This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft File: HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft (raw, json) Hash identifier: i3tGvVY6oLqvH61raNBZcC4e4TES7hT4ki0kNMhFedw= Subject key identifier: 22:A9:68:68:21:7A:3B:E0:43:BA:4E:55:8B:90:CA:35:96:72:ED:3B Authority key identifier: 1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93 Certificate issuer: /CN=1eaa87c6f8e320c93da9162250dac558c871dc93 Certificate serial: 019B650D5FD710C9D19531F364C68CC1C089 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft Manifest number: 179B Signing time: Sun 28 Dec 2025 13:02:13 +0000 Manifest this update: Sun 28 Dec 2025 13:02:13 +0000 Manifest next update: Mon 29 Dec 2025 13:02:13 +0000 Files and hashes: 1: HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl (hash: AUvh+DxnyNUYUNEVkZQgUs3thfRmPB6nrmDlReK/zI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:5f:d7:10:c9:d1:95:31:f3:64:c6:8c:c1:c0:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaa87c6f8e320c93da9162250dac558c871dc93 Validity Not Before: Dec 28 13:02:13 2025 GMT Not After : Dec 29 13:02:13 2025 GMT Subject: CN=22a96868217a3be043ba4e558b90ca359672ed3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:1e:e4:82:08:53:c1:7c:00:bf:02:be:9a: 96:58:bb:63:93:6d:03:98:81:07:15:cd:24:8f:e3: 4a:60:34:42:a2:14:2e:4e:5c:4e:e8:43:7a:91:7e: 61:e6:b4:9d:51:8d:85:93:24:0e:8c:2f:88:61:a7: 67:83:0e:74:23:1a:b3:91:80:09:6d:3e:67:1c:2c: ae:e3:8e:dd:86:d8:9f:e3:05:7c:d8:0a:09:a2:0b: cb:69:35:12:7b:45:00:ae:4b:ad:ff:cc:96:ab:a0: 19:5d:df:c7:e5:e8:c3:4f:fe:96:f2:c8:0e:79:a2: 9f:26:a2:f5:42:fb:51:84:fd:fb:29:64:37:80:d2: 26:25:67:fb:84:67:db:98:b5:b6:2e:c4:ac:e5:50: 36:56:69:2f:aa:39:21:0c:3e:1f:67:82:cf:42:02: 79:cb:47:c5:3f:62:07:e8:95:4b:33:1d:19:9f:b8: 08:70:7c:3a:64:8f:07:c8:71:f6:15:12:61:1e:0d: 69:ad:69:30:4a:38:6e:4e:b9:05:f0:f4:8a:aa:69: c6:96:49:eb:97:81:6f:aa:6d:f0:9f:ca:78:86:c7: 58:e1:6d:67:e6:80:79:2b:a1:5e:9e:ff:52:ee:f0: 27:cb:60:37:f4:4c:4a:92:15:b4:85:89:29:52:98: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A9:68:68:21:7A:3B:E0:43:BA:4E:55:8B:90:CA:35:96:72:ED:3B X509v3 Authority Key Identifier: keyid:1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:0f:2f:c7:ec:77:30:27:14:42:aa:d6:bc:31:ed:f7:ca:ab: 17:6e:30:00:4f:1f:07:02:53:d4:63:05:40:32:9c:b8:ca:8b: cb:e8:ca:2b:ec:f0:ad:da:58:07:54:c4:aa:fc:9e:0e:8b:c5: 23:95:a9:e5:84:e4:d2:9d:ee:1b:31:73:4e:b9:6f:20:44:fd: 36:ba:a4:99:ad:42:07:be:1b:25:fa:9c:7d:e0:68:36:88:8e: b5:53:9c:d1:06:9f:f8:88:38:7a:b7:ca:de:89:84:30:21:b6: 6d:fe:8e:72:96:d1:c5:36:64:1a:09:be:77:3f:a6:53:07:41: b4:7b:1f:13:f0:cb:8d:66:86:8c:cf:02:4c:de:c6:00:80:b3: 54:d3:3e:68:91:92:07:9c:ee:71:55:12:14:e7:ed:ae:b6:82: 5b:be:88:86:89:24:6a:62:c3:7c:be:15:23:25:1b:b9:86:52: 9e:23:92:48:f6:a7:ae:7f:04:ca:0f:e2:4c:74:66:28:0e:97: ee:c8:ed:3a:c5:57:1c:d9:bc:22:dd:4b:3d:16:fe:c1:00:37: c3:f0:21:f1:92:1d:5f:17:ce:f2:17:3e:da:57:b0:2c:95:c9: 8e:6b:83:2e:56:38:10:67:2d:a6:db:7b:b2:32:6f:6f:db:0a: 04:d9:ad:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDV/XEMnRlTHzZMaMwcCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWE4N2M2ZjhlMzIwYzkzZGE5MTYyMjUwZGFjNTU4Yzg3 MWRjOTMwHhcNMjUxMjI4MTMwMjEzWhcNMjUxMjI5MTMwMjEzWjAzMTEwLwYDVQQD EygyMmE5Njg2ODIxN2EzYmUwNDNiYTRlNTU4YjkwY2EzNTk2NzJlZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGMe5IIIU8F8AL8CvpqWWLtjk20D mIEHFc0kj+NKYDRCohQuTlxO6EN6kX5h5rSdUY2FkyQOjC+IYadngw50IxqzkYAJ bT5nHCyu447dhtif4wV82AoJogvLaTUSe0UArkut/8yWq6AZXd/H5ejDT/6W8sgO eaKfJqL1QvtRhP37KWQ3gNImJWf7hGfbmLW2LsSs5VA2VmkvqjkhDD4fZ4LPQgJ5 y0fFP2IH6JVLMx0Zn7gIcHw6ZI8HyHH2FRJhHg1prWkwSjhuTrkF8PSKqmnGlknr l4Fvqm3wn8p4hsdY4W1n5oB5K6Fenv9S7vAny2A39ExKkhW0hYkpUpiaEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKpaGghejvgQ7pOVYuQyjWWcu07MB8GA1UdIwQY MBaAFB6qh8b44yDJPakWIlDaxVjIcdyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYTljNDYtMGI0Zi00OGE2LTg5OWUt MWFmNTY4ZDg5MDhhLzEvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lYTljNDYtMGI0Zi00OGE2LTg5OWUtMWFmNTY4ZDg5MDhh LzEvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaA8vx+x3 MCcUQqrWvDHt98qrF24wAE8fBwJT1GMFQDKcuMqLy+jKK+zwrdpYB1TEqvyeDovF I5Wp5YTk0p3uGzFzTrlvIET9Nrqkma1CB74bJfqcfeBoNoiOtVOc0Qaf+Ig4erfK 3omEMCG2bf6OcpbRxTZkGgm+dz+mUwdBtHsfE/DLjWaGjM8CTN7GAICzVNM+aJGS B5zucVUSFOftrraCW76IhokkamLDfL4VIyUbuYZSniOSSPanrn8Eyg/iTHRmKA6X 7sjtOsVXHNm8It1LPRb+wQA3w/Ah8ZIdXxfO8hc+2lewLJXJjmuDLlY4EGctptt7 sjJvb9sKBNmteQ== -----END CERTIFICATE-----Generated at Sun Dec 28 18:55:21 2025 by rpki-client