This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft File: HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft (raw, json) Hash identifier: bbBZCy3m0TascM/GhKzwXok2o5whDuO4noUWmHSokkc= Subject key identifier: 62:BB:2E:C9:6C:05:66:EF:D8:4D:EE:42:02:B2:FA:5B:09:C5:E8:E1 Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E Certificate issuer: /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e Certificate serial: 019B44DCB334E5A948BBAF9ACBA60FE8F8D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 07:01:12 +0000 Manifest this update: Mon 22 Dec 2025 07:01:12 +0000 Manifest next update: Tue 23 Dec 2025 07:01:12 +0000 Files and hashes: 1: HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl (hash: m59u/LP8MmGopReIOr91T9uuFxjtjplUlXy06gJ7Ocg=) 2: ZFvHbKMASPTw38lOs9oWeuw1U-4.roa (hash: HZhplikQvG33rAVAtLNyD/3IfM/BXxh9qsmuRDaoo/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:b3:34:e5:a9:48:bb:af:9a:cb:a6:0f:e8:f8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e Validity Not Before: Dec 22 07:01:12 2025 GMT Not After : Dec 23 07:01:12 2025 GMT Subject: CN=62bb2ec96c0566efd84dee4202b2fa5b09c5e8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6e:19:4d:0f:84:97:f3:28:4d:85:66:ed:ce: 27:a9:35:30:9e:53:2b:fb:41:84:f3:c5:24:09:32: e7:a3:22:58:84:d3:93:f6:aa:3b:3c:44:fc:98:c0: 0e:0d:df:c6:d6:fc:6f:6f:a8:fb:db:7f:91:bc:fa: a7:a4:15:a0:a0:68:74:77:a1:c6:23:d2:0e:d9:c9: 53:74:e9:7a:5f:43:56:4a:c0:8e:2e:63:ed:e1:2d: b7:de:fb:e9:c5:43:4a:f5:cd:fe:96:12:6b:4a:60: e6:be:c3:1b:84:8c:0a:eb:3b:d7:58:ef:41:c4:7e: 50:cf:8f:0d:7d:57:b8:d9:dc:fd:1b:24:9a:a8:9a: a8:48:5d:80:aa:a7:af:b9:e6:53:4c:20:00:cd:58: c2:3f:84:5c:7c:9d:09:a5:65:55:3f:b3:53:ad:fa: d7:85:a4:e8:3f:15:af:c4:ab:a5:6d:47:53:04:dc: 58:42:81:94:d3:63:3d:cb:18:f0:07:3c:2f:15:39: 07:b6:c2:20:88:72:79:b7:1b:94:be:3f:71:9a:35: f8:c4:ca:fe:b6:2a:75:55:4a:c1:a7:07:c8:e3:51: 0a:e9:89:6c:68:e2:c0:4b:9d:2f:8d:9a:f6:15:d3: 03:57:c6:2a:2a:a4:22:7e:ea:37:9c:12:cf:b1:35: 43:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BB:2E:C9:6C:05:66:EF:D8:4D:EE:42:02:B2:FA:5B:09:C5:E8:E1 X509v3 Authority Key Identifier: keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c0:b2:98:a8:e6:00:d8:4c:29:65:9e:bd:09:dd:ee:72:d9: 27:00:f9:b1:e3:17:b8:22:9c:ca:97:4e:6a:5a:b5:55:e0:0c: fc:20:32:b8:5e:08:99:aa:1b:a3:43:01:6c:19:81:e4:16:92: 07:78:43:16:d5:0b:46:8d:2a:f8:42:b5:7b:36:33:b1:01:47: b6:d9:41:e6:12:1b:06:88:39:24:28:6f:21:6d:13:33:d4:6b: e6:f5:f9:86:e6:6a:3d:8c:bd:a7:8b:a9:aa:23:e6:e5:2e:1e: 61:d3:53:b4:c9:ad:bd:2d:c8:e0:23:93:04:55:ca:b3:3e:1c: 51:24:aa:c1:b8:6e:46:d6:9b:6c:ff:6d:c8:43:4a:c6:6f:e5: 42:67:40:4f:7d:d6:7d:f3:2a:94:9f:3a:4d:ba:3d:1a:60:7e: 60:5e:88:6e:a6:0a:52:01:35:18:f3:88:f0:36:5f:90:e7:5c: 66:aa:e5:fd:ca:df:af:b0:17:3f:2a:79:6f:89:0d:b2:d0:9e: e5:4b:59:4b:67:ff:cb:d7:44:93:87:c6:ea:0c:29:6c:05:de: 00:e6:dc:1e:09:8e:9f:29:9e:1f:be:30:cd:ad:42:8f:0f:0d: 3b:cc:99:0b:67:7d:a3:f6:fd:3d:ee:56:e0:8c:fb:5f:44:e8: 88:18:f8:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3LM05alIu6+ay6YP6PjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZDlhOTQ2NzllYzlhYjMzZTY1ZTA2OWM5YWE0NDBkYjI3 M2UxNGUwHhcNMjUxMjIyMDcwMTEyWhcNMjUxMjIzMDcwMTEyWjAzMTEwLwYDVQQD Eyg2MmJiMmVjOTZjMDU2NmVmZDg0ZGVlNDIwMmIyZmE1YjA5YzVlOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G4ZTQ+El/MoTYVm7c4nqTUwnlMr +0GE88UkCTLnoyJYhNOT9qo7PET8mMAODd/G1vxvb6j723+RvPqnpBWgoGh0d6HG I9IO2clTdOl6X0NWSsCOLmPt4S233vvpxUNK9c3+lhJrSmDmvsMbhIwK6zvXWO9B xH5Qz48NfVe42dz9GySaqJqoSF2AqqevueZTTCAAzVjCP4RcfJ0JpWVVP7NTrfrX haToPxWvxKulbUdTBNxYQoGU02M9yxjwBzwvFTkHtsIgiHJ5txuUvj9xmjX4xMr+ tip1VUrBpwfI41EK6YlsaOLAS50vjZr2FdMDV8YqKqQifuo3nBLPsTVDMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGK7LslsBWbv2E3uQgKy+lsJxejhMB8GA1UdIwQY MBaAFB3ZqUZ57JqzPmXgacmqRA2yc+FOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGRtcFJubnNtck0tWmVCcHlhcEVEYkp6NFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hM2I5YjktMjE3Yy00MWM5LTk0NzYt MjdkZDBhZDJhZGYzLzEvSGRtcFJubnNtck0tWmVCcHlhcEVEYkp6NFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hM2I5YjktMjE3Yy00MWM5LTk0NzYtMjdkZDBhZDJhZGYz LzEvSGRtcFJubnNtck0tWmVCcHlhcEVEYkp6NFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMCymKjm ANhMKWWevQnd7nLZJwD5seMXuCKcypdOalq1VeAM/CAyuF4Imaobo0MBbBmB5BaS B3hDFtULRo0q+EK1ezYzsQFHttlB5hIbBog5JChvIW0TM9Rr5vX5huZqPYy9p4up qiPm5S4eYdNTtMmtvS3I4COTBFXKsz4cUSSqwbhuRtabbP9tyENKxm/lQmdAT33W ffMqlJ86Tbo9GmB+YF6IbqYKUgE1GPOI8DZfkOdcZqrl/crfr7AXPyp5b4kNstCe 5UtZS2f/y9dEk4fG6gwpbAXeAObcHgmOnymeH74wza1Cjw8NO8yZC2d9o/b9Pe5W 4Iz7X0ToiBj4fg== -----END CERTIFICATE-----Generated at Mon Dec 22 09:42:22 2025 by rpki-client