This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json) Hash identifier: Prbq0nGEhfNNbYEVbJmgL8vqICRFxshtSEv2PhrsGBI= Subject key identifier: 7E:A5:FC:9C:98:80:FC:F4:B8:73:6C:6A:F0:1E:BC:AB:1E:CE:85:75 Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e Certificate serial: 019B3F7F24ECDF300BC6D250D76E58F3701F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 06:00:55 +0000 Manifest this update: Sun 21 Dec 2025 06:00:55 +0000 Manifest next update: Mon 22 Dec 2025 06:00:55 +0000 Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: n/2p1FWKBCapUaQm+gzOsTr2wIZpxfPp3eXm6omSTQo=) 2: Z-7u2MA1CjZD5hYP8TfU-VSZNR8.roa (hash: /80xhWNAq5Vxx5IxhDuQbH3UW7oLWMSaFXrTwbB6FYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:24:ec:df:30:0b:c6:d2:50:d7:6e:58:f3:70:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e Validity Not Before: Dec 21 06:00:55 2025 GMT Not After : Dec 22 06:00:55 2025 GMT Subject: CN=7ea5fc9c9880fcf4b8736c6af01ebcab1ece8575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:11:65:57:f0:0f:41:3c:33:00:60:83:70: 42:49:f4:9c:ee:da:86:48:bc:de:1b:28:f4:aa:b8: 82:d9:47:4c:db:8c:ec:a4:9e:eb:35:0f:93:24:63: 78:21:10:1a:5f:4d:7d:2c:2f:bb:c4:00:53:05:be: af:d7:ec:d2:86:72:ff:86:02:df:d3:f5:63:7a:c6: 1a:5e:29:81:76:53:c4:e7:a0:57:5a:c0:0c:47:df: 30:d4:e5:10:41:38:22:61:09:cb:c6:f5:71:d7:00: 3b:62:fc:4f:80:a9:99:12:6c:fb:cc:5f:3d:e1:9a: 7f:86:27:a5:8c:96:48:be:4c:42:2d:d8:0a:9f:7f: 8f:6a:3e:3a:96:ee:45:e2:6c:11:d7:39:34:54:27: 86:06:a1:b1:bd:06:7e:ef:b3:94:63:b1:55:e6:9d: 2c:ae:5d:e1:ed:9c:e2:a5:86:3c:70:75:75:0c:22: 00:fa:63:26:69:b5:70:78:58:40:4a:92:d3:8a:ed: a2:83:2d:ce:a8:0f:9d:e1:07:51:c4:6c:d9:93:91: a3:8e:6e:49:5c:64:64:aa:45:60:b4:c7:78:79:20: 3f:cd:30:0e:bb:8f:5a:0d:d7:e7:ef:f7:19:1a:db: ef:29:67:a2:77:dc:a7:90:b8:9c:49:4c:26:ee:97: 02:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A5:FC:9C:98:80:FC:F4:B8:73:6C:6A:F0:1E:BC:AB:1E:CE:85:75 X509v3 Authority Key Identifier: keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e2:e3:a2:da:79:6f:3a:c3:b7:27:a5:6a:53:e6:1b:0b:f8: d8:c9:a4:0a:3d:50:e2:40:ea:04:82:bf:74:cb:4d:eb:c0:ce: 5e:40:9b:e0:9a:0f:a1:35:3e:21:71:00:4c:8b:8c:d4:21:b5: 6f:cf:74:1b:5b:d4:38:fd:cc:01:1c:c3:e8:7f:56:79:95:51: 3c:1b:fc:5f:23:20:f1:cf:29:39:ab:06:f4:aa:17:44:38:e3: b4:f7:eb:d1:0f:83:28:89:99:9f:42:7b:1a:94:8a:1a:2c:65: e2:07:47:42:fd:9a:89:89:02:fc:a1:01:34:02:f9:e7:41:ce: 6d:29:84:f1:21:a6:54:4b:01:11:db:86:98:d9:8a:c9:b3:55: 28:20:86:0b:03:9a:bf:8e:3a:01:11:df:c2:b9:10:db:92:8d: c4:58:7b:2f:f7:02:43:42:a0:c3:d1:e6:24:dc:79:66:70:21: 36:c2:eb:d7:58:ee:1f:3e:a9:4c:e2:7d:78:61:24:97:9a:61: b2:ea:ff:21:2f:37:7c:84:d9:67:ea:f9:92:85:8c:24:7d:c6: ca:cb:ca:bb:fb:f6:e3:be:8f:36:ca:66:fe:53:6f:04:c1:b0: fb:84:6c:e6:9c:ac:48:2e:c8:dc:68:64:64:fd:d7:65:04:0f: aa:6c:d2:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fyTs3zALxtJQ125Y83AfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZDVjZDJhMDI2MWUxZTYwNjlkZDc3NTg5NGQ4MjZlZTg4 MzZjMWUwHhcNMjUxMjIxMDYwMDU1WhcNMjUxMjIyMDYwMDU1WjAzMTEwLwYDVQQD Eyg3ZWE1ZmM5Yzk4ODBmY2Y0Yjg3MzZjNmFmMDFlYmNhYjFlY2U4NTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu70RZVfwD0E8MwBgg3BCSfSc7tqG SLzeGyj0qriC2UdM24zspJ7rNQ+TJGN4IRAaX019LC+7xABTBb6v1+zShnL/hgLf 0/VjesYaXimBdlPE56BXWsAMR98w1OUQQTgiYQnLxvVx1wA7YvxPgKmZEmz7zF89 4Zp/hieljJZIvkxCLdgKn3+Paj46lu5F4mwR1zk0VCeGBqGxvQZ+77OUY7FV5p0s rl3h7ZzipYY8cHV1DCIA+mMmabVweFhASpLTiu2igy3OqA+d4QdRxGzZk5Gjjm5J XGRkqkVgtMd4eSA/zTAOu49aDdfn7/cZGtvvKWeid9ynkLicSUwm7pcCEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6l/JyYgPz0uHNsavAevKsezoV1MB8GA1UdIwQY MBaAFB3VzSoCYeHmBp3XdYlNgm7og2weMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYt ZDg2Y2FkZDYxMGI4LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYtZDg2Y2FkZDYxMGI4 LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeLjotp5 bzrDtyelalPmGwv42MmkCj1Q4kDqBIK/dMtN68DOXkCb4JoPoTU+IXEATIuM1CG1 b890G1vUOP3MARzD6H9WeZVRPBv8XyMg8c8pOasG9KoXRDjjtPfr0Q+DKImZn0J7 GpSKGixl4gdHQv2aiYkC/KEBNAL550HObSmE8SGmVEsBEduGmNmKybNVKCCGCwOa v446ARHfwrkQ25KNxFh7L/cCQ0Kgw9HmJNx5ZnAhNsLr11juHz6pTOJ9eGEkl5ph sur/IS83fITZZ+r5koWMJH3GysvKu/v2476PNspm/lNvBMGw+4Rs5pysSC7I3Ghk ZP3XZQQPqmzSGw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:34:09 2025 by rpki-client