This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json) Hash identifier: iRP1kyG1/DCsZU9h5Ti2BsW1V28RffGtUF3cKUnSIVM= Subject key identifier: 17:A7:E1:5C:F9:BA:7C:EB:07:64:DE:37:D8:FC:56:CF:A0:32:C7:BC Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99 Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99 Certificate serial: 019B4AA834A84E60210B68F1339ABDC34845 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft Manifest number: 0409 Signing time: Tue 23 Dec 2025 10:01:35 +0000 Manifest this update: Tue 23 Dec 2025 10:01:35 +0000 Manifest next update: Wed 24 Dec 2025 10:01:35 +0000 Files and hashes: 1: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: i6ermlKxaUQ2Xtw+lRgrbt2XvE0YrR9MjLxwoSJmvy0=) 2: tVaiZFiLINawsOK82OFMO15DejQ.roa (hash: 8nEDMZ8EuVxpyIr0H29BICF51Bn0ST34hEU28E7vWbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a8:34:a8:4e:60:21:0b:68:f1:33:9a:bd:c3:48:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99 Validity Not Before: Dec 23 10:01:35 2025 GMT Not After : Dec 24 10:01:35 2025 GMT Subject: CN=17a7e15cf9ba7ceb0764de37d8fc56cfa032c7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:a9:c4:6f:9f:eb:72:31:d5:98:7b:96:54: cf:6c:6a:86:97:9a:cd:58:23:80:88:26:65:4a:76: fd:84:27:87:58:10:d1:b0:cc:a5:c8:f6:85:26:e9: 6a:2c:b7:ad:76:c2:a0:26:20:a5:ba:cf:96:f7:93: d6:0b:00:09:10:93:53:88:45:7f:b3:32:19:49:b7: 84:c2:7e:b6:03:1e:30:33:7e:1b:d5:22:a1:94:1b: a4:ee:dd:02:e3:64:ff:b5:41:00:dc:4e:8b:b3:bc: e3:a2:8c:ce:fc:73:8c:1f:44:79:ac:10:2f:78:6a: b4:89:2d:c2:22:03:51:ed:48:e1:7f:41:0e:3e:ba: df:90:50:6f:5f:f3:3c:16:ee:6a:04:d9:6d:df:41: 5d:ac:e7:af:6b:76:ce:50:df:24:99:32:29:75:6a: 52:26:6e:13:23:0a:6b:4c:2a:87:67:6c:5c:46:fe: ad:91:c7:9d:ae:9d:d5:84:4b:bf:43:4e:fd:6a:70: f8:b0:13:75:46:5f:83:2f:8b:04:26:31:d4:9b:80: c6:22:a5:05:b5:44:86:83:3e:2b:87:79:09:ab:89: 10:78:6b:2d:57:f6:d7:e7:1b:aa:c6:25:fb:b5:8a: fb:08:d8:da:d9:bc:b6:27:7f:44:1a:f3:dd:eb:ee: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A7:E1:5C:F9:BA:7C:EB:07:64:DE:37:D8:FC:56:CF:A0:32:C7:BC X509v3 Authority Key Identifier: keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:94:a9:d6:c7:eb:0e:06:ce:3b:2d:9d:4f:e9:68:76:02:f4: 81:d7:cb:42:a9:5e:79:6b:04:11:6d:43:7d:23:93:26:85:d9: ad:41:5a:46:17:01:f4:39:b7:e9:eb:12:9b:6f:f4:b8:d3:a1: 34:64:34:b4:ec:b3:d2:fd:f1:33:ed:75:18:e3:93:4f:98:bc: 9b:99:a6:c2:29:4e:fa:23:fb:1c:c1:d4:fb:fc:f1:a8:0e:2d: fe:85:03:ba:dd:8b:c8:b8:82:61:3c:52:1d:11:79:46:d2:90: 13:9b:fa:19:84:8d:59:22:fc:a4:04:19:7e:bf:d6:23:8e:67: 99:68:7a:1f:cc:e3:a3:83:69:8d:26:2e:f5:b6:c7:df:16:40: 63:ff:b5:90:2e:04:1f:3d:d2:ee:af:13:ac:c8:56:f9:39:b8: 2e:b3:8d:58:b5:fc:51:e8:6a:73:8a:43:fa:42:17:1f:94:b8: e5:f3:a6:31:72:4e:ec:d0:10:ca:ea:29:59:5c:54:3e:9e:38: 61:a6:71:d1:bf:a2:5f:33:e0:02:0a:32:e5:e4:91:30:5a:4c: d7:05:bb:e5:95:de:34:bc:4d:ad:c0:53:cc:ed:f3:c8:d5:e2: b6:ab:ae:bc:d5:39:29:72:a7:6c:8f:89:26:87:f9:84:96:35: d5:e2:b3:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKqDSoTmAhC2jxM5q9w0hFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTNkMWU4NjE4ZWY4ZmFlODA3NWRkZDU4MjcwZDA5NDAw NmJlOTkwHhcNMjUxMjIzMTAwMTM1WhcNMjUxMjI0MTAwMTM1WjAzMTEwLwYDVQQD EygxN2E3ZTE1Y2Y5YmE3Y2ViMDc2NGRlMzdkOGZjNTZjZmEwMzJjN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLSpxG+f63Ix1Zh7llTPbGqGl5rN WCOAiCZlSnb9hCeHWBDRsMylyPaFJulqLLetdsKgJiClus+W95PWCwAJEJNTiEV/ szIZSbeEwn62Ax4wM34b1SKhlBuk7t0C42T/tUEA3E6Ls7zjoozO/HOMH0R5rBAv eGq0iS3CIgNR7Ujhf0EOPrrfkFBvX/M8Fu5qBNlt30FdrOeva3bOUN8kmTIpdWpS Jm4TIwprTCqHZ2xcRv6tkcedrp3VhEu/Q079anD4sBN1Rl+DL4sEJjHUm4DGIqUF tUSGgz4rh3kJq4kQeGstV/bX5xuqxiX7tYr7CNja2by2J39EGvPd6+689wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBen4Vz5unzrB2TeN9j8Vs+gMse8MB8GA1UdIwQY MBaAFIRT0ehhjvj66Add3VgnDQlABr6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEt ZDRhZTQwNzEzMjhmLzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEtZDRhZTQwNzEzMjhm LzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5Sp1sfr DgbOOy2dT+lodgL0gdfLQqleeWsEEW1DfSOTJoXZrUFaRhcB9Dm36esSm2/0uNOh NGQ0tOyz0v3xM+11GOOTT5i8m5mmwilO+iP7HMHU+/zxqA4t/oUDut2LyLiCYTxS HRF5RtKQE5v6GYSNWSL8pAQZfr/WI45nmWh6H8zjo4NpjSYu9bbH3xZAY/+1kC4E Hz3S7q8TrMhW+Tm4LrONWLX8Uehqc4pD+kIXH5S45fOmMXJO7NAQyuopWVxUPp44 YaZx0b+iXzPgAgoy5eSRMFpM1wW75ZXeNLxNrcBTzO3zyNXitquuvNU5KXKnbI+J Jof5hJY11eKzvg== -----END CERTIFICATE-----Generated at Tue Dec 23 17:16:32 2025 by rpki-client