This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json) Hash identifier: /qi/r9d4t5qLw3TbYK5vUXAo0kSWjfn/PiL1DK/FKgk= Subject key identifier: 25:34:51:66:59:07:B8:D1:3A:20:6A:8F:AD:90:5C:EF:DC:93:74:D8 Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92 Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892 Certificate serial: 019B24AC7C2BA7EC32387BFB762ECE131B85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft Manifest number: 34 Signing time: Tue 16 Dec 2025 01:00:42 +0000 Manifest this update: Tue 16 Dec 2025 01:00:42 +0000 Manifest next update: Wed 17 Dec 2025 01:00:42 +0000 Files and hashes: 1: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: LUdlv33y+z3ffPEpZuANz8hM4rcUIMB1PL5HQLoK0hI=) 2: eydd9b9yJG4u8PDoXh8HYchwXcQ.asa (hash: XLJ8T9Pn5PjpqOyDdfyyg17qfr7NWdf6Z89qNT5NgvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:7c:2b:a7:ec:32:38:7b:fb:76:2e:ce:13:1b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892 Validity Not Before: Dec 16 01:00:42 2025 GMT Not After : Dec 17 01:00:42 2025 GMT Subject: CN=253451665907b8d13a206a8fad905cefdc9374d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:ba:87:c1:2c:d5:15:8e:e1:2f:1a:cf:11: d3:36:84:2c:a0:bf:ba:fe:49:1e:25:56:8a:d0:95: a4:14:37:48:24:98:3a:60:c0:fa:99:9f:44:c5:59: 8f:6f:e4:f0:b5:8b:2e:bb:9a:af:66:ef:e7:6d:6a: ee:f8:ae:d0:1c:6a:7d:17:d7:5b:05:12:0f:7f:52: a3:d2:f9:67:83:84:09:bb:bd:5f:65:18:99:02:ff: 37:24:45:e1:a4:11:c4:69:75:df:af:6d:f4:89:37: 43:49:35:8b:b4:3f:95:a0:c0:e9:c2:db:06:89:8c: 25:0a:f7:1f:f0:4e:ae:fb:7b:12:7c:20:f4:51:dc: d3:a7:34:06:23:70:f5:b8:d9:58:b2:2b:45:7c:fa: 85:de:da:d3:47:4e:a8:a8:ba:1b:e3:6f:08:f8:fb: 67:ed:38:af:25:00:2a:d5:26:c5:a3:08:c4:f5:e3: 14:c0:db:9b:8d:71:8b:76:0d:f4:09:f1:a4:33:50: 58:a8:a2:dc:cd:fa:df:49:20:8a:47:e1:cb:ea:04: 29:ff:50:c9:37:fc:06:45:7e:c0:4b:83:9c:07:c9: a2:f1:51:4f:3d:8d:09:1c:02:7c:13:7c:e2:56:c7: 37:57:39:9a:f9:2c:31:0f:55:54:6c:eb:25:aa:d3: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:34:51:66:59:07:B8:D1:3A:20:6A:8F:AD:90:5C:EF:DC:93:74:D8 X509v3 Authority Key Identifier: keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:44:d3:1c:b9:6c:e3:95:bb:36:4a:0c:0d:98:49:2f:a0:27: 6c:9e:6c:f4:41:9a:5b:01:3b:cb:b1:ce:78:ca:d2:91:e6:b9: ad:4a:79:01:75:a2:fa:11:32:c8:06:c6:9b:b3:fa:30:73:36: 72:8b:19:52:33:bc:5f:b1:63:93:d0:01:0b:4d:98:8c:e3:cf: af:7f:12:81:f7:41:69:65:41:9a:89:74:df:77:9d:6f:54:c6: 3d:03:a2:7b:27:50:f3:77:ec:92:3a:4d:07:f3:83:a1:c6:dd: 49:56:18:ee:21:4b:8f:36:f6:33:fa:ff:70:5f:fe:7f:c4:14: 6c:c0:90:d1:1f:8f:37:86:5c:f0:bb:33:f1:87:73:da:f0:b2: 42:40:74:17:6a:ee:50:31:f8:41:ee:35:6d:d2:88:22:65:c6: 8c:a8:d6:7c:c7:b7:d8:ac:0e:0c:96:d8:39:92:7f:07:f3:96: e1:a7:0f:09:98:ec:25:15:44:9b:95:a8:60:3a:23:9c:7f:cf: d6:69:9c:3c:af:d4:19:e9:ad:c0:6f:77:6c:c4:fb:ec:c0:5c: 32:69:d5:4d:12:27:38:24:fa:f5:0a:a9:ce:2b:b3:f7:1f:c7: e9:c1:c0:ec:f4:31:ca:d1:0b:28:01:d6:c9:f1:df:48:3b:f7: 35:44:6d:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrHwrp+wyOHv7di7OExuFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYzFlZjYzNzQ5OThhODRlODBlNWUzMGRhMDlhNjlmNGZm ZWE4OTIwHhcNMjUxMjE2MDEwMDQyWhcNMjUxMjE3MDEwMDQyWjAzMTEwLwYDVQQD EygyNTM0NTE2NjU5MDdiOGQxM2EyMDZhOGZhZDkwNWNlZmRjOTM3NGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoy6h8Es1RWO4S8azxHTNoQsoL+6 /kkeJVaK0JWkFDdIJJg6YMD6mZ9ExVmPb+TwtYsuu5qvZu/nbWru+K7QHGp9F9db BRIPf1Kj0vlng4QJu71fZRiZAv83JEXhpBHEaXXfr230iTdDSTWLtD+VoMDpwtsG iYwlCvcf8E6u+3sSfCD0UdzTpzQGI3D1uNlYsitFfPqF3trTR06oqLob428I+Ptn 7TivJQAq1SbFowjE9eMUwNubjXGLdg30CfGkM1BYqKLczfrfSSCKR+HL6gQp/1DJ N/wGRX7AS4OcB8mi8VFPPY0JHAJ8E3ziVsc3Vzma+SwxD1VUbOslqtN/uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCU0UWZZB7jROiBqj62QXO/ck3TYMB8GA1UdIwQY MBaAFB3B72N0mYqE6A5eMNoJpp9P/qiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQt MTQ2Yzk0NzNiNmNiLzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQtMTQ2Yzk0NzNiNmNi LzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUTTHLls 45W7NkoMDZhJL6AnbJ5s9EGaWwE7y7HOeMrSkea5rUp5AXWi+hEyyAbGm7P6MHM2 cosZUjO8X7Fjk9ABC02YjOPPr38SgfdBaWVBmol033edb1TGPQOieydQ83fskjpN B/ODocbdSVYY7iFLjzb2M/r/cF/+f8QUbMCQ0R+PN4Zc8Lsz8Ydz2vCyQkB0F2ru UDH4Qe41bdKIImXGjKjWfMe32KwODJbYOZJ/B/OW4acPCZjsJRVEm5WoYDojnH/P 1mmcPK/UGemtwG93bMT77MBcMmnVTRInOCT69Qqpziuz9x/H6cHA7PQxytELKAHW yfHfSDv3NURt2Q== -----END CERTIFICATE-----Generated at Tue Dec 16 09:38:09 2025 by rpki-client