This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft File: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json) Hash identifier: B+5l1zsHVCgR5vVaTaAFXKRE8YLndsDgYXoOwqrpmEU= Subject key identifier: B9:E2:83:5C:81:19:2E:F3:8F:67:D4:6E:47:E3:F2:84:8C:20:EA:C1 Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA Certificate issuer: /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba Certificate serial: 019B44A55CC58744A5BC597139D0EFBA88AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft Manifest number: 0EC2 Signing time: Mon 22 Dec 2025 06:00:46 +0000 Manifest this update: Mon 22 Dec 2025 06:00:46 +0000 Manifest next update: Tue 23 Dec 2025 06:00:46 +0000 Files and hashes: 1: GYIm3RDoW42qeN5ZkiYHMu0tDbk.roa (hash: XTL3oyukju4z29vBf0q/HsP5UmJFSc4ge9VlgNDZpjY=) 2: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: ycIpjzDkWswgNksh9F/+cM7sTTAV+WXIVjKkZWgGFFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:5c:c5:87:44:a5:bc:59:71:39:d0:ef:ba:88:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba Validity Not Before: Dec 22 06:00:46 2025 GMT Not After : Dec 23 06:00:46 2025 GMT Subject: CN=b9e2835c81192ef38f67d46e47e3f2848c20eac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:60:70:0a:0c:1f:b7:b8:8c:86:14:6b:c4:72: 1b:de:08:af:10:86:59:6f:d6:28:0a:3e:19:29:61: 20:5c:10:2e:f6:0f:44:e7:89:d2:20:66:4d:3a:e6: 33:ba:3e:91:99:3a:66:66:d4:d3:ce:44:f2:cc:0c: 41:d6:e6:87:e7:56:ae:7b:48:70:65:39:29:69:4d: 58:00:e1:d7:47:0a:87:14:6c:d8:98:38:1d:c4:ea: 7b:87:9d:0a:d8:ba:3b:1f:d6:fd:b4:aa:55:c5:26: b8:30:1f:ac:43:a5:be:d6:05:34:57:e6:80:63:6d: b1:e9:da:50:4e:8b:0d:08:7d:3a:11:a0:94:71:e2: e9:05:ae:6d:dc:61:e6:39:6d:ff:b6:ed:37:0a:5e: 71:88:b5:ed:e6:7a:e5:67:c2:45:65:00:80:96:a7: 7d:ba:b6:41:72:e7:f4:af:37:cb:9a:7c:f1:9c:84: 2a:2c:d0:f9:fc:3b:9c:3f:6b:98:2a:80:0a:9d:35: d6:26:84:c5:23:ca:1c:8b:ee:98:ab:96:fb:c9:36: b9:0d:3d:0e:c2:3b:0c:36:27:35:1b:db:41:e8:ad: ec:8f:31:69:e3:12:0b:b5:95:8a:45:b8:96:42:09: fd:7c:99:35:a2:3e:6d:8b:64:48:20:59:92:c9:71: 88:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E2:83:5C:81:19:2E:F3:8F:67:D4:6E:47:E3:F2:84:8C:20:EA:C1 X509v3 Authority Key Identifier: keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:55:f4:b5:b7:e5:3f:24:dd:23:e9:86:fc:7b:95:69:57:d6: 1f:7b:d9:ad:97:a6:6e:64:37:d6:78:e4:69:d5:b4:96:de:c3: 05:db:c4:55:12:87:eb:c9:08:9c:ca:53:3c:71:3e:84:f7:d2: 2d:c1:34:e2:80:60:49:a5:ef:87:2a:58:6e:d7:5a:29:7d:44: 17:0a:03:c6:dd:93:d7:61:77:a5:6c:b2:b3:34:97:e0:61:40: 20:e8:7e:a8:54:7c:18:f8:44:2a:14:42:03:49:f0:49:c2:e3: 7b:da:d5:01:bd:23:81:08:ee:49:14:ff:2d:14:2f:bc:f2:3f: 04:76:2c:05:72:53:93:9d:1c:f7:40:c5:cd:a6:51:33:d1:77: 4a:72:8d:9e:d9:b3:57:af:76:31:60:ba:3a:99:a3:03:4c:af: e4:d9:00:47:20:56:ee:09:a3:4e:67:90:57:b3:e2:6b:ea:fd: 98:aa:8d:82:db:2d:02:02:97:ae:67:13:3d:b1:d4:dc:29:38: 2f:6b:2b:ae:e0:5e:e9:45:45:b1:9e:c0:f2:fe:18:d4:58:aa: e5:6a:7c:2a:cc:c3:c5:73:69:46:54:10:81:15:4b:ce:c8:94: 99:41:7e:ed:c9:4d:82:c8:c3:bb:9a:10:a9:de:fe:67:8c:b1: 97:c3:a6:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpVzFh0SlvFlxOdDvuoivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWI4NTYyNjE1ZjUxMTBkMzU1MWY4ZWM1ZGQwNTZmYjBh NDhhYmEwHhcNMjUxMjIyMDYwMDQ2WhcNMjUxMjIzMDYwMDQ2WjAzMTEwLwYDVQQD EyhiOWUyODM1YzgxMTkyZWYzOGY2N2Q0NmU0N2UzZjI4NDhjMjBlYWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWBwCgwft7iMhhRrxHIb3givEIZZ b9YoCj4ZKWEgXBAu9g9E54nSIGZNOuYzuj6RmTpmZtTTzkTyzAxB1uaH51aue0hw ZTkpaU1YAOHXRwqHFGzYmDgdxOp7h50K2Lo7H9b9tKpVxSa4MB+sQ6W+1gU0V+aA Y22x6dpQTosNCH06EaCUceLpBa5t3GHmOW3/tu03Cl5xiLXt5nrlZ8JFZQCAlqd9 urZBcuf0rzfLmnzxnIQqLND5/DucP2uYKoAKnTXWJoTFI8oci+6Yq5b7yTa5DT0O wjsMNic1G9tB6K3sjzFp4xILtZWKRbiWQgn9fJk1oj5ti2RIIFmSyXGI/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnig1yBGS7zj2fUbkfj8oSMIOrBMB8GA1UdIwQY MBaAFB6bhWJhX1EQ01UfjsXdBW+wpIq6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAt NTM5YTBmMjY2ODRkLzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAtNTM5YTBmMjY2ODRk LzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVX0tbfl PyTdI+mG/HuVaVfWH3vZrZembmQ31njkadW0lt7DBdvEVRKH68kInMpTPHE+hPfS LcE04oBgSaXvhypYbtdaKX1EFwoDxt2T12F3pWyyszSX4GFAIOh+qFR8GPhEKhRC A0nwScLje9rVAb0jgQjuSRT/LRQvvPI/BHYsBXJTk50c90DFzaZRM9F3SnKNntmz V692MWC6OpmjA0yv5NkARyBW7gmjTmeQV7Pia+r9mKqNgtstAgKXrmcTPbHU3Ck4 L2srruBe6UVFsZ7A8v4Y1Fiq5Wp8KszDxXNpRlQQgRVLzsiUmUF+7clNgsjDu5oQ qd7+Z4yxl8OmAg== -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:57 2025 by rpki-client