This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json) Hash identifier: QPoYtHqvyoi13QkgfijKGce/uE4uTzeRo35PGyU/BNU= Subject key identifier: 8F:B8:C6:9C:96:DD:78:EE:D5:16:84:39:05:4E:A2:B4:3A:92:47:97 Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a Certificate serial: 019B601D1BD86631D73E6CAF46C2C41423C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft Manifest number: 172C Signing time: Sat 27 Dec 2025 14:01:18 +0000 Manifest this update: Sat 27 Dec 2025 14:01:18 +0000 Manifest next update: Sun 28 Dec 2025 14:01:18 +0000 Files and hashes: 1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=) 2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: eZFBLHthHhAV8Wq6ymgT+Qc32IZRx0JmExqm5LIAhsg=) 3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:1d:1b:d8:66:31:d7:3e:6c:af:46:c2:c4:14:23:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a Validity Not Before: Dec 27 14:01:18 2025 GMT Not After : Dec 28 14:01:18 2025 GMT Subject: CN=8fb8c69c96dd78eed5168439054ea2b43a924797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:97:35:36:66:7c:61:9a:19:13:fb:d5:9e:a5: b8:15:b7:1c:04:48:60:84:bb:a0:17:3f:06:1c:a2: 31:f5:f7:2f:8a:2b:8a:ed:bd:c1:50:94:61:a6:1a: c7:cb:1f:50:36:84:39:e0:4e:98:66:4a:a5:1b:09: d0:0d:c7:25:b6:69:2e:f6:13:9f:ae:d6:29:eb:03: 11:23:dd:84:c2:24:ed:54:72:8b:2e:24:56:62:b8: 24:a4:11:93:19:0d:f7:09:06:b9:30:bf:6e:8a:6f: 46:a9:0f:ac:df:a5:54:c8:6f:77:4d:e6:72:6f:19: 2b:2a:fa:04:ed:d0:df:a3:d0:18:0a:7f:0f:8b:4f: da:87:7c:8d:fc:c8:1c:73:67:15:64:4d:e3:c5:39: 71:cf:9d:28:21:ae:a0:2a:26:0f:eb:30:e0:ef:5b: b5:8a:72:aa:82:91:0d:e2:f8:af:05:df:e0:d4:e0: dd:d4:b4:c3:4e:ee:7d:dd:ff:f5:bb:79:ab:97:7f: 5e:fd:7e:c0:b9:4c:b9:bc:85:01:b4:ff:41:6b:6f: c8:4d:53:23:f6:77:9d:ec:2e:f6:88:40:4a:f1:25: 0a:83:9f:1e:e2:2a:d8:89:a1:b3:c8:b4:1e:7b:78: 91:dd:2c:20:59:a3:70:67:98:1b:f5:20:18:1b:27: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B8:C6:9C:96:DD:78:EE:D5:16:84:39:05:4E:A2:B4:3A:92:47:97 X509v3 Authority Key Identifier: keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:13:3a:95:7c:28:21:07:74:a8:14:d2:4e:e9:5b:8d:00:57: fb:f3:40:fa:0b:3a:e3:42:58:e7:ec:e9:0d:df:a1:94:30:db: 97:d7:85:9f:c9:fb:61:1d:7a:36:27:8b:ce:69:e9:cb:2e:b4: ff:8c:f2:5c:3f:c6:33:76:87:3c:f9:08:13:9a:5b:7b:0c:12: 48:eb:17:ee:af:4e:54:f4:cc:45:5b:37:29:6f:ec:f1:15:d8: 35:74:fa:86:3d:d1:07:64:bd:4a:44:44:61:11:03:ab:f8:27: bc:52:e1:ab:95:be:3a:db:fc:f2:6b:55:68:4b:98:75:c7:88: 63:ac:61:50:82:b0:79:74:7b:ab:27:4a:7b:3f:1d:a2:e5:1d: e5:de:06:ce:8f:bb:82:45:a2:f7:11:76:db:44:a5:b7:e5:9d: fd:6e:8c:b1:cd:24:d1:63:1d:89:4c:64:dc:f2:f2:a2:1f:48: 58:d7:c7:c3:26:5c:0d:b2:ca:32:f0:d5:f3:33:d4:c5:8f:87: e2:31:af:ea:56:08:9f:ce:d8:fc:60:50:4e:38:34:8a:d4:ef: ae:e1:de:d8:cf:e3:97:86:52:aa:9c:f9:9e:64:51:b1:30:c3: bc:cc:98:60:f1:7b:2e:27:da:df:71:99:b9:78:ec:56:1c:7b: b8:33:03:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgHRvYZjHXPmyvRsLEFCPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYmJmYTQ5ODc3YmM1ZDllNGNmNDQ2OTUwZmQxNDI3OTky OWY0OWEwHhcNMjUxMjI3MTQwMTE4WhcNMjUxMjI4MTQwMTE4WjAzMTEwLwYDVQQD Eyg4ZmI4YzY5Yzk2ZGQ3OGVlZDUxNjg0MzkwNTRlYTJiNDNhOTI0Nzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Zc1NmZ8YZoZE/vVnqW4FbccBEhg hLugFz8GHKIx9fcviiuK7b3BUJRhphrHyx9QNoQ54E6YZkqlGwnQDccltmku9hOf rtYp6wMRI92EwiTtVHKLLiRWYrgkpBGTGQ33CQa5ML9uim9GqQ+s36VUyG93TeZy bxkrKvoE7dDfo9AYCn8Pi0/ah3yN/Mgcc2cVZE3jxTlxz50oIa6gKiYP6zDg71u1 inKqgpEN4vivBd/g1ODd1LTDTu593f/1u3mrl39e/X7AuUy5vIUBtP9Ba2/ITVMj 9ned7C72iEBK8SUKg58e4irYiaGzyLQee3iR3SwgWaNwZ5gb9SAYGyfvIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+4xpyW3Xju1RaEOQVOorQ6kkeXMB8GA1UdIwQY MBaAFBy7+kmHe8XZ5M9EaVD9FCeZKfSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYt NDZiZjc2MjYxOGU3LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYtNDZiZjc2MjYxOGU3 LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhM6lXwo IQd0qBTSTulbjQBX+/NA+gs640JY5+zpDd+hlDDbl9eFn8n7YR16NieLzmnpyy60 /4zyXD/GM3aHPPkIE5pbewwSSOsX7q9OVPTMRVs3KW/s8RXYNXT6hj3RB2S9SkRE YREDq/gnvFLhq5W+Otv88mtVaEuYdceIY6xhUIKweXR7qydKez8douUd5d4Gzo+7 gkWi9xF220Slt+Wd/W6Msc0k0WMdiUxk3PLyoh9IWNfHwyZcDbLKMvDV8zPUxY+H 4jGv6lYIn87Y/GBQTjg0itTvruHe2M/jl4ZSqpz5nmRRsTDDvMyYYPF7Lifa33GZ uXjsVhx7uDMDcA== -----END CERTIFICATE-----Generated at Sat Dec 27 17:37:42 2025 by rpki-client