This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json) Hash identifier: RTsBRBBdCqpPAXMLlD/eBqSz9CEPbct/cS85GLw+H+A= Subject key identifier: A8:64:7F:30:2E:FA:EE:8E:2D:FD:E3:B7:67:77:04:78:90:62:9E:AB Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9 Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9 Certificate serial: 019B548626E422A7217238B0C34E6F5C1863 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft Manifest number: 1744 Signing time: Thu 25 Dec 2025 08:00:36 +0000 Manifest this update: Thu 25 Dec 2025 08:00:36 +0000 Manifest next update: Fri 26 Dec 2025 08:00:36 +0000 Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: jkwMOwhXCDp2bQuT1U+2yqIuWPpJhFznJ31fHrlZ1qE=) 2: PqAYbce5ZFtorWDJm1IoXprDpjE.roa (hash: tbDVPuUEiQGmvMdLsr4Uj3a9EoVRDD7cfOnaPg9V/Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:26:e4:22:a7:21:72:38:b0:c3:4e:6f:5c:18:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9 Validity Not Before: Dec 25 08:00:36 2025 GMT Not After : Dec 26 08:00:36 2025 GMT Subject: CN=a8647f302efaee8e2dfde3b76777047890629eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:48:0b:2f:7e:05:2d:00:33:de:8e:6a:a4:f0: 56:9a:aa:f1:a7:0c:de:13:1e:a5:ee:1e:d7:31:42: f7:87:31:97:ff:09:8e:7e:c3:24:70:47:04:0b:ff: 0c:bc:59:30:3b:d9:26:a5:6c:fb:1e:e7:2c:94:fd: 8c:73:88:fb:d7:43:cd:b0:1e:e6:f6:80:c0:5d:8f: 63:a2:7c:ed:8b:67:3e:d1:01:53:7d:3c:62:b4:a2: fb:03:c2:5b:31:87:00:b5:19:c4:4f:72:44:4d:f7: 61:53:b6:78:29:ac:c5:1d:f0:fc:17:8e:e5:c6:e3: 7e:f9:36:a1:8b:38:b6:a9:35:7d:b8:e2:63:2b:4c: c2:9a:be:d0:d4:4f:49:ed:d1:7e:fd:b4:70:f0:03: 21:d8:c5:ad:eb:2f:40:6d:75:1b:9a:91:bd:52:3a: 3f:bd:75:28:ae:af:f5:a9:7f:d5:a7:73:b1:5f:7e: 25:a8:94:33:80:8d:df:99:ba:c6:85:54:94:6a:10: ba:50:06:81:f1:99:29:4d:05:95:d0:56:5d:6e:bd: 80:a4:3e:49:a8:16:61:96:02:86:4f:04:91:98:86: 89:47:b9:50:50:b5:c8:bc:7b:27:53:de:b1:2d:52: e1:49:2a:dc:03:b6:2a:4d:b8:d7:8c:62:b6:32:28: b9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:64:7F:30:2E:FA:EE:8E:2D:FD:E3:B7:67:77:04:78:90:62:9E:AB X509v3 Authority Key Identifier: keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e2:6e:52:3f:63:6b:0f:d5:c2:ad:46:86:0f:5b:b8:4c:dd: 2f:02:59:2f:17:89:e2:9f:2b:05:16:76:13:20:a2:4e:ec:fb: 68:fb:27:f3:da:f3:f0:01:ef:04:4a:40:df:25:66:a5:54:70: a5:09:8d:46:e2:83:cc:1e:a8:85:df:94:ee:a3:e8:b3:80:fa: 92:e9:6b:40:f1:6b:12:3b:db:52:4d:92:6c:1e:fd:f2:81:36: 6e:d3:fe:81:97:ed:89:ac:d2:89:93:e8:92:72:61:68:74:17: b5:e3:0b:d3:a4:92:a9:73:2e:b9:2e:4b:e7:aa:63:c2:54:f9: 64:86:54:e9:1a:9d:7f:d8:24:9e:13:59:1b:f0:32:15:2e:82: ca:40:ce:ba:5e:ec:d6:af:94:f9:ee:bc:eb:d4:b7:3c:4e:02: 90:08:cd:e6:92:c1:f1:66:55:1f:3c:67:e0:14:51:e4:bb:18: 7d:6f:21:a7:41:9d:cd:92:b5:8e:2b:6c:b7:69:a9:f1:47:0a: 2f:75:b7:20:ed:b0:e7:2b:f2:80:b2:a6:93:54:1c:96:76:f4: 61:ea:53:42:9d:b0:01:c9:57:d2:7d:60:e3:bd:28:82:9b:88: c3:85:da:06:1b:8b:34:fd:64:fc:12:83:d4:ce:d5:ca:79:55: 54:db:51:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhibkIqchcjiww05vXBhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNGU5NTkyMDBhZWE4ZmI5MjkxNThiNzNlOGMwZTY5YTg4 ZGM1ZTkwHhcNMjUxMjI1MDgwMDM2WhcNMjUxMjI2MDgwMDM2WjAzMTEwLwYDVQQD EyhhODY0N2YzMDJlZmFlZThlMmRmZGUzYjc2Nzc3MDQ3ODkwNjI5ZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EgLL34FLQAz3o5qpPBWmqrxpwze Ex6l7h7XMUL3hzGX/wmOfsMkcEcEC/8MvFkwO9kmpWz7HucslP2Mc4j710PNsB7m 9oDAXY9jonzti2c+0QFTfTxitKL7A8JbMYcAtRnET3JETfdhU7Z4KazFHfD8F47l xuN++Tahizi2qTV9uOJjK0zCmr7Q1E9J7dF+/bRw8AMh2MWt6y9AbXUbmpG9Ujo/ vXUorq/1qX/Vp3OxX34lqJQzgI3fmbrGhVSUahC6UAaB8ZkpTQWV0FZdbr2ApD5J qBZhlgKGTwSRmIaJR7lQULXIvHsnU96xLVLhSSrcA7YqTbjXjGK2Mii52wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhkfzAu+u6OLf3jt2d3BHiQYp6rMB8GA1UdIwQY MBaAFB1OlZIArqj7kpFYtz6MDmmojcXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEt MmI1MzZjZjdiODI1LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEtMmI1MzZjZjdiODI1 LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+JuUj9j aw/Vwq1Ghg9buEzdLwJZLxeJ4p8rBRZ2EyCiTuz7aPsn89rz8AHvBEpA3yVmpVRw pQmNRuKDzB6ohd+U7qPos4D6kulrQPFrEjvbUk2SbB798oE2btP+gZftiazSiZPo knJhaHQXteML06SSqXMuuS5L56pjwlT5ZIZU6Rqdf9gknhNZG/AyFS6CykDOul7s 1q+U+e6869S3PE4CkAjN5pLB8WZVHzxn4BRR5LsYfW8hp0GdzZK1jitst2mp8UcK L3W3IO2w5yvygLKmk1Qclnb0YepTQp2wAclX0n1g470ogpuIw4XaBhuLNP1k/BKD 1M7VynlVVNtRjA== -----END CERTIFICATE-----Generated at Thu Dec 25 11:16:13 2025 by rpki-client