This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft File: HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json) Hash identifier: US4DWXBolre/NBJrv4wAHn+vlOy0N7ah1tyZOAuJX4A= Subject key identifier: 95:87:5D:3D:A4:69:FF:D8:4F:30:78:5E:D2:5D:8C:49:1F:FA:E0:1B Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c Certificate serial: 019B390EDA5C6D49BD79C8CAD5050379863D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 00:00:33 +0000 Manifest this update: Sat 20 Dec 2025 00:00:33 +0000 Manifest next update: Sun 21 Dec 2025 00:00:33 +0000 Files and hashes: 1: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: lbq63wRvVsCcFoVHRA1SmODAwE9U7SS9QFXHOIQFRg0=) 2: LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa (hash: Jtc+IuVms0/thPHj5bGPRIMsxU7hFLPzHKxvZdogizk=) 3: aWalfbOeEBKlHFJV-ENu8MAsZo4.roa (hash: EdxjZs6zvCXnFCAeiNpfiVYwCGvEbmMbWMZx7J9tRCc=) 4: ucuU-Uq0Xb62o4XqDQOup7WMShY.roa (hash: bTCTTFwhaYZdJywJ5h4MOhDury0ZGVdUw5QGOuUV0Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:da:5c:6d:49:bd:79:c8:ca:d5:05:03:79:86:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c Validity Not Before: Dec 20 00:00:33 2025 GMT Not After : Dec 21 00:00:33 2025 GMT Subject: CN=95875d3da469ffd84f30785ed25d8c491ffae01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:d3:60:99:da:82:92:04:dd:fb:79:b6:98: db:cc:a9:d8:34:29:1b:75:45:aa:bb:6f:9b:b7:ac: 60:bb:d9:d5:e2:b7:cb:c4:e1:f5:be:23:5a:f6:74: 65:eb:38:8f:6b:95:33:23:ee:9a:6c:5e:7f:77:77: 89:39:cc:3a:98:7c:66:fd:2b:30:06:6c:60:ad:bb: cf:2b:e4:24:76:58:e2:7b:77:09:9f:ce:3c:b4:b8: b5:42:63:5a:62:ee:2f:9d:f3:af:f6:89:1a:17:5a: 8e:1b:c6:97:72:74:82:52:d5:01:0c:bd:68:ef:21: 64:18:b6:b9:54:77:b1:27:ab:ad:39:43:38:93:d0: b5:69:ce:3d:01:ca:2b:f7:c0:06:8c:d6:6d:8b:7f: bf:06:89:e7:2a:ab:65:15:33:04:f9:5c:80:6c:f5: 34:68:cd:f6:03:58:e6:0b:3c:8d:f0:34:84:84:e2: 4c:e9:7e:cb:09:ee:0d:20:3a:5b:3a:0d:3e:74:5e: 81:d8:31:93:6c:ca:0f:b8:e9:dc:4c:c9:61:55:f7: 25:07:e1:5e:2b:d7:c1:45:ae:f3:6e:7b:27:78:5f: f7:12:1d:9b:92:1b:8a:b3:5d:43:02:87:3d:4e:dc: 06:9a:a0:ac:f3:d9:2f:a4:36:eb:93:c7:4c:7b:7a: 44:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:87:5D:3D:A4:69:FF:D8:4F:30:78:5E:D2:5D:8C:49:1F:FA:E0:1B X509v3 Authority Key Identifier: keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0d:78:af:78:bd:60:0f:bb:70:36:11:49:77:04:7b:c2:c6: 05:6f:88:d4:05:fa:71:85:ab:c2:12:53:0a:54:61:30:34:02: ab:d1:3c:37:ce:67:8b:2a:45:3d:aa:cf:b0:5a:c1:da:45:d3: 04:6e:df:b1:b4:7c:46:0f:51:d1:c0:0f:6c:66:4e:dc:2b:13: 0a:4b:53:20:3a:04:f0:6a:02:09:5d:00:08:b3:3e:d4:60:fe: d2:fd:3f:77:25:84:49:48:88:4d:57:c1:19:8f:35:7f:95:30: d4:0c:54:d8:ee:6d:a1:65:b7:74:cd:ac:43:39:68:bb:b4:27: 6b:b2:d2:25:2d:c8:b3:7a:06:d8:5b:c5:d8:b7:62:be:4f:f4: 4a:36:fb:01:8c:96:c8:16:b7:40:2a:22:fe:e7:ed:63:01:12: 07:e5:70:f7:f3:37:19:ab:52:e0:11:46:61:ed:b7:4c:8e:aa: f5:0e:0a:c2:cc:a5:77:80:3e:80:7d:a7:e8:f1:fc:57:58:e1: 41:77:70:19:53:75:d0:e6:f0:ea:9c:d7:59:a3:6f:4e:d0:b3: 7b:b3:13:fa:29:c5:93:55:f3:39:cf:3e:95:bf:41:82:4d:75: cb:bf:2a:6b:6b:af:d5:34:58:9c:a7:c8:2f:e3:3f:f2:0c:e9: 0f:bc:ba:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DtpcbUm9ecjK1QUDeYY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDg3MWZjMmU5OTg5MmVhMTExNWEzMDIxMzhlMWQzMmE2 MjE4MmMwHhcNMjUxMjIwMDAwMDMzWhcNMjUxMjIxMDAwMDMzWjAzMTEwLwYDVQQD Eyg5NTg3NWQzZGE0NjlmZmQ4NGYzMDc4NWVkMjVkOGM0OTFmZmFlMDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI7TYJnagpIE3ft5tpjbzKnYNCkb dUWqu2+bt6xgu9nV4rfLxOH1viNa9nRl6ziPa5UzI+6abF5/d3eJOcw6mHxm/Ssw BmxgrbvPK+Qkdljie3cJn848tLi1QmNaYu4vnfOv9okaF1qOG8aXcnSCUtUBDL1o 7yFkGLa5VHexJ6utOUM4k9C1ac49Acor98AGjNZti3+/BonnKqtlFTME+VyAbPU0 aM32A1jmCzyN8DSEhOJM6X7LCe4NIDpbOg0+dF6B2DGTbMoPuOncTMlhVfclB+Fe K9fBRa7zbnsneF/3Eh2bkhuKs11DAoc9TtwGmqCs89kvpDbrk8dMe3pEZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWHXT2kaf/YTzB4XtJdjEkf+uAbMB8GA1UdIwQY MBaAFB0IcfwumYkuoRFaMCE44dMqYhgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAt NGYzZTViMmUwYzU2LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAtNGYzZTViMmUwYzU2 LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADA14r3i9 YA+7cDYRSXcEe8LGBW+I1AX6cYWrwhJTClRhMDQCq9E8N85niypFParPsFrB2kXT BG7fsbR8Rg9R0cAPbGZO3CsTCktTIDoE8GoCCV0ACLM+1GD+0v0/dyWESUiITVfB GY81f5Uw1AxU2O5toWW3dM2sQzlou7Qna7LSJS3Is3oG2FvF2Ldivk/0Sjb7AYyW yBa3QCoi/uftYwESB+Vw9/M3GatS4BFGYe23TI6q9Q4Kwsyld4A+gH2n6PH8V1jh QXdwGVN10Obw6pzXWaNvTtCze7MT+inFk1XzOc8+lb9Bgk11y78qa2uv1TRYnKfI L+M/8gzpD7y6+w== -----END CERTIFICATE-----Generated at Sat Dec 20 09:27:50 2025 by rpki-client