This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft File: HQHtI2TsgiZcaIaf5yvnVzGaMes.mft (raw, json) Hash identifier: iKPwUrmN7fl2kxKf0NvaY1L+UKkpM6VVY3VZjrBVYvI= Subject key identifier: 14:9E:A6:FF:57:E2:86:17:9E:3E:A5:1A:53:63:CE:32:7A:21:E5:84 Authority key identifier: 1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB Certificate issuer: /CN=1d01ed2364ec82265c68869fe72be757319a31eb Certificate serial: 019B6C57C7064BC96CE0B23ABA67981FF0CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft Manifest number: 15C2 Signing time: Mon 29 Dec 2025 23:00:50 +0000 Manifest this update: Mon 29 Dec 2025 23:00:50 +0000 Manifest next update: Tue 30 Dec 2025 23:00:50 +0000 Files and hashes: 1: HQHtI2TsgiZcaIaf5yvnVzGaMes.crl (hash: ymnY0nA7bUZMfAEMgKt30EFAZAZYs14qMgEvMzPoau0=) 2: VrKnPWUHZqDvzs6ur0GOjZl2i2E.roa (hash: mb8FZcI3peRcYmZtZcg+Q1vM47sFhZh3vrE8fwC75+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:57:c7:06:4b:c9:6c:e0:b2:3a:ba:67:98:1f:f0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d01ed2364ec82265c68869fe72be757319a31eb Validity Not Before: Dec 29 23:00:50 2025 GMT Not After : Dec 30 23:00:50 2025 GMT Subject: CN=149ea6ff57e286179e3ea51a5363ce327a21e584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:65:3c:70:78:63:ab:ab:82:04:58:5f:29: 09:91:5b:7f:45:f8:68:90:4b:98:a5:35:9b:5c:34: 7e:66:b8:57:1a:7f:50:34:b7:40:a2:d6:b6:4e:bd: 4b:db:d3:c6:e4:cf:f7:22:ff:03:65:5e:4a:17:4f: 50:70:38:4e:33:1b:4d:e9:0c:05:c6:42:f3:e1:a3: f0:57:c5:48:02:e4:47:91:a2:78:ca:34:ed:56:0f: 39:61:a2:5b:38:ca:84:b7:b7:74:64:ef:6f:13:34: ae:e4:1c:0c:91:3e:02:9d:7b:c5:f9:77:da:62:ee: 11:4c:e0:35:8f:5f:7b:59:f6:de:7b:5e:49:a7:40: 40:bd:33:9f:8d:95:f2:a0:10:6a:8c:29:be:ff:f8: a9:0d:cc:0a:8f:92:24:5c:9a:e0:39:1d:ed:df:ae: 43:67:fa:a8:ad:e2:77:fa:b0:d1:11:0a:d0:90:73: ab:d8:af:72:ca:a3:e3:30:e2:f6:50:d8:cf:76:80: c1:7e:c3:70:4a:22:a9:ff:7a:de:71:46:f5:49:88: e4:e1:76:48:69:50:89:77:d4:23:f5:b7:99:5a:96: 11:9f:cd:3c:9e:55:a9:5f:58:c4:eb:ce:7c:29:eb: df:9e:98:a7:b8:85:13:ea:f6:cc:9b:c8:14:ec:fc: d3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9E:A6:FF:57:E2:86:17:9E:3E:A5:1A:53:63:CE:32:7A:21:E5:84 X509v3 Authority Key Identifier: keyid:1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:67:c1:43:1e:e8:03:d6:bb:5e:3b:0e:20:90:c3:db:6a:67: fa:d7:22:69:14:a1:d9:7e:de:31:96:0c:7d:5e:9a:56:f3:dd: 18:21:41:13:5e:4d:0e:3e:cf:54:80:75:41:4a:31:ae:c3:5f: d1:74:7e:77:89:2e:78:35:5c:08:bd:3e:ed:b1:3b:56:38:4e: 17:1b:bd:2d:c3:14:50:df:ed:67:86:9c:c6:82:04:88:c1:ca: 16:3d:b6:90:ca:15:fc:67:d0:ff:c7:b4:5a:63:0e:b9:8a:a0: 8b:fa:e1:5d:e7:d9:7a:e7:c7:9c:e7:c6:00:49:6f:ce:f7:7b: 5c:aa:19:b4:6b:a2:16:16:a7:39:d0:3f:05:28:1d:5d:ce:9a: 6d:1e:de:ab:c4:ae:86:e3:bc:6e:e3:45:3c:73:93:1c:de:1e: 44:cb:e9:9a:d6:66:d7:5d:9a:78:f1:5c:75:a3:1e:0f:15:ee: 3e:86:68:ff:7f:89:fd:d9:c3:d8:8b:b6:ac:b1:1b:4e:57:c8: 7e:76:f7:31:1c:ab:69:eb:6c:77:d0:1c:f2:0a:61:1b:b4:32: c3:a6:3f:ba:fa:98:68:2b:d8:41:4c:82:6f:74:1f:36:61:6f: c2:51:d2:ca:42:b1:0a:81:67:15:5f:01:4e:fc:ab:29:10:28: 65:fc:ae:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsV8cGS8ls4LI6umeYH/DPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDFlZDIzNjRlYzgyMjY1YzY4ODY5ZmU3MmJlNzU3MzE5 YTMxZWIwHhcNMjUxMjI5MjMwMDUwWhcNMjUxMjMwMjMwMDUwWjAzMTEwLwYDVQQD EygxNDllYTZmZjU3ZTI4NjE3OWUzZWE1MWE1MzYzY2UzMjdhMjFlNTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFhlPHB4Y6urggRYXykJkVt/Rfho kEuYpTWbXDR+ZrhXGn9QNLdAota2Tr1L29PG5M/3Iv8DZV5KF09QcDhOMxtN6QwF xkLz4aPwV8VIAuRHkaJ4yjTtVg85YaJbOMqEt7d0ZO9vEzSu5BwMkT4CnXvF+Xfa Yu4RTOA1j197Wfbee15Jp0BAvTOfjZXyoBBqjCm+//ipDcwKj5IkXJrgOR3t365D Z/qoreJ3+rDREQrQkHOr2K9yyqPjMOL2UNjPdoDBfsNwSiKp/3recUb1SYjk4XZI aVCJd9Qj9beZWpYRn808nlWpX1jE6858KevfnpinuIUT6vbMm8gU7PzTUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSepv9X4oYXnj6lGlNjzjJ6IeWEMB8GA1UdIwQY MBaAFB0B7SNk7IImXGiGn+cr51cxmjHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFIdEkyVHNnaVpjYUlhZjV5dm5WekdhTWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS85OWQ2ODMtNDNkYy00ODRhLTkwNDct YjQzY2FlNmUyMzE5LzEvSFFIdEkyVHNnaVpjYUlhZjV5dm5WekdhTWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS85OWQ2ODMtNDNkYy00ODRhLTkwNDctYjQzY2FlNmUyMzE5 LzEvSFFIdEkyVHNnaVpjYUlhZjV5dm5WekdhTWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxmfBQx7o A9a7XjsOIJDD22pn+tciaRSh2X7eMZYMfV6aVvPdGCFBE15NDj7PVIB1QUoxrsNf 0XR+d4kueDVcCL0+7bE7VjhOFxu9LcMUUN/tZ4acxoIEiMHKFj22kMoV/GfQ/8e0 WmMOuYqgi/rhXefZeufHnOfGAElvzvd7XKoZtGuiFhanOdA/BSgdXc6abR7eq8Su huO8buNFPHOTHN4eRMvpmtZm112aePFcdaMeDxXuPoZo/3+J/dnD2Iu2rLEbTlfI fnb3MRyraetsd9Ac8gphG7Qyw6Y/uvqYaCvYQUyCb3QfNmFvwlHSykKxCoFnFV8B TvyrKRAoZfyuSw== -----END CERTIFICATE-----Generated at Tue Dec 30 02:33:02 2025 by rpki-client