This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft File: hprNGeI6gWZEutDooSuG4SiK0zw.mft (raw, json) Hash identifier: 3CyMmXhH1tk2pMxKDVxP65zZUgvmFOv4TxYuHf10UOQ= Subject key identifier: 55:37:B9:F0:36:B8:16:E4:F4:38:9E:0C:69:50:2D:BE:84:60:2D:B7 Authority key identifier: 86:9A:CD:19:E2:3A:81:66:44:BA:D0:E8:A1:2B:86:E1:28:8A:D3:3C Certificate issuer: /CN=869acd19e23a816644bad0e8a12b86e1288ad33c Certificate serial: 019B631DBB78B3A65C78214684F88AD53DAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft Manifest number: 1185 Signing time: Sun 28 Dec 2025 04:00:51 +0000 Manifest this update: Sun 28 Dec 2025 04:00:51 +0000 Manifest next update: Mon 29 Dec 2025 04:00:51 +0000 Files and hashes: 1: hprNGeI6gWZEutDooSuG4SiK0zw.crl (hash: Lk3hUzxqCoutBlmULtsT4/i7m34JuKpfdKxPMRlAIvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:bb:78:b3:a6:5c:78:21:46:84:f8:8a:d5:3d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=869acd19e23a816644bad0e8a12b86e1288ad33c Validity Not Before: Dec 28 04:00:51 2025 GMT Not After : Dec 29 04:00:51 2025 GMT Subject: CN=5537b9f036b816e4f4389e0c69502dbe84602db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7c:66:70:d8:aa:59:ba:b7:7d:98:53:38:6c: e0:44:7e:af:df:79:2f:a1:2f:47:01:2c:64:87:c1: 70:e8:ab:6e:58:2a:f0:d2:96:58:ce:ff:83:b8:b7: 0f:87:9c:1b:93:33:07:c4:fc:8f:f0:46:9b:e3:73: cc:cf:cb:8e:e2:01:63:d5:f8:ff:0f:90:62:02:02: 90:2b:f0:b4:32:c4:ba:54:fb:7e:e1:4d:48:29:e6: 6a:a9:8d:77:33:8d:05:2a:e8:5c:14:50:1a:68:43: 49:c4:e8:7a:56:2b:0d:0f:e1:15:b7:e5:d7:17:d3: 90:47:74:aa:2b:f4:98:f9:cc:d4:4c:db:4b:d2:87: 77:bf:76:39:39:81:15:a9:ba:43:30:5f:a9:02:33: 9a:19:2a:5d:3a:5b:7f:76:60:3d:e7:66:c1:2d:08: 4d:c5:a4:09:66:ea:12:10:d0:72:53:a4:50:10:5a: 77:e0:3f:67:fe:c0:db:4e:e1:a4:46:ad:c7:4e:49: 78:e1:b7:a4:4b:76:e1:ee:f2:b5:e5:c7:ee:47:13: 07:a4:29:32:cb:59:8c:a0:7f:52:60:c6:a0:74:2f: 72:03:35:e6:60:e5:5e:92:1b:4b:c9:06:22:d1:2a: da:28:7f:2f:32:7a:40:d2:b3:bd:9c:cb:f0:a0:2c: d3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:37:B9:F0:36:B8:16:E4:F4:38:9E:0C:69:50:2D:BE:84:60:2D:B7 X509v3 Authority Key Identifier: keyid:86:9A:CD:19:E2:3A:81:66:44:BA:D0:E8:A1:2B:86:E1:28:8A:D3:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bc:b8:86:fb:bd:11:69:10:e7:22:8f:9b:cf:7f:02:c5:69: 4c:42:a6:f0:bb:97:76:3d:12:19:4f:52:21:05:3d:2f:99:85: 37:36:a1:8a:b7:32:55:bd:fa:3f:d4:88:a7:34:b3:ce:33:52: 99:f9:fc:b4:ba:36:ac:5f:7f:fe:ce:08:30:16:06:58:8e:b3: b8:1d:4a:89:80:07:35:db:f7:f5:3d:39:37:3c:79:1f:44:57: ef:04:ec:c5:45:aa:1e:a7:a5:de:c8:b8:75:c4:a4:7d:40:1f: cf:99:18:73:ab:5e:a8:d7:27:d2:7e:bc:cd:76:31:31:c8:73: 95:bd:55:f8:06:20:7e:6c:b4:71:c2:03:1d:da:ca:8d:d7:e2: eb:3d:44:c7:a0:b9:61:da:ae:55:be:ae:71:89:5a:ea:29:fe: da:73:99:2b:e5:f5:95:e9:21:76:c4:c0:18:55:9c:42:d9:37: 01:6d:74:8c:e7:6b:f0:21:bf:fa:c4:05:fd:01:37:2d:66:6c: 63:de:aa:4b:52:0f:e5:e6:17:d5:ad:e1:91:48:5b:5a:b6:99: cd:d5:cd:f1:1c:70:74:06:5f:c7:d3:52:c8:a8:d6:56:bf:62: 11:31:e8:ae:63:88:7d:3b:b2:25:c4:29:9a:ab:ed:2a:13:1a: d6:a0:73:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHbt4s6ZceCFGhPiK1T2rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OWFjZDE5ZTIzYTgxNjY0NGJhZDBlOGExMmI4NmUxMjg4 YWQzM2MwHhcNMjUxMjI4MDQwMDUxWhcNMjUxMjI5MDQwMDUxWjAzMTEwLwYDVQQD Eyg1NTM3YjlmMDM2YjgxNmU0ZjQzODllMGM2OTUwMmRiZTg0NjAyZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3xmcNiqWbq3fZhTOGzgRH6v33kv oS9HASxkh8Fw6KtuWCrw0pZYzv+DuLcPh5wbkzMHxPyP8Eab43PMz8uO4gFj1fj/ D5BiAgKQK/C0MsS6VPt+4U1IKeZqqY13M40FKuhcFFAaaENJxOh6VisND+EVt+XX F9OQR3SqK/SY+czUTNtL0od3v3Y5OYEVqbpDMF+pAjOaGSpdOlt/dmA952bBLQhN xaQJZuoSENByU6RQEFp34D9n/sDbTuGkRq3HTkl44bekS3bh7vK15cfuRxMHpCky y1mMoH9SYMagdC9yAzXmYOVekhtLyQYi0SraKH8vMnpA0rO9nMvwoCzTmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFU3ufA2uBbk9DieDGlQLb6EYC23MB8GA1UdIwQY MBaAFIaazRniOoFmRLrQ6KErhuEoitM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHByTkdlSTZnV1pFdXREb29TdUc0U2lLMHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81OTExZjctMjAzMS00MGJiLWI0NDEt N2ZjZjAxNWRhMGEwLzEvaHByTkdlSTZnV1pFdXREb29TdUc0U2lLMHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi81OTExZjctMjAzMS00MGJiLWI0NDEtN2ZjZjAxNWRhMGEw LzEvaHByTkdlSTZnV1pFdXREb29TdUc0U2lLMHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7y4hvu9 EWkQ5yKPm89/AsVpTEKm8LuXdj0SGU9SIQU9L5mFNzahircyVb36P9SIpzSzzjNS mfn8tLo2rF9//s4IMBYGWI6zuB1KiYAHNdv39T05Nzx5H0RX7wTsxUWqHqel3si4 dcSkfUAfz5kYc6teqNcn0n68zXYxMchzlb1V+AYgfmy0ccIDHdrKjdfi6z1Ex6C5 YdquVb6ucYla6in+2nOZK+X1lekhdsTAGFWcQtk3AW10jOdr8CG/+sQF/QE3LWZs Y96qS1IP5eYX1a3hkUhbWraZzdXN8RxwdAZfx9NSyKjWVr9iETHormOIfTuyJcQp mqvtKhMa1qBz3g== -----END CERTIFICATE-----Generated at Sun Dec 28 05:52:34 2025 by rpki-client