This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json) Hash identifier: AssvPdCdAbY+IzEZsTyFbsIzZzshrqAth+2gLOSefy8= Subject key identifier: 44:3A:1F:14:18:55:FB:86:5F:A0:60:BE:DA:FE:6A:BF:AD:0C:AE:6E Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e Certificate serial: 019B0F3768393D445813A27D335ADE5D75B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 21:00:47 +0000 Manifest this update: Thu 11 Dec 2025 21:00:47 +0000 Manifest next update: Fri 12 Dec 2025 21:00:47 +0000 Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: /hgCnIP2zGy3lT1fDuHQ/hzg49dwUQRrfXKUYG2xITg=) 2: Z-7u2MA1CjZD5hYP8TfU-VSZNR8.roa (hash: /80xhWNAq5Vxx5IxhDuQbH3UW7oLWMSaFXrTwbB6FYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:68:39:3d:44:58:13:a2:7d:33:5a:de:5d:75:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e Validity Not Before: Dec 11 21:00:47 2025 GMT Not After : Dec 12 21:00:47 2025 GMT Subject: CN=443a1f141855fb865fa060bedafe6abfad0cae6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4a:3b:5c:d3:65:58:e1:0e:b3:07:13:0e:a4: dc:5e:2d:59:4b:82:03:79:a0:11:a9:1c:b7:7b:4d: 0e:7d:ff:a5:2c:80:ec:ae:f6:f6:47:06:fc:e5:70: ae:ff:40:12:41:b2:5a:8f:32:f7:d3:79:76:7f:dc: 0e:31:7c:63:bc:34:eb:8c:e6:03:7b:82:75:93:6b: 81:de:ea:42:c5:cf:8e:75:db:1e:de:76:20:47:33: cc:c4:d7:f6:fd:3d:ca:ff:a3:3f:0e:3a:39:15:13: 9e:17:a1:e3:7b:e9:4b:08:67:e0:f2:0c:86:1f:8d: 71:03:d4:ae:4e:f6:d8:ae:84:63:cb:60:3a:97:a4: a4:4c:3a:be:c9:ea:43:04:f4:9b:75:85:89:d4:84: 94:f0:a1:6a:9d:0c:42:56:c6:69:90:e7:4e:ed:25: e2:18:c2:67:43:44:e2:10:72:75:eb:84:4c:4a:49: a2:03:9c:e5:dc:4d:90:5a:8e:eb:1a:98:e2:63:f2: 86:a4:66:18:9c:1c:19:a4:aa:ae:87:e7:e7:5c:65: 53:cd:29:65:21:1f:83:01:98:8e:87:d4:c0:e2:8f: cd:1a:88:6c:d8:cf:d0:5b:03:05:25:d3:be:48:57: 2c:0b:31:aa:6a:93:50:56:8f:6b:2c:09:b0:83:64: c0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3A:1F:14:18:55:FB:86:5F:A0:60:BE:DA:FE:6A:BF:AD:0C:AE:6E X509v3 Authority Key Identifier: keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:80:82:5f:ca:b5:eb:0c:06:58:e2:2b:2f:4e:94:29:42:41: b6:ec:25:74:7b:21:f2:71:23:c4:98:f0:d1:04:d7:e1:93:ce: c0:c3:8d:be:b1:84:4a:f8:fc:20:5e:92:ed:ce:30:ee:d5:e4: c4:10:c7:f7:e6:ed:b6:cf:0b:03:3d:12:bc:d2:94:fd:78:5d: c7:c5:22:a4:f6:3a:c0:a9:f6:d0:0c:b9:33:9b:39:64:83:02: 8b:bf:03:1e:0b:ee:73:c9:1d:5a:1a:5d:1b:64:2f:49:50:b5: 37:8c:9b:59:92:6c:c1:7c:c6:4a:50:18:56:7d:f8:54:d7:fd: 78:f2:10:9c:d1:5c:c3:87:4f:81:7d:9a:6f:b8:d0:1c:19:60: 2c:19:eb:9f:8d:bf:ac:dc:c1:6e:22:be:07:1e:8b:87:51:68: e7:53:78:6f:8c:ea:e0:d3:63:f9:d3:9e:d9:73:b8:39:b0:e1: 42:26:6b:db:4c:d2:bf:88:32:27:46:14:b4:57:61:73:fe:fc: da:54:39:b9:3c:25:14:08:06:c4:9f:e0:92:cf:ab:cd:83:d1: 32:32:05:8a:ac:e7:bd:f0:0f:15:55:16:8a:32:43:61:51:08: 57:47:be:39:94:7c:ed:37:b8:c9:b4:8d:cc:ca:54:99:a6:3d: 82:40:d5:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN2g5PURYE6J9M1reXXW1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZDVjZDJhMDI2MWUxZTYwNjlkZDc3NTg5NGQ4MjZlZTg4 MzZjMWUwHhcNMjUxMjExMjEwMDQ3WhcNMjUxMjEyMjEwMDQ3WjAzMTEwLwYDVQQD Eyg0NDNhMWYxNDE4NTVmYjg2NWZhMDYwYmVkYWZlNmFiZmFkMGNhZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10o7XNNlWOEOswcTDqTcXi1ZS4ID eaARqRy3e00Off+lLIDsrvb2Rwb85XCu/0ASQbJajzL303l2f9wOMXxjvDTrjOYD e4J1k2uB3upCxc+Oddse3nYgRzPMxNf2/T3K/6M/Djo5FROeF6Hje+lLCGfg8gyG H41xA9SuTvbYroRjy2A6l6SkTDq+yepDBPSbdYWJ1ISU8KFqnQxCVsZpkOdO7SXi GMJnQ0TiEHJ164RMSkmiA5zl3E2QWo7rGpjiY/KGpGYYnBwZpKquh+fnXGVTzSll IR+DAZiOh9TA4o/NGohs2M/QWwMFJdO+SFcsCzGqapNQVo9rLAmwg2TAEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQ6HxQYVfuGX6Bgvtr+ar+tDK5uMB8GA1UdIwQY MBaAFB3VzSoCYeHmBp3XdYlNgm7og2weMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYt ZDg2Y2FkZDYxMGI4LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYtZDg2Y2FkZDYxMGI4 LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYCCX8q1 6wwGWOIrL06UKUJBtuwldHsh8nEjxJjw0QTX4ZPOwMONvrGESvj8IF6S7c4w7tXk xBDH9+btts8LAz0SvNKU/Xhdx8UipPY6wKn20Ay5M5s5ZIMCi78DHgvuc8kdWhpd G2QvSVC1N4ybWZJswXzGSlAYVn34VNf9ePIQnNFcw4dPgX2ab7jQHBlgLBnrn42/ rNzBbiK+Bx6Lh1Fo51N4b4zq4NNj+dOe2XO4ObDhQiZr20zSv4gyJ0YUtFdhc/78 2lQ5uTwlFAgGxJ/gks+rzYPRMjIFiqznvfAPFVUWijJDYVEIV0e+OZR87Te4ybSN zMpUmaY9gkDVdA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:35:13 2025 by rpki-client