This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft File: hplEyiVUvOj0uL_HXaWKjwhdX4E.mft (raw, json) Hash identifier: uoEj+sMbdsoAgjIRe68VzQPTGWB+ivSzXo42HlIqBkQ= Subject key identifier: F6:5E:63:68:AB:E0:74:6A:9A:70:16:09:D4:6F:80:26:03:1E:C9:EA Authority key identifier: 86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81 Certificate issuer: /CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81 Certificate serial: 019B34C4964E3DD57975CC7001F191CAE698 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft Manifest number: 1780 Signing time: Fri 19 Dec 2025 04:00:57 +0000 Manifest this update: Fri 19 Dec 2025 04:00:57 +0000 Manifest next update: Sat 20 Dec 2025 04:00:57 +0000 Files and hashes: 1: hplEyiVUvOj0uL_HXaWKjwhdX4E.crl (hash: i9lm8H9Sy3LER60LuxJbWHK0qplIHCn7Q9yrw2cBl8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:96:4e:3d:d5:79:75:cc:70:01:f1:91:ca:e6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81 Validity Not Before: Dec 19 04:00:57 2025 GMT Not After : Dec 20 04:00:57 2025 GMT Subject: CN=f65e6368abe0746a9a701609d46f8026031ec9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:1f:67:2c:83:f3:4e:d1:80:f8:5c:4c:48: f4:93:a6:29:e3:aa:e6:45:03:02:fa:11:1a:22:48: 1a:cf:59:d7:f9:5b:64:cd:01:f3:da:07:f9:e7:26: a4:8e:d7:6f:7c:5a:e8:4d:b9:bc:41:0c:31:5e:8d: 6d:6e:04:df:1e:90:db:e7:fc:ce:80:02:45:b9:72: dc:81:f7:6f:3c:4a:19:9c:13:63:cc:57:82:64:8a: 65:36:c6:37:c2:e3:25:dc:9d:11:1c:c9:fa:48:3d: 41:c4:1d:9e:7b:88:75:68:68:52:9e:b1:61:2c:e5: 8c:db:f2:87:69:27:20:9b:84:80:79:ec:30:25:64: 8b:48:92:89:4c:52:b9:dc:cf:73:8c:c7:8d:85:c1: 1b:d8:dd:34:3a:fd:b9:cf:0e:5c:26:85:17:39:ea: 4c:f4:87:bb:22:56:4b:54:7f:ae:55:63:2f:49:3e: ed:89:46:f9:8a:54:15:13:2d:b6:a7:6a:1c:38:48: 1b:80:bc:e3:0c:82:58:83:d7:68:0c:ea:76:07:8b: 4e:ed:b7:39:0b:c6:39:7b:cb:f7:d3:b6:79:45:55: c3:4a:10:07:e1:f1:08:e8:d0:d3:4b:dc:64:38:0f: 17:38:07:7e:b0:d0:c8:1f:ed:4d:8d:80:6e:a0:7f: 51:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5E:63:68:AB:E0:74:6A:9A:70:16:09:D4:6F:80:26:03:1E:C9:EA X509v3 Authority Key Identifier: keyid:86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b1:d4:85:f8:d3:1f:fe:3c:6b:6b:ba:11:8d:55:12:25:5b: bf:d4:81:d9:4a:cb:30:89:8a:2e:62:f9:f6:e4:85:23:d5:da: 4e:49:15:63:21:eb:4c:5a:83:42:ad:4b:b8:31:8d:70:34:2f: 1f:72:e8:97:8a:c7:5b:6a:0f:5a:e8:0a:7f:e8:32:09:97:2f: 9d:fd:b3:c8:22:35:6a:37:28:c0:e1:c5:30:26:cf:10:ea:e3: 20:ae:ef:42:f8:c7:fb:43:e5:3e:4f:8e:3c:8e:d7:d8:d6:c1: d3:3a:ae:8e:7f:dd:b5:eb:01:02:b4:13:5f:e6:1b:64:ed:83: d8:77:3c:b7:83:13:31:a3:06:14:32:cd:56:f8:80:7c:5e:97: 70:4f:62:59:a2:6a:4f:79:fc:62:93:05:6f:4e:d8:d6:58:ae: 1a:28:23:25:44:98:e3:bb:92:82:b5:b3:1c:36:62:7f:e9:13: ea:10:ec:87:f1:dd:43:2f:87:21:67:5b:03:31:30:48:c7:91: 53:8f:af:46:d7:4a:b0:1b:15:7d:9c:90:ae:c6:72:59:bc:1b: 51:2b:dc:f0:c7:9e:bb:e0:4d:2f:1d:b0:02:6c:0c:db:d6:a7: 91:8a:c9:60:92:fd:50:b3:70:21:99:f1:d8:ae:88:96:ea:b5: 04:bb:c3:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xJZOPdV5dcxwAfGRyuaYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OTk0NGNhMjU1NGJjZThmNGI4YmZjNzVkYTU4YThmMDg1 ZDVmODEwHhcNMjUxMjE5MDQwMDU3WhcNMjUxMjIwMDQwMDU3WjAzMTEwLwYDVQQD EyhmNjVlNjM2OGFiZTA3NDZhOWE3MDE2MDlkNDZmODAyNjAzMWVjOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9YfZyyD807RgPhcTEj0k6Yp46rm RQMC+hEaIkgaz1nX+VtkzQHz2gf55yakjtdvfFroTbm8QQwxXo1tbgTfHpDb5/zO gAJFuXLcgfdvPEoZnBNjzFeCZIplNsY3wuMl3J0RHMn6SD1BxB2ee4h1aGhSnrFh LOWM2/KHaScgm4SAeewwJWSLSJKJTFK53M9zjMeNhcEb2N00Ov25zw5cJoUXOepM 9Ie7IlZLVH+uVWMvST7tiUb5ilQVEy22p2ocOEgbgLzjDIJYg9doDOp2B4tO7bc5 C8Y5e8v307Z5RVXDShAH4fEI6NDTS9xkOA8XOAd+sNDIH+1NjYBuoH9R7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZeY2ir4HRqmnAWCdRvgCYDHsnqMB8GA1UdIwQY MBaAFIaZRMolVLzo9Li/x12lio8IXV+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85ZmRhZTAtNWM2My00YzA3LTg3M2Et Y2RkYTRiYTZiZDc4LzEvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS85ZmRhZTAtNWM2My00YzA3LTg3M2EtY2RkYTRiYTZiZDc4 LzEvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLHUhfjT H/48a2u6EY1VEiVbv9SB2UrLMImKLmL59uSFI9XaTkkVYyHrTFqDQq1LuDGNcDQv H3Lol4rHW2oPWugKf+gyCZcvnf2zyCI1ajcowOHFMCbPEOrjIK7vQvjH+0PlPk+O PI7X2NbB0zqujn/dtesBArQTX+YbZO2D2Hc8t4MTMaMGFDLNVviAfF6XcE9iWaJq T3n8YpMFb07Y1liuGigjJUSY47uSgrWzHDZif+kT6hDsh/HdQy+HIWdbAzEwSMeR U4+vRtdKsBsVfZyQrsZyWbwbUSvc8Meeu+BNLx2wAmwM29ankYrJYJL9ULNwIZnx 2K6Iluq1BLvDSg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:51 2025 by rpki-client