This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft File: HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json) Hash identifier: WT/HHao4W3qTyzHliun0fgPajkk4MmqELMZfMqbM6QM= Subject key identifier: 36:BB:FE:FD:AC:77:A2:90:D1:A4:54:24:85:78:61:A3:42:D3:9E:47 Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10 Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10 Certificate serial: 019B3B6B90438A6B80DB1A95A8419A2460D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 11:01:03 +0000 Manifest this update: Sat 20 Dec 2025 11:01:03 +0000 Manifest next update: Sun 21 Dec 2025 11:01:03 +0000 Files and hashes: 1: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: jOhGZ9suVLHrwr1gjSoHdsi/2AXchr05wJgpqFcGA+o=) 2: JAj8K9FK0yJ4abLe6Fga6ihptw4.roa (hash: EFhtWb0ps1NNZCAlSUS+dLCZTzQuPXq8Ov+/YyEbgx0=) 3: _IKA2Fs9sk_HXgYRoE_hIh9ff0o.roa (hash: 7fFt0WExoH93JNOsEPipdfERGEC89/UjUDUL8wmgczo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:90:43:8a:6b:80:db:1a:95:a8:41:9a:24:60:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10 Validity Not Before: Dec 20 11:01:03 2025 GMT Not After : Dec 21 11:01:03 2025 GMT Subject: CN=36bbfefdac77a290d1a45424857861a342d39e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:a5:a5:20:3d:a6:1c:e4:29:ca:9d:72:73: 19:60:72:da:dd:83:b3:fd:cd:a0:8f:9f:6b:b2:28: a1:31:ef:1d:99:89:bc:0a:fd:f3:52:3d:64:92:5e: 9e:d5:2d:7a:57:40:b0:96:c0:32:14:13:7e:5b:51: bf:3c:96:af:6b:e7:07:ff:13:9d:19:3d:16:37:cb: 3b:a7:96:50:c3:64:57:d9:8a:d9:68:95:61:56:1d: a1:ba:92:03:24:e3:94:8c:4c:e7:17:4d:b8:68:dd: e2:1e:0a:2e:d7:56:0a:6f:27:c0:e7:0b:7f:bd:c4: e3:c5:86:da:97:12:6d:72:bb:19:02:32:4c:52:74: f0:84:7a:39:39:c8:97:09:1d:6c:a0:0c:87:fd:2d: 2d:70:62:27:61:ed:6e:0e:5d:67:f6:6e:82:83:2d: 1d:de:6e:c1:14:27:de:45:7e:3c:b2:2f:a9:d6:89: 63:d7:4f:17:ed:7f:ab:67:fa:29:11:c8:02:0f:97: ed:da:50:ba:4d:e8:7a:15:07:ca:83:e3:1a:bb:3a: e1:8e:aa:18:c2:7d:9a:3d:7a:fd:7c:4a:b5:7f:d5: af:7b:5d:dc:88:4d:3c:31:b0:6d:c8:97:bd:4a:8a: ab:a1:d1:6b:47:1d:33:0c:44:5f:2f:f9:ee:33:ce: 4a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BB:FE:FD:AC:77:A2:90:D1:A4:54:24:85:78:61:A3:42:D3:9E:47 X509v3 Authority Key Identifier: keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:b4:da:8d:d1:18:cb:e0:ce:ef:df:b1:6e:93:d6:2b:87:73: ff:43:78:f9:59:2f:a2:23:13:74:bb:82:5c:f5:08:20:d4:ae: 69:8c:40:34:43:83:37:50:52:94:dd:da:f2:27:3a:e4:24:77: 10:4e:f3:32:72:45:14:15:4c:e5:21:df:23:6e:0f:e5:9e:e7: 51:88:4c:72:b9:9e:7f:37:14:64:f1:98:b8:1f:ca:45:36:de: 3d:28:e1:88:a3:4b:99:18:30:f5:c7:c2:61:4a:24:fd:3f:e9: d1:d6:fe:e6:5a:7d:76:a6:a6:8c:83:e8:f5:27:1c:24:50:05: 41:dc:16:75:bf:7c:8a:f2:24:79:c0:42:f0:d1:2b:72:94:d7: 3f:f1:d4:3d:fe:47:c5:37:f7:37:45:c4:5d:a6:6c:7e:89:9e: 4b:9f:6e:40:6b:99:c3:d1:da:83:8e:70:3d:53:41:d9:76:c0: ed:cd:31:ec:ed:2d:26:29:51:65:ae:62:f7:b3:23:e1:0b:34: a0:53:cc:59:16:ef:b1:3c:0f:31:09:d6:df:66:d9:c6:6f:f0: cc:14:6e:2a:d2:bc:62:a0:dc:e5:ab:84:ce:8a:3c:6d:a7:d7: 39:2b:c4:eb:4d:fc:6d:46:97:c7:08:81:bd:e6:92:1c:b9:98: c6:f8:26:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a5BDimuA2xqVqEGaJGDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZjJlYzgyNWZhNjM4MWU4ZTk0ZmQzOWIwNmVhMzhiNjNl NDFhMTAwHhcNMjUxMjIwMTEwMTAzWhcNMjUxMjIxMTEwMTAzWjAzMTEwLwYDVQQD EygzNmJiZmVmZGFjNzdhMjkwZDFhNDU0MjQ4NTc4NjFhMzQyZDM5ZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxelpSA9phzkKcqdcnMZYHLa3YOz /c2gj59rsiihMe8dmYm8Cv3zUj1kkl6e1S16V0CwlsAyFBN+W1G/PJava+cH/xOd GT0WN8s7p5ZQw2RX2YrZaJVhVh2hupIDJOOUjEznF024aN3iHgou11YKbyfA5wt/ vcTjxYbalxJtcrsZAjJMUnTwhHo5OciXCR1soAyH/S0tcGInYe1uDl1n9m6Cgy0d 3m7BFCfeRX48si+p1olj108X7X+rZ/opEcgCD5ft2lC6Teh6FQfKg+MauzrhjqoY wn2aPXr9fEq1f9Wve13ciE08MbBtyJe9SoqrodFrRx0zDERfL/nuM85KmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDa7/v2sd6KQ0aRUJIV4YaNC055HMB8GA1UdIwQY MBaAFBzy7IJfpjgejpT9ObBuo4tj5BoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFBMc2dsLW1PQjZPbFAwNXNHNmppMlBrR2hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hMDA5ZTgtMmRjNy00ZWY4LWE1Y2Ut YzRjNjM5ODNiNTBjLzEvSFBMc2dsLW1PQjZPbFAwNXNHNmppMlBrR2hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hMDA5ZTgtMmRjNy00ZWY4LWE1Y2UtYzRjNjM5ODNiNTBj LzEvSFBMc2dsLW1PQjZPbFAwNXNHNmppMlBrR2hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbTajdEY y+DO79+xbpPWK4dz/0N4+VkvoiMTdLuCXPUIINSuaYxANEODN1BSlN3a8ic65CR3 EE7zMnJFFBVM5SHfI24P5Z7nUYhMcrmefzcUZPGYuB/KRTbePSjhiKNLmRgw9cfC YUok/T/p0db+5lp9dqamjIPo9SccJFAFQdwWdb98ivIkecBC8NErcpTXP/HUPf5H xTf3N0XEXaZsfomeS59uQGuZw9Hag45wPVNB2XbA7c0x7O0tJilRZa5i97Mj4Qs0 oFPMWRbvsTwPMQnW32bZxm/wzBRuKtK8YqDc5auEzoo8bafXOSvE6038bUaXxwiB veaSHLmYxvgm5Q== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:05 2025 by rpki-client