This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json) Hash identifier: sC0lNpznctBX9oYkERywEDLKKORSe+bSsIsyjHVMcnE= Subject key identifier: 3F:02:0D:4C:12:66:B1:7F:6C:D7:9D:DA:0B:1C:B5:BE:99:1C:6A:A6 Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b Certificate serial: 019B51F2FE0B850240838DD9D9F25250EEE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft Manifest number: 0CCA Signing time: Wed 24 Dec 2025 20:00:37 +0000 Manifest this update: Wed 24 Dec 2025 20:00:37 +0000 Manifest next update: Thu 25 Dec 2025 20:00:37 +0000 Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: VmJ9YLGJQrerI+j0DYAnp8DIwghZdXszkGNP9JkFmfE=) 2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f2:fe:0b:85:02:40:83:8d:d9:d9:f2:52:50:ee:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b Validity Not Before: Dec 24 20:00:37 2025 GMT Not After : Dec 25 20:00:37 2025 GMT Subject: CN=3f020d4c1266b17f6cd79dda0b1cb5be991c6aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:37:55:41:dc:d0:0a:4c:78:40:69:4a:3a:d2: e6:d0:7e:8b:da:b2:ca:e2:70:91:ba:24:29:8a:21: a5:b4:77:aa:a1:ea:2e:5e:3f:50:2b:e6:fe:cc:52: 18:eb:9b:a4:f5:b8:58:d6:61:93:c2:b1:b6:e8:c2: c7:09:76:05:bf:d3:ee:6e:dd:3f:91:73:d0:7f:9a: 98:da:18:3e:f9:96:93:9f:c8:a2:35:a1:2e:dd:df: b1:ec:96:67:96:02:e1:04:21:81:8d:16:5b:35:68: 36:5e:33:60:73:21:b9:9c:4e:0a:66:63:b5:2e:a4: 71:2d:1a:1b:b9:9d:54:fb:1f:fe:95:9a:9d:ba:01: 72:47:17:fb:6c:cf:db:24:f4:ef:f8:53:4f:f9:99: ae:71:1e:7f:78:22:da:bb:91:16:63:8a:37:0c:8f: ee:fd:f6:09:01:2d:04:6f:f3:6a:4f:f8:8e:34:44: 89:70:62:d7:cb:9c:5e:bd:c1:d6:b6:b8:5d:ca:8d: f8:cb:87:a7:c0:42:53:53:c4:2a:2b:48:18:47:d1: 63:c0:4f:ff:17:1c:ea:54:25:bb:c2:3d:1e:b1:53: 24:dc:f9:72:07:36:ef:da:9f:35:e7:70:55:8d:31: e4:08:a3:4a:37:c6:b1:00:83:45:2f:e1:dc:bd:42: 61:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:02:0D:4C:12:66:B1:7F:6C:D7:9D:DA:0B:1C:B5:BE:99:1C:6A:A6 X509v3 Authority Key Identifier: keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d7:51:eb:e5:4a:15:5e:f0:56:86:ce:63:16:00:96:7d:2b: e6:2e:8d:eb:3c:f1:13:96:6e:e6:7b:2a:21:8a:6c:de:6f:40: ca:9d:f4:4b:30:c3:7c:13:f6:2e:75:a4:fb:95:d1:f9:34:86: d4:ca:6a:5e:b3:aa:04:d0:a8:6b:75:24:0b:29:0a:14:d4:80: 12:0c:ea:5a:9b:55:81:01:30:1d:ee:4d:bb:51:77:d9:18:b7: 7b:7b:2b:55:c8:f9:0b:f1:86:38:e5:16:03:12:bb:0a:13:cd: 49:6f:ac:be:71:68:a6:4b:17:dc:fd:ea:72:01:9b:a0:9f:cb: a5:33:7d:be:47:af:7f:d9:f1:03:b7:c2:57:27:c5:4a:65:d3: bd:99:4c:fa:70:f2:1f:e4:ad:49:61:f0:6a:7b:3f:cc:7a:0d: a0:40:c3:2b:f9:07:27:24:a8:20:ba:cb:c1:2a:20:53:a5:95: 31:21:c3:28:1e:12:7b:db:4b:4c:8d:90:41:9c:d2:8a:53:1b: cd:87:01:d2:f0:ef:b3:55:d8:72:f7:be:63:8b:15:30:c8:cd: 14:fc:84:8b:6a:cc:53:4a:51:66:02:b0:cc:a8:09:49:38:db: 2f:3f:52:b6:cf:dd:c1:86:4f:4d:52:ca:dd:81:e2:3e:80:82: 91:7e:77:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8v4LhQJAg43Z2fJSUO7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTFmNTlhOTY3OTcyNzFlMWZkNjY3M2E5YzUzNDI1N2Rh ODhlNmIwHhcNMjUxMjI0MjAwMDM3WhcNMjUxMjI1MjAwMDM3WjAzMTEwLwYDVQQD EygzZjAyMGQ0YzEyNjZiMTdmNmNkNzlkZGEwYjFjYjViZTk5MWM2YWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DdVQdzQCkx4QGlKOtLm0H6L2rLK 4nCRuiQpiiGltHeqoeouXj9QK+b+zFIY65uk9bhY1mGTwrG26MLHCXYFv9Pubt0/ kXPQf5qY2hg++ZaTn8iiNaEu3d+x7JZnlgLhBCGBjRZbNWg2XjNgcyG5nE4KZmO1 LqRxLRobuZ1U+x/+lZqdugFyRxf7bM/bJPTv+FNP+ZmucR5/eCLau5EWY4o3DI/u /fYJAS0Eb/NqT/iONESJcGLXy5xevcHWtrhdyo34y4enwEJTU8QqK0gYR9FjwE// FxzqVCW7wj0esVMk3PlyBzbv2p8153BVjTHkCKNKN8axAINFL+HcvUJhfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8CDUwSZrF/bNed2gsctb6ZHGqmMB8GA1UdIwQY MBaAFB6h9ZqWeXJx4f1mc6nFNCV9qI5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmI1MDgtMWZhZC00Mjk5LTg3MjAt N2M0YWZiODhlMmYyLzEvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85MmI1MDgtMWZhZC00Mjk5LTg3MjAtN2M0YWZiODhlMmYy LzEvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9dR6+VK FV7wVobOYxYAln0r5i6N6zzxE5Zu5nsqIYps3m9Ayp30SzDDfBP2LnWk+5XR+TSG 1MpqXrOqBNCoa3UkCykKFNSAEgzqWptVgQEwHe5Nu1F32Ri3e3srVcj5C/GGOOUW AxK7ChPNSW+svnFopksX3P3qcgGboJ/LpTN9vkevf9nxA7fCVyfFSmXTvZlM+nDy H+StSWHwans/zHoNoEDDK/kHJySoILrLwSogU6WVMSHDKB4Se9tLTI2QQZzSilMb zYcB0vDvs1XYcve+Y4sVMMjNFPyEi2rMU0pRZgKwzKgJSTjbLz9Sts/dwYZPTVLK 3YHiPoCCkX53Bw== -----END CERTIFICATE-----Generated at Thu Dec 25 04:33:43 2025 by rpki-client