This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json) Hash identifier: sEXb69mr1bz28UoW4hPPCdWioGhOt2HuDEUyXvNoQk4= Subject key identifier: 47:F4:AF:4D:B5:72:40:78:71:28:E1:6F:23:A9:94:15:AA:1B:85:08 Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a Certificate serial: 019B4DE00007C82DEA9132289770728F5984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft Manifest number: 178D Signing time: Wed 24 Dec 2025 01:01:24 +0000 Manifest this update: Wed 24 Dec 2025 01:01:24 +0000 Manifest next update: Thu 25 Dec 2025 01:01:24 +0000 Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: 1Csj7HEkoCJ1fn8aD5r09CtFtE0xHvIFCP2uXz19dI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:00:07:c8:2d:ea:91:32:28:97:70:72:8f:59:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a Validity Not Before: Dec 24 01:01:24 2025 GMT Not After : Dec 25 01:01:24 2025 GMT Subject: CN=47f4af4db57240787128e16f23a99415aa1b8508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5e:94:54:08:54:d6:73:c7:4f:ac:d7:17:53: 92:ee:4e:72:59:82:89:63:cf:bb:67:81:13:c1:4c: 4b:47:15:88:0f:8c:80:06:e9:bd:04:12:9f:62:b1: d7:49:0e:ac:a8:3f:5e:79:ad:7b:df:14:96:81:a1: 81:e3:39:2a:b6:10:39:16:f4:3b:35:cf:ff:99:44: 46:8f:e6:19:a6:62:14:c0:d4:05:4f:77:6b:4b:a7: 2e:bf:f1:90:0a:ad:0c:82:3a:08:60:f0:2a:fb:f8: 0c:44:cd:e1:e4:fc:83:fc:0e:dd:f8:36:c6:9d:be: af:0c:78:62:03:c3:c4:c0:04:59:a2:31:da:ec:82: 51:8f:66:11:7b:01:18:80:d3:c3:ad:9f:2b:ba:63: 57:12:84:d7:9d:6e:c7:1c:9f:58:4f:61:a3:79:e9: 5a:94:25:7f:85:88:1d:2c:5b:ab:00:ee:45:bc:ad: a5:fc:6a:e6:27:c9:00:b4:c9:31:e4:49:12:f4:f6: f8:b6:25:10:67:aa:53:f8:39:2c:a7:ea:ed:1d:e7: ff:26:da:df:a4:02:d5:9c:18:35:d4:4f:8c:c3:3a: eb:e2:8a:2f:3a:fd:90:8b:00:f3:dd:f7:31:58:4d: ee:e4:ca:81:fe:20:fd:06:93:de:a5:3b:41:a8:05: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F4:AF:4D:B5:72:40:78:71:28:E1:6F:23:A9:94:15:AA:1B:85:08 X509v3 Authority Key Identifier: keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7f:57:f5:e5:da:4a:19:91:5b:21:ee:a9:e1:36:c1:00:a8: 51:41:b8:17:14:d5:87:dd:f7:08:76:ee:6d:a5:b6:c9:de:c6: d0:bc:40:64:b0:e9:ac:7c:dc:58:a5:04:51:3f:d0:8f:15:f8: bf:95:fa:cb:6c:50:9a:a9:f1:97:b9:e8:d4:35:cd:ab:d2:22: b2:a9:65:c1:d0:76:31:ee:c3:e3:3c:72:36:04:63:e7:1d:82: aa:b6:0e:9f:61:4a:7b:f0:f9:d1:58:b2:4e:62:1f:be:bf:ca: c6:82:9e:73:9d:9a:ae:6a:26:02:d4:b2:5a:fe:d5:22:02:8b: e8:4b:62:6a:81:51:72:03:34:28:6b:41:03:c9:28:b4:aa:ae: d2:1c:69:e1:e0:fa:10:4b:76:8d:13:d6:ac:48:b9:c2:b6:4a: 8c:2e:de:28:0a:8b:7f:2c:6d:c4:6d:1a:40:b5:93:4e:4c:7a: e4:97:30:e4:29:a9:50:df:b0:62:38:3e:98:51:7b:6c:7d:e9: b0:f1:4e:a5:c3:9b:ac:e4:54:af:c5:52:b0:16:d4:d2:c0:a1: d9:25:35:01:13:76:fa:70:1a:f7:8c:99:a4:ed:d9:91:1b:6b: d8:2b:e3:e9:ac:3e:48:ac:13:45:4a:42:8c:fb:9b:34:14:53: a9:f1:ad:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4AAHyC3qkTIol3Byj1mEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1Y2Y5MTBhOTQ0NDllYTIzYWFjNmM0MDlhMDU4NDliZWRh NWUyNGEwHhcNMjUxMjI0MDEwMTI0WhcNMjUxMjI1MDEwMTI0WjAzMTEwLwYDVQQD Eyg0N2Y0YWY0ZGI1NzI0MDc4NzEyOGUxNmYyM2E5OTQxNWFhMWI4NTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V6UVAhU1nPHT6zXF1OS7k5yWYKJ Y8+7Z4ETwUxLRxWID4yABum9BBKfYrHXSQ6sqD9eea173xSWgaGB4zkqthA5FvQ7 Nc//mURGj+YZpmIUwNQFT3drS6cuv/GQCq0MgjoIYPAq+/gMRM3h5PyD/A7d+DbG nb6vDHhiA8PEwARZojHa7IJRj2YRewEYgNPDrZ8rumNXEoTXnW7HHJ9YT2Gjeela lCV/hYgdLFurAO5FvK2l/GrmJ8kAtMkx5EkS9Pb4tiUQZ6pT+Dksp+rtHef/Jtrf pALVnBg11E+Mwzrr4oovOv2QiwDz3fcxWE3u5MqB/iD9BpPepTtBqAWruwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEf0r021ckB4cSjhbyOplBWqG4UIMB8GA1UdIwQY MBaAFIXPkQqURJ6iOqxsQJoFhJvtpeJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZDNhNGMtNjUxZi00NDk4LThjMjIt NTUyZjAyY2JjMDBlLzEvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZDNhNGMtNjUxZi00NDk4LThjMjItNTUyZjAyY2JjMDBl LzEvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX39X9eXa ShmRWyHuqeE2wQCoUUG4FxTVh933CHbubaW2yd7G0LxAZLDprHzcWKUEUT/QjxX4 v5X6y2xQmqnxl7no1DXNq9IisqllwdB2Me7D4zxyNgRj5x2CqrYOn2FKe/D50Viy TmIfvr/KxoKec52armomAtSyWv7VIgKL6EtiaoFRcgM0KGtBA8kotKqu0hxp4eD6 EEt2jRPWrEi5wrZKjC7eKAqLfyxtxG0aQLWTTkx65Jcw5CmpUN+wYjg+mFF7bH3p sPFOpcObrORUr8VSsBbU0sCh2SU1ARN2+nAa94yZpO3ZkRtr2Cvj6aw+SKwTRUpC jPubNBRTqfGtfQ== -----END CERTIFICATE-----Generated at Wed Dec 24 04:46:40 2025 by rpki-client