This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft File: HDP7O3JSC4FpopKNU4LknWda0GA.mft (raw, json) Hash identifier: cQ9co/7G1AA5RfOveri3/DIkvzLT696KvmwCd6AdCD4= Subject key identifier: C3:2A:D1:A2:1A:6C:6D:BE:D4:01:8F:BC:AE:9B:26:DF:E9:6A:1A:AC Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60 Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060 Certificate serial: 019B2EFAA53F134D4B47E25F0E6A35620B99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft Manifest number: 152E Signing time: Thu 18 Dec 2025 01:02:16 +0000 Manifest this update: Thu 18 Dec 2025 01:02:16 +0000 Manifest next update: Fri 19 Dec 2025 01:02:16 +0000 Files and hashes: 1: HDP7O3JSC4FpopKNU4LknWda0GA.crl (hash: vimZ7ixPFU0PCruNrO/uNlQjAmk5JI/Hl6dy/3LDgtU=) 2: jHj1kA03qC8i8hguuEC8ASnj4XQ.roa (hash: 6J5ezyoc/LI46xWXhW/cUUltYyOZg4CBJG0jaVAl1nQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:a5:3f:13:4d:4b:47:e2:5f:0e:6a:35:62:0b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060 Validity Not Before: Dec 18 01:02:16 2025 GMT Not After : Dec 19 01:02:16 2025 GMT Subject: CN=c32ad1a21a6c6dbed4018fbcae9b26dfe96a1aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:97:8a:7c:55:1d:fa:60:e0:16:57:36:44:65: 0f:21:31:c8:57:9c:c3:8b:43:39:a0:e3:fb:20:13: 4b:76:76:41:73:8e:8d:7c:f3:bb:fe:04:18:c9:dd: 28:91:87:65:c9:c0:27:03:05:67:c0:3b:2f:a0:ec: e5:50:9e:54:61:76:37:d6:5e:10:3b:24:a1:61:b1: 06:90:5a:76:8d:6e:2d:7f:b3:0b:b3:4b:ac:1b:36: 14:13:e7:7d:a4:7f:34:50:28:4f:9b:28:9b:07:5f: 44:93:fd:54:81:3b:65:b4:b7:b0:ab:e8:92:0c:6f: 81:94:7e:3f:b5:f3:d7:d6:73:64:6f:c8:fe:74:67: 1e:b0:3c:c4:a1:0f:15:73:24:d9:63:f9:92:38:c2: df:64:db:3e:05:51:b3:8b:0c:1a:64:b3:c0:73:70: 92:87:f9:76:6a:96:83:7f:58:6f:c4:98:8b:11:b0: 84:6e:d1:f0:82:b5:fa:03:75:08:29:be:06:8e:da: fa:71:aa:9f:14:c8:6a:8e:50:2c:34:3e:7e:dd:14: 33:9f:02:fb:a0:cd:42:9a:97:6f:f3:75:6b:4a:62: 08:78:c4:76:d7:6a:a5:fd:50:e1:c9:ad:3b:eb:72: 50:da:f2:8e:24:fd:a6:f5:08:c3:12:48:cd:3f:34: c1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2A:D1:A2:1A:6C:6D:BE:D4:01:8F:BC:AE:9B:26:DF:E9:6A:1A:AC X509v3 Authority Key Identifier: keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d9:4f:df:14:35:a3:36:69:25:d8:d9:22:79:80:0f:29:09: ac:b8:d9:70:ab:2c:2c:9a:d4:82:15:af:ad:6c:3a:6d:5d:ed: 1b:5b:0f:08:48:af:cf:2b:aa:98:5f:d9:58:f7:70:01:fe:a9: 33:7e:ba:95:4a:e8:20:af:ab:39:23:06:a2:f2:0a:c7:93:f3: f8:42:f7:e4:e3:43:62:f6:e6:2d:79:c0:3a:56:99:ab:3b:d6: 04:1a:50:dd:74:59:02:aa:84:bb:59:51:86:cd:b8:c8:32:cd: 2b:3c:c5:6e:cf:92:46:0b:ba:86:6e:54:18:2b:3f:01:94:15: 90:d6:91:8d:a8:0a:3b:39:8b:c5:ad:38:2d:b9:a0:73:b4:36: df:cf:0c:9b:83:c7:94:32:71:97:c5:a1:fe:c7:1d:95:e1:3a: 00:8c:91:ad:d0:b0:83:5f:af:9e:f4:72:19:8d:a3:be:a4:f3: 91:7c:fa:bf:32:c8:89:fd:ee:ce:37:76:51:3f:8b:ec:ee:9d: 4c:f0:ca:8e:de:97:94:70:96:96:e6:cb:b5:b1:f2:47:e1:d8: be:9a:88:fa:2b:0f:42:00:3b:de:ac:22:f9:98:de:90:d7:61: 34:c8:aa:6a:fc:57:89:df:97:93:85:30:39:aa:13:e3:7a:57: 8e:d7:81:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+qU/E01LR+JfDmo1YguZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMzNmYjNiNzI1MjBiODE2OWEyOTI4ZDUzODJlNDlkNjc1 YWQwNjAwHhcNMjUxMjE4MDEwMjE2WhcNMjUxMjE5MDEwMjE2WjAzMTEwLwYDVQQD EyhjMzJhZDFhMjFhNmM2ZGJlZDQwMThmYmNhZTliMjZkZmU5NmExYWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpeKfFUd+mDgFlc2RGUPITHIV5zD i0M5oOP7IBNLdnZBc46NfPO7/gQYyd0okYdlycAnAwVnwDsvoOzlUJ5UYXY31l4Q OyShYbEGkFp2jW4tf7MLs0usGzYUE+d9pH80UChPmyibB19Ek/1UgTtltLewq+iS DG+BlH4/tfPX1nNkb8j+dGcesDzEoQ8VcyTZY/mSOMLfZNs+BVGziwwaZLPAc3CS h/l2apaDf1hvxJiLEbCEbtHwgrX6A3UIKb4Gjtr6caqfFMhqjlAsND5+3RQznwL7 oM1Cmpdv83VrSmIIeMR212ql/VDhya0763JQ2vKOJP2m9QjDEkjNPzTBFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMq0aIabG2+1AGPvK6bJt/pahqsMB8GA1UdIwQY MBaAFBwz+ztyUguBaaKSjVOC5J1nWtBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MjFlOWUtNTI0My00ZDIwLWI0NDct OTUwNDU1ODY4MDJlLzEvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80MjFlOWUtNTI0My00ZDIwLWI0NDctOTUwNDU1ODY4MDJl LzEvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdlP3xQ1 ozZpJdjZInmADykJrLjZcKssLJrUghWvrWw6bV3tG1sPCEivzyuqmF/ZWPdwAf6p M366lUroIK+rOSMGovIKx5Pz+EL35ONDYvbmLXnAOlaZqzvWBBpQ3XRZAqqEu1lR hs24yDLNKzzFbs+SRgu6hm5UGCs/AZQVkNaRjagKOzmLxa04Lbmgc7Q2388Mm4PH lDJxl8Wh/scdleE6AIyRrdCwg1+vnvRyGY2jvqTzkXz6vzLIif3uzjd2UT+L7O6d TPDKjt6XlHCWlubLtbHyR+HYvpqI+isPQgA73qwi+ZjekNdhNMiqavxXid+Xk4Uw OaoT43pXjteBhw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:26:52 2025 by rpki-client