This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json) Hash identifier: f0DwD6eAPkZYOhDQ+j9GrYFxaH8nArwH3apE5ZE6kGc= Subject key identifier: 2E:AA:5E:46:E6:4D:5D:41:2F:3E:D7:27:71:9A:08:FA:16:AE:5C:5F Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0 Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0 Certificate serial: 019B3DFE858D9D9AA32955915BF1AC4E7899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft Manifest number: 179A Signing time: Sat 20 Dec 2025 23:00:49 +0000 Manifest this update: Sat 20 Dec 2025 23:00:49 +0000 Manifest next update: Sun 21 Dec 2025 23:00:49 +0000 Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: Q8B7b3brpIXeye8XZTCnLrrwOHX0+CQy1DaXUGK8JBA=) 2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=) 3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:85:8d:9d:9a:a3:29:55:91:5b:f1:ac:4e:78:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0 Validity Not Before: Dec 20 23:00:49 2025 GMT Not After : Dec 21 23:00:49 2025 GMT Subject: CN=2eaa5e46e64d5d412f3ed727719a08fa16ae5c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fa:19:37:a0:79:4d:3e:8d:15:4a:f0:be:ea: b0:d5:d0:e1:98:ac:97:66:a5:08:e5:f5:1b:3e:b8: ca:53:41:b5:0e:68:b1:a5:bf:80:02:ef:52:9c:18: e2:d5:a2:0d:f2:27:80:92:62:ed:a0:94:62:52:5a: 5e:22:55:40:76:44:7f:40:b7:3e:e2:47:ef:58:2f: 88:58:87:b2:85:45:bd:5e:e4:b1:07:14:e1:09:43: bd:21:2d:cb:97:57:ee:cb:c3:26:25:6e:03:cb:6e: 2f:bb:e5:81:de:16:8c:a5:d3:c0:5e:5b:fe:28:80: 8a:c3:76:db:4a:cd:dc:3f:99:da:bb:78:59:79:26: e5:71:bd:a4:15:3d:7c:a9:b6:eb:9f:3d:01:e5:7f: 30:9b:32:29:1f:4d:40:78:37:63:dc:03:4c:ea:5e: 0f:a5:27:4d:f1:ab:84:a9:51:ac:ef:8e:bf:24:93: 23:34:c6:e3:1b:4a:1d:69:6e:e3:76:52:dd:fb:da: 3e:ea:1d:01:fe:17:26:92:44:7e:47:86:16:a0:ab: 4e:fc:cb:b8:8e:6d:f3:ac:44:1b:eb:94:6e:56:1d: c9:1d:8c:42:14:9a:ed:aa:95:4d:ef:8d:91:bb:a1: 95:b0:9e:18:65:6e:45:78:db:58:25:0c:a2:58:7f: 3f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AA:5E:46:E6:4D:5D:41:2F:3E:D7:27:71:9A:08:FA:16:AE:5C:5F X509v3 Authority Key Identifier: keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d7:44:c2:53:f1:ad:2d:9e:eb:60:c1:93:14:2f:b0:91:7e: 0e:4d:4b:ef:3b:31:a1:eb:70:2a:e2:32:f7:c6:81:68:62:5c: b0:f3:8b:57:0b:b9:c1:f2:2b:cc:0b:61:83:07:f7:d1:75:89: 2e:4f:47:ab:56:4b:1e:5b:60:34:ee:a6:90:af:21:73:6f:c2: 11:3c:31:a4:24:ce:58:4f:0f:f8:b5:e6:da:83:e2:b5:37:17: 71:bb:f5:06:37:bb:f5:c3:9e:85:b8:83:6a:82:41:20:fd:8e: 57:fe:96:70:78:e6:25:f2:81:6b:94:f0:a6:ce:79:5c:8e:db: 46:b8:93:c6:3b:2f:7f:cb:a4:9c:2e:54:22:e8:c3:b6:a4:43: c4:60:f9:c0:32:ec:20:4b:77:b9:89:a2:e4:55:87:4b:b9:7d: a2:a9:dc:f9:0f:55:6c:69:ad:d6:ad:84:9c:34:5f:11:8d:92: 0b:09:b0:88:24:bc:55:23:06:58:0f:44:34:62:62:c1:8e:81: 87:49:db:60:50:75:63:f8:ea:57:fd:b3:64:3f:0b:af:7e:4b: 62:73:eb:99:22:6d:1d:a9:45:fd:8e:c7:71:8a:b7:3c:ae:b0: 53:92:05:43:27:7f:0c:09:1c:bd:9a:ce:08:8f:4e:b1:a6:d7: 2b:40:e2:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/oWNnZqjKVWRW/GsTniZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMGM3ZTdiYjI3YzUzM2E5OTdkMjc3Y2FkZDQxN2VjN2Jk Mjg0ZjAwHhcNMjUxMjIwMjMwMDQ5WhcNMjUxMjIxMjMwMDQ5WjAzMTEwLwYDVQQD EygyZWFhNWU0NmU2NGQ1ZDQxMmYzZWQ3Mjc3MTlhMDhmYTE2YWU1YzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfoZN6B5TT6NFUrwvuqw1dDhmKyX ZqUI5fUbPrjKU0G1Dmixpb+AAu9SnBji1aIN8ieAkmLtoJRiUlpeIlVAdkR/QLc+ 4kfvWC+IWIeyhUW9XuSxBxThCUO9IS3Ll1fuy8MmJW4Dy24vu+WB3haMpdPAXlv+ KICKw3bbSs3cP5nau3hZeSblcb2kFT18qbbrnz0B5X8wmzIpH01AeDdj3ANM6l4P pSdN8auEqVGs746/JJMjNMbjG0odaW7jdlLd+9o+6h0B/hcmkkR+R4YWoKtO/Mu4 jm3zrEQb65RuVh3JHYxCFJrtqpVN742Ru6GVsJ4YZW5FeNtYJQyiWH8/VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6qXkbmTV1BLz7XJ3GaCPoWrlxfMB8GA1UdIwQY MBaAFB0MfnuyfFM6mX0nfK3UF+x70oTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEt YjI4ZjA3YjJmNDViLzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEtYjI4ZjA3YjJmNDVi LzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9dEwlPx rS2e62DBkxQvsJF+Dk1L7zsxoetwKuIy98aBaGJcsPOLVwu5wfIrzAthgwf30XWJ Lk9Hq1ZLHltgNO6mkK8hc2/CETwxpCTOWE8P+LXm2oPitTcXcbv1Bje79cOehbiD aoJBIP2OV/6WcHjmJfKBa5Twps55XI7bRriTxjsvf8uknC5UIujDtqRDxGD5wDLs IEt3uYmi5FWHS7l9oqnc+Q9VbGmt1q2EnDRfEY2SCwmwiCS8VSMGWA9ENGJiwY6B h0nbYFB1Y/jqV/2zZD8Lr35LYnPrmSJtHalF/Y7HcYq3PK6wU5IFQyd/DAkcvZrO CI9OsabXK0Di0g== -----END CERTIFICATE-----Generated at Sun Dec 21 04:22:51 2025 by rpki-client