This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json) Hash identifier: lPsBQnvpovjaDCE3H8AfZzEe7auMr2VZG3vFxjZOW6Y= Subject key identifier: 8B:BE:8B:72:65:A2:65:17:8D:3A:14:DB:1D:32:8A:76:0D:0B:3C:CC Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91 Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91 Certificate serial: 019B3CB4C41054DBFE8E48DDB36926B8C0B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 17:00:38 +0000 Manifest this update: Sat 20 Dec 2025 17:00:38 +0000 Manifest next update: Sun 21 Dec 2025 17:00:38 +0000 Files and hashes: 1: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: nh5EbozCP2m9pe6E5HsGegmdYp1scAQqDLr86KIfx9Q=) 2: ZQ6sjy8La_IDIFosGkys-gjAGew.roa (hash: C7JF+gmCs+f4XDJ3+8WA8I9Otmb9ceFXsb6Dqw3hOq8=) 3: pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa (hash: Ci1NRJKdqWSbaDsRVp57BbXUB2naGLYnO5kSwluYKxo=) 4: ztoXV0czkggEzKpWeBIPpNx7Y00.roa (hash: MW72dY631rN8xBMa8x273b/yH8cBTnl1fp+7hzq29aE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:c4:10:54:db:fe:8e:48:dd:b3:69:26:b8:c0:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91 Validity Not Before: Dec 20 17:00:38 2025 GMT Not After : Dec 21 17:00:38 2025 GMT Subject: CN=8bbe8b7265a265178d3a14db1d328a760d0b3ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:11:99:ce:e3:9f:8b:85:ea:56:3b:29:d7: 3a:63:4a:f6:2c:ee:f3:6f:30:a6:f3:62:8d:d5:7c: 19:da:6f:96:18:7a:97:9c:21:eb:3b:df:92:74:a8: 74:6c:5b:f2:e5:06:31:ed:c1:c6:0a:6d:84:56:1c: da:c2:78:a0:38:ec:f6:cc:10:37:36:46:dd:44:a6: 5f:0d:68:d7:04:cb:9e:7c:5d:1b:bc:da:09:6b:29: ff:59:b9:e1:83:1a:e1:32:04:21:07:44:a8:3f:cb: a3:e1:27:ea:52:00:9e:e7:ff:c6:e8:f7:b8:ff:fa: 9f:09:fa:cb:b7:59:ee:df:72:3c:cb:34:f4:6f:f5: 4a:b8:d3:3c:d9:33:1b:65:cd:ba:a9:b8:ad:99:79: 41:9b:5b:4f:50:23:a5:b4:49:a1:4e:1f:1e:4b:26: 3a:2a:50:71:99:e3:1f:9f:a1:13:a7:9b:44:97:5b: 82:2c:92:78:01:e0:c8:c6:25:95:c4:fa:99:f4:1a: af:dc:80:99:e5:27:4b:54:0b:37:9b:10:ba:66:b7: 6f:a5:6c:d9:b8:1d:e0:89:0a:e1:7c:9e:cd:f6:5f: 00:cb:0d:9c:e5:09:19:99:67:a8:7c:ea:fc:92:0d: 3c:ba:fa:a8:82:12:af:74:91:9f:5e:ca:5e:45:04: bb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BE:8B:72:65:A2:65:17:8D:3A:14:DB:1D:32:8A:76:0D:0B:3C:CC X509v3 Authority Key Identifier: keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e4:fd:1f:da:fe:61:e1:8a:0c:8c:b3:d1:fb:16:36:48:74: 88:44:50:ee:44:aa:ff:99:c9:fc:92:dd:d6:d2:2e:89:8d:83: 15:bb:a8:0e:8c:63:19:ec:9c:1d:de:be:c9:ac:ce:e3:98:e9: a7:77:9d:95:f7:6c:13:2d:b8:a8:2c:b5:99:1a:33:a1:0f:0c: 6a:d3:57:71:e2:25:ed:75:17:80:b7:c7:6f:c2:3e:d7:6f:0f: 14:9c:52:06:10:3d:7e:4b:c4:0b:d5:dd:bc:af:4b:93:c1:27: 34:4d:ab:26:8e:f1:a4:26:4e:66:45:8b:7f:ea:4a:9b:44:54: 2c:95:1a:04:ff:e2:d7:df:9c:db:aa:95:b9:01:ab:d3:17:42: 38:e7:19:e5:41:64:dd:74:81:6e:f5:be:53:c6:bd:67:2c:81: 5f:08:0a:57:60:c0:8d:d6:a7:10:7f:ed:92:36:77:a7:9c:a7: 87:55:cc:14:9e:6d:4d:8e:c0:5f:b3:d9:c3:01:b9:eb:cb:64: 30:89:93:77:18:cc:a2:81:47:e6:8b:57:be:b1:77:66:8f:e6: 1f:25:b4:64:50:35:05:71:16:5a:4b:ef:a2:e7:20:2f:06:23: 13:cb:56:58:b7:58:8e:35:64:c0:df:f6:c0:42:48:01:24:82: 37:ea:ca:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tMQQVNv+jkjds2kmuMC5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNTE0MDk4YTVhOTczNmNkYTQzMDNlMDQ5NWU5NDY1MjM5 MGFhOTEwHhcNMjUxMjIwMTcwMDM4WhcNMjUxMjIxMTcwMDM4WjAzMTEwLwYDVQQD Eyg4YmJlOGI3MjY1YTI2NTE3OGQzYTE0ZGIxZDMyOGE3NjBkMGIzY2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUQRmc7jn4uF6lY7Kdc6Y0r2LO7z bzCm82KN1XwZ2m+WGHqXnCHrO9+SdKh0bFvy5QYx7cHGCm2EVhzawnigOOz2zBA3 NkbdRKZfDWjXBMuefF0bvNoJayn/WbnhgxrhMgQhB0SoP8uj4SfqUgCe5//G6Pe4 //qfCfrLt1nu33I8yzT0b/VKuNM82TMbZc26qbitmXlBm1tPUCOltEmhTh8eSyY6 KlBxmeMfn6ETp5tEl1uCLJJ4AeDIxiWVxPqZ9Bqv3ICZ5SdLVAs3mxC6ZrdvpWzZ uB3giQrhfJ7N9l8Ayw2c5QkZmWeofOr8kg08uvqoghKvdJGfXspeRQS7KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIu+i3JlomUXjToU2x0yinYNCzzMMB8GA1UdIwQY MBaAFB5RQJilqXNs2kMD4ElelGUjkKqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNWRmY2ItZDkyZC00OGZlLTlkYWQt ODU0MzgxNjg2YzdiLzEvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zNWRmY2ItZDkyZC00OGZlLTlkYWQtODU0MzgxNjg2Yzdi LzEvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuT9H9r+ YeGKDIyz0fsWNkh0iERQ7kSq/5nJ/JLd1tIuiY2DFbuoDoxjGeycHd6+yazO45jp p3edlfdsEy24qCy1mRozoQ8MatNXceIl7XUXgLfHb8I+128PFJxSBhA9fkvEC9Xd vK9Lk8EnNE2rJo7xpCZOZkWLf+pKm0RULJUaBP/i19+c26qVuQGr0xdCOOcZ5UFk 3XSBbvW+U8a9ZyyBXwgKV2DAjdanEH/tkjZ3p5ynh1XMFJ5tTY7AX7PZwwG568tk MImTdxjMooFH5otXvrF3Zo/mHyW0ZFA1BXEWWkvvoucgLwYjE8tWWLdYjjVkwN/2 wEJIASSCN+rKfw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:55:45 2025 by rpki-client