This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json) Hash identifier: oYVZWugLOL2QIhbwAsCNLUevU5QBqQPvpSZ7j5TVess= Subject key identifier: BA:6B:D3:69:FF:E0:37:F7:39:A2:F0:C9:ED:C1:27:3A:0B:DE:9C:65 Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6 Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6 Certificate serial: 019B3D59C249E3995393B35AC920A2E8CB8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft Manifest number: 13A3 Signing time: Sat 20 Dec 2025 20:00:51 +0000 Manifest this update: Sat 20 Dec 2025 20:00:51 +0000 Manifest next update: Sun 21 Dec 2025 20:00:51 +0000 Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: rHecxrnPw9u2uaf195DKMK5wqnM31KdI5+tFKO55v9M=) 2: m1rDa4mFSS7DgxLKEUuhg1KKIME.roa (hash: P+gAWygPgYFKaEAocSrD9brqA8mxvT8s5Q0PR3R+oc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:c2:49:e3:99:53:93:b3:5a:c9:20:a2:e8:cb:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6 Validity Not Before: Dec 20 20:00:51 2025 GMT Not After : Dec 21 20:00:51 2025 GMT Subject: CN=ba6bd369ffe037f739a2f0c9edc1273a0bde9c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:57:5f:5a:a3:6e:9a:ad:ee:7c:77:49:da: 73:2a:3e:90:05:74:9c:29:c5:27:4c:f0:5a:4d:61: d7:82:0c:22:a4:39:dd:0b:ee:90:cf:9e:03:26:a7: 52:f3:d9:d6:78:7b:ad:f7:2a:d3:1d:bf:60:c2:4d: 09:a8:a8:f3:ac:3d:46:c8:9e:5d:7d:4b:df:f9:49: 99:73:b1:44:3e:dc:22:67:3a:64:29:1e:78:ae:25: ff:f7:15:52:b8:7e:59:82:e4:32:c1:90:73:7c:41: 9c:7a:e0:a3:ee:ac:87:26:3f:19:f0:d4:db:a4:d4: 87:e3:bb:59:9a:08:33:32:32:06:06:9a:83:8e:5a: f3:77:af:d5:ee:ae:88:2c:6d:23:0b:9f:3e:c4:52: 3e:7c:0e:29:d2:d7:bd:40:75:15:5a:54:8a:8a:34: aa:e5:e4:d7:aa:de:d3:9f:e7:a2:17:6a:40:b9:eb: 22:ae:7b:5e:7b:cb:01:66:86:d6:5b:6f:ec:8d:7d: 39:17:53:df:b8:77:fa:8b:66:68:18:dc:b2:fc:9d: f3:08:98:39:0d:fc:6d:67:c7:d8:3b:38:27:c9:04: 29:a3:07:be:e3:ae:8a:09:e0:ef:27:a9:fa:ac:da: 5b:90:a1:0f:db:cc:02:b5:9d:24:ec:fb:18:2f:1a: e9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6B:D3:69:FF:E0:37:F7:39:A2:F0:C9:ED:C1:27:3A:0B:DE:9C:65 X509v3 Authority Key Identifier: keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7f:78:cd:8b:8b:39:81:22:c6:9f:38:29:27:c0:b7:11:60: f0:11:97:38:33:8f:ea:c2:4f:bc:cc:6b:5e:e0:fb:22:a0:10: ec:93:ee:0b:7a:26:01:95:89:62:93:8e:cc:bd:77:ea:20:52: 24:47:22:a1:50:de:85:4e:d1:02:b3:b2:aa:11:95:ab:35:3d: d1:48:f4:ac:3e:5d:33:54:0c:16:67:dd:65:29:1d:87:dd:74: 0e:b7:5c:15:24:db:b8:54:20:01:8c:79:4b:42:4a:6d:e2:7e: c4:48:44:7e:56:26:2a:88:50:bb:fc:c2:3f:6f:be:cc:88:ab: 60:66:92:9a:00:77:e9:bd:6e:bc:de:c2:cc:6d:62:3c:63:c7: fb:ec:8e:ff:a8:e9:35:6c:c2:47:f7:b6:24:5d:63:bb:ee:a6: b4:39:c4:9c:d8:42:5b:bb:ee:0b:cd:cc:84:2f:f5:4c:a6:70: b9:23:c8:d5:fa:25:9c:e3:34:bf:c8:23:fa:cb:15:a1:cb:38: f1:a6:96:b5:17:94:31:5b:dd:30:b9:cf:39:40:62:32:29:ca: af:ed:c9:41:27:fb:76:27:17:31:e6:b3:7c:e6:e8:a6:e8:43: 58:f9:28:15:fb:e4:ab:6e:58:82:f3:31:b3:d1:9d:2f:38:12: 33:85:b8:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WcJJ45lTk7NaySCi6MuOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNmZkMjk3Zjk1NTMxZmViODJjOTY0ZmQ2N2Y2Yzk0MzIw OTM4ZjYwHhcNMjUxMjIwMjAwMDUxWhcNMjUxMjIxMjAwMDUxWjAzMTEwLwYDVQQD EyhiYTZiZDM2OWZmZTAzN2Y3MzlhMmYwYzllZGMxMjczYTBiZGU5YzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3lXX1qjbpqt7nx3SdpzKj6QBXSc KcUnTPBaTWHXggwipDndC+6Qz54DJqdS89nWeHut9yrTHb9gwk0JqKjzrD1GyJ5d fUvf+UmZc7FEPtwiZzpkKR54riX/9xVSuH5ZguQywZBzfEGceuCj7qyHJj8Z8NTb pNSH47tZmggzMjIGBpqDjlrzd6/V7q6ILG0jC58+xFI+fA4p0te9QHUVWlSKijSq 5eTXqt7Tn+eiF2pAuesirntee8sBZobWW2/sjX05F1PfuHf6i2ZoGNyy/J3zCJg5 DfxtZ8fYOzgnyQQpowe+466KCeDvJ6n6rNpbkKEP28wCtZ0k7PsYLxrpkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpr02n/4Df3OaLwye3BJzoL3pxlMB8GA1UdIwQY MBaAFBxv0pf5VTH+uCyWT9Z/bJQyCTj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81YmQyNmMtYmJjZS00MGMwLTg5ZDct ZWY3OGE4YTc2MDZjLzEvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi81YmQyNmMtYmJjZS00MGMwLTg5ZDctZWY3OGE4YTc2MDZj LzEvSEdfU2xfbFZNZjY0TEpaUDFuOXNsRElKT1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO394zYuL OYEixp84KSfAtxFg8BGXODOP6sJPvMxrXuD7IqAQ7JPuC3omAZWJYpOOzL136iBS JEcioVDehU7RArOyqhGVqzU90Uj0rD5dM1QMFmfdZSkdh910DrdcFSTbuFQgAYx5 S0JKbeJ+xEhEflYmKohQu/zCP2++zIirYGaSmgB36b1uvN7CzG1iPGPH++yO/6jp NWzCR/e2JF1ju+6mtDnEnNhCW7vuC83MhC/1TKZwuSPI1folnOM0v8gj+ssVocs4 8aaWtReUMVvdMLnPOUBiMinKr+3JQSf7dicXMeazfObopuhDWPkoFfvkq25YgvMx s9GdLzgSM4W4Lg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:56:44 2025 by rpki-client