This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft File: HCiwfBV6XcYTySZNr4nnyGDjPmM.mft (raw, json) Hash identifier: 7/kxfTjt/4y+BN4I9/lfliQKZRMRPziKAJwqRuozQN0= Subject key identifier: DE:BB:63:0B:E4:CB:31:79:2F:4F:AA:B7:3B:F9:25:47:79:A9:54:1A Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63 Certificate issuer: /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63 Certificate serial: 019B44381957AE6F708C451E44BC12368F11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft Manifest number: 1798 Signing time: Mon 22 Dec 2025 04:01:25 +0000 Manifest this update: Mon 22 Dec 2025 04:01:25 +0000 Manifest next update: Tue 23 Dec 2025 04:01:25 +0000 Files and hashes: 1: HCiwfBV6XcYTySZNr4nnyGDjPmM.crl (hash: R4XoS0TaR7KqfmMh4CR8Tl2cLfFqq4lo08zIE6ztelY=) 2: f0vhGxR72MG9W3aRCoI9VCH2wQA.roa (hash: PDzMyuMmfdbsbyADvkBIQZLummxADm7ztnq8hanW6ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:19:57:ae:6f:70:8c:45:1e:44:bc:12:36:8f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63 Validity Not Before: Dec 22 04:01:25 2025 GMT Not After : Dec 23 04:01:25 2025 GMT Subject: CN=debb630be4cb31792f4faab73bf9254779a9541a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f4:44:5f:54:b6:71:74:db:e9:68:a4:09:94: f3:7f:63:8a:f3:85:4c:48:f1:39:67:5a:2f:dc:bc: ef:7e:61:ec:5c:05:15:4d:55:3d:e9:6f:34:8e:71: 4a:68:17:e3:26:45:18:99:4c:a1:c6:a9:6d:4b:a9: f1:49:4f:2d:f9:44:69:4a:4c:3a:30:e3:98:c9:28: 2c:03:bc:23:a5:f6:ff:c7:0b:99:62:6f:dd:aa:5e: 8d:42:9a:8f:6b:7b:ed:5a:c7:cc:a8:9e:8a:b6:19: 0e:04:0e:4d:e8:f9:25:1b:30:12:58:2a:08:a4:46: d0:a4:ad:46:62:50:63:1c:4f:10:0b:31:01:32:d1: c9:4c:a0:80:79:94:bd:6f:93:06:15:09:f3:2b:18: 1e:3b:dd:88:29:2f:31:77:1a:17:f2:24:74:d1:31: 21:d6:4e:72:94:4b:78:9c:76:0d:bc:f2:72:29:fa: 47:87:63:c4:78:94:0b:0d:22:bb:f0:f0:b4:b4:ad: c3:9b:c4:a7:1b:ea:96:6a:87:9b:21:1b:e8:27:70: 0f:a4:3e:62:a6:75:f3:07:bb:c3:13:bf:13:99:80: 95:a4:3a:d7:5d:db:9c:ca:9e:e1:10:03:d4:ed:12: c4:92:e5:42:4e:31:28:cd:3e:d7:15:3a:33:7b:63: 42:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BB:63:0B:E4:CB:31:79:2F:4F:AA:B7:3B:F9:25:47:79:A9:54:1A X509v3 Authority Key Identifier: keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:d3:3d:a9:88:06:88:3a:ca:50:76:22:3e:d3:d9:2f:e1:95: f9:4b:ec:52:14:da:d1:b1:b1:fa:bc:be:e5:f9:a0:7c:ab:91: 53:c2:30:db:35:4e:55:ae:a4:aa:49:07:53:7c:e0:65:89:75: 10:b7:38:7e:93:2a:f8:68:b3:17:d3:25:df:ba:b4:95:b3:15: 7f:cb:aa:5d:e2:5f:3c:e6:45:1d:03:50:26:29:14:15:a8:eb: 04:41:da:da:6a:80:01:46:b6:84:a5:eb:f3:cf:2b:ee:8b:1e: 7a:d9:1b:54:45:6b:58:41:92:8f:5d:47:e0:cd:e3:fe:67:97: e9:59:86:3c:63:8d:d9:25:f7:f3:29:b9:5b:58:d2:df:02:4e: c7:11:c8:45:46:c9:c2:de:74:39:b7:b0:eb:a9:3b:be:01:f1: d6:49:2f:3a:bd:cb:d4:21:92:53:15:5e:fe:06:d2:c2:d5:e3: a4:bc:20:d9:62:c9:26:2e:39:82:a8:53:10:9d:87:de:a4:0b: 5d:8f:a6:8e:81:d7:75:98:29:4c:d4:f9:77:c6:5d:e7:d9:98: d5:93:29:7d:cc:32:8a:3f:76:6b:8f:b7:50:49:d0:96:2c:ab: 54:ad:df:79:3c:25:96:8a:ca:6d:14:96:29:42:55:65:95:5e: 12:ec:20:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOBlXrm9wjEUeRLwSNo8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjhiMDdjMTU3YTVkYzYxM2M5MjY0ZGFmODllN2M4NjBl MzNlNjMwHhcNMjUxMjIyMDQwMTI1WhcNMjUxMjIzMDQwMTI1WjAzMTEwLwYDVQQD EyhkZWJiNjMwYmU0Y2IzMTc5MmY0ZmFhYjczYmY5MjU0Nzc5YTk1NDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/REX1S2cXTb6WikCZTzf2OK84VM SPE5Z1ov3LzvfmHsXAUVTVU96W80jnFKaBfjJkUYmUyhxqltS6nxSU8t+URpSkw6 MOOYySgsA7wjpfb/xwuZYm/dql6NQpqPa3vtWsfMqJ6KthkOBA5N6PklGzASWCoI pEbQpK1GYlBjHE8QCzEBMtHJTKCAeZS9b5MGFQnzKxgeO92IKS8xdxoX8iR00TEh 1k5ylEt4nHYNvPJyKfpHh2PEeJQLDSK78PC0tK3Dm8SnG+qWaoebIRvoJ3APpD5i pnXzB7vDE78TmYCVpDrXXducyp7hEAPU7RLEkuVCTjEozT7XFToze2NCRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN67YwvkyzF5L0+qtzv5JUd5qVQaMB8GA1UdIwQY MBaAFBwosHwVel3GE8kmTa+J58hg4z5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENpd2ZCVjZYY1lUeVNaTnI0bm55R0RqUG1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZTdkZmMtMTI2NC00Yzk0LTliY2Mt OTYzMzM0ODllODU1LzEvSENpd2ZCVjZYY1lUeVNaTnI0bm55R0RqUG1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZTdkZmMtMTI2NC00Yzk0LTliY2MtOTYzMzM0ODllODU1 LzEvSENpd2ZCVjZYY1lUeVNaTnI0bm55R0RqUG1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2tM9qYgG iDrKUHYiPtPZL+GV+UvsUhTa0bGx+ry+5fmgfKuRU8Iw2zVOVa6kqkkHU3zgZYl1 ELc4fpMq+GizF9Ml37q0lbMVf8uqXeJfPOZFHQNQJikUFajrBEHa2mqAAUa2hKXr 888r7oseetkbVEVrWEGSj11H4M3j/meX6VmGPGON2SX38ym5W1jS3wJOxxHIRUbJ wt50Obew66k7vgHx1kkvOr3L1CGSUxVe/gbSwtXjpLwg2WLJJi45gqhTEJ2H3qQL XY+mjoHXdZgpTNT5d8Zd59mY1ZMpfcwyij92a4+3UEnQliyrVK3feTwllorKbRSW KUJVZZVeEuwgfA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:33:04 2025 by rpki-client