This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json) Hash identifier: rcSn5mjJ4Wz+21gL111QtG/gjbXyat34z6o2eH9leuE= Subject key identifier: 37:CC:FB:B4:91:63:F5:5D:15:F7:D4:AB:8F:72:17:DC:4D:F5:79:F6 Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c Certificate serial: 019B2F9E64253F3EE93724CBC752EC083BE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft Manifest number: 0455 Signing time: Thu 18 Dec 2025 04:01:08 +0000 Manifest this update: Thu 18 Dec 2025 04:01:08 +0000 Manifest next update: Fri 19 Dec 2025 04:01:08 +0000 Files and hashes: 1: 8-kkwcK7J3DxZVf5MGzOJYHQ7BI.roa (hash: rhq0p1ekXajroUDi/6gbWVszGGw1Hl0Cw7VvrAiAjNE=) 2: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: 4lN7+iBJY6Usb1cyRkHFVivsiHXWjFYCS2Mr5P3DmHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:64:25:3f:3e:e9:37:24:cb:c7:52:ec:08:3b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c Validity Not Before: Dec 18 04:01:08 2025 GMT Not After : Dec 19 04:01:08 2025 GMT Subject: CN=37ccfbb49163f55d15f7d4ab8f7217dc4df579f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:9f:7a:2d:b4:4a:55:bb:a7:5e:a8:f3:6f: 55:29:84:8b:c7:b2:03:27:5b:33:3b:3f:e7:2a:fe: 85:18:ff:34:2c:44:5d:e8:1a:56:3b:a4:56:92:31: 57:ab:28:3a:ec:d7:5d:55:44:67:f7:35:64:ba:7b: 13:f5:1a:3a:1d:76:63:d3:d4:4e:00:02:b4:12:f3: 82:3e:11:dd:8c:a6:7f:0b:06:ca:ef:e0:33:67:c8: e1:95:f1:5b:c3:e7:ad:2a:7f:72:c4:e7:42:8a:c5: 2e:5e:5e:34:6e:ca:c6:28:d4:ca:39:65:4b:e4:b0: 6f:87:72:8b:b6:76:5f:58:34:4c:32:7c:66:b7:09: f7:44:64:80:4d:03:94:14:55:d7:8e:ee:47:1a:cc: 73:3d:9c:97:63:ca:90:c8:da:66:21:69:5d:d7:21: 0b:51:72:ca:e5:18:49:6f:68:f0:94:47:7c:ba:dc: c4:be:d3:71:1b:8c:64:f1:0d:e2:e8:d9:0c:be:9b: 43:f6:54:e8:b2:3b:a6:cd:63:ba:48:60:e0:03:b3: 04:5c:63:3f:a1:dd:e2:1b:46:e7:e9:79:ab:50:08: e9:cb:6c:f5:a2:d9:63:36:94:19:37:ac:b4:c7:63: f4:8c:e1:f0:41:f7:94:70:4d:2e:30:50:99:09:34: 90:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CC:FB:B4:91:63:F5:5D:15:F7:D4:AB:8F:72:17:DC:4D:F5:79:F6 X509v3 Authority Key Identifier: keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:21:e3:36:1f:1f:95:d9:69:e8:3d:92:8a:df:f5:96:b6:86: 79:ac:56:f8:7f:01:37:39:1d:95:0d:5a:86:b9:79:99:de:2d: 58:35:e0:33:c1:43:5c:e7:70:4e:a9:3c:95:7f:58:84:85:54: e7:3d:b0:6f:82:ed:3e:3c:bb:6d:e2:e0:6c:1d:64:74:7e:7a: 02:e4:d5:e5:92:e3:09:1c:ac:f1:2c:9e:e0:99:d9:3e:8a:d2: 8d:c4:e3:da:f4:ea:c7:66:3f:02:18:53:2f:db:61:fe:d4:a5: 7b:c1:6e:9c:d4:25:45:79:6f:e7:2f:9a:99:e0:fe:e5:38:a3: 61:ef:cb:3d:64:ed:38:47:a7:a1:c4:b6:b1:cd:96:2f:26:2f: 98:22:22:b9:f7:16:3d:4f:a4:79:99:e0:4e:d0:a5:39:8b:7a: 10:ac:2c:b9:1b:cd:64:46:99:d7:a6:c7:9a:72:66:e6:ae:ae: fd:33:2d:77:93:42:13:fa:f6:0c:29:c9:81:34:2b:b8:27:12: cb:ac:dd:18:65:84:94:66:88:60:66:c9:44:c1:dd:7b:d9:97: 1f:9b:94:18:cf:96:19:ff:c7:1d:96:98:b0:e7:b5:f7:a2:5d: d9:06:f9:09:44:f0:26:69:52:d1:6e:1e:2b:50:0d:1f:cc:f1: 44:8b:f1:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnmQlPz7pNyTLx1LsCDvgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNjEwNGEyZDMzNTA4MjdjYWQxMWExNjU2OWNhYjU5ZjBm ODc3NGMwHhcNMjUxMjE4MDQwMTA4WhcNMjUxMjE5MDQwMTA4WjAzMTEwLwYDVQQD EygzN2NjZmJiNDkxNjNmNTVkMTVmN2Q0YWI4ZjcyMTdkYzRkZjU3OWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnKfei20SlW7p16o829VKYSLx7ID J1szOz/nKv6FGP80LERd6BpWO6RWkjFXqyg67NddVURn9zVkunsT9Ro6HXZj09RO AAK0EvOCPhHdjKZ/CwbK7+AzZ8jhlfFbw+etKn9yxOdCisUuXl40bsrGKNTKOWVL 5LBvh3KLtnZfWDRMMnxmtwn3RGSATQOUFFXXju5HGsxzPZyXY8qQyNpmIWld1yEL UXLK5RhJb2jwlEd8utzEvtNxG4xk8Q3i6NkMvptD9lTosjumzWO6SGDgA7MEXGM/ od3iG0bn6XmrUAjpy2z1otljNpQZN6y0x2P0jOHwQfeUcE0uMFCZCTSQWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfM+7SRY/VdFffUq49yF9xN9Xn2MB8GA1UdIwQY MBaAFBxhBKLTNQgnytEaFlacq1nw+HdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85Y2RlZGItNGRkNS00ZGFjLTk3N2Ut MTQ5MDc5NjI3NzEzLzEvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC85Y2RlZGItNGRkNS00ZGFjLTk3N2UtMTQ5MDc5NjI3NzEz LzEvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciHjNh8f ldlp6D2Sit/1lraGeaxW+H8BNzkdlQ1ahrl5md4tWDXgM8FDXOdwTqk8lX9YhIVU 5z2wb4LtPjy7beLgbB1kdH56AuTV5ZLjCRys8Sye4JnZPorSjcTj2vTqx2Y/AhhT L9th/tSle8FunNQlRXlv5y+ameD+5TijYe/LPWTtOEenocS2sc2WLyYvmCIiufcW PU+keZngTtClOYt6EKwsuRvNZEaZ16bHmnJm5q6u/TMtd5NCE/r2DCnJgTQruCcS y6zdGGWElGaIYGbJRMHde9mXH5uUGM+WGf/HHZaYsOe196Jd2Qb5CUTwJmlS0W4e K1ANH8zxRIvxLg== -----END CERTIFICATE-----Generated at Thu Dec 18 11:11:53 2025 by rpki-client