This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
File:                     Hms-F_m50MMT0FMCNCUnWydF_IM.mft (raw, json)
Hash identifier:          yNs84MGtnk/YJsQ1BWT80FEUyyyybnUY6GLVqQ66A+g=
Subject key identifier:   A1:B6:93:A7:D0:35:89:E8:6C:85:0B:FF:65:EC:00:B4:75:61:AE:8E
Authority key identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
Certificate issuer:       /CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Certificate serial:       019B59ACB407505E2C4F71944F349C565900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
Manifest number:          1729
Signing time:             Fri 26 Dec 2025 08:00:48 +0000
Manifest this update:     Fri 26 Dec 2025 08:00:48 +0000
Manifest next update:     Sat 27 Dec 2025 08:00:48 +0000
Files and hashes:         1: Hms-F_m50MMT0FMCNCUnWydF_IM.crl (hash: aKQrtoUvGuxNpQU4/4q6J2wgT8eL9HB3yfzWhXZmfzE=)
                          2: UdTz9ESnCBONhFhPnKTJSPAPKew.roa (hash: 0eKPRYHWi1Fk+s60KVEthvqfye7EFF2oFsVLARt647E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:ac:b4:07:50:5e:2c:4f:71:94:4f:34:9c:56:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
        Validity
            Not Before: Dec 26 08:00:48 2025 GMT
            Not After : Dec 27 08:00:48 2025 GMT
        Subject: CN=a1b693a7d03589e86c850bff65ec00b47561ae8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:e1:18:3d:6b:d4:ec:03:87:25:ce:80:29:
                    ca:de:30:3a:fb:e7:34:01:59:40:92:74:f9:f6:46:
                    5e:e1:05:ad:d1:1e:e9:9d:70:2f:a1:f8:40:cd:07:
                    5a:3b:27:59:f1:01:1d:2b:9f:9b:b8:d1:e0:e5:6a:
                    6d:24:2c:ba:c3:3a:62:55:a5:0f:0e:28:08:79:00:
                    4a:0b:3d:21:1f:a3:5a:66:1d:d6:d5:b6:a6:8a:34:
                    a7:92:b7:1d:90:f0:19:01:1e:42:f1:13:e6:a3:5c:
                    7b:b3:d3:2b:4a:31:ed:85:48:a8:fb:f5:c7:48:51:
                    b4:89:91:75:fd:86:33:8d:43:82:4a:ac:f0:ab:90:
                    d0:41:b9:54:1d:50:ab:71:fe:b7:70:2f:97:2b:88:
                    7e:5f:b5:30:c9:54:13:b6:56:67:f0:d5:c2:f3:b0:
                    10:29:be:d5:5a:fb:f2:01:5a:15:3e:66:de:54:bb:
                    e6:08:e9:47:ad:f5:26:52:c3:44:28:63:69:f1:c6:
                    55:23:02:32:9e:5e:5c:88:73:1e:36:d3:6d:7e:f4:
                    04:5b:9c:45:2f:3a:8c:3d:43:78:62:a3:06:3e:6d:
                    97:a5:c1:b5:21:f7:ff:f2:d4:60:a8:62:d3:d9:7e:
                    30:3e:45:4b:7a:72:e0:31:a2:97:25:12:07:01:70:
                    91:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:93:A7:D0:35:89:E8:6C:85:0B:FF:65:EC:00:B4:75:61:AE:8E
            X509v3 Authority Key Identifier:
                keyid:1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:50:a8:48:48:81:97:64:6d:72:44:be:d1:f1:01:88:76:2c:
         6e:3a:68:49:92:07:e0:31:a5:bd:e7:8c:92:25:90:06:e3:fd:
         64:3b:76:1c:0b:e7:aa:04:33:5c:e1:06:35:59:c3:98:65:67:
         a4:9a:3d:5e:22:40:0f:74:c5:01:0d:f0:ef:d2:27:fd:87:60:
         df:19:96:05:a3:5f:32:41:12:a5:28:bf:63:c2:b9:5b:8e:2f:
         68:a1:0b:a3:db:db:54:83:7f:aa:4a:26:8a:f8:cd:45:b7:37:
         de:39:7c:aa:ce:1e:49:7c:20:46:ca:56:f3:2b:ac:ed:36:31:
         99:28:60:93:85:89:87:40:7c:5b:b2:d3:52:03:7a:9d:bd:6e:
         97:5c:3c:53:d3:6e:38:f0:14:6d:33:f2:65:1c:01:73:3f:de:
         30:91:86:a6:f6:79:a9:27:6c:0c:76:00:36:95:d7:62:68:74:
         10:86:fe:c6:8a:ed:e1:b0:72:cc:b9:d8:c7:6b:3c:6c:00:03:
         1e:86:82:d0:ec:ad:0b:b4:ad:05:b4:48:94:72:41:cd:62:11:
         c4:3a:8a:a9:60:9a:05:b3:41:3a:a4:4a:eb:e1:98:3b:2f:7f:
         c9:a4:e9:f4:4a:a5:87:7d:f2:30:31:76:44:dc:00:16:ac:66:
         7c:c6:7d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:45:03 2025 by rpki-client