This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft File: uwKqn6RfyXvbLm3I_Ap_A3HITek.mft (raw, json) Hash identifier: P682ppv9RZrOhI7qM1FCp+Ng5mxi4aI7jsUHANBTVN8= Subject key identifier: 9E:84:A2:D7:79:79:E5:9A:53:9B:EE:99:BC:AB:61:05:EE:BC:37:F8 Authority key identifier: BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9 Certificate issuer: /CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9 Certificate serial: 019B51BDFD03F82E804F9F2FADDA294B4D17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft Manifest number: 033E Signing time: Wed 24 Dec 2025 19:02:44 +0000 Manifest this update: Wed 24 Dec 2025 19:02:44 +0000 Manifest next update: Thu 25 Dec 2025 19:02:44 +0000 Files and hashes: 1: R5Jq1FBCLvbBgZNwF7Icfpxv3yE.roa (hash: ir5koZmhGGNuMOajWDB8hvuKf0qBoIQa1qm6cPf+lx4=) 2: uwKqn6RfyXvbLm3I_Ap_A3HITek.crl (hash: thKIeAqJn6W1tbsyjOWcVQjz6U8r+NbF20vcTgb4GEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:fd:03:f8:2e:80:4f:9f:2f:ad:da:29:4b:4d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9 Validity Not Before: Dec 24 19:02:44 2025 GMT Not After : Dec 25 19:02:44 2025 GMT Subject: CN=9e84a2d77979e59a539bee99bcab6105eebc37f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:a8:70:20:ae:ba:32:6c:0e:9f:44:68:b4: 52:19:9d:02:46:b4:22:5f:29:bd:49:df:56:82:94: e8:98:dc:8b:ec:9d:de:6c:38:fa:88:50:ff:3d:7a: b1:ea:2d:cb:03:b7:db:4b:1f:5b:ae:41:00:ba:40: fd:00:db:cc:bd:72:2b:65:ed:bb:d1:5e:f0:3c:1d: dc:c8:f5:7e:e7:d1:6d:3a:ea:38:ed:a6:1c:f7:bd: b6:87:52:63:46:d4:fd:98:c7:64:4f:89:37:07:f7: 96:65:09:b8:81:47:f9:c4:7d:a4:7c:e6:47:b0:90: 93:b5:9c:2b:68:c2:9b:dd:ff:cf:3b:58:37:db:88: b2:a0:50:8f:8a:02:e3:76:3a:cc:fb:f3:06:a5:e4: 9c:29:81:49:95:23:c2:2a:52:af:ca:6a:06:c6:05: 54:33:ee:32:e6:62:a6:1d:dc:14:84:17:e8:bd:f9: aa:d2:ec:8b:ca:d3:b3:3e:e6:68:a7:a8:ef:b0:53: 17:44:2f:57:a1:c2:98:de:e6:05:39:be:b0:e9:12: 64:14:02:e8:31:8e:57:bc:35:07:27:4a:d8:96:2a: 56:ce:5e:a0:06:a8:1a:b2:8b:96:da:37:c1:e1:e0: 88:7f:1b:28:55:23:fc:1f:26:2e:a6:28:1f:b8:74: 4e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:84:A2:D7:79:79:E5:9A:53:9B:EE:99:BC:AB:61:05:EE:BC:37:F8 X509v3 Authority Key Identifier: keyid:BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8d:ed:61:ae:80:19:cb:0c:c0:36:db:4f:48:06:06:b9:64: 77:1f:a9:08:58:d1:bc:1a:b2:65:1a:42:45:2d:bb:ed:64:98: a4:76:9a:21:e4:2f:0f:37:88:e0:45:a6:d3:8a:6c:2a:59:bd: 48:3f:a6:27:20:50:52:57:00:9c:71:23:7d:aa:02:21:16:3d: 43:9e:6f:17:f5:d0:83:05:08:b5:00:e5:53:1a:92:5c:02:83: ec:ee:45:91:06:25:16:4e:6b:62:38:4c:9e:e3:f9:ef:06:36: e2:a2:f7:6f:70:d5:ce:10:c5:a5:7c:2a:83:28:88:a2:a4:f1: 3b:80:61:87:54:ac:24:44:7c:1b:85:1c:8c:bb:1e:f3:81:11: 32:15:9e:47:2a:be:e6:16:75:35:67:a1:18:73:4e:17:fa:cd: 7a:20:fe:81:73:8b:55:03:d2:64:f4:b6:ab:88:cb:43:04:b4: a2:64:64:77:73:55:7f:0f:22:d8:96:af:ba:a5:2f:99:dd:b8: d5:b2:6c:af:ea:c2:a2:06:bb:db:31:13:1c:62:c0:78:f4:2e: b2:49:4f:fa:cf:a2:70:ca:a7:05:9d:43:9a:73:1e:46:32:10: 4a:ef:d8:8b:59:37:56:df:8a:b8:22:76:4c:09:37:5c:11:40: be:0f:76:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvf0D+C6AT58vrdopS00XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMDJhYTlmYTQ1ZmM5N2JkYjJlNmRjOGZjMGE3ZjAzNzFj ODRkZTkwHhcNMjUxMjI0MTkwMjQ0WhcNMjUxMjI1MTkwMjQ0WjAzMTEwLwYDVQQD Eyg5ZTg0YTJkNzc5NzllNTlhNTM5YmVlOTliY2FiNjEwNWVlYmMzN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvauocCCuujJsDp9EaLRSGZ0CRrQi Xym9Sd9WgpTomNyL7J3ebDj6iFD/PXqx6i3LA7fbSx9brkEAukD9ANvMvXIrZe27 0V7wPB3cyPV+59FtOuo47aYc9722h1JjRtT9mMdkT4k3B/eWZQm4gUf5xH2kfOZH sJCTtZwraMKb3f/PO1g324iyoFCPigLjdjrM+/MGpeScKYFJlSPCKlKvymoGxgVU M+4y5mKmHdwUhBfovfmq0uyLytOzPuZop6jvsFMXRC9XocKY3uYFOb6w6RJkFALo MY5XvDUHJ0rYlipWzl6gBqgasouW2jfB4eCIfxsoVSP8HyYupigfuHROrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6Eotd5eeWaU5vumbyrYQXuvDf4MB8GA1UdIwQY MBaAFLsCqp+kX8l72y5tyPwKfwNxyE3pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXdLcW42UmZ5WHZiTG0zSV9BcF9BM0hJVGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jYzIwMzktMjQ1MS00MDVlLWIwNmQt YWMxODNhOWFkZWIxLzEvdXdLcW42UmZ5WHZiTG0zSV9BcF9BM0hJVGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jYzIwMzktMjQ1MS00MDVlLWIwNmQtYWMxODNhOWFkZWIx LzEvdXdLcW42UmZ5WHZiTG0zSV9BcF9BM0hJVGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFY3tYa6A GcsMwDbbT0gGBrlkdx+pCFjRvBqyZRpCRS277WSYpHaaIeQvDzeI4EWm04psKlm9 SD+mJyBQUlcAnHEjfaoCIRY9Q55vF/XQgwUItQDlUxqSXAKD7O5FkQYlFk5rYjhM nuP57wY24qL3b3DVzhDFpXwqgyiIoqTxO4Bhh1SsJER8G4UcjLse84ERMhWeRyq+ 5hZ1NWehGHNOF/rNeiD+gXOLVQPSZPS2q4jLQwS0omRkd3NVfw8i2JavuqUvmd24 1bJsr+rCoga72zETHGLAePQusklP+s+icMqnBZ1DmnMeRjIQSu/Yi1k3Vt+KuCJ2 TAk3XBFAvg92eA== -----END CERTIFICATE-----Generated at Thu Dec 25 04:33:03 2025 by rpki-client