This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft File: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json) Hash identifier: w9J9w/42sorWC1VWR8KX8rE4ZVaStpjzAUME0q2dOMY= Subject key identifier: 4A:1B:E5:40:19:7D:3B:37:0F:00:B3:9D:53:A3:27:9A:EB:8C:06:39 Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63 Certificate issuer: /CN=1d43453955846773b5256e4279a03d5a3b2b5963 Certificate serial: 019B3F7F3A9FC8379AE9C88F0E7C7DBB9133 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft Manifest number: 06C0 Signing time: Sun 21 Dec 2025 06:01:01 +0000 Manifest this update: Sun 21 Dec 2025 06:01:01 +0000 Manifest next update: Mon 22 Dec 2025 06:01:01 +0000 Files and hashes: 1: 0tTqxzM13bt2v1m4PYXXMoQ5LXU.roa (hash: IIfKmkqir49Glk7zmei/2auCaiHojz2YnRsKfNazlQI=) 2: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: 29wu3CPDBlncwR7P8ZhDGksCZvUfK5zz2Uq/cMvD7S4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:3a:9f:c8:37:9a:e9:c8:8f:0e:7c:7d:bb:91:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963 Validity Not Before: Dec 21 06:01:01 2025 GMT Not After : Dec 22 06:01:01 2025 GMT Subject: CN=4a1be540197d3b370f00b39d53a3279aeb8c0639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:b2:b2:b3:4e:a8:a2:23:ed:99:04:3a:9b: c7:9e:ce:91:3e:68:ef:49:6e:7a:a0:d0:ff:f1:c8: a9:17:63:ef:eb:cb:1f:48:b9:35:19:36:5e:45:c5: fa:5f:76:d7:02:a4:f4:3d:66:2b:c3:5d:3b:34:91: 9b:e3:83:fe:60:0b:01:56:11:e5:cf:77:d9:55:5a: c1:84:4f:b6:82:18:7a:51:4f:ee:b4:21:dc:75:8a: 27:05:71:f2:2a:f4:77:98:c6:a4:2c:84:db:e6:c9: 77:5d:ef:bc:fc:2e:95:56:98:97:63:48:2b:44:a1: 84:8f:d6:05:31:ea:4e:0a:00:48:14:0b:5f:29:62: d3:82:07:a4:37:9c:09:a0:01:64:82:55:11:28:98: c4:dc:c8:3e:5b:61:95:b5:23:1b:cc:2b:f1:a4:af: a1:11:ec:c9:68:6b:16:d0:93:71:13:18:49:d0:0d: 6d:d0:89:46:76:03:03:3e:bc:d7:2a:33:59:e1:18: f9:a5:ff:16:d6:f9:02:bd:7f:2e:3a:57:1d:77:64: d1:0f:7f:43:d1:80:0c:b8:6f:34:74:0f:f6:6d:7d: da:9e:ad:e5:e4:be:be:31:d9:9d:85:33:05:5a:d5: c0:80:c8:4a:d4:0b:34:fe:0f:f3:4c:8f:57:89:76: 2b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1B:E5:40:19:7D:3B:37:0F:00:B3:9D:53:A3:27:9A:EB:8C:06:39 X509v3 Authority Key Identifier: keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:16:b0:79:75:0e:29:87:25:70:bd:f1:3c:01:75:15:e8:d8: 6d:1d:9f:01:88:4b:ab:a7:16:c2:60:23:14:86:11:4d:a8:53: cd:c3:d4:c5:89:97:94:fc:b9:8a:ee:81:e5:5d:fd:a4:f3:cd: 99:fc:3f:3f:e4:18:eb:57:d4:d8:b6:06:e3:e3:f4:27:47:90: c4:36:ff:5c:dd:ee:61:6e:05:9e:fd:f4:8b:1b:7c:1c:20:02: f2:31:72:56:c8:a9:c0:64:12:e5:30:ab:fb:fe:ba:5f:8a:26: ff:3e:24:51:c8:32:0f:57:a1:26:47:d3:c2:3b:3d:1a:2a:93: f8:0e:06:9b:78:2f:c3:c1:ba:ec:05:b2:d6:c2:ef:a3:0a:b6: 41:56:59:12:3e:6e:b5:3c:ac:37:75:c5:96:d8:1e:14:71:41: 29:2b:9e:e3:8a:8a:96:f9:bd:2b:a1:9b:82:a4:23:4c:8a:57: 65:72:0b:a6:81:cd:9b:e2:ba:3f:e4:4f:b1:b5:19:ce:d7:ee: 73:b9:0a:d5:50:72:03:ea:a8:31:fc:3f:72:51:9c:15:fb:4e: 27:8c:ee:4a:e1:fb:0e:53:f9:39:48:71:21:41:10:a6:8c:69: 4b:a9:3c:a0:01:5d:34:ef:f3:fb:44:72:28:61:ac:4c:e3:45: 29:18:f3:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fzqfyDea6ciPDnx9u5EzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDM0NTM5NTU4NDY3NzNiNTI1NmU0Mjc5YTAzZDVhM2Iy YjU5NjMwHhcNMjUxMjIxMDYwMTAxWhcNMjUxMjIyMDYwMTAxWjAzMTEwLwYDVQQD Eyg0YTFiZTU0MDE5N2QzYjM3MGYwMGIzOWQ1M2EzMjc5YWViOGMwNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthmysrNOqKIj7ZkEOpvHns6RPmjv SW56oND/8cipF2Pv68sfSLk1GTZeRcX6X3bXAqT0PWYrw107NJGb44P+YAsBVhHl z3fZVVrBhE+2ghh6UU/utCHcdYonBXHyKvR3mMakLITb5sl3Xe+8/C6VVpiXY0gr RKGEj9YFMepOCgBIFAtfKWLTggekN5wJoAFkglURKJjE3Mg+W2GVtSMbzCvxpK+h EezJaGsW0JNxExhJ0A1t0IlGdgMDPrzXKjNZ4Rj5pf8W1vkCvX8uOlcdd2TRD39D 0YAMuG80dA/2bX3anq3l5L6+MdmdhTMFWtXAgMhK1As0/g/zTI9XiXYrqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEob5UAZfTs3DwCznVOjJ5rrjAY5MB8GA1UdIwQY MBaAFB1DRTlVhGdztSVuQnmgPVo7K1ljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVORk9WV0VaM08xSlc1Q2VhQTlXanNyV1dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81OTE0YWYtM2FiOC00MTgyLWE4YWIt YzJjOThkMmI2YTY1LzEvSFVORk9WV0VaM08xSlc1Q2VhQTlXanNyV1dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81OTE0YWYtM2FiOC00MTgyLWE4YWItYzJjOThkMmI2YTY1 LzEvSFVORk9WV0VaM08xSlc1Q2VhQTlXanNyV1dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhaweXUO KYclcL3xPAF1FejYbR2fAYhLq6cWwmAjFIYRTahTzcPUxYmXlPy5iu6B5V39pPPN mfw/P+QY61fU2LYG4+P0J0eQxDb/XN3uYW4Fnv30ixt8HCAC8jFyVsipwGQS5TCr +/66X4om/z4kUcgyD1ehJkfTwjs9GiqT+A4Gm3gvw8G67AWy1sLvowq2QVZZEj5u tTysN3XFltgeFHFBKSue44qKlvm9K6GbgqQjTIpXZXILpoHNm+K6P+RPsbUZztfu c7kK1VByA+qoMfw/clGcFftOJ4zuSuH7DlP5OUhxIUEQpoxpS6k8oAFdNO/z+0Ry KGGsTONFKRjzTA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:42:23 2025 by rpki-client