This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft File: HCM-7mJMGSxsfa2hQy3gueeLCbo.mft (raw, json) Hash identifier: QmssjRyhrVoZ/3sgL3hFCg1R++rJqk0ZwCK5PGFp0As= Subject key identifier: 5B:D6:88:44:F4:02:3F:F5:72:0E:71:66:58:D9:5C:4F:EF:E8:5D:35 Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA Certificate issuer: /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba Certificate serial: 019B601D1E614D538F7A0E0F9D91A04079B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft Manifest number: 17A0 Signing time: Sat 27 Dec 2025 14:01:19 +0000 Manifest this update: Sat 27 Dec 2025 14:01:19 +0000 Manifest next update: Sun 28 Dec 2025 14:01:19 +0000 Files and hashes: 1: HCM-7mJMGSxsfa2hQy3gueeLCbo.crl (hash: A1FC3C806HNnryfqrLV+8KH4SdfALzsv54z5MA3mCBw=) 2: K45e82x9WOXI8E3rbiZhpm6Y1c8.roa (hash: b1lnr/cxWdJYHM4gx0SMdfk+T7jlT+eQyoUM+qzNzCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:1d:1e:61:4d:53:8f:7a:0e:0f:9d:91:a0:40:79:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba Validity Not Before: Dec 27 14:01:19 2025 GMT Not After : Dec 28 14:01:19 2025 GMT Subject: CN=5bd68844f4023ff5720e716658d95c4fefe85d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:64:25:df:cc:5f:a4:26:0f:96:3a:4c:24: b5:ae:ef:c2:bf:9a:e6:b9:d6:a4:0c:b2:b6:04:3a: 86:b3:20:71:f6:f6:8a:19:de:bf:c8:14:2f:a3:db: 40:2d:47:5a:ec:3a:91:17:99:d1:44:f3:61:57:50: 5e:b8:86:a7:ec:7b:b4:b9:aa:15:05:d7:07:bf:a9: 9f:ac:4d:e9:35:9b:06:e7:89:f8:72:7b:78:f0:bb: b7:19:88:9e:39:52:04:2b:42:03:e9:31:29:50:48: 3a:e4:af:66:b7:47:8c:60:62:f1:3f:54:c1:8e:29: 60:60:d5:9a:86:ef:2e:f9:9c:5f:af:3c:e7:9b:ff: 79:f6:40:be:f1:32:9b:b3:92:99:ca:27:56:f2:4f: 68:63:e1:5b:83:ae:25:f8:72:94:5a:ff:fd:17:e7: b8:5e:98:1c:71:26:c2:3d:33:b7:83:35:22:1c:4f: 96:35:c3:b6:54:16:7b:d3:70:2d:54:2f:f5:7b:52: e8:5b:1a:94:3f:71:63:49:04:86:39:62:9c:0b:84: 1f:1e:d6:17:e4:ee:51:12:89:a4:71:71:16:4a:6e: dc:4c:67:00:d1:96:83:05:0d:1b:b4:52:ee:a6:a6: 71:b5:75:5f:ef:a6:cc:c3:1c:81:81:1d:a5:bb:1a: cd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D6:88:44:F4:02:3F:F5:72:0E:71:66:58:D9:5C:4F:EF:E8:5D:35 X509v3 Authority Key Identifier: keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:61:9f:f2:dc:b2:71:1b:f2:32:b9:d4:05:dc:8d:78:33:8a: 17:18:5a:a1:ef:9a:e7:a4:34:1a:a3:88:f7:15:6c:81:cb:96: 52:1d:fc:38:ad:f7:f4:16:86:3b:0f:88:a4:f9:49:59:13:3b: 39:cd:d1:b6:9b:29:0c:e6:f5:08:3b:07:8b:45:4b:da:1c:06: c2:52:fe:60:72:05:b8:cb:1d:46:2b:85:84:76:3a:9d:94:18: 30:54:9c:a5:d8:11:2a:b4:56:70:04:3f:14:2f:3d:7e:83:bd: a3:d6:5c:26:45:b7:dd:fb:54:8a:89:23:90:fe:23:b6:5d:78: 99:70:42:ba:01:0b:f6:9f:55:4e:c0:d1:60:be:cf:8b:c9:89: e7:c5:2d:40:6a:fe:ee:6a:7c:73:a4:f1:ff:6b:f1:b4:0c:9d: 65:4f:e8:a4:aa:70:78:a9:e2:6e:42:13:34:11:b4:dd:b2:7c: 7c:82:0f:dc:66:46:9c:57:34:ea:d0:02:be:ab:bc:f4:b3:cf: e7:c2:8a:97:a6:f1:fc:a0:cd:b5:d0:84:0e:07:97:c3:31:07: f6:76:7e:6c:32:e5:cc:d5:f9:f7:99:29:38:e1:9d:c7:dd:26: fb:7b:10:a4:83:a6:d8:80:eb:f0:0f:14:70:be:ee:f1:62:af: 89:5d:89:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgHR5hTVOPeg4PnZGgQHm3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjMzZWVlNjI0YzE5MmM2YzdkYWRhMTQzMmRlMGI5ZTc4 YjA5YmEwHhcNMjUxMjI3MTQwMTE5WhcNMjUxMjI4MTQwMTE5WjAzMTEwLwYDVQQD Eyg1YmQ2ODg0NGY0MDIzZmY1NzIwZTcxNjY1OGQ5NWM0ZmVmZTg1ZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6pkJd/MX6QmD5Y6TCS1ru/Cv5rm udakDLK2BDqGsyBx9vaKGd6/yBQvo9tALUda7DqRF5nRRPNhV1BeuIan7Hu0uaoV BdcHv6mfrE3pNZsG54n4cnt48Lu3GYieOVIEK0ID6TEpUEg65K9mt0eMYGLxP1TB jilgYNWahu8u+Zxfrzznm/959kC+8TKbs5KZyidW8k9oY+Fbg64l+HKUWv/9F+e4 XpgccSbCPTO3gzUiHE+WNcO2VBZ703AtVC/1e1LoWxqUP3FjSQSGOWKcC4QfHtYX 5O5REomkcXEWSm7cTGcA0ZaDBQ0btFLupqZxtXVf76bMwxyBgR2luxrNCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvWiET0Aj/1cg5xZljZXE/v6F01MB8GA1UdIwQY MBaAFBwjPu5iTBksbH2toUMt4Lnniwm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNWJlZjctMjViMy00NDYzLWIzYmYt NTdhOTUxZjQ5OTMwLzEvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jNWJlZjctMjViMy00NDYzLWIzYmYtNTdhOTUxZjQ5OTMw LzEvSENNLTdtSk1HU3hzZmEyaFF5M2d1ZWVMQ2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWGf8tyy cRvyMrnUBdyNeDOKFxhaoe+a56Q0GqOI9xVsgcuWUh38OK339BaGOw+IpPlJWRM7 Oc3RtpspDOb1CDsHi0VL2hwGwlL+YHIFuMsdRiuFhHY6nZQYMFScpdgRKrRWcAQ/ FC89foO9o9ZcJkW33ftUiokjkP4jtl14mXBCugEL9p9VTsDRYL7Pi8mJ58UtQGr+ 7mp8c6Tx/2vxtAydZU/opKpweKnibkITNBG03bJ8fIIP3GZGnFc06tACvqu89LPP 58KKl6bx/KDNtdCEDgeXwzEH9nZ+bDLlzNX595kpOOGdx90m+3sQpIOm2IDr8A8U cL7u8WKviV2Jyg== -----END CERTIFICATE-----Generated at Sat Dec 27 15:40:23 2025 by rpki-client