This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft File: hqnzrkX3AVCvF-uHiel4iQKe5dM.mft (raw, json) Hash identifier: 3nAdaLjcnxs0g6bTZxy6GMQ9Hx9J4xPjPHRJIzyKXb8= Subject key identifier: 21:37:D5:57:15:D0:3C:25:3B:4A:80:B3:FB:E8:F8:93:0F:A8:5B:F1 Authority key identifier: 86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3 Certificate issuer: /CN=86a9f3ae45f70150af17eb8789e97889029ee5d3 Certificate serial: 019B503BF2D7F0A2D765A6DE659696656492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 12:01:04 +0000 Manifest this update: Wed 24 Dec 2025 12:01:04 +0000 Manifest next update: Thu 25 Dec 2025 12:01:04 +0000 Files and hashes: 1: 6b_z1nYhros0lFsJJ-v5kZEUQbE.roa (hash: lcqP5Znx2EuUXx9SjdDPzhxT49PtsEmnOX0/yWwCL10=) 2: hqnzrkX3AVCvF-uHiel4iQKe5dM.crl (hash: g+Fw+t//R5nnYgMNrkfhS+bkM8IYpoFvf+fhH5vOG8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3b:f2:d7:f0:a2:d7:65:a6:de:65:96:96:65:64:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86a9f3ae45f70150af17eb8789e97889029ee5d3 Validity Not Before: Dec 24 12:01:04 2025 GMT Not After : Dec 25 12:01:04 2025 GMT Subject: CN=2137d55715d03c253b4a80b3fbe8f8930fa85bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:31:87:11:31:dc:53:fd:88:50:50:0f:ff:82: 58:39:f8:9a:ba:d3:9d:93:a2:ca:87:39:d8:ee:30: 89:51:28:88:fa:63:cc:2a:e8:e9:74:b5:38:37:05: 11:ea:63:10:4d:5e:51:6a:63:82:3a:51:5c:c2:72: 93:a6:42:74:3f:2c:ba:a3:b2:c1:69:c5:df:a2:d7: af:54:ae:2a:09:73:92:2e:6d:46:4f:2f:b7:90:97: 54:23:2b:97:e0:21:be:05:d8:b1:ea:cb:c2:99:9d: 09:8a:2c:9c:57:bf:3f:78:e1:eb:2c:28:7a:a3:84: 92:1c:60:64:01:b5:d7:0f:e1:2e:26:40:6b:18:7f: dd:73:f0:14:d6:24:9a:cf:c4:5c:2f:4b:b5:9b:ca: f7:e3:ec:7c:61:03:fa:ec:f9:7d:46:3b:c1:1e:b0: 37:3d:1d:b4:16:ca:f2:00:15:8b:ec:62:83:2d:46: a8:63:91:d5:e2:e2:01:4a:5a:a4:c0:75:b4:ec:36: 28:51:47:99:c5:d4:39:a9:8c:b5:9a:72:06:c8:54: f5:9e:97:c7:05:9e:36:03:ac:ff:c8:f3:71:a0:ee: 76:6b:3f:98:e1:ae:be:79:09:7c:d4:fe:a9:13:62: 88:ea:a7:95:f1:ae:15:4a:12:b6:9d:f0:72:3c:ca: b5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:37:D5:57:15:D0:3C:25:3B:4A:80:B3:FB:E8:F8:93:0F:A8:5B:F1 X509v3 Authority Key Identifier: keyid:86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:3a:a8:3b:1b:50:71:23:42:5a:9c:76:ab:83:e5:c1:74:b9: ed:e8:4e:cf:94:67:a7:c7:17:91:3e:fc:a0:24:e7:9a:6e:18: bc:73:f2:a5:42:0a:92:d5:f2:68:1f:0e:9d:f4:dd:5d:f8:35: 96:d7:4d:c5:8b:db:61:a6:e6:d6:dd:5c:8d:9c:c4:1a:98:17: 12:f1:aa:7a:a6:db:44:0f:ff:87:a1:44:10:3f:18:9e:09:76: 1c:19:a3:86:94:e7:d6:6a:f9:6f:b8:a6:56:67:0a:01:74:ea: 75:76:4a:b2:ae:90:58:ad:87:87:72:43:4d:d5:44:82:7a:c1: e6:ad:a9:ac:a1:0d:8b:77:cc:96:cf:9b:b5:df:4c:11:51:7f: 43:02:da:3f:f8:2a:64:ca:c0:18:c0:b2:47:27:3c:d8:a9:fa: cc:1d:c3:17:d3:6e:f1:d8:6f:a6:c8:f2:39:1d:31:60:06:21: cc:d2:a3:cd:b3:7e:3e:bc:a4:00:31:76:88:ea:0d:40:2a:d5: 71:f3:52:3b:c7:61:89:35:2a:a3:8f:65:b3:99:b8:13:14:7f: 7e:36:34:74:5b:a8:f6:b2:55:08:00:62:38:8e:1c:0c:b4:fc: 8c:6d:5b:06:0b:d0:fa:be:a4:ca:8a:1a:3e:39:73:2f:09:ff: c6:c7:a6:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQO/LX8KLXZabeZZaWZWSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YTlmM2FlNDVmNzAxNTBhZjE3ZWI4Nzg5ZTk3ODg5MDI5 ZWU1ZDMwHhcNMjUxMjI0MTIwMTA0WhcNMjUxMjI1MTIwMTA0WjAzMTEwLwYDVQQD EygyMTM3ZDU1NzE1ZDAzYzI1M2I0YTgwYjNmYmU4Zjg5MzBmYTg1YmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DGHETHcU/2IUFAP/4JYOfiautOd k6LKhznY7jCJUSiI+mPMKujpdLU4NwUR6mMQTV5RamOCOlFcwnKTpkJ0Pyy6o7LB acXfotevVK4qCXOSLm1GTy+3kJdUIyuX4CG+Bdix6svCmZ0JiiycV78/eOHrLCh6 o4SSHGBkAbXXD+EuJkBrGH/dc/AU1iSaz8RcL0u1m8r34+x8YQP67Pl9RjvBHrA3 PR20FsryABWL7GKDLUaoY5HV4uIBSlqkwHW07DYoUUeZxdQ5qYy1mnIGyFT1npfH BZ42A6z/yPNxoO52az+Y4a6+eQl81P6pE2KI6qeV8a4VShK2nfByPMq14wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCE31VcV0DwlO0qAs/vo+JMPqFvxMB8GA1UdIwQY MBaAFIap865F9wFQrxfrh4npeIkCnuXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHFuenJrWDNBVkN2Ri11SGllbDRpUUtlNWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMzEyNzQtNzMzNC00NDZiLWE5MzUt MzQ4N2FlODJiMjBkLzEvaHFuenJrWDNBVkN2Ri11SGllbDRpUUtlNWRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xMzEyNzQtNzMzNC00NDZiLWE5MzUtMzQ4N2FlODJiMjBk LzEvaHFuenJrWDNBVkN2Ri11SGllbDRpUUtlNWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTqoOxtQ cSNCWpx2q4PlwXS57ehOz5Rnp8cXkT78oCTnmm4YvHPypUIKktXyaB8OnfTdXfg1 ltdNxYvbYabm1t1cjZzEGpgXEvGqeqbbRA//h6FEED8Yngl2HBmjhpTn1mr5b7im VmcKAXTqdXZKsq6QWK2Hh3JDTdVEgnrB5q2prKENi3fMls+btd9MEVF/QwLaP/gq ZMrAGMCyRyc82Kn6zB3DF9Nu8dhvpsjyOR0xYAYhzNKjzbN+PrykADF2iOoNQCrV cfNSO8dhiTUqo49ls5m4ExR/fjY0dFuo9rJVCABiOI4cDLT8jG1bBgvQ+r6kyooa PjlzLwn/xsemsg== -----END CERTIFICATE-----Generated at Wed Dec 24 13:40:06 2025 by rpki-client