This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft File: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft (raw, json) Hash identifier: v82B2ZRVs18ChxFAPGRdNxAHHM5Il2Jc8vrKGIXqXHw= Subject key identifier: E7:EC:52:23:23:03:C9:6C:CE:42:D8:A7:33:27:95:16:97:59:C9:30 Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76 Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376 Certificate serial: 019B341FF526FA49BF1637902A4F3638EA35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft Manifest number: 1057 Signing time: Fri 19 Dec 2025 01:01:08 +0000 Manifest this update: Fri 19 Dec 2025 01:01:08 +0000 Manifest next update: Sat 20 Dec 2025 01:01:08 +0000 Files and hashes: 1: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl (hash: xSkMMNvE4Is1sz1L1FC6Blo1EbHDUlZlG2ZGIoMKk0g=) 2: zzXnyaTo4BATrc17RusBD7eE0wM.roa (hash: 6905vDk9E6YCZ2ECcGKQ29E/7xlB0Pspqzs3gX2rnWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:f5:26:fa:49:bf:16:37:90:2a:4f:36:38:ea:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376 Validity Not Before: Dec 19 01:01:08 2025 GMT Not After : Dec 20 01:01:08 2025 GMT Subject: CN=e7ec52232303c96cce42d8a7332795169759c930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ca:8d:1c:17:e1:ad:90:88:54:5d:c5:41:aa: ab:05:3e:11:50:aa:13:65:d7:28:9b:ed:3c:50:21: 6f:11:a9:bb:1a:dd:2b:4b:8b:62:b1:c2:f2:4a:3e: a5:7d:ab:d2:39:48:68:a0:f5:3f:e6:c6:fc:b7:ad: f3:65:89:3e:4c:29:14:1d:69:70:10:f9:59:33:1a: ef:72:a8:36:15:aa:a9:9f:21:99:4f:c0:26:a0:a3: be:68:26:5e:34:3a:2f:95:91:db:f8:e5:01:02:3c: 5f:cb:63:26:39:e8:3d:66:b3:87:0d:3a:b7:da:b1: f5:3a:b9:97:35:76:c0:52:83:be:86:2a:67:a9:e4: d3:ea:80:a1:db:ca:06:17:48:fd:38:d6:60:94:d5: 49:70:c9:a4:4e:f8:c6:3f:7a:43:39:94:9c:5c:15: c7:8d:93:03:2d:a0:09:30:92:27:96:77:df:87:90: 53:85:48:86:aa:c5:10:a2:43:9d:01:b7:6e:40:94: b0:c9:a9:b6:7e:f9:30:a4:a9:3c:0a:a4:b1:36:28: df:0b:b4:03:c6:66:f9:72:93:96:ba:61:bc:2d:cd: e8:e0:24:22:c5:5e:63:5f:1d:13:60:67:03:52:0a: 44:9c:91:0e:28:53:0d:a8:48:ac:f3:7a:0a:09:97: 8c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EC:52:23:23:03:C9:6C:CE:42:D8:A7:33:27:95:16:97:59:C9:30 X509v3 Authority Key Identifier: keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:73:e4:b0:71:7d:91:ce:98:79:b7:3b:53:41:3a:a0:9b:98: d8:d7:0d:5f:0f:5b:d8:bb:ab:87:6b:2c:c4:c2:0a:ab:92:23: fe:af:97:82:aa:99:44:ad:a4:b4:53:8f:a2:7e:7e:2b:2d:5f: e9:08:f0:eb:59:e4:0e:08:a3:f6:89:9d:97:5b:a2:80:a0:69: 28:61:5c:62:51:11:49:63:b9:71:7c:f0:f9:9e:5c:5a:22:af: f0:6c:57:82:e0:26:69:66:0d:48:c2:f6:a9:c1:41:bc:52:e5: e9:e6:d6:2a:6b:5f:76:17:1a:40:0a:1b:a3:93:22:af:a7:b7: e6:46:c7:a8:f9:5e:75:43:44:a3:60:c9:46:68:21:02:cc:44: 64:46:4a:2b:71:7b:59:ab:56:c5:d0:e0:14:7b:1c:43:06:71: 95:b5:ea:47:9d:e6:d3:4b:4f:67:c2:75:a3:35:16:d1:9a:3b: 35:50:82:26:62:53:1a:23:b9:e3:6c:8e:80:08:23:1d:02:69: 72:a2:ad:08:44:9c:fc:16:8c:98:b1:4f:33:c1:6f:c5:06:ea: 6f:63:57:28:98:14:0f:9d:82:fe:fa:98:c3:ea:79:8e:90:32: 96:7d:cc:76:16:79:7b:5b:d5:11:82:50:e6:12:09:07:6c:f5: b0:04:15:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H/Um+km/FjeQKk82OOo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MDBhYWYxM2Q0ZGU5Yzk1YjYzNzU5YWQxODYzNmFiYzhl MjYzNzYwHhcNMjUxMjE5MDEwMTA4WhcNMjUxMjIwMDEwMTA4WjAzMTEwLwYDVQQD EyhlN2VjNTIyMzIzMDNjOTZjY2U0MmQ4YTczMzI3OTUxNjk3NTljOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8qNHBfhrZCIVF3FQaqrBT4RUKoT Zdcom+08UCFvEam7Gt0rS4tiscLySj6lfavSOUhooPU/5sb8t63zZYk+TCkUHWlw EPlZMxrvcqg2FaqpnyGZT8AmoKO+aCZeNDovlZHb+OUBAjxfy2MmOeg9ZrOHDTq3 2rH1OrmXNXbAUoO+hipnqeTT6oCh28oGF0j9ONZglNVJcMmkTvjGP3pDOZScXBXH jZMDLaAJMJInlnffh5BThUiGqsUQokOdAbduQJSwyam2fvkwpKk8CqSxNijfC7QD xmb5cpOWumG8Lc3o4CQixV5jXx0TYGcDUgpEnJEOKFMNqEis83oKCZeMAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfsUiMjA8lszkLYpzMnlRaXWckwMB8GA1UdIwQY MBaAFIYAqvE9TenJW2N1mtGGNqvI4mN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iN2QyMGUtMzNiYy00YjIzLWExOTgt MjI0NGZkNjE4NWQzLzEvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iN2QyMGUtMzNiYy00YjIzLWExOTgtMjI0NGZkNjE4NWQz LzEvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHPksHF9 kc6Yebc7U0E6oJuY2NcNXw9b2Lurh2ssxMIKq5Ij/q+XgqqZRK2ktFOPon5+Ky1f 6Qjw61nkDgij9omdl1uigKBpKGFcYlERSWO5cXzw+Z5cWiKv8GxXguAmaWYNSML2 qcFBvFLl6ebWKmtfdhcaQAobo5Mir6e35kbHqPledUNEo2DJRmghAsxEZEZKK3F7 WatWxdDgFHscQwZxlbXqR53m00tPZ8J1ozUW0Zo7NVCCJmJTGiO542yOgAgjHQJp cqKtCESc/BaMmLFPM8FvxQbqb2NXKJgUD52C/vqYw+p5jpAyln3MdhZ5e1vVEYJQ 5hIJB2z1sAQVWw== -----END CERTIFICATE-----Generated at Fri Dec 19 02:33:12 2025 by rpki-client