This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft File: HpqS2vCMILRpG5Jc8DLlSR_grMA.mft (raw, json) Hash identifier: JJ3SIySbXKcM+1acykC8QQXhqUZcTMuMvydWAVjnwhc= Subject key identifier: 4D:E0:76:DE:78:7D:C8:FB:BD:B3:DF:DD:F4:AC:DF:E9:F4:E3:8F:C9 Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0 Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0 Certificate serial: 019B5DF74394AF7BC6F2ED2C6D2BB316B8FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft Manifest number: 1367 Signing time: Sat 27 Dec 2025 04:00:44 +0000 Manifest this update: Sat 27 Dec 2025 04:00:44 +0000 Manifest next update: Sun 28 Dec 2025 04:00:44 +0000 Files and hashes: 1: ACKW9RfobgNxFmGLo0q9xAh_d6k.roa (hash: sd4MSbt7R4RMvGdT2hp/M6b7EN9LmdrjGUMed4jtMaw=) 2: HpqS2vCMILRpG5Jc8DLlSR_grMA.crl (hash: kFIa2p1zjphcwtxeG4SrT91zTZSvAt6h0KeRPCaJf5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:f7:43:94:af:7b:c6:f2:ed:2c:6d:2b:b3:16:b8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0 Validity Not Before: Dec 27 04:00:44 2025 GMT Not After : Dec 28 04:00:44 2025 GMT Subject: CN=4de076de787dc8fbbdb3dfddf4acdfe9f4e38fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a2:d1:03:f0:29:ac:99:8b:ed:1d:1d:ef:81: 84:3d:f5:46:43:64:02:49:a2:b9:c5:58:e7:2f:f9: 07:9b:be:27:35:83:c5:1a:08:3c:86:2e:26:aa:a0: 30:10:c1:59:89:88:95:58:15:4a:3f:5a:df:fa:23: 36:3e:b7:0b:85:85:41:25:b7:d7:5f:43:ba:0b:17: 2a:52:c3:80:86:b6:65:88:84:d0:e2:d1:02:43:62: 39:05:48:49:b8:46:8f:3b:4c:9b:5f:93:83:0e:de: c4:1d:92:39:3c:72:ba:0e:4a:e3:09:1f:07:81:36: 5b:27:52:cf:b6:bf:f8:f9:99:5a:e7:0e:e5:43:e6: ad:48:31:16:53:34:b4:f3:aa:e3:27:24:ae:2e:d6: aa:da:cc:bc:3f:8a:0a:fd:2c:0d:4e:4e:cf:8e:c3: e0:d8:2a:ef:cf:0e:03:2f:e8:78:69:61:a4:bd:7b: 01:7e:ec:11:d0:2d:60:2e:00:e5:49:b0:af:2d:80: 6c:ec:74:e2:06:04:8e:7f:4a:0d:fd:95:4f:f0:0a: e6:fd:85:21:ce:8b:01:2f:d5:6f:b2:10:17:d9:6a: a3:0e:b8:aa:01:75:6b:e3:4b:de:34:1a:0d:53:c2: 29:c3:8f:3f:52:ff:ef:af:63:6b:f3:81:b4:15:d2: 7e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E0:76:DE:78:7D:C8:FB:BD:B3:DF:DD:F4:AC:DF:E9:F4:E3:8F:C9 X509v3 Authority Key Identifier: keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:82:14:45:a4:74:24:4b:b6:4e:98:4c:e2:4f:c7:b7:92:ba: 71:8a:5a:6e:e9:7e:80:3a:b3:7b:be:b5:84:40:91:01:3d:90: 7c:ee:24:be:1b:c4:8b:5a:38:a6:52:b4:ce:b3:28:38:08:81: 46:ee:f0:cf:b7:8f:62:cc:ec:3f:28:0d:a4:dc:7c:df:10:4e: 44:2b:f4:42:9d:60:2c:b7:19:5d:79:d4:75:b3:db:99:62:0e: 0b:7b:27:31:65:4f:73:8c:dc:25:a5:fe:df:cb:3c:3d:20:69: af:0d:26:b7:7e:36:18:18:f1:3b:6f:67:ff:31:78:d4:c5:85: bd:36:5d:d1:3b:c2:47:80:7d:f9:ab:7a:1c:c5:5f:2b:11:24: 39:fa:5f:a3:74:c9:2a:fb:39:e3:35:60:d7:5b:27:90:c6:92: ef:c8:a4:ad:ba:f7:db:e8:e4:c1:4e:33:0e:f2:b2:91:b7:56: c6:4c:16:dc:90:81:65:48:b8:49:f3:8c:30:fa:d6:84:bc:7f: 12:a2:6d:ae:2b:a9:f2:6a:17:21:71:f8:ad:b7:30:59:93:0a: fb:6c:81:a8:f1:40:75:c2:65:4e:01:86:62:96:f5:a7:8a:47: 11:8f:1a:90:3d:24:65:3d:ce:e1:4f:9a:96:f7:72:9f:a6:07: 90:46:3e:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtd90OUr3vG8u0sbSuzFrj+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWE5MmRhZjA4YzIwYjQ2OTFiOTI1Y2YwMzJlNTQ5MWZl MGFjYzAwHhcNMjUxMjI3MDQwMDQ0WhcNMjUxMjI4MDQwMDQ0WjAzMTEwLwYDVQQD Eyg0ZGUwNzZkZTc4N2RjOGZiYmRiM2RmZGRmNGFjZGZlOWY0ZTM4ZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaLRA/AprJmL7R0d74GEPfVGQ2QC SaK5xVjnL/kHm74nNYPFGgg8hi4mqqAwEMFZiYiVWBVKP1rf+iM2PrcLhYVBJbfX X0O6CxcqUsOAhrZliITQ4tECQ2I5BUhJuEaPO0ybX5ODDt7EHZI5PHK6DkrjCR8H gTZbJ1LPtr/4+Zla5w7lQ+atSDEWUzS086rjJySuLtaq2sy8P4oK/SwNTk7PjsPg 2Crvzw4DL+h4aWGkvXsBfuwR0C1gLgDlSbCvLYBs7HTiBgSOf0oN/ZVP8Arm/YUh zosBL9VvshAX2WqjDriqAXVr40veNBoNU8Ipw48/Uv/vr2Nr84G0FdJ+jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3gdt54fcj7vbPf3fSs3+n044/JMB8GA1UdIwQY MBaAFB6aktrwjCC0aRuSXPAy5Ukf4KzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3Yzgt Y2U4MmViZTExYWM4LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3YzgtY2U4MmViZTExYWM4 LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYIURaR0 JEu2TphM4k/Ht5K6cYpabul+gDqze761hECRAT2QfO4kvhvEi1o4plK0zrMoOAiB Ru7wz7ePYszsPygNpNx83xBORCv0Qp1gLLcZXXnUdbPbmWIOC3snMWVPc4zcJaX+ 38s8PSBprw0mt342GBjxO29n/zF41MWFvTZd0TvCR4B9+at6HMVfKxEkOfpfo3TJ Kvs54zVg11snkMaS78ikrbr32+jkwU4zDvKykbdWxkwW3JCBZUi4SfOMMPrWhLx/ EqJtriup8moXIXH4rbcwWZMK+2yBqPFAdcJlTgGGYpb1p4pHEY8akD0kZT3O4U+a lvdyn6YHkEY+kw== -----END CERTIFICATE-----Generated at Sat Dec 27 08:08:39 2025 by rpki-client