This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft File: HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json) Hash identifier: HIHBoabklYYlJAjw74Ci/mzmhWWnNSFis5oIs/BWUvM= Subject key identifier: 40:53:EB:37:49:D8:49:03:BC:E3:7D:16:F4:B3:BA:D9:7C:B1:C3:8E Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d Certificate serial: 019B50A95FD37B509A87DC7BD117D8FC9EA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 14:00:35 +0000 Manifest this update: Wed 24 Dec 2025 14:00:35 +0000 Manifest next update: Thu 25 Dec 2025 14:00:35 +0000 Files and hashes: 1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: nEFQhHg2VZQblQHKiTXv/gdSl7SKLMXOzIlqD4zDz9M=) 2: UhsTPDlkEVTfjN0gtgklGlfn_mQ.roa (hash: gvwxeqU03k4MQD3WdF59OWVu6wgm7kgHM+ORIWuetR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:5f:d3:7b:50:9a:87:dc:7b:d1:17:d8:fc:9e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d Validity Not Before: Dec 24 14:00:35 2025 GMT Not After : Dec 25 14:00:35 2025 GMT Subject: CN=4053eb3749d84903bce37d16f4b3bad97cb1c38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:9c:66:6c:ba:d3:fb:14:39:64:d2:98:28: ed:73:51:0c:cf:25:9f:eb:2c:eb:ef:98:e0:2b:c0: 70:bc:87:6d:63:ce:86:72:6d:36:f9:35:c4:1b:b1: 2d:fe:db:61:1c:4e:42:e7:1a:9f:35:23:62:66:41: cb:63:46:06:93:6c:0b:51:ff:d9:90:c7:ca:63:34: a5:e5:65:17:c0:8b:c1:dc:f6:bc:ef:03:1b:27:48: a8:4d:1b:ed:ed:42:3a:10:bd:a3:5a:18:ad:76:6d: 7f:92:cf:75:af:18:b7:df:f9:91:13:57:8f:9e:6f: 47:e2:2e:c3:b2:fc:fe:d3:23:a1:cd:aa:be:22:b8: f3:37:f6:cd:2d:48:f3:d4:18:3f:01:51:ca:32:45: 20:82:1b:76:43:a1:27:55:bf:c3:ec:75:3d:2f:e3: 28:08:fc:b5:23:2a:99:bf:98:b9:d7:b6:04:69:13: b6:3a:11:bf:98:0d:bd:97:55:12:a0:dc:4a:5e:bc: 5a:30:20:df:e2:41:d0:05:5a:ab:9f:5a:0d:ea:a0: 5d:7f:04:85:d3:46:5d:05:c7:a9:07:25:82:3c:4d: 87:9d:1a:ef:ed:f3:34:f4:64:45:f3:c0:d2:64:6a: bf:55:c1:70:e1:3f:a6:fb:7c:38:60:48:92:69:c1: 21:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:53:EB:37:49:D8:49:03:BC:E3:7D:16:F4:B3:BA:D9:7C:B1:C3:8E X509v3 Authority Key Identifier: keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b3:b6:58:60:b5:35:09:f5:73:42:80:d3:b8:08:c5:8a:70: f4:f6:8e:a9:91:23:65:f3:35:2d:c7:70:e4:74:8c:8f:21:8a: c9:39:f0:f5:50:a9:ea:b6:6a:88:47:d1:a3:94:e3:b8:47:58: 96:3a:3d:a5:ab:39:73:1f:18:5a:61:b7:76:be:c3:4d:77:40: de:30:49:b9:1d:f8:03:6a:77:55:d3:f7:d2:df:02:32:53:e4: 00:3c:be:2d:8a:32:9d:4e:8f:30:0f:31:0a:41:e1:cb:32:a2: ea:0d:e1:27:53:af:97:22:05:e6:00:bf:a0:51:84:a7:f5:71: eb:50:10:2b:94:30:a0:1e:bb:e3:e3:07:71:8a:f6:e0:56:7c: 82:b0:10:f1:f1:e2:e9:05:34:f0:3e:1b:1c:50:7f:ba:59:ef: 7f:bb:3b:69:3a:31:ef:c9:66:3b:cd:0d:3f:e6:df:72:6f:40: 73:96:72:7e:fa:1f:c9:12:f5:07:5e:93:94:2b:f0:ff:fe:10: 6c:de:ae:ef:4b:c5:8a:bd:65:39:31:5e:82:df:06:68:1a:36: 4f:8d:05:9e:88:69:85:6c:8a:07:1b:bd:c1:92:c1:b0:e3:de: cf:82:0b:08:e1:29:9c:18:27:6e:3c:a9:4d:92:a8:53:bd:f9: 74:44:f2:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqV/Te1Cah9x70RfY/J6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTBjODIzYzM2MGI1Zjg2MTQ4OTJkMzViMTAzYzY0Nzc0 ZmQ2NWQwHhcNMjUxMjI0MTQwMDM1WhcNMjUxMjI1MTQwMDM1WjAzMTEwLwYDVQQD Eyg0MDUzZWIzNzQ5ZDg0OTAzYmNlMzdkMTZmNGIzYmFkOTdjYjFjMzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBucZmy60/sUOWTSmCjtc1EMzyWf 6yzr75jgK8BwvIdtY86Gcm02+TXEG7Et/tthHE5C5xqfNSNiZkHLY0YGk2wLUf/Z kMfKYzSl5WUXwIvB3Pa87wMbJ0ioTRvt7UI6EL2jWhitdm1/ks91rxi33/mRE1eP nm9H4i7Dsvz+0yOhzaq+IrjzN/bNLUjz1Bg/AVHKMkUgght2Q6EnVb/D7HU9L+Mo CPy1IyqZv5i517YEaRO2OhG/mA29l1USoNxKXrxaMCDf4kHQBVqrn1oN6qBdfwSF 00ZdBcepByWCPE2HnRrv7fM09GRF88DSZGq/VcFw4T+m+3w4YEiSacEhwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBT6zdJ2EkDvON9FvSzutl8scOOMB8GA1UdIwQY MBaAFB6gyCPDYLX4YUiS01sQPGR3T9ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80OTI2MTUtODE2Mi00YjM3LWJjYmIt NWMwZDA1N2VmMmE2LzEvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80OTI2MTUtODE2Mi00YjM3LWJjYmItNWMwZDA1N2VmMmE2 LzEvSHFESUk4Tmd0ZmhoU0pMVFd4QThaSGRQMWwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7O2WGC1 NQn1c0KA07gIxYpw9PaOqZEjZfM1Lcdw5HSMjyGKyTnw9VCp6rZqiEfRo5TjuEdY ljo9pas5cx8YWmG3dr7DTXdA3jBJuR34A2p3VdP30t8CMlPkADy+LYoynU6PMA8x CkHhyzKi6g3hJ1OvlyIF5gC/oFGEp/Vx61AQK5QwoB674+MHcYr24FZ8grAQ8fHi 6QU08D4bHFB/ulnvf7s7aTox78lmO80NP+bfcm9Ac5ZyfvofyRL1B16TlCvw//4Q bN6u70vFir1lOTFegt8GaBo2T40FnohphWyKBxu9wZLBsOPez4ILCOEpnBgnbjyp TZKoU735dETyTA== -----END CERTIFICATE-----Generated at Wed Dec 24 18:09:18 2025 by rpki-client