This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
File: hu4gHGXWVe6c_iUflR6pG7oVRWc.mft (raw, json)
Hash identifier: sm9ZHRMfp5ky/VbRhRoJCMW9iz/HooPZRDkGdj+mAp4=
Subject key identifier: 80:99:A2:B6:03:5D:33:EC:73:F5:41:6C:7F:49:57:6C:1F:57:39:F1
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 019B2B1C67BEBCDE245DB052B4B4C42B3CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
Manifest number: 178D
Signing time: Wed 17 Dec 2025 07:00:40 +0000
Manifest this update: Wed 17 Dec 2025 07:00:40 +0000
Manifest next update: Thu 18 Dec 2025 07:00:40 +0000
Files and hashes: 1: BTKNM_yY9cf5nMbyQBGXEDyeLi0.roa (hash: DzzXp7ohKMicQourdcNR0kS22RTAEFQSJ/9tBCQrWcc=)
2: GzDT8w0Ptt9b8FyYostNarXRHiw.roa (hash: A6DYaaXmihlLD1PftD3BewQ0V2peW0M1Cn7b21EMdZs=)
3: NClupgqAUdwnU34Sum2MaF9qVA0.roa (hash: aDGxKYq2Y8XMXNzlWk4ySV396lfiu4EB4r+x7lrq+P8=)
4: hu4gHGXWVe6c_iUflR6pG7oVRWc.crl (hash: HV3Yx0hx6ahJ9FB//e3c3Ih1dIrd6lL807Puqh4Z9PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2b:1c:67:be:bc:de:24:5d:b0:52:b4:b4:c4:2b:3c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Dec 17 07:00:40 2025 GMT
Not After : Dec 18 07:00:40 2025 GMT
Subject: CN=8099a2b6035d33ec73f5416c7f49576c1f5739f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:d4:0c:28:be:d2:65:86:6e:36:94:92:99:
85:d5:41:18:56:45:f0:66:7f:25:9b:47:3d:bc:f7:
ba:18:a7:2d:6c:a5:0a:07:ee:d3:83:fe:83:4d:26:
1b:32:16:ca:bd:7c:65:76:e1:ab:47:e4:b0:a6:3c:
c1:39:fc:57:10:e2:57:eb:48:ea:97:80:08:4a:27:
0a:56:00:7e:b0:da:ad:88:de:8d:7c:cf:f7:d0:d3:
64:32:8c:ad:58:44:3d:ad:5f:41:c8:3c:5b:ca:3d:
61:79:8f:a4:b1:be:b2:63:3e:0f:7f:1f:67:3a:e6:
a7:2c:a6:f5:88:a4:19:16:c0:24:4e:9a:ec:4f:a2:
86:85:a2:9d:10:3f:5a:37:f9:2c:33:3d:26:1e:88:
8b:bf:f1:a9:44:a6:04:3b:fb:7d:1a:cd:8c:c7:6e:
64:6b:a1:7c:13:94:72:ca:94:81:a6:4d:e3:cf:32:
59:17:d3:42:b8:a7:cb:d2:2a:5f:15:34:9a:96:6c:
3e:f0:67:4b:b3:fe:87:8a:e6:a9:55:b0:41:da:b7:
1b:51:b3:57:e4:4a:58:9a:1b:8e:be:a0:d0:59:93:
55:72:47:ba:ca:9f:9c:f2:9d:2f:bb:8a:b5:ac:14:
6f:ea:da:6e:ee:8c:cf:3f:cc:f2:21:ab:e1:1b:61:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:99:A2:B6:03:5D:33:EC:73:F5:41:6C:7F:49:57:6C:1F:57:39:F1
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4b:32:e8:23:32:6a:a8:03:94:99:00:7d:d2:2c:21:ca:92:
43:c0:49:bc:f3:b6:77:00:6e:ae:cf:0c:7a:b6:6a:82:8b:1b:
8b:33:74:bf:7a:22:9e:fe:6a:18:78:19:cb:35:18:78:68:df:
b6:50:fa:3b:e2:74:53:2a:a4:e1:38:64:d5:18:db:92:e0:b0:
08:82:fe:ad:e5:15:0f:2f:0d:f7:2d:58:44:f4:96:5b:5d:4d:
56:c9:fa:85:7b:59:9a:52:c1:44:fd:84:23:bf:ba:d9:6c:4c:
27:f9:1d:08:81:0e:63:83:00:90:f2:5f:12:37:94:c0:a0:96:
44:95:ef:d1:c6:61:33:a0:f4:fc:f1:00:49:2c:20:b7:78:3b:
8f:0a:76:43:90:3f:dd:47:07:4d:a9:28:63:96:21:0f:be:9c:
aa:f3:4d:81:ba:f1:7f:f3:dd:6b:72:17:27:5f:1c:19:ab:3c:
75:26:79:5f:6b:9d:5a:cf:92:6f:26:70:c5:8d:32:88:c8:6f:
63:80:c8:01:0a:d1:7d:7b:65:71:a5:db:bd:80:a7:72:5b:f2:
21:d6:17:75:1f:ab:18:66:a0:a1:e0:d5:92:86:4b:8a:36:f3:
6f:09:66:69:e2:62:57:1b:71:64:f2:cd:ed:2e:d8:44:7d:6a:
40:fe:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 16:48:11 2025 by rpki-client