This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft File: HNPDCTm5BqRRWhxlwIg2gptqMok.mft (raw, json) Hash identifier: w4B8k4DE2qCpJ+EOYJvOfnpe7CX8DyWyMK5A/HU0HlA= Subject key identifier: D6:30:7B:16:E8:CB:E4:55:4B:BE:DB:1D:8D:2D:66:81:D2:B4:7C:09 Authority key identifier: 1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89 Certificate issuer: /CN=1cd3c30939b906a4515a1c65c08836829b6a3289 Certificate serial: 019B330D0BC01FEE52A3C93845C0DF73E40D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 20:00:51 +0000 Manifest this update: Thu 18 Dec 2025 20:00:51 +0000 Manifest next update: Fri 19 Dec 2025 20:00:51 +0000 Files and hashes: 1: HNPDCTm5BqRRWhxlwIg2gptqMok.crl (hash: 8en853yO/x8zlPZ8LcOB0xLX/kWxQTQUviX99tsBo1E=) 2: zraU6JUbMiPLRortKHmXEnAo1OE.roa (hash: HMXC6yKtO8g8Ym91NRBLoqlps2ZqE/0U22YJBVZue4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:0b:c0:1f:ee:52:a3:c9:38:45:c0:df:73:e4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cd3c30939b906a4515a1c65c08836829b6a3289 Validity Not Before: Dec 18 20:00:51 2025 GMT Not After : Dec 19 20:00:51 2025 GMT Subject: CN=d6307b16e8cbe4554bbedb1d8d2d6681d2b47c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:06:28:93:c5:89:02:07:8d:2f:a3:c5:dc: ca:95:a9:24:91:81:66:01:e6:c8:ae:b8:5e:8b:e1: 42:d8:52:aa:52:48:8b:68:90:97:f0:2d:09:d8:14: 93:4f:9d:a5:49:dd:11:86:ea:69:2d:fe:4e:93:0a: 16:45:d3:52:77:46:35:cf:a8:b5:8d:75:85:73:d0: f2:e6:2b:3f:74:6d:f6:c9:11:60:b2:f9:34:09:29: 01:3a:43:4c:bc:c3:ac:78:c4:ed:4c:68:0a:b5:10: f0:ec:35:ab:c0:ba:e9:e7:c6:ac:5e:a6:29:8d:78: bc:59:2d:b2:27:4d:f8:e6:d8:8f:65:52:42:71:ae: a1:f3:79:65:ca:d1:29:11:ed:2d:68:0a:91:ad:6b: 28:41:40:86:cc:60:9f:bf:53:68:c0:83:50:23:cd: ed:78:c1:88:d0:16:57:a7:74:9d:ac:21:be:59:86: 6b:21:2a:6b:f7:2e:7b:55:f4:6f:06:a0:d2:f7:fe: 2c:b9:6d:ab:8b:11:70:3e:4d:a7:79:ac:ad:01:27: f2:64:8f:62:35:46:e6:1e:ba:40:73:6a:59:3e:0c: fc:de:6e:07:08:f8:2d:14:0a:7c:10:73:ef:4d:19: ab:e0:4e:77:14:1c:0b:d0:37:e6:a3:52:f3:5f:c2: 7e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:30:7B:16:E8:CB:E4:55:4B:BE:DB:1D:8D:2D:66:81:D2:B4:7C:09 X509v3 Authority Key Identifier: keyid:1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0c:c1:f7:66:26:cd:db:ec:f6:ff:ce:a9:ec:bf:81:08:93: 88:f3:5d:48:9b:73:92:5a:3a:b1:f0:a9:13:78:45:ef:75:cb: 8a:d3:64:d7:75:44:c8:da:57:a9:c1:2d:a8:71:b0:c7:dd:b6: 42:07:1e:4c:37:c6:3b:6b:16:b2:31:55:44:d1:bb:3d:88:ea: 79:f6:fc:ab:5b:f2:a2:38:d1:d8:91:fc:84:9c:6f:f4:4d:77: 9e:81:fe:a8:f9:82:c0:02:9d:74:69:94:10:16:fa:df:9c:8a: 4b:ef:d1:17:e1:0f:43:cb:96:bf:8c:ad:6e:e3:51:e4:c3:15: d8:e8:68:13:fc:96:54:69:c6:0a:7b:e3:61:54:20:3c:3b:32: 35:1d:ee:ea:4e:89:7c:c2:34:fa:96:7b:0f:fc:2d:d2:08:5a: 1a:33:dc:83:13:ab:9c:08:27:81:a5:a5:05:72:7f:7f:e3:90: 27:69:f7:1f:ff:2b:05:38:0e:e9:f9:d8:61:7f:89:55:3e:bb: 78:f7:1c:33:58:c1:67:38:33:e2:a4:b6:7f:d3:fe:e7:0a:06: 83:d0:fc:26:b0:21:30:7c:56:05:f0:b8:24:bb:a3:3a:46:be: 16:a2:8b:10:1b:e3:68:ba:fb:7b:bc:08:4f:0b:a3:a6:1a:87: 9f:8f:98:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDQvAH+5So8k4RcDfc+QNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZDNjMzA5MzliOTA2YTQ1MTVhMWM2NWMwODgzNjgyOWI2 YTMyODkwHhcNMjUxMjE4MjAwMDUxWhcNMjUxMjE5MjAwMDUxWjAzMTEwLwYDVQQD EyhkNjMwN2IxNmU4Y2JlNDU1NGJiZWRiMWQ4ZDJkNjY4MWQyYjQ3YzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCYGKJPFiQIHjS+jxdzKlakkkYFm AebIrrhei+FC2FKqUkiLaJCX8C0J2BSTT52lSd0RhuppLf5OkwoWRdNSd0Y1z6i1 jXWFc9Dy5is/dG32yRFgsvk0CSkBOkNMvMOseMTtTGgKtRDw7DWrwLrp58asXqYp jXi8WS2yJ0345tiPZVJCca6h83llytEpEe0taAqRrWsoQUCGzGCfv1NowINQI83t eMGI0BZXp3SdrCG+WYZrISpr9y57VfRvBqDS9/4suW2rixFwPk2neaytASfyZI9i NUbmHrpAc2pZPgz83m4HCPgtFAp8EHPvTRmr4E53FBwL0Dfmo1LzX8J+swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYwexboy+RVS77bHY0tZoHStHwJMB8GA1UdIwQY MBaAFBzTwwk5uQakUVocZcCINoKbajKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQt MGZmODZlZjk1ZTBmLzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQtMGZmODZlZjk1ZTBm LzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQzB92Ym zdvs9v/Oqey/gQiTiPNdSJtzklo6sfCpE3hF73XLitNk13VEyNpXqcEtqHGwx922 QgceTDfGO2sWsjFVRNG7PYjqefb8q1vyojjR2JH8hJxv9E13noH+qPmCwAKddGmU EBb635yKS+/RF+EPQ8uWv4ytbuNR5MMV2OhoE/yWVGnGCnvjYVQgPDsyNR3u6k6J fMI0+pZ7D/wt0ghaGjPcgxOrnAgngaWlBXJ/f+OQJ2n3H/8rBTgO6fnYYX+JVT67 ePccM1jBZzgz4qS2f9P+5woGg9D8JrAhMHxWBfC4JLujOka+FqKLEBvjaLr7e7wI TwujphqHn4+YyA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:28:01 2025 by rpki-client