This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json) Hash identifier: KxfjFh0un+hzt4UWjdNxj5RRDr/dkXif3kHWWjJlYNQ= Subject key identifier: 09:83:9C:90:4C:9B:5F:45:9A:12:A2:05:6F:0D:AA:EE:14:BD:CF:C7 Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16 Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516 Certificate serial: 019B5CE4AB312C4B888E98CAD4660361D36D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft Manifest number: 0C5C Signing time: Fri 26 Dec 2025 23:00:48 +0000 Manifest this update: Fri 26 Dec 2025 23:00:48 +0000 Manifest next update: Sat 27 Dec 2025 23:00:48 +0000 Files and hashes: 1: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: CATwmlYTqMvEouPZuUx/7m8XXa3/SmdbkefpWRZ4C5k=) 2: IGa7QfhbXaDsGCT9xJOI5gdu6yw.roa (hash: X0y8/lBS1BHPwzQ2lfqfjmgEWEXvXO2MftnVLJbE6FY=) 3: VwEoUNw-ez0MhDo9hKLki2sD7x8.roa (hash: hJNorU0BhP7KaHlsAZlKF465rhSAsAGROKIAje3NnsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:ab:31:2c:4b:88:8e:98:ca:d4:66:03:61:d3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516 Validity Not Before: Dec 26 23:00:48 2025 GMT Not After : Dec 27 23:00:48 2025 GMT Subject: CN=09839c904c9b5f459a12a2056f0daaee14bdcfc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c9:cb:b3:1d:1c:5c:8f:c2:23:0e:4c:01:dc: 40:e6:0f:b4:09:74:5f:a1:43:c8:61:94:93:27:2c: 86:88:46:0f:67:96:94:ae:31:cd:fd:47:ff:b3:d6: d8:41:13:19:79:ac:6b:99:ea:70:b4:47:2b:9c:37: 56:a7:83:3c:a4:4f:99:82:ce:35:e6:7d:85:d1:5b: 57:5d:f7:78:e9:07:fa:6b:94:0f:1e:59:82:36:17: 81:a5:92:69:17:2f:e6:ca:26:cb:2f:6c:45:6b:66: df:82:73:e5:a8:29:2c:d7:34:78:f5:57:e9:c8:6e: 4c:06:20:89:42:8e:be:bb:20:7f:67:e8:4c:a1:ff: 94:99:ce:18:c4:12:5e:5c:c7:ab:2c:20:14:3f:39: 4b:1a:81:b2:3d:ff:0b:4a:90:58:17:71:7b:14:2c: 12:c5:76:b9:0a:bc:56:65:8b:0e:41:79:3f:1c:46: c4:11:53:b9:78:5d:57:90:17:5c:7e:af:da:08:09: e6:fd:ed:55:fc:76:06:17:54:35:80:a0:3a:10:27: 1b:33:6e:e8:a3:d2:9e:57:25:02:c3:cf:79:c4:00: 03:58:b2:cf:0b:91:a7:00:69:ed:8f:8a:b9:fe:21: 03:32:9f:16:e7:a7:e8:02:da:b9:71:f9:c7:92:1d: 00:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:83:9C:90:4C:9B:5F:45:9A:12:A2:05:6F:0D:AA:EE:14:BD:CF:C7 X509v3 Authority Key Identifier: keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a0:76:6d:b5:cb:f6:52:ba:02:ad:43:2d:a6:ed:ea:71:f9: f1:a3:00:b2:0a:b5:5e:13:89:8c:2e:8c:bc:11:d0:ad:8f:c1: 02:18:f9:d7:86:78:f9:d6:30:24:d5:71:56:06:5c:60:34:31: 49:f3:c9:82:b1:6f:35:09:c7:ae:df:a6:02:78:1c:2f:56:ba: b5:1c:f1:8f:5c:b6:dd:01:c5:c7:34:1c:61:79:36:e9:90:9f: 50:ec:f8:5e:f2:be:c8:d1:73:53:32:ab:98:8c:02:a8:e2:6f: 50:13:19:53:8a:ad:85:d4:cf:d4:76:ee:0a:d6:3f:38:6f:81: cc:31:86:7c:74:70:6c:97:b5:c3:94:e1:90:f5:fb:38:28:a5: 24:bd:8b:70:5e:eb:c2:3b:93:57:a3:41:0a:98:55:e8:c9:92: 97:72:23:89:70:6a:0c:96:2e:17:00:4a:b5:60:d5:a2:00:98: 11:2d:26:f1:c8:7a:2a:b9:b8:c2:4c:86:ce:af:7c:76:28:f0: 67:df:33:73:d9:ea:61:88:81:82:f1:d3:3a:13:0e:3c:6c:be: fa:bd:47:e3:1e:97:e5:26:39:e3:df:e8:3a:64:a3:f7:fa:c2: 1e:63:9e:f2:cd:59:7f:81:7d:c7:e5:ba:34:9b:8b:4e:58:43: 84:bb:7a:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5KsxLEuIjpjK1GYDYdNtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlN2IyZTI0M2Y4YWE5NTQ1OTc5MzJiY2RjZDlhZjY1NjBk Y2U1MTYwHhcNMjUxMjI2MjMwMDQ4WhcNMjUxMjI3MjMwMDQ4WjAzMTEwLwYDVQQD EygwOTgzOWM5MDRjOWI1ZjQ1OWExMmEyMDU2ZjBkYWFlZTE0YmRjZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58nLsx0cXI/CIw5MAdxA5g+0CXRf oUPIYZSTJyyGiEYPZ5aUrjHN/Uf/s9bYQRMZeaxrmepwtEcrnDdWp4M8pE+Zgs41 5n2F0VtXXfd46Qf6a5QPHlmCNheBpZJpFy/myibLL2xFa2bfgnPlqCks1zR49Vfp yG5MBiCJQo6+uyB/Z+hMof+Umc4YxBJeXMerLCAUPzlLGoGyPf8LSpBYF3F7FCwS xXa5CrxWZYsOQXk/HEbEEVO5eF1XkBdcfq/aCAnm/e1V/HYGF1Q1gKA6ECcbM27o o9KeVyUCw895xAADWLLPC5GnAGntj4q5/iEDMp8W56foAtq5cfnHkh0AIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmDnJBMm19FmhKiBW8Nqu4Uvc/HMB8GA1UdIwQY MBaAFB57LiQ/iqlUWXkyvNzZr2Vg3OUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMt ZDU0OTU1NjQzY2Q5LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMtZDU0OTU1NjQzY2Q5 LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaB2bbXL 9lK6Aq1DLabt6nH58aMAsgq1XhOJjC6MvBHQrY/BAhj514Z4+dYwJNVxVgZcYDQx SfPJgrFvNQnHrt+mAngcL1a6tRzxj1y23QHFxzQcYXk26ZCfUOz4XvK+yNFzUzKr mIwCqOJvUBMZU4qthdTP1HbuCtY/OG+BzDGGfHRwbJe1w5ThkPX7OCilJL2LcF7r wjuTV6NBCphV6MmSl3IjiXBqDJYuFwBKtWDVogCYES0m8ch6Krm4wkyGzq98dijw Z98zc9nqYYiBgvHTOhMOPGy++r1H4x6X5SY549/oOmSj9/rCHmOe8s1Zf4F9x+W6 NJuLTlhDhLt6AQ== -----END CERTIFICATE-----Generated at Sat Dec 27 04:46:49 2025 by rpki-client