This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft File: HUxgeKWUHFyxV9XylXyzFNftG-0.mft (raw, json) Hash identifier: 48woIhseeviXCuekifKfbZGJsZ2q0Gf6es5i/F35B3g= Subject key identifier: FB:B5:86:0E:24:58:85:1D:29:AE:0B:96:12:68:AC:57:31:FF:B7:40 Authority key identifier: 1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED Certificate issuer: /CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed Certificate serial: 019B6D6A7FC1898DA27755DD3052C3A640BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft Manifest number: 0BA2 Signing time: Tue 30 Dec 2025 04:00:54 +0000 Manifest this update: Tue 30 Dec 2025 04:00:54 +0000 Manifest next update: Wed 31 Dec 2025 04:00:54 +0000 Files and hashes: 1: HUxgeKWUHFyxV9XylXyzFNftG-0.crl (hash: S/N99hVCN/bUhspK/zb5NWN2o/PbOlmvaoh2LY7U/zU=) 2: bS6FP0-RWfuMzsBRZquHdjUbynI.roa (hash: kkw9ceZnHPEpX3rLpD2wmL4u+vt4FdSYPPqT4A+84KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:7f:c1:89:8d:a2:77:55:dd:30:52:c3:a6:40:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed Validity Not Before: Dec 30 04:00:54 2025 GMT Not After : Dec 31 04:00:54 2025 GMT Subject: CN=fbb5860e2458851d29ae0b961268ac5731ffb740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:3b:d1:1f:bb:e9:8a:92:9d:7d:5d:98:11: e2:bd:c4:e7:64:a8:bd:d1:cf:ed:88:f0:24:fa:38: 05:ca:cd:08:26:21:8e:50:cf:8d:50:ce:37:31:42: 99:48:41:2c:a3:c3:39:97:55:04:7d:6d:1f:6e:a0: 77:d9:74:be:0a:be:08:ad:0d:c7:9d:8f:a1:0c:0b: b6:09:bc:1f:ae:52:9f:83:86:d8:f2:1e:06:b2:18: a2:4d:77:63:ab:1d:66:67:55:e1:bf:5d:51:84:5f: 30:26:58:69:14:85:39:0f:53:a1:63:73:4e:84:c6: 43:56:70:1e:b7:df:98:ce:ad:9a:1f:a9:e7:c5:5b: 3f:b1:a1:64:be:81:29:11:2b:11:5b:e5:ad:4b:61: f1:03:49:6f:54:ed:09:87:d8:d5:ad:25:59:5d:c5: 18:77:b3:ad:bc:86:d9:91:de:6f:47:55:a6:72:8e: a3:60:52:15:e1:6e:13:0b:d5:65:f8:0a:33:88:e9: 16:0b:50:97:a8:6e:65:eb:7d:97:9d:f1:38:6c:d4: 5f:d6:be:3a:79:13:72:45:19:23:d5:d9:68:68:89: ef:4e:b7:25:ff:01:b6:cf:5c:c5:3b:4b:c9:36:9d: f8:b5:ab:2f:10:72:47:31:eb:5d:26:a2:32:d2:65: 7f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B5:86:0E:24:58:85:1D:29:AE:0B:96:12:68:AC:57:31:FF:B7:40 X509v3 Authority Key Identifier: keyid:1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d3:50:f6:8c:e8:08:40:82:aa:b5:cc:fc:c6:08:b2:38:91: 28:ac:01:e7:19:7a:2c:31:e6:9a:04:d4:67:0f:83:4f:40:a7: b3:cc:69:ab:17:63:d4:11:39:13:fd:b6:1d:38:e0:44:db:8e: fe:e0:73:1e:c9:22:37:a8:c1:a0:a3:95:da:e8:0a:b5:1f:a8: 05:ff:d0:f3:77:50:69:a0:05:39:fc:68:dc:e2:a7:68:5f:b1: 48:ab:7f:c0:47:8b:b5:01:8a:11:89:92:7a:dd:e7:da:28:02: d0:59:6b:cf:30:86:05:93:b5:51:75:bd:7d:b5:a2:d0:e0:64: 4a:90:e8:43:97:8c:e9:35:d7:ba:31:6a:40:be:e0:b9:ec:a8: b1:20:1d:5e:6b:ac:e6:fb:23:70:d5:32:c9:bd:f2:c3:c2:87: f0:40:b4:ff:0c:d3:f1:13:44:2a:1a:1a:d2:81:86:d7:5e:a7: 28:a7:a8:24:48:66:1a:0c:c3:c7:13:93:0b:45:06:f3:c9:db: 39:b8:07:6f:71:7b:19:a4:a9:01:62:83:ac:03:0a:9b:83:91: 22:06:f6:b7:a0:76:38:5b:e9:bd:be:b3:90:13:c0:7b:37:68: 1d:95:d4:05:38:8e:05:5f:01:1b:f2:28:f8:a0:af:ba:a6:dc: ed:b2:b5:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttan/BiY2id1XdMFLDpkC9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNGM2MDc4YTU5NDFjNWNiMTU3ZDVmMjk1N2NiMzE0ZDdl ZDFiZWQwHhcNMjUxMjMwMDQwMDU0WhcNMjUxMjMxMDQwMDU0WjAzMTEwLwYDVQQD EyhmYmI1ODYwZTI0NTg4NTFkMjlhZTBiOTYxMjY4YWM1NzMxZmZiNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPA70R+76YqSnX1dmBHivcTnZKi9 0c/tiPAk+jgFys0IJiGOUM+NUM43MUKZSEEso8M5l1UEfW0fbqB32XS+Cr4IrQ3H nY+hDAu2CbwfrlKfg4bY8h4GshiiTXdjqx1mZ1Xhv11RhF8wJlhpFIU5D1OhY3NO hMZDVnAet9+Yzq2aH6nnxVs/saFkvoEpESsRW+WtS2HxA0lvVO0Jh9jVrSVZXcUY d7OtvIbZkd5vR1Wmco6jYFIV4W4TC9Vl+AoziOkWC1CXqG5l632XnfE4bNRf1r46 eRNyRRkj1dloaInvTrcl/wG2z1zFO0vJNp34tasvEHJHMetdJqIy0mV/0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPu1hg4kWIUdKa4LlhJorFcx/7dAMB8GA1UdIwQY MBaAFB1MYHillBxcsVfV8pV8sxTX7RvtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFV4Z2VLV1VIRnl4VjlYeWxYeXpGTmZ0Ry0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zZWYzODYtMDU3MS00NjBlLTg5OTEt OTk2YTYyM2I2MzNlLzEvSFV4Z2VLV1VIRnl4VjlYeWxYeXpGTmZ0Ry0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8zZWYzODYtMDU3MS00NjBlLTg5OTEtOTk2YTYyM2I2MzNl LzEvSFV4Z2VLV1VIRnl4VjlYeWxYeXpGTmZ0Ry0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9NQ9ozo CECCqrXM/MYIsjiRKKwB5xl6LDHmmgTUZw+DT0Cns8xpqxdj1BE5E/22HTjgRNuO /uBzHskiN6jBoKOV2ugKtR+oBf/Q83dQaaAFOfxo3OKnaF+xSKt/wEeLtQGKEYmS et3n2igC0FlrzzCGBZO1UXW9fbWi0OBkSpDoQ5eM6TXXujFqQL7gueyosSAdXmus 5vsjcNUyyb3yw8KH8EC0/wzT8RNEKhoa0oGG116nKKeoJEhmGgzDxxOTC0UG88nb ObgHb3F7GaSpAWKDrAMKm4ORIgb2t6B2OFvpvb6zkBPAezdoHZXUBTiOBV8BG/Io +KCvuqbc7bK1hw== -----END CERTIFICATE-----Generated at Tue Dec 30 09:08:05 2025 by rpki-client