This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft File: HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft (raw, json) Hash identifier: sQi4c+lFVElR7m/PLSwk+ET1wb4W/P+p2gzciFwxezM= Subject key identifier: 46:0F:BD:98:8C:2D:44:82:7E:30:8A:1A:1F:0A:87:01:94:5D:B0:CE Authority key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE Certificate issuer: /CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace Certificate serial: 019B251A5D808EB21E8B65B6B63074E7F9F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft Manifest number: 4F Signing time: Tue 16 Dec 2025 03:00:43 +0000 Manifest this update: Tue 16 Dec 2025 03:00:43 +0000 Manifest next update: Wed 17 Dec 2025 03:00:43 +0000 Files and hashes: 1: HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl (hash: JoeB2A+ZBeo2zw2A0AIXKX5OTws6G3yS5S2x6VGW5R4=) 2: Tf9luNXyEq9QxysMyYE_MI2T-Dw.roa (hash: JCTZRaYwg2Dc/NrGs0vNosIbeSst/kpqGq9Ss3robz0=) 3: unFfRVZsvRvkohGxQoSgq95x_UY.roa (hash: tSXKguvWUmVfGHfR9KLHr2lCBC0TGZziW3nPkjH31gQ=) 4: vWwiGSVRiuY5G_sGCiMiyC9oZaw.asa (hash: TYWXQ81PwJFaPM/v0IBTjfWfvW7fjHxqu9IT+A6xBqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:1a:5d:80:8e:b2:1e:8b:65:b6:b6:30:74:e7:f9:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace Validity Not Before: Dec 16 03:00:43 2025 GMT Not After : Dec 17 03:00:43 2025 GMT Subject: CN=460fbd988c2d44827e308a1a1f0a8701945db0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:92:a5:c5:62:52:f6:b0:9c:da:f0:a6:c4: 95:c5:4c:a4:79:db:25:70:91:3d:97:52:f7:7b:07: 16:8f:88:ac:56:9d:4c:cf:33:34:fe:a2:02:dc:5c: 7a:93:23:24:06:12:ab:c9:0d:d5:f9:96:0c:c5:90: 1e:47:74:81:7f:77:44:80:35:c9:76:50:27:03:c6: 73:ec:fa:bf:a7:1f:73:55:56:71:41:4c:20:35:21: 7a:c5:d8:69:4e:98:73:ff:63:26:6c:28:ae:67:b8: 91:0b:62:f2:54:d9:5d:52:9b:4b:40:5b:d6:2b:c6: e0:b0:1b:a0:23:49:96:0d:8c:16:0b:d1:03:1d:f1: 9e:66:a7:97:d8:83:f2:00:49:b5:07:b9:47:25:ac: 5a:8b:49:de:5e:c8:55:23:4e:69:fd:da:95:09:18: ef:33:d9:a5:6f:c3:10:15:86:f1:4c:ea:c6:4b:71: 87:f0:9b:d6:18:f3:22:6a:1c:c4:da:a3:72:18:3d: 9a:7d:42:df:b7:82:9e:77:6d:2f:36:f8:d3:94:4c: cf:d8:66:ba:bf:a5:07:fe:f8:08:df:65:7d:fe:16: c1:94:f0:4c:7d:f9:09:47:ee:99:f6:2f:2c:6a:28: d8:9a:ef:21:f1:ca:92:11:8a:80:35:a1:60:a4:a0: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0F:BD:98:8C:2D:44:82:7E:30:8A:1A:1F:0A:87:01:94:5D:B0:CE X509v3 Authority Key Identifier: keyid:1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:9a:f2:04:89:a9:27:6a:bf:e0:f1:d4:c3:48:51:b1:90:57: 03:10:42:83:f5:ee:50:1c:d2:53:2b:fe:56:5f:26:13:21:09: 49:05:0e:40:f5:fa:25:06:01:e6:96:44:c0:57:cc:fc:81:b3: 46:15:ca:42:65:61:10:a7:05:a0:73:98:d2:ce:be:a3:57:5a: bf:d5:c1:cc:c3:77:76:a0:cb:5a:14:47:3e:9e:bb:f1:cc:dd: 44:5f:3d:57:ed:0e:b3:f3:1a:35:38:cb:6f:2e:c6:f5:98:c4: bd:8c:90:81:f4:ee:1e:94:49:b6:8b:38:91:45:40:27:b5:8c: c1:48:1d:02:b0:86:87:09:bd:65:39:71:86:68:da:0e:76:61: 41:98:6c:0c:a1:cb:18:6b:24:3b:71:ef:d6:ef:61:59:97:c3: 17:14:73:fe:4b:c5:ef:72:a4:83:81:b4:65:75:c5:16:b2:90: 9f:b8:61:6c:97:e4:45:c1:62:ed:60:07:f8:1c:e0:ac:f0:dc: 7e:2a:15:b2:f3:d3:46:dc:41:43:2e:d5:cc:35:5e:98:c4:8a: 99:31:dc:b3:46:b7:ab:10:b0:a6:66:ad:0a:5b:10:63:5b:24: c7:16:fc:44:3f:1a:a2:72:8b:86:21:10:e0:59:b8:c3:7c:d6: 34:50:c0:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslGl2AjrIei2W2tjB05/n5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDRhZjI4ZjhmN2FhODU4ZTI3ZDhlMmM3NjExNGM2ZmY0 OWJhY2UwHhcNMjUxMjE2MDMwMDQzWhcNMjUxMjE3MDMwMDQzWjAzMTEwLwYDVQQD Eyg0NjBmYmQ5ODhjMmQ0NDgyN2UzMDhhMWExZjBhODcwMTk0NWRiMGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/uSpcViUvawnNrwpsSVxUykedsl cJE9l1L3ewcWj4isVp1MzzM0/qIC3Fx6kyMkBhKryQ3V+ZYMxZAeR3SBf3dEgDXJ dlAnA8Zz7Pq/px9zVVZxQUwgNSF6xdhpTphz/2MmbCiuZ7iRC2LyVNldUptLQFvW K8bgsBugI0mWDYwWC9EDHfGeZqeX2IPyAEm1B7lHJaxai0neXshVI05p/dqVCRjv M9mlb8MQFYbxTOrGS3GH8JvWGPMiahzE2qNyGD2afULft4Ked20vNvjTlEzP2Ga6 v6UH/vgI32V9/hbBlPBMffkJR+6Z9i8saijYmu8h8cqSEYqANaFgpKBXlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYPvZiMLUSCfjCKGh8KhwGUXbDOMB8GA1UdIwQY MBaAFB0Eryj496qFjifY4sdhFMb/SbrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUt NzBiNGUwYjNmYzllLzEvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNmQ0MDAtOGM0My00NGNjLTkzNTUtNzBiNGUwYjNmYzll LzEvSFFTdktQajNxb1dPSjlqaXgyRVV4djlKdXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpryBImp J2q/4PHUw0hRsZBXAxBCg/XuUBzSUyv+Vl8mEyEJSQUOQPX6JQYB5pZEwFfM/IGz RhXKQmVhEKcFoHOY0s6+o1dav9XBzMN3dqDLWhRHPp678czdRF89V+0Os/MaNTjL by7G9ZjEvYyQgfTuHpRJtos4kUVAJ7WMwUgdArCGhwm9ZTlxhmjaDnZhQZhsDKHL GGskO3Hv1u9hWZfDFxRz/kvF73Kkg4G0ZXXFFrKQn7hhbJfkRcFi7WAH+BzgrPDc fioVsvPTRtxBQy7VzDVemMSKmTHcs0a3qxCwpmatClsQY1skxxb8RD8aonKLhiEQ 4Fm4w3zWNFDAMQ== -----END CERTIFICATE-----Generated at Tue Dec 16 14:05:04 2025 by rpki-client