This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft File: hUu3qjkIyZjePEL34YSVOLBZJhc.mft (raw, json) Hash identifier: 37R0G5OZQrojLTORlhwvn2gjJEJ9Utcyg6BZ6ztf1+M= Subject key identifier: BD:B1:40:2E:96:41:6E:C9:DA:F0:3F:C6:6C:F4:33:51:BF:3A:3F:BE Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17 Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617 Certificate serial: 019B416D41E7003FBC04885467EF762423FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft Manifest number: 100C Signing time: Sun 21 Dec 2025 15:00:37 +0000 Manifest this update: Sun 21 Dec 2025 15:00:37 +0000 Manifest next update: Mon 22 Dec 2025 15:00:37 +0000 Files and hashes: 1: hUu3qjkIyZjePEL34YSVOLBZJhc.crl (hash: lcDBtlPi3SU9k79Q9jqwLkcnDg6zChh2jmKBmoGXCZk=) 2: pkoA1nbX0r8lwiVwxbfu80R8kOU.roa (hash: dAPrEkvaKQk5s5Z7WHpV1G3F1Sw4lOg/QTiasC7ZX1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:41:e7:00:3f:bc:04:88:54:67:ef:76:24:23:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617 Validity Not Before: Dec 21 15:00:37 2025 GMT Not After : Dec 22 15:00:37 2025 GMT Subject: CN=bdb1402e96416ec9daf03fc66cf43351bf3a3fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:83:92:35:e0:54:28:73:cb:00:d6:78:c4:53: 02:7f:68:39:5b:fc:04:22:0a:62:a4:d4:42:e1:09: 71:40:cb:2d:ba:1b:2f:68:3c:00:b1:54:e9:3f:5c: a4:6d:2c:13:d9:b6:5f:75:91:58:ae:70:18:a2:ee: 52:74:2a:20:58:5b:37:68:17:97:69:16:73:35:b0: af:4a:7f:63:56:55:cc:d9:a7:3c:f7:a2:5f:02:3a: bc:18:bc:d5:71:85:ac:ea:98:e7:a6:33:9e:2a:9e: bd:74:1f:c8:15:ee:ab:ed:29:15:d2:7c:d8:5c:9a: d5:86:ed:c9:f0:33:4d:51:0a:d2:23:b4:26:c8:c5: 36:9a:24:7e:18:be:78:8b:c2:72:3d:6a:b2:e2:26: 1e:75:d0:b9:95:a3:f1:42:d5:f8:f9:f4:3e:de:9a: 18:f5:b6:73:1f:d8:f2:91:06:f1:44:85:7d:2e:50: 1d:61:2b:eb:2e:c7:30:19:77:e5:f5:35:67:83:c8: 5f:78:76:73:f4:ab:21:7d:82:8a:e5:8a:86:a8:db: 39:66:60:80:90:31:e9:27:9f:b4:26:7e:0c:1f:f5: bd:73:78:4c:e1:8d:c8:b3:e0:9d:0c:33:f7:7f:3d: 80:cf:cf:24:2e:3a:30:55:9e:a6:36:d7:ff:9f:9c: a3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B1:40:2E:96:41:6E:C9:DA:F0:3F:C6:6C:F4:33:51:BF:3A:3F:BE X509v3 Authority Key Identifier: keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:26:58:35:e2:3f:45:c0:16:ad:a1:89:4b:fc:08:10:a6:45: ae:4b:fa:1e:5f:5a:8d:31:14:07:3f:2a:99:c9:73:0a:0b:20: 36:7e:23:fa:a7:12:85:2a:66:09:37:c3:1a:15:5b:ef:51:f1: 51:8f:cc:15:c2:ee:95:eb:1b:9b:b4:ad:4f:8c:33:20:c6:aa: 43:60:6a:62:25:42:cf:3b:be:0a:5e:0a:55:fc:a6:2c:a6:04: 05:31:8c:a9:7a:55:45:a9:40:9b:96:26:46:fa:7c:2a:cf:c0: e2:e7:81:07:f9:47:51:38:5f:10:f6:c7:b4:92:ed:c4:0a:9d: 14:47:c5:58:6e:05:73:b1:c3:6a:bd:e0:e7:2a:32:64:1c:4d: 4f:39:07:48:56:58:0a:f8:3e:bb:38:a6:ee:7c:fc:17:e8:67: be:d6:6d:96:50:2b:aa:6e:c4:1c:24:75:81:8e:f6:ff:16:03: d4:16:e0:d6:9e:2a:39:33:8b:b7:ad:aa:72:6a:78:e0:43:a4: 54:e1:c2:26:23:63:0e:8a:b8:a2:19:61:35:73:48:dc:73:8c: 38:ba:5f:2e:50:65:8a:56:16:fd:e4:e8:73:cb:73:08:94:a2: de:71:27:f0:a2:38:ed:31:c4:19:ce:9e:e7:11:a2:38:81:9f: 40:20:09:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbUHnAD+8BIhUZ+92JCP8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGJiN2FhMzkwOGM5OThkZTNjNDJmN2UxODQ5NTM4YjA1 OTI2MTcwHhcNMjUxMjIxMTUwMDM3WhcNMjUxMjIyMTUwMDM3WjAzMTEwLwYDVQQD EyhiZGIxNDAyZTk2NDE2ZWM5ZGFmMDNmYzY2Y2Y0MzM1MWJmM2EzZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYOSNeBUKHPLANZ4xFMCf2g5W/wE IgpipNRC4QlxQMstuhsvaDwAsVTpP1ykbSwT2bZfdZFYrnAYou5SdCogWFs3aBeX aRZzNbCvSn9jVlXM2ac896JfAjq8GLzVcYWs6pjnpjOeKp69dB/IFe6r7SkV0nzY XJrVhu3J8DNNUQrSI7QmyMU2miR+GL54i8JyPWqy4iYeddC5laPxQtX4+fQ+3poY 9bZzH9jykQbxRIV9LlAdYSvrLscwGXfl9TVng8hfeHZz9KshfYKK5YqGqNs5ZmCA kDHpJ5+0Jn4MH/W9c3hM4Y3Is+CdDDP3fz2Az88kLjowVZ6mNtf/n5yjmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2xQC6WQW7J2vA/xmz0M1G/Oj++MB8GA1UdIwQY MBaAFIVLt6o5CMmY3jxC9+GElTiwWSYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2Et NjRlNTJiOWRkOGQxLzEvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2EtNjRlNTJiOWRkOGQx LzEvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyyZYNeI/ RcAWraGJS/wIEKZFrkv6Hl9ajTEUBz8qmclzCgsgNn4j+qcShSpmCTfDGhVb71Hx UY/MFcLulesbm7StT4wzIMaqQ2BqYiVCzzu+Cl4KVfymLKYEBTGMqXpVRalAm5Ym Rvp8Ks/A4ueBB/lHUThfEPbHtJLtxAqdFEfFWG4Fc7HDar3g5yoyZBxNTzkHSFZY Cvg+uzim7nz8F+hnvtZtllArqm7EHCR1gY72/xYD1Bbg1p4qOTOLt62qcmp44EOk VOHCJiNjDoq4ohlhNXNI3HOMOLpfLlBlilYW/eToc8tzCJSi3nEn8KI47THEGc6e 5xGiOIGfQCAJSw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:01:22 2025 by rpki-client