This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json) Hash identifier: TlXquE+v16p5CVgVSnVHytcBnihyvFN236JZ48GxNQM= Subject key identifier: 36:A0:BB:39:8B:C7:6F:DA:E3:52:35:93:AF:6B:A8:8E:5D:C8:4B:0D Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51 Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551 Certificate serial: 019B39469160629ADF5E2CA372058449C56A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft Manifest number: 0E46 Signing time: Sat 20 Dec 2025 01:01:24 +0000 Manifest this update: Sat 20 Dec 2025 01:01:24 +0000 Manifest next update: Sun 21 Dec 2025 01:01:24 +0000 Files and hashes: 1: 2X95sls0uWU5PgwEsuvbZMPdH28.roa (hash: WAXbNwzmu9B4g0l97d8oAvrkNfSo32YmgajceOiYDlc=) 2: 44WcjUyhdWbouJas9-vY_4pr1wA.roa (hash: Qx8y85cpYAiQ8a63DXW295iCOgGuHySiBFYnU925DiI=) 3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: ar0xG3I8GqPLjftKq4UzXD4s/cTABJyMgtjD1s5ALFA=) 4: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:91:60:62:9a:df:5e:2c:a3:72:05:84:49:c5:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551 Validity Not Before: Dec 20 01:01:24 2025 GMT Not After : Dec 21 01:01:24 2025 GMT Subject: CN=36a0bb398bc76fdae3523593af6ba88e5dc84b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:97:de:ea:0b:df:1c:3a:f1:0a:4a:22:63:54: 95:b0:52:ec:f5:c6:81:51:36:58:85:ba:5d:5d:02: 8a:7e:44:75:fc:b8:40:05:f4:85:ec:d0:05:c0:9d: a1:91:c0:fc:99:96:ca:68:75:8c:03:07:ee:33:2d: b4:69:47:04:5a:88:2f:e7:5f:b9:a2:ed:4c:81:9e: 2c:fb:46:7b:34:18:3c:e3:4d:2b:20:0d:4d:d9:00: b8:44:c6:55:54:5c:d6:96:ab:62:3d:8a:a1:7b:d2: 18:70:8e:af:f1:71:0e:94:af:2e:1c:0b:1d:b8:52: 34:1a:d3:01:4c:ec:a9:fb:e3:52:4f:f2:b8:7f:c9: 77:37:63:5b:30:0e:18:b6:78:3a:c3:77:93:a0:f4: bd:68:52:fa:d5:b0:3f:78:93:23:c9:f9:13:79:91: e0:c9:03:6c:43:a3:40:c3:70:e3:68:4e:a0:a5:a1: e1:2e:d4:00:0c:24:b8:19:02:71:b3:d1:b0:68:b2: 82:a4:ae:60:9e:13:d4:be:26:00:56:bc:ce:a2:aa: 3e:ca:c2:79:a0:aa:bb:88:c3:b4:a0:1a:35:bb:46: be:4f:1c:ba:3b:d5:97:ae:cb:a9:e8:c3:73:0f:c8: 14:d8:7f:cf:15:3f:d1:07:43:ad:62:7c:bf:b4:72: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A0:BB:39:8B:C7:6F:DA:E3:52:35:93:AF:6B:A8:8E:5D:C8:4B:0D X509v3 Authority Key Identifier: keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ef:13:69:1d:71:f6:9a:fd:f6:f7:b8:fb:2d:68:e3:23:2e: 13:b6:2f:a1:f3:36:9e:48:a2:4b:d2:9b:d9:28:71:80:bd:d4: db:e6:18:13:cc:6e:47:8a:f9:da:51:06:69:ea:cc:93:f5:80: 17:0a:68:bc:72:f7:0d:67:cf:a1:4b:fc:3d:38:a3:ba:8e:cb: 22:3e:89:ee:ea:1f:33:d7:a1:db:07:18:e0:b1:70:dd:dd:97: 9a:c0:b0:18:82:41:92:51:c0:24:aa:a7:3a:6e:15:67:93:30: 3f:8f:f5:3c:60:dd:ea:da:4c:0d:74:4b:c8:4d:c2:d7:d9:08: 0e:94:12:d3:da:d6:3c:11:52:38:a9:0b:c6:7b:1f:03:75:63: 17:4a:fa:91:2f:61:18:40:90:a7:0f:27:32:30:a1:f1:b0:32: d9:f4:7f:42:d4:31:25:bb:2e:d5:81:87:56:59:cf:6f:e9:c9: 2f:b1:fa:35:e5:a4:8c:2d:4c:e4:5d:d4:8d:a2:bd:77:25:a2: a7:29:eb:c2:dd:f6:e1:56:11:9c:e2:0a:f1:86:57:c1:1b:71: 34:93:2d:41:a0:9f:0c:4f:e7:3a:2b:aa:d4:60:de:e5:39:7d: 3c:0c:97:a7:0b:2a:b2:c3:54:d9:cf:58:bd:f8:3d:9b:8d:91: b7:93:1d:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RpFgYprfXiyjcgWEScVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTBhOWViNDdkODI0YjUxZjE1NDQ0MjQ4MWEyNTcxNjgz OTQ1NTEwHhcNMjUxMjIwMDEwMTI0WhcNMjUxMjIxMDEwMTI0WjAzMTEwLwYDVQQD EygzNmEwYmIzOThiYzc2ZmRhZTM1MjM1OTNhZjZiYTg4ZTVkYzg0YjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55fe6gvfHDrxCkoiY1SVsFLs9caB UTZYhbpdXQKKfkR1/LhABfSF7NAFwJ2hkcD8mZbKaHWMAwfuMy20aUcEWogv51+5 ou1MgZ4s+0Z7NBg8400rIA1N2QC4RMZVVFzWlqtiPYqhe9IYcI6v8XEOlK8uHAsd uFI0GtMBTOyp++NST/K4f8l3N2NbMA4Ytng6w3eToPS9aFL61bA/eJMjyfkTeZHg yQNsQ6NAw3DjaE6gpaHhLtQADCS4GQJxs9GwaLKCpK5gnhPUviYAVrzOoqo+ysJ5 oKq7iMO0oBo1u0a+Txy6O9WXrsup6MNzD8gU2H/PFT/RB0OtYny/tHKh7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaguzmLx2/a41I1k69rqI5dyEsNMB8GA1UdIwQY MBaAFB6gqetH2CS1HxVEQkgaJXFoOUVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzkt ODQxOGE5NmY2Nzk1LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzktODQxOGE5NmY2Nzk1 LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADe8TaR1x 9pr99ve4+y1o4yMuE7YvofM2nkiiS9Kb2ShxgL3U2+YYE8xuR4r52lEGaerMk/WA FwpovHL3DWfPoUv8PTijuo7LIj6J7uofM9eh2wcY4LFw3d2XmsCwGIJBklHAJKqn Om4VZ5MwP4/1PGDd6tpMDXRLyE3C19kIDpQS09rWPBFSOKkLxnsfA3VjF0r6kS9h GECQpw8nMjCh8bAy2fR/QtQxJbsu1YGHVlnPb+nJL7H6NeWkjC1M5F3UjaK9dyWi pynrwt324VYRnOIK8YZXwRtxNJMtQaCfDE/nOiuq1GDe5Tl9PAyXpwsqssNU2c9Y vfg9m42Rt5MdSQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:03:05 2025 by rpki-client