This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft File: HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json) Hash identifier: lq1hDijaZ0MGnSrQBLDfqg2ERxxlzIizHcJY4wv6WKE= Subject key identifier: 23:5F:A3:E2:13:82:19:47:9B:60:3D:88:F8:49:4F:B8:BF:80:29:12 Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A Certificate issuer: /CN=1c84a9e40f9075d8eafcf68a02484f529240956a Certificate serial: 019B446E401F7EED2F520F13254D26005835 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft Manifest number: 12AC Signing time: Mon 22 Dec 2025 05:00:34 +0000 Manifest this update: Mon 22 Dec 2025 05:00:34 +0000 Manifest next update: Tue 23 Dec 2025 05:00:34 +0000 Files and hashes: 1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: FJAPiHn1WK/+psNggszY/QB6oTVQrEkDcz+fWOW8614=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:40:1f:7e:ed:2f:52:0f:13:25:4d:26:00:58:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a Validity Not Before: Dec 22 05:00:34 2025 GMT Not After : Dec 23 05:00:34 2025 GMT Subject: CN=235fa3e2138219479b603d88f8494fb8bf802912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:3b:a4:a1:4d:35:ec:12:f6:56:20:95:ba: 9a:52:79:38:4a:a6:5e:5d:f7:32:d2:f3:00:82:30: 46:5e:41:7f:f1:4f:32:4c:37:54:30:1a:e0:37:9f: 39:83:78:7b:27:69:01:f5:f6:de:01:f1:29:a5:3a: f3:94:24:63:2d:7b:37:db:3b:36:ef:ab:26:d4:01: fb:6f:3c:d4:7d:dc:3f:b7:a0:0a:b1:42:a6:ed:c7: 6c:7d:f9:ca:3f:bd:c9:93:e3:0f:68:78:ae:a0:8a: 15:82:3e:8f:2a:dd:60:c8:2d:6f:c1:8b:8c:ef:02: 08:1e:63:03:ab:7d:9f:c3:8b:3e:e2:5e:76:fb:5d: d3:2a:c8:dd:27:a9:d9:ba:97:f3:46:e8:f8:9b:dc: 0b:2e:81:e1:5c:f9:0f:e3:fc:2a:a8:aa:54:16:51: 65:82:83:f9:ca:38:ed:1f:b9:c3:f2:7f:7b:5f:f1: 94:bc:a9:4e:9a:33:3f:8a:b9:9b:52:f1:c8:45:6e: dc:09:96:40:d2:08:87:3c:41:fd:19:0d:6e:78:c7: 4a:27:34:1c:8e:b4:70:29:57:36:24:a8:78:54:95: ce:28:94:3c:4c:3b:cd:79:ae:cd:22:5b:75:d1:41: 41:2c:0f:6e:5c:13:c3:70:09:3a:fe:69:b4:64:8b: 19:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5F:A3:E2:13:82:19:47:9B:60:3D:88:F8:49:4F:B8:BF:80:29:12 X509v3 Authority Key Identifier: keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ea:3b:6a:05:ce:9a:86:29:aa:ad:bb:10:ed:d4:59:11:de: 92:e0:81:a0:af:cc:70:8c:fd:9a:49:c1:96:8e:0f:fb:82:87: b9:aa:9f:6a:24:6b:6a:e5:e6:d8:58:9b:82:8c:91:6d:85:13: ac:8e:90:c2:1d:62:5f:7c:c1:c7:2f:34:21:48:2c:40:65:76: 29:fd:6c:98:55:65:7a:72:c7:c4:f8:55:dc:a8:0b:e5:34:d1: 63:b3:65:14:5d:39:47:39:25:cd:39:18:87:70:90:9f:30:49: 7a:7b:82:dc:5b:46:7c:26:62:d4:df:d0:66:ce:9e:e0:7b:a2: ba:b3:9e:0e:db:d7:2e:68:22:c6:e5:ff:1c:3d:ca:9d:65:44: 96:29:87:03:24:c8:ca:2a:f0:e2:02:67:22:d3:11:2e:e3:27: 21:03:fa:75:5d:3e:97:0a:d2:98:4e:75:cf:80:ab:a4:ae:c6: b8:3a:53:5b:70:95:9f:d2:3d:7a:b3:20:9e:3e:4d:22:3d:1d: ca:95:15:33:c9:cb:70:45:11:b1:6e:d2:71:ba:ff:c0:97:d3: b2:13:6c:7c:ab:84:a9:71:99:94:33:cf:f7:84:6d:72:5c:bc: f9:05:d1:40:58:64:e4:f6:98:05:be:6d:91:2e:a5:71:6b:b3: 55:47:cf:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbkAffu0vUg8TJU0mAFg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjODRhOWU0MGY5MDc1ZDhlYWZjZjY4YTAyNDg0ZjUyOTI0 MDk1NmEwHhcNMjUxMjIyMDUwMDM0WhcNMjUxMjIzMDUwMDM0WjAzMTEwLwYDVQQD EygyMzVmYTNlMjEzODIxOTQ3OWI2MDNkODhmODQ5NGZiOGJmODAyOTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWs7pKFNNewS9lYglbqaUnk4SqZe Xfcy0vMAgjBGXkF/8U8yTDdUMBrgN585g3h7J2kB9fbeAfEppTrzlCRjLXs32zs2 76sm1AH7bzzUfdw/t6AKsUKm7cdsffnKP73Jk+MPaHiuoIoVgj6PKt1gyC1vwYuM 7wIIHmMDq32fw4s+4l52+13TKsjdJ6nZupfzRuj4m9wLLoHhXPkP4/wqqKpUFlFl goP5yjjtH7nD8n97X/GUvKlOmjM/irmbUvHIRW7cCZZA0giHPEH9GQ1ueMdKJzQc jrRwKVc2JKh4VJXOKJQ8TDvNea7NIlt10UFBLA9uXBPDcAk6/mm0ZIsZDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNfo+ITghlHm2A9iPhJT7i/gCkSMB8GA1UdIwQY MBaAFByEqeQPkHXY6vz2igJIT1KSQJVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wZGExZmYtOWNmOS00YWQ5LTg4Mzkt NWMzZmFmMzczOTdhLzEvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8wZGExZmYtOWNmOS00YWQ5LTg4MzktNWMzZmFmMzczOTdh LzEvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+o7agXO moYpqq27EO3UWRHekuCBoK/McIz9mknBlo4P+4KHuaqfaiRrauXm2FibgoyRbYUT rI6Qwh1iX3zBxy80IUgsQGV2Kf1smFVlenLHxPhV3KgL5TTRY7NlFF05RzklzTkY h3CQnzBJenuC3FtGfCZi1N/QZs6e4HuiurOeDtvXLmgixuX/HD3KnWVElimHAyTI yirw4gJnItMRLuMnIQP6dV0+lwrSmE51z4CrpK7GuDpTW3CVn9I9erMgnj5NIj0d ypUVM8nLcEURsW7Scbr/wJfTshNsfKuEqXGZlDPP94Rtcly8+QXRQFhk5PaYBb5t kS6lcWuzVUfPVA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:13:54 2025 by rpki-client