This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft File: HpUuiDc295y9nFZHBL88NmIbjso.mft (raw, json) Hash identifier: d0UsPNr9uuAbuj+ZptVWi7LX3tVMp+BIHhYz6LxZz40= Subject key identifier: 7A:68:56:60:C2:04:79:D6:97:60:3F:22:62:1B:DA:77:31:E0:1E:10 Authority key identifier: 1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA Certificate issuer: /CN=1e952e883736f79cbd9c564704bf3c36621b8eca Certificate serial: 019B330D160767765DB7E46A645E7977C385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft Manifest number: 1787 Signing time: Thu 18 Dec 2025 20:00:54 +0000 Manifest this update: Thu 18 Dec 2025 20:00:54 +0000 Manifest next update: Fri 19 Dec 2025 20:00:54 +0000 Files and hashes: 1: HpUuiDc295y9nFZHBL88NmIbjso.crl (hash: HOgnFqRxp34T2bfV4XhCMws0wxpMz1GlpJg7EqI7zEw=) 2: nfcB4W3-frcdsttLFxfqKvUAYPA.roa (hash: LSLZu1kedUT6p6v50vQ31LG0ikk6bjLybjbis0FT+ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:16:07:67:76:5d:b7:e4:6a:64:5e:79:77:c3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e952e883736f79cbd9c564704bf3c36621b8eca Validity Not Before: Dec 18 20:00:54 2025 GMT Not After : Dec 19 20:00:54 2025 GMT Subject: CN=7a685660c20479d697603f22621bda7731e01e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:9b:1e:6c:c7:7e:53:c0:3e:d2:e7:f5:f2: 3f:69:44:b3:76:85:0b:5d:bc:0f:3f:c6:cd:85:52: 02:03:22:40:b4:df:da:4c:b2:ef:89:b1:ca:d2:d0: ba:bf:60:f3:4a:7a:1a:bc:93:ce:2c:35:ed:5b:76: 27:ba:f9:21:ce:16:94:eb:12:ba:c0:8c:c2:2b:d4: a7:a7:ae:da:11:d8:a4:0a:51:fc:26:36:17:6b:2e: 38:55:4a:4e:5e:ba:d1:71:be:ce:34:63:f6:59:5a: 0d:ab:74:2f:82:95:c9:1c:5c:69:05:88:04:b9:ac: 3c:32:36:ed:59:9b:b9:fd:b6:c9:c3:88:ca:01:45: 16:27:6d:79:18:cf:97:13:df:04:c7:09:8b:c7:57: 85:c0:59:dc:70:26:c2:58:4b:ae:43:31:ef:e2:0b: 81:17:fb:19:81:39:58:f5:07:18:a2:4c:3e:02:00: e5:20:92:5d:13:d1:63:2e:73:fd:1d:71:63:4b:c3: 7a:db:3d:70:f0:34:48:d8:0e:59:97:5c:48:42:f1: bc:88:fc:1e:a1:75:b8:76:a1:5a:e5:42:f4:66:d0: 8c:71:8c:5e:1a:3e:ef:25:8c:1a:36:40:0d:98:36: f6:05:0f:e0:70:71:43:7e:0f:88:5e:a4:ff:5d:7a: 85:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:68:56:60:C2:04:79:D6:97:60:3F:22:62:1B:DA:77:31:E0:1E:10 X509v3 Authority Key Identifier: keyid:1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d5:57:a4:f3:8d:ae:96:94:60:c8:f9:56:e2:64:0d:75:cb: 1f:83:10:ba:16:85:8e:82:31:d5:93:c4:88:68:81:38:e2:b1: 2f:d1:44:1c:8e:60:e5:1c:b1:bb:a6:e2:c8:73:75:50:d7:58: 57:db:e6:ff:d0:fd:16:da:0c:88:2c:d6:c6:ca:bd:05:c1:57: 3d:27:f6:39:d1:cd:6e:38:78:38:e6:bd:c8:79:86:15:33:b1: 81:92:94:37:02:9d:41:d8:86:f9:3f:c5:62:d2:e2:d6:55:53: 46:d4:0a:af:6f:b6:18:84:4e:6e:92:66:ef:2b:1d:b3:bf:31: e3:83:40:85:76:65:2b:09:0a:e6:e3:1b:6b:fb:3e:68:8c:d2: 64:7e:77:74:20:57:c4:a4:4d:45:24:66:ba:3c:51:9b:83:fd: b4:3a:de:c7:c3:b7:c5:85:7a:e0:c3:c7:d6:ca:2b:2d:27:14: ca:87:f7:84:64:de:45:56:e8:1f:f1:de:df:b2:c1:a0:80:3f: 31:f8:49:78:44:f0:18:88:85:5d:e8:a5:b2:23:8b:12:ae:1e: 84:7a:6b:ab:65:87:c3:05:63:68:25:f0:e4:67:89:45:ce:19: 40:73:db:24:02:54:2f:99:12:87:40:28:a4:ee:ac:18:64:20: 44:9b:e9:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDRYHZ3Zdt+RqZF55d8OFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOTUyZTg4MzczNmY3OWNiZDljNTY0NzA0YmYzYzM2NjIx YjhlY2EwHhcNMjUxMjE4MjAwMDU0WhcNMjUxMjE5MjAwMDU0WjAzMTEwLwYDVQQD Eyg3YTY4NTY2MGMyMDQ3OWQ2OTc2MDNmMjI2MjFiZGE3NzMxZTAxZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxqbHmzHflPAPtLn9fI/aUSzdoUL XbwPP8bNhVICAyJAtN/aTLLvibHK0tC6v2DzSnoavJPOLDXtW3YnuvkhzhaU6xK6 wIzCK9Snp67aEdikClH8JjYXay44VUpOXrrRcb7ONGP2WVoNq3QvgpXJHFxpBYgE uaw8MjbtWZu5/bbJw4jKAUUWJ215GM+XE98ExwmLx1eFwFnccCbCWEuuQzHv4guB F/sZgTlY9QcYokw+AgDlIJJdE9FjLnP9HXFjS8N62z1w8DRI2A5Zl1xIQvG8iPwe oXW4dqFa5UL0ZtCMcYxeGj7vJYwaNkANmDb2BQ/gcHFDfg+IXqT/XXqFLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpoVmDCBHnWl2A/ImIb2ncx4B4QMB8GA1UdIwQY MBaAFB6VLog3NvecvZxWRwS/PDZiG47KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMTQwYWUtYzA0Ny00ZmY2LTg2NGYt MzU2MDM1NjU3MWE3LzEvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iMTQwYWUtYzA0Ny00ZmY2LTg2NGYtMzU2MDM1NjU3MWE3 LzEvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9VXpPON rpaUYMj5VuJkDXXLH4MQuhaFjoIx1ZPEiGiBOOKxL9FEHI5g5Ryxu6biyHN1UNdY V9vm/9D9FtoMiCzWxsq9BcFXPSf2OdHNbjh4OOa9yHmGFTOxgZKUNwKdQdiG+T/F YtLi1lVTRtQKr2+2GIRObpJm7ysds78x44NAhXZlKwkK5uMba/s+aIzSZH53dCBX xKRNRSRmujxRm4P9tDrex8O3xYV64MPH1sorLScUyof3hGTeRVboH/He37LBoIA/ MfhJeETwGIiFXeilsiOLEq4ehHprq2WHwwVjaCXw5GeJRc4ZQHPbJAJUL5kSh0Ao pO6sGGQgRJvpAw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:16 2025 by rpki-client