This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft File: HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft (raw, json) Hash identifier: URp8+gngEijdQQ55Uf1ooSl5asMW74dh4/JZKau4Vbo= Subject key identifier: F4:C3:B2:43:14:3F:D8:CE:F5:44:A5:26:FF:60:71:35:BB:FC:61:BC Authority key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1 Certificate issuer: /CN=1d13cd3dde789d294793afce938a533c02bb84d1 Certificate serial: 019B3FB65051475BE49BDED2F2204FBFC2C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft Manifest number: 02DF Signing time: Sun 21 Dec 2025 07:01:11 +0000 Manifest this update: Sun 21 Dec 2025 07:01:11 +0000 Manifest next update: Mon 22 Dec 2025 07:01:11 +0000 Files and hashes: 1: 7sLKGVGT_a4aX4JcAS8Cl-dwrZk.roa (hash: IALVV6z17EuCMGIEd1EYplZQwtixCOladk+EbbZKzBM=) 2: HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl (hash: wmcZHa5nfIfVe4LbnffYpqa7wNganAhIzE988d4t0Rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:50:51:47:5b:e4:9b:de:d2:f2:20:4f:bf:c2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d13cd3dde789d294793afce938a533c02bb84d1 Validity Not Before: Dec 21 07:01:11 2025 GMT Not After : Dec 22 07:01:11 2025 GMT Subject: CN=f4c3b243143fd8cef544a526ff607135bbfc61bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9a:77:b3:a1:8d:c1:e2:e0:84:54:15:08:3d: 68:27:af:da:37:d9:1d:96:93:70:7b:43:d3:ec:6b: 99:bd:61:f5:44:2a:2f:a8:72:23:07:b4:8a:13:a2: ff:ad:d6:94:0b:e9:c9:04:cb:3b:71:33:6c:d1:cd: a7:25:9f:7e:b1:1f:55:35:57:f1:09:7b:ab:dd:53: c4:35:5d:26:1c:83:85:5c:51:28:81:52:45:6e:e3: 35:b6:71:11:9b:1c:8f:2d:37:ab:55:c8:8c:ae:42: ff:55:dc:ae:3a:5e:f2:c7:a2:00:7e:ea:10:34:32: 59:77:7d:c5:31:a3:94:84:5f:d1:f3:38:4b:25:58: 09:d7:3e:91:c1:79:2a:19:31:57:1f:72:8c:09:9d: c7:75:4c:e5:29:2a:d1:76:e1:e6:bd:6c:41:4c:fa: 2c:e8:07:75:95:34:72:46:af:a0:63:9f:d5:d3:72: 48:c1:ad:66:2a:d0:34:3c:e4:0f:2d:79:42:9c:7e: 92:18:d1:fe:48:f7:cc:ff:0e:68:84:40:cb:30:c0: 24:31:40:42:0b:f7:e7:3e:00:aa:a2:03:85:64:18: 80:b5:c7:d9:91:fc:29:ca:50:0c:18:b5:5e:60:53: 4c:07:b2:65:da:37:c9:a0:30:c0:0c:ed:d2:ae:1f: 8b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C3:B2:43:14:3F:D8:CE:F5:44:A5:26:FF:60:71:35:BB:FC:61:BC X509v3 Authority Key Identifier: keyid:1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a9:ef:54:d6:23:01:09:5d:11:58:9e:2e:47:15:0a:3b:ab: d4:ff:75:8d:95:ff:14:07:76:f4:26:19:10:3e:07:f2:d5:cf: 97:77:37:b3:82:6d:3d:81:a3:6c:df:24:93:9a:0f:55:e9:80: 4c:4b:60:a6:6d:9e:06:dc:37:0f:73:c5:0c:7c:44:fa:28:95: a0:ee:93:20:59:5f:39:a3:0a:68:64:71:a1:64:43:0a:d5:38: 97:9b:67:d9:75:1e:37:c3:fb:7c:c1:34:aa:69:f7:24:fc:40: 55:54:73:18:53:66:05:0a:ff:62:88:9c:d9:1e:84:51:17:b9: d8:a3:01:36:65:f4:c3:8f:3b:35:06:a3:73:ab:9f:50:0b:a3: 50:4b:79:11:0f:c4:99:4a:ce:d0:f1:0a:2d:93:6f:9b:b5:45: b1:1e:2f:db:5c:47:2d:c8:e5:6e:fe:9d:6d:71:80:65:a2:d4: 3d:aa:74:86:e3:81:91:90:74:b9:34:8e:4e:9b:3e:f5:2e:12: 27:48:d7:90:c0:9a:f0:1b:1b:85:41:eb:74:d7:a0:6f:6c:e7: 3e:51:18:62:cc:14:32:89:bd:79:19:f6:96:f5:fd:76:cd:07: 50:2d:96:45:0f:74:90:61:b7:55:a4:9b:08:86:b2:e1:c9:91: 87:ef:a5:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tlBRR1vkm97S8iBPv8LFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMTNjZDNkZGU3ODlkMjk0NzkzYWZjZTkzOGE1MzNjMDJi Yjg0ZDEwHhcNMjUxMjIxMDcwMTExWhcNMjUxMjIyMDcwMTExWjAzMTEwLwYDVQQD EyhmNGMzYjI0MzE0M2ZkOGNlZjU0NGE1MjZmZjYwNzEzNWJiZmM2MWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJp3s6GNweLghFQVCD1oJ6/aN9kd lpNwe0PT7GuZvWH1RCovqHIjB7SKE6L/rdaUC+nJBMs7cTNs0c2nJZ9+sR9VNVfx CXur3VPENV0mHIOFXFEogVJFbuM1tnERmxyPLTerVciMrkL/VdyuOl7yx6IAfuoQ NDJZd33FMaOUhF/R8zhLJVgJ1z6RwXkqGTFXH3KMCZ3HdUzlKSrRduHmvWxBTPos 6Ad1lTRyRq+gY5/V03JIwa1mKtA0POQPLXlCnH6SGNH+SPfM/w5ohEDLMMAkMUBC C/fnPgCqogOFZBiAtcfZkfwpylAMGLVeYFNMB7Jl2jfJoDDADO3Srh+LQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTDskMUP9jO9USlJv9gcTW7/GG8MB8GA1UdIwQY MBaAFB0TzT3eeJ0pR5OvzpOKUzwCu4TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kMjlhNWYtYTUyYy00Yzc5LTkzMDMt YTc3Y2FhYzQ2MjVjLzEvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kMjlhNWYtYTUyYy00Yzc5LTkzMDMtYTc3Y2FhYzQ2MjVj LzEvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAianvVNYj AQldEVieLkcVCjur1P91jZX/FAd29CYZED4H8tXPl3c3s4JtPYGjbN8kk5oPVemA TEtgpm2eBtw3D3PFDHxE+iiVoO6TIFlfOaMKaGRxoWRDCtU4l5tn2XUeN8P7fME0 qmn3JPxAVVRzGFNmBQr/Yoic2R6EURe52KMBNmX0w487NQajc6ufUAujUEt5EQ/E mUrO0PEKLZNvm7VFsR4v21xHLcjlbv6dbXGAZaLUPap0huOBkZB0uTSOTps+9S4S J0jXkMCa8BsbhUHrdNegb2znPlEYYswUMom9eRn2lvX9ds0HUC2WRQ90kGG3VaSb CIay4cmRh++lmg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:44:35 2025 by rpki-client