This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft File: HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json) Hash identifier: YBGInXTirsC8+uREgbsYIqZHEqK7m61jnnLKNHU7tYY= Subject key identifier: 4C:DD:43:F9:3C:9A:D5:50:81:5D:A9:30:9E:E6:85:3D:C2:67:EA:59 Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15 Certificate issuer: /CN=1ee5dd469f71c38d13f57c629796224cc020dc15 Certificate serial: 019B6DA11D211B8F31C1039CC5DCA07AC21A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft Manifest number: 0B41 Signing time: Tue 30 Dec 2025 05:00:33 +0000 Manifest this update: Tue 30 Dec 2025 05:00:33 +0000 Manifest next update: Wed 31 Dec 2025 05:00:33 +0000 Files and hashes: 1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: JKfrjhjv6tZu2oN6gTBjsUv9kr/fJKz7ggnYIRJreyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:1d:21:1b:8f:31:c1:03:9c:c5:dc:a0:7a:c2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15 Validity Not Before: Dec 30 05:00:33 2025 GMT Not After : Dec 31 05:00:33 2025 GMT Subject: CN=4cdd43f93c9ad550815da9309ee6853dc267ea59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:7f:08:d5:f1:95:31:3c:99:1a:af:c9:27: 25:09:bb:b1:68:be:05:b3:6d:9f:f1:4c:ec:0c:27: f1:3a:77:15:0f:1b:2c:96:1d:97:6e:be:88:92:5d: 95:37:6b:1d:92:b7:7a:1f:59:42:40:19:d4:2f:3b: 52:6b:81:86:b2:fd:b9:5a:5d:a3:c1:2b:4d:8b:6a: 1f:e9:18:a9:f3:95:44:07:b8:1e:d0:6a:a8:2b:1c: d2:13:0f:03:73:19:94:ec:14:f4:88:50:e0:7e:93: 0b:82:4d:96:a8:2d:0b:cf:4b:96:a9:63:6c:b1:74: a2:15:25:78:1b:cd:cc:bb:de:39:c3:20:cb:5e:a9: 8a:15:fb:53:eb:a8:e5:33:a3:fa:5c:fd:90:27:62: 60:a6:89:b6:9d:36:e3:e9:cf:04:41:93:be:88:f3: bf:af:6e:36:5a:b3:59:3e:db:ca:02:cb:c5:92:dd: 11:57:0f:53:1a:b0:17:a5:1f:c3:5f:8c:e1:7f:74: 4b:5e:85:68:35:f5:d5:c8:bc:88:a5:e5:72:a7:ed: 2b:fe:25:34:8a:9f:36:cd:a3:29:2f:c6:dc:0f:0e: 31:92:cd:2c:05:9a:86:a9:ea:40:b6:f1:eb:7f:53: 89:d3:7d:39:be:df:e6:4c:36:db:06:17:15:47:93: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DD:43:F9:3C:9A:D5:50:81:5D:A9:30:9E:E6:85:3D:C2:67:EA:59 X509v3 Authority Key Identifier: keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:e3:0c:21:10:d6:39:e6:79:73:f1:6c:37:c7:c7:64:1d:32: 21:84:c5:b5:a1:76:ac:98:af:a5:b0:24:ca:88:7b:2a:35:a3: c4:0c:6d:10:af:1c:0a:e1:3a:51:f4:56:37:b4:1b:6d:e9:ec: b2:fc:e1:eb:de:c9:11:3d:e4:af:fc:a3:82:3b:41:63:78:fa: 25:e2:9a:e5:7a:2c:5c:2e:fe:d1:45:3f:05:f6:7b:19:68:e2: b5:60:84:4b:f3:a1:fd:24:04:e7:f0:41:78:a8:fc:a3:84:34: 98:dc:58:c7:10:bb:f4:4d:fe:22:67:a8:4d:f3:c6:f0:a7:51: bc:e6:5a:7e:e9:02:12:cf:c0:e5:80:88:e0:03:f8:2a:1e:1e: e3:11:e7:af:13:6b:07:a5:f0:d3:ab:95:9e:09:57:5a:54:fb: 15:de:b2:7d:be:4c:d6:25:1f:2e:2f:54:1d:98:7d:8e:0b:d1: 68:e7:92:bc:b5:44:9b:22:bf:1f:e9:d9:2f:6e:0c:3d:27:94: f7:b6:43:03:36:2f:fb:e0:db:65:15:0e:d2:69:a7:1a:1d:06: a8:8c:84:40:37:c3:bc:69:57:c1:ec:83:23:94:40:69:aa:8b: 62:b5:9d:e6:ab:89:0d:a2:a4:d2:c3:0d:62:ea:39:f6:89:30: 14:e2:b1:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoR0hG48xwQOcxdygesIaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZTVkZDQ2OWY3MWMzOGQxM2Y1N2M2Mjk3OTYyMjRjYzAy MGRjMTUwHhcNMjUxMjMwMDUwMDMzWhcNMjUxMjMxMDUwMDMzWjAzMTEwLwYDVQQD Eyg0Y2RkNDNmOTNjOWFkNTUwODE1ZGE5MzA5ZWU2ODUzZGMyNjdlYTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeN/CNXxlTE8mRqvySclCbuxaL4F s22f8UzsDCfxOncVDxsslh2Xbr6Ikl2VN2sdkrd6H1lCQBnULztSa4GGsv25Wl2j wStNi2of6Rip85VEB7ge0GqoKxzSEw8DcxmU7BT0iFDgfpMLgk2WqC0Lz0uWqWNs sXSiFSV4G83Mu945wyDLXqmKFftT66jlM6P6XP2QJ2Jgpom2nTbj6c8EQZO+iPO/ r242WrNZPtvKAsvFkt0RVw9TGrAXpR/DX4zhf3RLXoVoNfXVyLyIpeVyp+0r/iU0 ip82zaMpL8bcDw4xks0sBZqGqepAtvHrf1OJ0305vt/mTDbbBhcVR5NzJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzdQ/k8mtVQgV2pMJ7mhT3CZ+pZMB8GA1UdIwQY MBaAFB7l3UafccONE/V8YpeWIkzAINwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjct ZjQyMjQzMDZiYTM1LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjctZjQyMjQzMDZiYTM1 LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAteMMIRDW OeZ5c/FsN8fHZB0yIYTFtaF2rJivpbAkyoh7KjWjxAxtEK8cCuE6UfRWN7Qbbens svzh697JET3kr/yjgjtBY3j6JeKa5XosXC7+0UU/BfZ7GWjitWCES/Oh/SQE5/BB eKj8o4Q0mNxYxxC79E3+ImeoTfPG8KdRvOZafukCEs/A5YCI4AP4Kh4e4xHnrxNr B6Xw06uVnglXWlT7Fd6yfb5M1iUfLi9UHZh9jgvRaOeSvLVEmyK/H+nZL24MPSeU 97ZDAzYv++DbZRUO0mmnGh0GqIyEQDfDvGlXweyDI5RAaaqLYrWd5quJDaKk0sMN Yuo59okwFOKxvw== -----END CERTIFICATE-----Generated at Tue Dec 30 10:34:59 2025 by rpki-client