This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json) Hash identifier: 5nmuytcKLyK0jxD1rIb3PefCKFBXB5XaA3+qgtArIeU= Subject key identifier: F6:51:0A:75:90:1D:1A:FA:F7:8F:A4:77:05:E6:2D:FE:33:E6:FF:85 Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99 Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99 Certificate serial: 019B3F11DAD19D7965DB1243C229B995E52A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft Manifest number: 0403 Signing time: Sun 21 Dec 2025 04:01:33 +0000 Manifest this update: Sun 21 Dec 2025 04:01:33 +0000 Manifest next update: Mon 22 Dec 2025 04:01:33 +0000 Files and hashes: 1: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: gtEbQb9vzdawNCllYQaZw9O1QrNtVew1Qllm0rFXOsE=) 2: tVaiZFiLINawsOK82OFMO15DejQ.roa (hash: 8nEDMZ8EuVxpyIr0H29BICF51Bn0ST34hEU28E7vWbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:da:d1:9d:79:65:db:12:43:c2:29:b9:95:e5:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99 Validity Not Before: Dec 21 04:01:33 2025 GMT Not After : Dec 22 04:01:33 2025 GMT Subject: CN=f6510a75901d1afaf78fa47705e62dfe33e6ff85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c4:e1:6a:13:39:bb:16:77:dc:b3:58:24:ec: 79:dd:bc:28:22:26:f4:36:d1:60:db:65:e9:73:a9: 0c:ea:ac:53:5c:72:f1:c2:29:ae:dd:0c:eb:c8:ba: 5a:6e:4b:dd:5d:33:a2:fd:72:bc:96:b0:57:42:67: 66:1f:50:ae:d9:6c:2d:bb:11:fe:95:cf:b7:92:04: 2d:cf:2e:ab:18:e3:36:2a:40:f6:63:2e:a9:27:b6: 18:78:56:7d:7f:9c:00:77:77:ea:df:d6:d2:1f:3b: 6d:e0:1c:17:6a:14:47:82:09:72:3a:bc:c3:9a:01: 0e:82:c8:35:62:a3:0a:40:03:da:84:4d:56:b7:f6: f1:76:9e:1e:93:bc:d3:87:5a:27:89:cd:fc:c7:21: 1d:01:fc:ce:d4:c3:43:0e:40:3f:a8:a2:15:70:a4: 89:6c:00:11:82:a7:e3:ce:cf:46:43:41:a3:20:d1: 2b:b0:b0:1f:68:17:1e:e7:aa:0e:c9:6e:a5:6f:cd: 26:80:16:fa:dc:d1:51:97:a8:1d:ef:35:8d:c0:19: 4b:c2:58:44:ed:19:5d:05:66:fb:f7:6a:ad:5b:39: 2e:73:82:cb:20:14:83:d9:01:9e:8c:ef:ba:cd:58: 89:c8:87:3f:cb:ee:1c:fa:4a:e7:6c:60:ab:1b:10: 48:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:51:0A:75:90:1D:1A:FA:F7:8F:A4:77:05:E6:2D:FE:33:E6:FF:85 X509v3 Authority Key Identifier: keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d3:99:26:f9:62:93:6c:53:e3:24:51:95:31:b5:f0:a7:32: b8:a9:e2:75:23:25:36:a6:d4:61:bd:5c:69:36:1a:a2:ce:92: 4f:0d:07:59:4f:7e:59:54:61:57:c8:75:17:54:63:6f:0b:fd: d3:64:d2:d2:d8:28:6a:2d:ca:53:64:4a:ca:d0:ae:3b:fb:1f: 31:dd:ca:68:d4:f3:19:a5:91:20:21:01:8c:af:cb:c0:c2:b9: 9c:22:b5:b1:22:d6:e8:c9:7f:49:ee:eb:8c:16:6c:b7:c9:9b: 9e:7c:72:46:45:4d:72:2c:14:6e:1d:ca:d5:29:77:31:9c:3e: a9:74:77:fc:7b:f4:41:f5:e6:1e:90:63:3f:b9:d4:b5:11:dc: 15:86:a0:d7:09:5e:03:59:93:86:35:a2:61:94:80:bb:19:0c: b5:bd:21:e3:c5:d0:3c:3d:6d:81:f4:50:a9:09:7a:1a:3e:34: dd:c2:f5:48:94:cd:05:c8:7c:aa:e3:82:c0:73:18:ea:fe:5b: f0:f7:b5:c9:e5:57:57:b2:54:29:0c:a0:18:3d:1f:1e:5c:9f: ec:ca:45:d9:89:98:01:33:57:8e:85:b8:74:8b:ec:d3:dc:a1: 6a:ca:88:c8:b9:98:c1:b8:39:ea:3a:59:a0:76:15:81:b0:32: f5:d9:68:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EdrRnXll2xJDwim5leUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTNkMWU4NjE4ZWY4ZmFlODA3NWRkZDU4MjcwZDA5NDAw NmJlOTkwHhcNMjUxMjIxMDQwMTMzWhcNMjUxMjIyMDQwMTMzWjAzMTEwLwYDVQQD EyhmNjUxMGE3NTkwMWQxYWZhZjc4ZmE0NzcwNWU2MmRmZTMzZTZmZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMThahM5uxZ33LNYJOx53bwoIib0 NtFg22Xpc6kM6qxTXHLxwimu3QzryLpabkvdXTOi/XK8lrBXQmdmH1Cu2WwtuxH+ lc+3kgQtzy6rGOM2KkD2Yy6pJ7YYeFZ9f5wAd3fq39bSHztt4BwXahRHgglyOrzD mgEOgsg1YqMKQAPahE1Wt/bxdp4ek7zTh1onic38xyEdAfzO1MNDDkA/qKIVcKSJ bAARgqfjzs9GQ0GjINErsLAfaBce56oOyW6lb80mgBb63NFRl6gd7zWNwBlLwlhE 7RldBWb792qtWzkuc4LLIBSD2QGejO+6zViJyIc/y+4c+krnbGCrGxBIxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZRCnWQHRr694+kdwXmLf4z5v+FMB8GA1UdIwQY MBaAFIRT0ehhjvj66Add3VgnDQlABr6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEt ZDRhZTQwNzEzMjhmLzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEtZDRhZTQwNzEzMjhm LzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtOZJvli k2xT4yRRlTG18KcyuKnidSMlNqbUYb1caTYaos6STw0HWU9+WVRhV8h1F1Rjbwv9 02TS0tgoai3KU2RKytCuO/sfMd3KaNTzGaWRICEBjK/LwMK5nCK1sSLW6Ml/Se7r jBZst8mbnnxyRkVNciwUbh3K1Sl3MZw+qXR3/Hv0QfXmHpBjP7nUtRHcFYag1wle A1mThjWiYZSAuxkMtb0h48XQPD1tgfRQqQl6Gj403cL1SJTNBch8quOCwHMY6v5b 8Pe1yeVXV7JUKQygGD0fHlyf7MpF2YmYATNXjoW4dIvs09yhasqIyLmYwbg56jpZ oHYVgbAy9dlong== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:19 2025 by rpki-client