This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft File: HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json) Hash identifier: V3LpOFATLyYxwBThsZCezNOFxFtW6o1IPUIGfjnf9bQ= Subject key identifier: FC:8E:63:E5:59:43:EE:A8:04:26:3D:CE:94:F3:44:0C:43:6B:75:8B Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10 Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10 Certificate serial: 019B3D59ECADB1A3F5B9497AA3C55EECD018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 20:01:01 +0000 Manifest this update: Sat 20 Dec 2025 20:01:01 +0000 Manifest next update: Sun 21 Dec 2025 20:01:01 +0000 Files and hashes: 1: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: O4Zu/Lj/AjFTCVyhm8w8tUoCIy3je8aa6zLKrr7jsvA=) 2: JAj8K9FK0yJ4abLe6Fga6ihptw4.roa (hash: EFhtWb0ps1NNZCAlSUS+dLCZTzQuPXq8Ov+/YyEbgx0=) 3: _IKA2Fs9sk_HXgYRoE_hIh9ff0o.roa (hash: 7fFt0WExoH93JNOsEPipdfERGEC89/UjUDUL8wmgczo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:ec:ad:b1:a3:f5:b9:49:7a:a3:c5:5e:ec:d0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10 Validity Not Before: Dec 20 20:01:01 2025 GMT Not After : Dec 21 20:01:01 2025 GMT Subject: CN=fc8e63e55943eea804263dce94f3440c436b758b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:12:08:31:ed:74:f8:ac:63:5e:34:06:ec:e7: e3:05:e2:39:b2:87:23:97:b6:5f:d8:b8:d5:88:2b: 18:22:09:40:c2:11:64:42:59:f7:5d:b4:48:56:f5: 0d:d4:fb:23:6f:b7:94:4b:8d:99:41:75:77:ee:4d: b7:2a:4a:c6:c2:cb:7d:9a:a9:df:d5:03:b3:5e:cb: 2a:a4:dc:38:af:1a:28:25:3b:0a:c1:4a:30:0f:2b: 5f:28:3a:e7:9a:4e:e6:4b:31:66:11:04:8d:16:32: ad:d2:26:69:06:c3:85:0e:b6:17:f8:36:e9:bd:8d: db:eb:75:a8:c0:70:56:1b:6f:c0:65:5d:b5:4b:78: b1:8f:12:8c:58:24:2b:4f:b8:07:1d:bd:59:e3:1b: 70:37:a5:fb:af:e6:2f:e6:73:b1:d7:93:a3:b0:58: b6:a5:92:4f:47:fe:e9:34:0b:2a:a3:7c:59:89:2f: a9:df:d8:74:fa:5b:3b:c4:f7:9c:95:7e:46:dc:66: 37:d6:76:a4:a5:1e:e2:6a:0b:8d:d9:78:04:a7:99: 55:70:86:22:4a:e6:74:ac:3e:8c:b9:58:4e:68:cd: bc:3f:64:e3:a6:fe:5b:2f:95:14:60:12:7b:cf:2f: f2:87:d8:99:b4:ac:03:ea:ea:e4:b0:f5:0f:c2:2c: 90:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8E:63:E5:59:43:EE:A8:04:26:3D:CE:94:F3:44:0C:43:6B:75:8B X509v3 Authority Key Identifier: keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bc:da:ad:46:45:ec:d4:66:fd:3d:9d:8b:ce:ab:ea:cd:0a: 3d:b3:71:8d:f7:45:84:59:2a:c1:71:b6:b6:d9:a0:d6:16:fd: d4:59:0c:59:76:11:d2:09:7f:69:1f:ef:ef:a4:c3:09:ce:25: f2:bb:d8:77:ae:6e:c6:04:54:c0:86:a8:75:1d:dc:b5:f8:51: e5:5b:ad:9a:e8:bf:39:4a:b4:57:0b:bc:51:1f:92:77:1b:b4: 8a:48:50:fe:43:06:c4:67:eb:fd:ed:f9:48:64:cc:9b:3b:d3: 17:a9:d2:00:f1:0b:a6:b9:b7:d3:e9:2a:14:1e:00:0d:57:23: 88:1a:aa:c1:77:c8:bc:ed:7f:39:59:7d:e9:d1:06:da:ce:f6: 76:f9:2c:6a:ee:93:35:64:0f:39:41:0b:47:d9:7e:90:bf:e4: c0:f7:52:d9:ee:e5:85:05:5f:c5:16:a1:a8:a4:f0:f2:db:09: 5b:9c:c9:76:de:02:1a:99:79:ef:8d:8e:ab:43:ab:d3:ac:20: 7b:93:eb:c2:a0:8e:83:0d:56:a3:d1:07:42:e7:8d:25:53:9b: 9f:c1:20:b9:ad:d2:ab:25:b1:ec:3d:ca:da:8b:29:de:20:c7: a6:bf:30:d3:b9:38:c6:84:0d:8d:5c:1d:74:d5:88:2e:a2:d7: 6b:d1:17:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WeytsaP1uUl6o8Ve7NAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZjJlYzgyNWZhNjM4MWU4ZTk0ZmQzOWIwNmVhMzhiNjNl NDFhMTAwHhcNMjUxMjIwMjAwMTAxWhcNMjUxMjIxMjAwMTAxWjAzMTEwLwYDVQQD EyhmYzhlNjNlNTU5NDNlZWE4MDQyNjNkY2U5NGYzNDQwYzQzNmI3NThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBIIMe10+KxjXjQG7OfjBeI5socj l7Zf2LjViCsYIglAwhFkQln3XbRIVvUN1Psjb7eUS42ZQXV37k23KkrGwst9mqnf 1QOzXssqpNw4rxooJTsKwUowDytfKDrnmk7mSzFmEQSNFjKt0iZpBsOFDrYX+Dbp vY3b63WowHBWG2/AZV21S3ixjxKMWCQrT7gHHb1Z4xtwN6X7r+Yv5nOx15OjsFi2 pZJPR/7pNAsqo3xZiS+p39h0+ls7xPeclX5G3GY31nakpR7iaguN2XgEp5lVcIYi SuZ0rD6MuVhOaM28P2Tjpv5bL5UUYBJ7zy/yh9iZtKwD6urksPUPwiyQWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyOY+VZQ+6oBCY9zpTzRAxDa3WLMB8GA1UdIwQY MBaAFBzy7IJfpjgejpT9ObBuo4tj5BoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFBMc2dsLW1PQjZPbFAwNXNHNmppMlBrR2hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hMDA5ZTgtMmRjNy00ZWY4LWE1Y2Ut YzRjNjM5ODNiNTBjLzEvSFBMc2dsLW1PQjZPbFAwNXNHNmppMlBrR2hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hMDA5ZTgtMmRjNy00ZWY4LWE1Y2UtYzRjNjM5ODNiNTBj LzEvSFBMc2dsLW1PQjZPbFAwNXNHNmppMlBrR2hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7zarUZF 7NRm/T2di86r6s0KPbNxjfdFhFkqwXG2ttmg1hb91FkMWXYR0gl/aR/v76TDCc4l 8rvYd65uxgRUwIaodR3ctfhR5Vutmui/OUq0Vwu8UR+Sdxu0ikhQ/kMGxGfr/e35 SGTMmzvTF6nSAPELprm30+kqFB4ADVcjiBqqwXfIvO1/OVl96dEG2s72dvksau6T NWQPOUELR9l+kL/kwPdS2e7lhQVfxRahqKTw8tsJW5zJdt4CGpl5742Oq0Or06wg e5PrwqCOgw1Wo9EHQueNJVObn8Egua3SqyWx7D3K2osp3iDHpr8w07k4xoQNjVwd dNWILqLXa9EX8A== -----END CERTIFICATE-----Generated at Sat Dec 20 21:36:03 2025 by rpki-client