:be:e1:ad:06: 51:06:e0:09:6f:93:66:1a:c0:0b:43:7d:6e:1e:50:2d:70:f8: 3e:38:b0:09:a0:21:d9:17:29:33:32:9f:6d:32:70:5c:46:42: bb:11:67:28:09:92:fa:16:e4:52:22:7a:6c:03:cd:39:fd:06: c0:ad:72:fd:7b:d5:a8:eb:e7:0d:3d:26:58:93:42:ff:76:78: a1:e5:c3:e9:27:0a:91:a3:de:40:13:e3:80:30:ad:e8:75:61: 93:a4:6e:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwLs0r4YQN44TJFN4RnWHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMDUwNjQ1ZDY5Y2U3ODFlNDkwYzBmM2M0OTk1ZWU2ZDRl NjA3OGIwHhcNMjUxMjI3MDMwMTEwWhcNMjUxMjI4MDMwMTEwWjAzMTEwLwYDVQQD Eyg3MDMzNTc2MGU3NzE1ZmQ1YzMxODg0M2VlYTRlNmYzMjNjYTMyOTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfywl5OtUdbcVYKvplD05Go4jwAe DLu36cSiBTncqnRd+C0348kVQwIJ+QUCuZ5JCwtbCdIdisUI0swYXU0nyfUspfH7 AdX/LPSPenFtKDY1h78N617Yqlz0ekT0Grj25tHAFTLRfbrD5lRrF1HsMq/lD0Mj EE7QtiXVZU9cEfBkQQR5JoY8aNFfijtNSv/0oy0Ohwm9lujrRQ+dyXgANi/b0IcU 38F53nlxwcyMSFDfZiLYnBK/KZrj8aXNswsxeo7d368FYGXTKpQNaZ9qu0Onp83s xuYwu4qatbybTp6W2OyrulkMmSqx3Z6/OSkj0gNacpGOarT9Wf0Yb7852wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAzV2DncV/VwxiEPupObzI8oykpMB8GA1UdIwQY MBaAFB4FBkXWnOeB5JDA88SZXubU5geLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGdVR1JkYWM1NEhra01EenhKbGU1dFRtQjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jYjNhZjAtMDU2ZC00Mjc3LWE2ZGEt MjI3YTg2YzQ3MmNlLzEvSGdVR1JkYWM1NEhra01EenhKbGU1dFRtQjRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9jYjNhZjAtMDU2ZC00Mjc3LWE2ZGEtMjI3YTg2YzQ3MmNl LzEvSGdVR1JkYWM1NEhra01EenhKbGU1dFRtQjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgm+xctgo 9UqxucUblFwOw4n9z3BQWAfZuNau24VkeSbNIqw0ZXG9eOGDII99LtzuM08kuxgu UvEPoWsRX5b9721RJu13i0x2Dpmw9KIRjls9Wzvxvf+jcsvYVc6IvCJ4rIkwws2n D2vava0doKpLb10pzVFtwGfOLhWe1c6O1HjsUFXPRFPSGKqORH61eapU9/TqS/34 P1gUtK992oS+4a0GUQbgCW+TZhrAC0N9bh5QLXD4PjiwCaAh2RcpMzKfbTJwXEZC uxFnKAmS+hbkUiJ6bAPNOf0GwK1y/XvVqOvnDT0mWJNC/3Z4oeXD6ScKkaPeQBPj gDCt6HVhk6Ruyg== -----END CERTIFICATE-----Generated at Sat Dec 27 08:10:43 2025 by rpki-client