This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft File: Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json) Hash identifier: 1O1ih4orRl+LcrvteypwDnCqFYvCh0QbvxZL2eecObk= Subject key identifier: 63:6F:84:04:C3:31:6C:B3:59:3B:55:4B:D0:9B:C8:A3:FE:04:47:57 Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C Certificate issuer: /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c Certificate serial: 019B55D040213D6F28E73F2B29C25C8DC715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft Manifest number: 10D9 Signing time: Thu 25 Dec 2025 14:01:09 +0000 Manifest this update: Thu 25 Dec 2025 14:01:09 +0000 Manifest next update: Fri 26 Dec 2025 14:01:09 +0000 Files and hashes: 1: AMpnzyhYQ7V0ivkPgxFinozh8t8.roa (hash: 8o30akyQRir0f8xUZavCnmMHTgJGbLRFq1/OxwOyPiY=) 2: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: lfbkpn3gme5aAtsx8Pt6J9zZmJ9jNtqhLs9to+ienkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:d0:40:21:3d:6f:28:e7:3f:2b:29:c2:5c:8d:c7:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c Validity Not Before: Dec 25 14:01:09 2025 GMT Not After : Dec 26 14:01:09 2025 GMT Subject: CN=636f8404c3316cb3593b554bd09bc8a3fe044757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:0e:da:a9:bf:d5:19:1e:28:22:96:a8:1e: fd:9a:07:15:9d:b8:27:84:71:3f:71:b0:02:75:2f: 51:d1:e4:7b:24:a6:d9:bf:40:f7:de:18:77:98:3e: 91:75:17:63:65:cf:42:5a:f5:35:39:f3:4e:5c:c5: d5:c0:ad:b8:62:21:0a:a8:df:96:03:a1:1c:3c:b4: 9e:27:76:45:0c:60:54:85:df:0d:8e:a5:13:08:25: da:40:63:e6:05:7a:5c:83:ef:30:9d:3d:b3:c3:0a: e2:12:68:dc:d3:78:8a:bb:1b:ce:2e:95:d1:e2:6e: a8:80:b9:b7:1b:56:30:2a:0e:9b:86:99:00:e9:77: 53:50:d9:e8:b3:94:a5:e1:c5:3f:45:83:02:96:0c: a4:21:d8:eb:59:d9:e7:49:f9:82:56:06:9c:67:7f: f2:22:49:92:27:41:e8:23:ef:7c:64:82:da:63:a6: 8d:d9:53:82:23:25:93:a9:02:10:1c:ae:fd:84:42: 0d:7b:d3:5b:e8:80:85:2d:c3:d9:09:69:80:0a:51: 40:87:56:18:52:30:2b:12:bd:e5:dc:86:8f:9e:61: ca:ce:21:6d:86:4e:ce:85:9e:b2:b8:c9:b2:71:f1: 40:2a:d7:d6:ef:87:46:bd:a8:46:d4:66:20:f6:88: e8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6F:84:04:C3:31:6C:B3:59:3B:55:4B:D0:9B:C8:A3:FE:04:47:57 X509v3 Authority Key Identifier: keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a1:bf:87:c9:e1:f6:fe:c2:d4:1d:c0:5d:1a:e3:0c:eb:93: cd:72:56:a0:b1:bc:8c:35:d8:93:2e:f4:18:5a:4b:3c:ea:1c: 77:18:c4:43:b7:16:f5:c0:c3:d6:07:08:5b:97:aa:82:4a:05: 42:69:89:fb:39:a4:0d:f2:a0:78:99:40:5c:7c:c8:58:a7:2b: 6f:d5:25:4f:0d:e5:c3:c3:ad:8d:f6:65:32:03:a6:5b:40:d7: 39:a1:f4:9b:44:10:3d:1c:a7:43:17:cb:8c:a0:7b:a9:02:9b: aa:2f:fc:f8:6a:9e:58:1b:e8:36:bc:38:67:c8:78:a0:5f:25: 73:51:5d:a4:76:c8:c2:e4:6e:77:08:90:be:34:7f:1f:7e:ca: cc:b6:f9:40:c1:7e:51:0d:20:60:10:77:39:97:2d:cb:8d:de: 0b:50:2a:75:6f:b0:50:7a:66:86:44:60:0d:06:8b:48:4f:2c: c0:dc:e1:b2:24:4b:7e:3f:91:93:a7:1e:5f:6d:bf:e9:61:a2: ee:fd:b7:ab:3a:ab:d6:bf:58:6a:a0:62:db:c8:bb:dd:b2:76: 04:89:c4:3e:5b:5d:df:0d:e7:62:c0:55:5c:f4:91:6a:42:01: 5c:09:77:1c:06:44:f5:67:b9:64:b1:e1:f9:80:8e:63:7c:2d: 06:74:00:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtV0EAhPW8o5z8rKcJcjccVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTdhNmFmYjIxYmIxNDg3NDJmNjE1NWQxYTM5YWZjOGZj N2U3OWMwHhcNMjUxMjI1MTQwMTA5WhcNMjUxMjI2MTQwMTA5WjAzMTEwLwYDVQQD Eyg2MzZmODQwNGMzMzE2Y2IzNTkzYjU1NGJkMDliYzhhM2ZlMDQ0NzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgkO2qm/1RkeKCKWqB79mgcVnbgn hHE/cbACdS9R0eR7JKbZv0D33hh3mD6RdRdjZc9CWvU1OfNOXMXVwK24YiEKqN+W A6EcPLSeJ3ZFDGBUhd8NjqUTCCXaQGPmBXpcg+8wnT2zwwriEmjc03iKuxvOLpXR 4m6ogLm3G1YwKg6bhpkA6XdTUNnos5Sl4cU/RYMClgykIdjrWdnnSfmCVgacZ3/y IkmSJ0HoI+98ZILaY6aN2VOCIyWTqQIQHK79hEINe9Nb6ICFLcPZCWmAClFAh1YY UjArEr3l3IaPnmHKziFthk7OhZ6yuMmycfFAKtfW74dGvahG1GYg9ojoQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNvhATDMWyzWTtVS9CbyKP+BEdXMB8GA1UdIwQY MBaAFB6npq+yG7FIdC9hVdGjmvyPx+ecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGIt ZjM2Y2Q4NzkwYjBhLzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGItZjM2Y2Q4NzkwYjBh LzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKG/h8nh 9v7C1B3AXRrjDOuTzXJWoLG8jDXYky70GFpLPOocdxjEQ7cW9cDD1gcIW5eqgkoF QmmJ+zmkDfKgeJlAXHzIWKcrb9UlTw3lw8OtjfZlMgOmW0DXOaH0m0QQPRynQxfL jKB7qQKbqi/8+GqeWBvoNrw4Z8h4oF8lc1FdpHbIwuRudwiQvjR/H37KzLb5QMF+ UQ0gYBB3OZcty43eC1AqdW+wUHpmhkRgDQaLSE8swNzhsiRLfj+Rk6ceX22/6WGi 7v23qzqr1r9YaqBi28i73bJ2BInEPltd3w3nYsBVXPSRakIBXAl3HAZE9We5ZLHh +YCOY3wtBnQA0A== -----END CERTIFICATE-----Generated at Thu Dec 25 19:42:27 2025 by rpki-client