This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json) Hash identifier: iajMr8O5gFzDjnrrvsYCelofV1b39xiloci+eM9CXK8= Subject key identifier: CA:81:40:16:70:A9:5A:C7:63:FC:BC:49:04:66:D5:D3:DD:37:02:A3 Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93 Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193 Certificate serial: 019B42B78238B1CC6EC2F0E91CD017ADB804 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft Manifest number: 171C Signing time: Sun 21 Dec 2025 21:01:21 +0000 Manifest this update: Sun 21 Dec 2025 21:01:21 +0000 Manifest next update: Mon 22 Dec 2025 21:01:21 +0000 Files and hashes: 1: AJvWKjlfflZ9cQofDD0ppbseZLQ.roa (hash: VGiicvrQITfBrX3SAtjyhR6B6SA41PSS6lItKnKTNYo=) 2: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: tiPhkPx7w5lJBTZD3V7D8iJbQ2TjSHGnt8TeZV105+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:82:38:b1:cc:6e:c2:f0:e9:1c:d0:17:ad:b8:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193 Validity Not Before: Dec 21 21:01:21 2025 GMT Not After : Dec 22 21:01:21 2025 GMT Subject: CN=ca81401670a95ac763fcbc490466d5d3dd3702a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d8:6b:d4:d4:1a:53:98:7c:bf:02:2f:a2:db: eb:c7:77:d6:29:d0:fb:07:31:84:db:6d:c1:63:ea: 8c:f3:8f:47:11:5e:a3:a7:89:4f:06:01:31:2b:46: fc:45:8e:72:f9:b0:f5:28:cb:ee:0b:f5:51:da:63: 8e:0d:ad:4e:8f:0c:25:fa:fc:29:c4:f7:fc:ae:47: cc:11:7f:69:01:c7:87:a4:3c:df:7d:3f:53:7a:f6: f2:17:48:48:24:b6:ec:e8:8d:f8:cf:78:c8:db:aa: e5:5e:3f:a4:8c:da:6a:ee:65:a0:cb:c0:88:c9:bb: 3c:a3:a9:74:f7:06:67:7e:e8:bc:4e:56:95:a9:2b: 0a:a9:6b:26:80:4a:90:bc:fb:ae:7d:e9:79:ae:28: 58:8c:a3:93:d1:09:73:2e:c8:ce:9f:72:7f:57:b6: 1f:ab:ac:eb:44:06:8f:c0:cc:50:a5:b0:6d:e0:72: 17:48:e8:09:5c:1c:69:9d:f0:15:42:38:f4:5b:33: db:a7:75:9c:8c:7f:4b:fb:dd:d3:c3:4e:f1:76:26: f7:dc:06:3a:03:30:8a:9e:e8:ed:58:42:75:ff:79: 06:d5:46:13:33:b3:94:ac:8c:d5:70:72:08:c8:26: 85:5f:9c:41:7d:5c:02:ba:c2:71:03:61:d1:e5:38: 4f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:81:40:16:70:A9:5A:C7:63:FC:BC:49:04:66:D5:D3:DD:37:02:A3 X509v3 Authority Key Identifier: keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f5:42:32:cc:e5:4a:27:83:ae:9b:06:a3:07:8c:25:39:b1: 8a:d8:23:d8:72:5c:28:2a:74:a5:97:8e:33:6a:00:7b:c8:b6: 15:b6:52:af:75:fe:28:75:63:f9:31:50:fc:b7:ef:61:e3:f1: d1:de:ba:5b:29:1f:a4:16:5e:39:37:4f:db:ea:b0:48:17:a8: ef:62:ca:cb:6f:c3:42:ef:e0:29:52:67:46:e9:15:89:ec:dc: 24:46:bc:8a:fc:dd:20:ef:f0:a1:1a:9e:eb:74:98:e2:a7:30: 02:ec:b5:57:17:00:3c:e1:a6:15:b0:5f:29:d4:11:55:34:83: c9:7c:69:cd:11:ae:62:1b:81:a7:0b:0a:99:01:3c:53:c8:75: 87:a7:9c:71:c2:13:24:db:69:8e:21:c2:38:17:4c:23:70:f9: 8b:8d:62:cb:98:45:2b:d1:6e:ac:c8:c2:ae:00:86:9a:95:40: 49:e5:54:63:fa:d0:cb:96:b8:01:13:83:cb:a1:4c:fc:c5:33: 5d:9a:d1:4c:76:12:40:73:c7:f5:10:ee:7c:6e:2d:b8:01:f8: 30:c8:15:ba:f6:45:7b:6d:99:c6:02:28:f0:46:89:8b:00:28: eb:3f:a1:65:47:e8:07:32:9a:4f:d4:21:71:85:6a:b3:37:7c: 02:51:d8:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt4I4scxuwvDpHNAXrbgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTU1OWQ4YmY2YWMyZDg2OGQwNjY1YWQ1N2QyYzZhYzE0 NzIxOTMwHhcNMjUxMjIxMjEwMTIxWhcNMjUxMjIyMjEwMTIxWjAzMTEwLwYDVQQD EyhjYTgxNDAxNjcwYTk1YWM3NjNmY2JjNDkwNDY2ZDVkM2RkMzcwMmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuthr1NQaU5h8vwIvotvrx3fWKdD7 BzGE223BY+qM849HEV6jp4lPBgExK0b8RY5y+bD1KMvuC/VR2mOODa1Ojwwl+vwp xPf8rkfMEX9pAceHpDzffT9TevbyF0hIJLbs6I34z3jI26rlXj+kjNpq7mWgy8CI ybs8o6l09wZnfui8TlaVqSsKqWsmgEqQvPuufel5rihYjKOT0QlzLsjOn3J/V7Yf q6zrRAaPwMxQpbBt4HIXSOgJXBxpnfAVQjj0WzPbp3WcjH9L+93Tw07xdib33AY6 AzCKnujtWEJ1/3kG1UYTM7OUrIzVcHIIyCaFX5xBfVwCusJxA2HR5ThPHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqBQBZwqVrHY/y8SQRm1dPdNwKjMB8GA1UdIwQY MBaAFB6lWdi/asLYaNBmWtV9LGrBRyGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEt NWZmY2M0NmFlN2I1LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEtNWZmY2M0NmFlN2I1 LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvVCMszl SieDrpsGoweMJTmxitgj2HJcKCp0pZeOM2oAe8i2FbZSr3X+KHVj+TFQ/LfvYePx 0d66WykfpBZeOTdP2+qwSBeo72LKy2/DQu/gKVJnRukViezcJEa8ivzdIO/woRqe 63SY4qcwAuy1VxcAPOGmFbBfKdQRVTSDyXxpzRGuYhuBpwsKmQE8U8h1h6ecccIT JNtpjiHCOBdMI3D5i41iy5hFK9FurMjCrgCGmpVASeVUY/rQy5a4ARODy6FM/MUz XZrRTHYSQHPH9RDufG4tuAH4MMgVuvZFe22ZxgIo8EaJiwAo6z+hZUfoBzKaT9Qh cYVqszd8AlHYXw== -----END CERTIFICATE-----Generated at Mon Dec 22 01:02:25 2025 by rpki-client