This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft File: HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json) Hash identifier: I+SO7mQMe/bF78tz3FAXoRMV8Z7rQFZ7qGKHdMRgd/4= Subject key identifier: 77:FB:73:9D:5E:FF:27:71:25:DA:8B:FC:DE:FE:ED:CE:7B:C2:C5:C5 Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9 Certificate issuer: /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9 Certificate serial: 019B495E0B1CDC0FC5CA52CDC08DD18B9C5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft Manifest number: 0CB4 Signing time: Tue 23 Dec 2025 04:00:58 +0000 Manifest this update: Tue 23 Dec 2025 04:00:58 +0000 Manifest next update: Wed 24 Dec 2025 04:00:58 +0000 Files and hashes: 1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: L0cAWvZf3NkWSE2ZoI+2Go22f4t+QvJpR9pGN58I39c=) 2: ZGoOUwMopHkREW85RzSsR457AEU.roa (hash: ll6YKs1Lb4wcNMvOVUUEMK6peyuIPU/LPfVQcksc3+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:0b:1c:dc:0f:c5:ca:52:cd:c0:8d:d1:8b:9c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9 Validity Not Before: Dec 23 04:00:58 2025 GMT Not After : Dec 24 04:00:58 2025 GMT Subject: CN=77fb739d5eff277125da8bfcdefeedce7bc2c5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:37:15:7d:99:54:11:60:6a:a8:9c:3d:f2: df:a1:d7:08:d7:3e:2d:86:9f:8a:15:70:31:ed:fd: 81:17:33:31:85:c1:27:43:a9:21:38:73:be:77:48: fb:7b:08:41:f7:4d:b4:2c:0f:25:da:2a:7c:60:38: 16:c9:b8:ab:16:e3:5e:d3:92:30:52:8d:a2:e0:09: e0:f5:a0:ac:59:2e:29:35:d9:b9:06:c0:9f:77:aa: 1e:c8:49:68:31:f7:85:86:da:f5:a7:77:0f:91:bf: 0b:c4:a1:4a:ff:4f:30:0f:f4:bc:1a:25:7b:10:2a: f8:a3:5d:82:3f:fa:a1:af:4f:01:48:8d:5c:07:62: 45:fb:fd:eb:c5:9a:90:97:bf:28:06:75:8d:60:82: 7f:0d:95:b3:9a:99:15:f9:6b:3c:c6:7a:34:02:ed: 8e:28:b8:e7:dc:c3:4f:f3:9c:dc:e0:14:9d:47:08: 73:e2:66:29:15:c0:f9:80:a5:fa:fd:0d:30:d9:28: 59:0a:4b:db:36:59:f6:49:7b:1e:74:3d:0c:84:7a: 84:ed:01:a4:0d:90:bd:6e:88:ab:b3:1a:52:e5:e7: 51:80:d2:16:8f:8f:d7:d1:a5:0e:37:7c:8e:1c:5b: 40:4c:9c:68:14:2c:fb:29:b4:59:d6:25:d8:50:77: 84:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FB:73:9D:5E:FF:27:71:25:DA:8B:FC:DE:FE:ED:CE:7B:C2:C5:C5 X509v3 Authority Key Identifier: keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:93:5b:4c:b3:51:34:bc:ee:2b:c0:6c:b5:80:2a:45:88:ba: 07:4a:20:20:b8:47:c0:ed:62:f2:60:12:c6:da:27:25:ab:2b: 35:99:60:1b:e3:76:4b:dc:8c:78:3e:a4:84:9a:43:5f:9b:dc: 70:6c:92:59:90:65:45:f0:ab:2c:4d:45:26:52:af:e9:5d:4c: 18:7d:e5:22:f8:a1:82:42:28:26:85:70:ad:f3:3d:db:99:0b: f8:37:c0:20:1b:72:16:9d:13:39:a7:38:69:38:f3:00:3e:b4: 6a:3d:ab:6b:7e:47:65:fa:ab:11:d1:96:f8:43:e4:4f:cb:27: 33:16:3c:9a:e1:53:e5:56:ab:83:e4:f0:e8:fe:90:e6:29:83: 20:01:c7:41:d8:91:9e:73:0b:4f:a7:c0:a2:5c:8c:51:c3:97: b9:dc:0d:5a:90:dd:58:c8:7d:03:ff:44:09:b1:36:ca:9e:a6: 4a:65:d0:13:fb:00:a8:85:1f:98:a2:b9:c1:12:6a:b0:86:5a: 71:18:3c:2d:90:ac:ec:7f:e2:24:4b:f9:57:42:81:47:d6:09: e5:9c:4b:f5:15:ae:d2:d0:44:e8:a9:de:8a:ed:dc:b6:f1:1a: 91:c5:85:32:3b:9e:55:d3:c7:90:3d:df:43:03:91:a9:4e:ee: 33:27:46:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXgsc3A/FylLNwI3Ri5xcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMmI1MGRhZWYzYTBjYmRiNzJiMjNjYTNkYmJlZmMxNTcz NTgzZjkwHhcNMjUxMjIzMDQwMDU4WhcNMjUxMjI0MDQwMDU4WjAzMTEwLwYDVQQD Eyg3N2ZiNzM5ZDVlZmYyNzcxMjVkYThiZmNkZWZlZWRjZTdiYzJjNWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D83FX2ZVBFgaqicPfLfodcI1z4t hp+KFXAx7f2BFzMxhcEnQ6khOHO+d0j7ewhB9020LA8l2ip8YDgWybirFuNe05Iw Uo2i4Ang9aCsWS4pNdm5BsCfd6oeyEloMfeFhtr1p3cPkb8LxKFK/08wD/S8GiV7 ECr4o12CP/qhr08BSI1cB2JF+/3rxZqQl78oBnWNYIJ/DZWzmpkV+Ws8xno0Au2O KLjn3MNP85zc4BSdRwhz4mYpFcD5gKX6/Q0w2ShZCkvbNln2SXsedD0MhHqE7QGk DZC9boirsxpS5edRgNIWj4/X0aUON3yOHFtATJxoFCz7KbRZ1iXYUHeEkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHf7c51e/ydxJdqL/N7+7c57wsXFMB8GA1UdIwQY MBaAFBwrUNrvOgy9tysjyj2778FXNYP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODIt YWI0MjYzZWQ0MGRlLzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODItYWI0MjYzZWQ0MGRl LzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZNbTLNR NLzuK8BstYAqRYi6B0ogILhHwO1i8mASxtonJasrNZlgG+N2S9yMeD6khJpDX5vc cGySWZBlRfCrLE1FJlKv6V1MGH3lIvihgkIoJoVwrfM925kL+DfAIBtyFp0TOac4 aTjzAD60aj2ra35HZfqrEdGW+EPkT8snMxY8muFT5Varg+Tw6P6Q5imDIAHHQdiR nnMLT6fAolyMUcOXudwNWpDdWMh9A/9ECbE2yp6mSmXQE/sAqIUfmKK5wRJqsIZa cRg8LZCs7H/iJEv5V0KBR9YJ5ZxL9RWu0tBE6Kneiu3ctvEakcWFMjueVdPHkD3f QwORqU7uMydGGA== -----END CERTIFICATE-----Generated at Tue Dec 23 12:45:57 2025 by rpki-client