This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json) Hash identifier: FZ24rBLNcxTGxTomQAaLVROEIM0FP9cIw7Mo1Jc/EyM= Subject key identifier: F2:21:23:C1:B3:E0:94:00:85:94:2B:5C:20:C7:96:71:F4:64:4D:6B Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e Certificate serial: 019B3C100C1FC75178A3E977B90FAABBC768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft Manifest number: 10F4 Signing time: Sat 20 Dec 2025 14:00:43 +0000 Manifest this update: Sat 20 Dec 2025 14:00:43 +0000 Manifest next update: Sun 21 Dec 2025 14:00:43 +0000 Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: UszSIJth/NdJAFtET9RDQ5jyPuqMhTBCcf4EKZtNMHk=) 2: LjvscEK241_TnXIZYmD9gfa2eq0.roa (hash: 0euqfqSMh1dqgtwiYuyK1jN/xv8/2F/xzn29uxLt1Bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:0c:1f:c7:51:78:a3:e9:77:b9:0f:aa:bb:c7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e Validity Not Before: Dec 20 14:00:43 2025 GMT Not After : Dec 21 14:00:43 2025 GMT Subject: CN=f22123c1b3e0940085942b5c20c79671f4644d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:d9:9b:82:35:58:be:dd:d3:15:dc:4c:a4: a2:b1:f5:7b:29:f7:1f:ad:b6:04:c6:cf:81:f1:d0: ae:04:4b:fb:06:64:a8:fa:0f:55:f2:1e:4c:3b:60: 13:71:57:a5:e8:7f:4c:fa:c4:8f:d7:ce:8a:2a:ea: 70:b3:82:7e:19:0e:c2:f1:11:49:d8:96:a9:1c:a0: 81:af:0e:bf:24:fb:c1:3e:32:58:64:8e:42:99:d5: d8:ce:d9:23:ef:64:74:d1:2c:3b:ff:5b:84:20:b1: 6b:39:1a:c2:ce:d2:9a:7c:14:d4:20:9b:a8:c8:f9: 9e:b3:0b:03:88:b2:9d:95:7d:e9:33:fe:81:f5:6c: 7e:e1:6a:85:3d:a4:b6:96:a3:42:3e:f4:f7:10:2a: 28:04:57:d0:2b:4f:53:f8:3f:a7:60:96:3e:19:76: ae:12:99:ef:f3:e7:f3:4f:6b:b5:b1:99:4f:11:7a: 3a:9a:57:8d:16:68:1c:5f:13:92:51:30:0a:cc:7c: f3:91:c2:41:7a:f3:e8:9d:34:33:6d:63:bf:5d:56: a4:f8:ad:a1:46:c3:1f:4f:66:e9:6c:4e:65:24:43: 12:02:89:b4:5a:fc:35:60:24:ac:8e:be:df:77:32: 3e:7a:4b:24:0e:99:a8:c6:d1:a4:af:98:48:2f:94: e8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:21:23:C1:B3:E0:94:00:85:94:2B:5C:20:C7:96:71:F4:64:4D:6B X509v3 Authority Key Identifier: keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:1c:02:16:b3:f0:38:74:f4:59:6d:50:a0:60:9a:d5:33:82: 98:14:76:b3:79:87:d0:5c:48:aa:00:95:1c:07:7c:89:4e:73: 75:e1:27:56:18:b4:94:ef:80:ab:cf:2f:ad:86:ba:02:0e:d5: 90:1b:74:cb:1d:bf:c8:5c:58:02:b1:10:fa:b8:19:e2:84:85: 52:1f:1f:fc:84:f5:38:65:2b:ea:14:4a:ba:b2:2a:b8:9b:32: 8c:60:21:18:a8:69:13:db:70:8f:6c:c3:de:a5:12:01:d3:d1: b3:1b:11:70:a6:71:37:42:13:c8:9d:c2:eb:5c:0c:2f:ae:22: 6f:87:cc:ed:69:96:2c:5a:41:7a:ce:44:21:72:93:a2:25:22: fa:9b:63:54:7b:0d:8a:03:d7:4d:94:0c:78:39:45:fa:a6:31: 59:ad:15:27:ef:e9:25:9e:06:b2:c1:0b:48:51:cd:2a:d3:a8: a3:49:74:a2:13:dd:04:42:06:2f:67:59:07:2c:c2:66:cc:d6: 14:10:dc:bf:97:96:bb:51:d5:94:d0:16:a0:0f:ed:09:5b:fc: 11:3c:cd:bd:fb:55:f9:99:f9:71:2b:85:b4:a6:7f:f5:c1:fb: 62:e7:f9:b4:f5:3a:63:b8:0b:6a:6a:d2:e8:4b:ec:66:10:ba: 1e:54:e1:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EAwfx1F4o+l3uQ+qu8doMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMmIyYjM2ZmI3MjI1MDk0NjVlZDlkOTQ4YzJiZjg5MTE2 MGNkMGUwHhcNMjUxMjIwMTQwMDQzWhcNMjUxMjIxMTQwMDQzWjAzMTEwLwYDVQQD EyhmMjIxMjNjMWIzZTA5NDAwODU5NDJiNWMyMGM3OTY3MWY0NjQ0ZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwrZm4I1WL7d0xXcTKSisfV7Kfcf rbYExs+B8dCuBEv7BmSo+g9V8h5MO2ATcVel6H9M+sSP186KKupws4J+GQ7C8RFJ 2JapHKCBrw6/JPvBPjJYZI5CmdXYztkj72R00Sw7/1uEILFrORrCztKafBTUIJuo yPmeswsDiLKdlX3pM/6B9Wx+4WqFPaS2lqNCPvT3ECooBFfQK09T+D+nYJY+GXau Epnv8+fzT2u1sZlPEXo6mleNFmgcXxOSUTAKzHzzkcJBevPonTQzbWO/XVak+K2h RsMfT2bpbE5lJEMSAom0Wvw1YCSsjr7fdzI+ekskDpmoxtGkr5hIL5ToSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIhI8Gz4JQAhZQrXCDHlnH0ZE1rMB8GA1UdIwQY MBaAFBwrKzb7ciUJRl7Z2UjCv4kRYM0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUt YzIwMmY3MTdkNDQ3LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUtYzIwMmY3MTdkNDQ3 LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxwCFrPw OHT0WW1QoGCa1TOCmBR2s3mH0FxIqgCVHAd8iU5zdeEnVhi0lO+Aq88vrYa6Ag7V kBt0yx2/yFxYArEQ+rgZ4oSFUh8f/IT1OGUr6hRKurIquJsyjGAhGKhpE9twj2zD 3qUSAdPRsxsRcKZxN0ITyJ3C61wML64ib4fM7WmWLFpBes5EIXKToiUi+ptjVHsN igPXTZQMeDlF+qYxWa0VJ+/pJZ4GssELSFHNKtOoo0l0ohPdBEIGL2dZByzCZszW FBDcv5eWu1HVlNAWoA/tCVv8ETzNvftV+Zn5cSuFtKZ/9cH7Yuf5tPU6Y7gLamrS 6EvsZhC6HlThpw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:54:56 2025 by rpki-client