This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft File: HUxgeKWUHFyxV9XylXyzFNftG-0.mft (raw, json) Hash identifier: 0I703PYPnK1qNzhxYqX5fzW2GJ28wWqNikrrEcfHm4A= Subject key identifier: 28:75:06:13:9C:A3:31:94:07:46:59:56:EA:D9:10:27:52:0A:1A:15 Authority key identifier: 1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED Certificate issuer: /CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed Certificate serial: 019B48B999474C15D0DB2858118DF74E742B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft Manifest number: 0B8F Signing time: Tue 23 Dec 2025 01:01:21 +0000 Manifest this update: Tue 23 Dec 2025 01:01:21 +0000 Manifest next update: Wed 24 Dec 2025 01:01:21 +0000 Files and hashes: 1: HUxgeKWUHFyxV9XylXyzFNftG-0.crl (hash: by+eFBYslbmzHt1h3f4zDI5Vxm2Si1INvpmy9fKI3pw=) 2: bS6FP0-RWfuMzsBRZquHdjUbynI.roa (hash: kkw9ceZnHPEpX3rLpD2wmL4u+vt4FdSYPPqT4A+84KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:99:47:4c:15:d0:db:28:58:11:8d:f7:4e:74:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed Validity Not Before: Dec 23 01:01:21 2025 GMT Not After : Dec 24 01:01:21 2025 GMT Subject: CN=287506139ca3319407465956ead91027520a1a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:60:f3:34:7f:91:e0:35:54:6d:74:a7:13: e3:7b:a0:a9:a0:19:8e:8b:df:2f:fd:b3:e5:4f:71: 58:d9:27:39:23:d3:fc:f4:2e:b5:27:a9:d3:92:31: 9e:bb:1b:5a:22:b3:a7:92:65:66:b4:83:bb:d8:43: 7b:48:cf:8b:18:bb:72:e5:d4:65:93:f5:54:89:63: 8b:a4:d7:e5:50:47:f1:4d:5c:dc:84:17:50:36:d2: cc:5a:bb:b4:74:16:31:1f:3b:b3:b8:84:35:7c:a1: 7f:55:cc:ae:63:cf:0c:dc:59:4f:08:b6:5c:d6:c4: 10:c5:91:8b:89:51:3c:8e:a8:f4:96:1f:6b:c7:5e: 2d:af:8d:d5:3a:fb:a8:a9:53:8e:3e:2b:d1:06:7f: bf:9c:f8:d4:b6:b5:ca:11:3a:ed:82:d6:3a:4a:45: 0d:d1:3e:bb:f0:23:a7:f1:a0:a2:f1:ec:e8:c5:f2: 1f:83:8f:62:3c:64:ce:37:76:01:e8:16:78:12:29: 75:97:a5:39:96:d7:a2:50:d2:b0:1b:f2:a4:b1:27: 64:a9:0a:d5:83:ca:60:22:5e:e5:03:b8:51:c6:c3: 8a:68:09:da:ca:79:f4:72:e8:a1:ae:6a:30:fe:85: 84:73:e2:87:d6:10:d2:c9:91:bb:29:1f:5c:3e:59: 21:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:75:06:13:9C:A3:31:94:07:46:59:56:EA:D9:10:27:52:0A:1A:15 X509v3 Authority Key Identifier: keyid:1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1c:ef:88:46:ce:14:7b:66:3c:92:a4:bc:0e:8f:cd:cf:72: ef:a5:f5:5a:02:d5:bc:d3:a5:ee:1b:70:b3:d8:0d:69:76:f3: 40:ec:5e:9b:db:ac:ae:0e:9a:c8:64:9d:20:94:39:99:10:c9: 42:0a:a6:3b:f9:a0:1d:f5:4d:b5:77:15:9c:80:f9:94:10:58: 43:56:f0:85:65:da:93:c3:88:b4:b3:6a:06:d9:1a:a6:a3:42: af:f7:b0:51:26:3e:e4:a7:eb:b7:74:c5:ce:d1:ed:89:58:7b: 37:8a:ea:19:7a:7f:66:28:e3:72:90:e8:24:8b:2a:51:24:a1: 79:27:95:4b:f2:67:2a:e5:e9:1a:47:00:b1:aa:e0:03:22:a6: c4:22:ff:14:69:53:7a:11:e9:85:2e:fd:3b:87:4f:37:94:cd: 0a:88:62:cb:73:c5:e1:1a:a3:31:c8:a2:18:86:95:24:c4:68: 01:85:21:00:a5:24:44:0b:57:8f:0f:21:ca:12:03:4e:1c:2f: 00:12:cd:41:c0:83:b5:0a:87:58:59:f4:a0:bd:a5:1d:7e:33: ae:f3:19:c4:f9:7b:8d:f6:32:8a:cc:2f:6b:ca:63:83:05:f8: c9:da:9a:10:cc:3e:ad:f4:55:8d:06:9b:41:1a:c8:a4:4e:ba: 1b:c5:a7:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuZlHTBXQ2yhYEY33TnQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNGM2MDc4YTU5NDFjNWNiMTU3ZDVmMjk1N2NiMzE0ZDdl ZDFiZWQwHhcNMjUxMjIzMDEwMTIxWhcNMjUxMjI0MDEwMTIxWjAzMTEwLwYDVQQD EygyODc1MDYxMzljYTMzMTk0MDc0NjU5NTZlYWQ5MTAyNzUyMGExYTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQtg8zR/keA1VG10pxPje6CpoBmO i98v/bPlT3FY2Sc5I9P89C61J6nTkjGeuxtaIrOnkmVmtIO72EN7SM+LGLty5dRl k/VUiWOLpNflUEfxTVzchBdQNtLMWru0dBYxHzuzuIQ1fKF/VcyuY88M3FlPCLZc 1sQQxZGLiVE8jqj0lh9rx14tr43VOvuoqVOOPivRBn+/nPjUtrXKETrtgtY6SkUN 0T678COn8aCi8ezoxfIfg49iPGTON3YB6BZ4Eil1l6U5lteiUNKwG/KksSdkqQrV g8pgIl7lA7hRxsOKaAnaynn0cuihrmow/oWEc+KH1hDSyZG7KR9cPlkhOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCh1BhOcozGUB0ZZVurZECdSChoVMB8GA1UdIwQY MBaAFB1MYHillBxcsVfV8pV8sxTX7RvtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFV4Z2VLV1VIRnl4VjlYeWxYeXpGTmZ0Ry0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zZWYzODYtMDU3MS00NjBlLTg5OTEt OTk2YTYyM2I2MzNlLzEvSFV4Z2VLV1VIRnl4VjlYeWxYeXpGTmZ0Ry0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8zZWYzODYtMDU3MS00NjBlLTg5OTEtOTk2YTYyM2I2MzNl LzEvSFV4Z2VLV1VIRnl4VjlYeWxYeXpGTmZ0Ry0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehzviEbO FHtmPJKkvA6Pzc9y76X1WgLVvNOl7htws9gNaXbzQOxem9usrg6ayGSdIJQ5mRDJ QgqmO/mgHfVNtXcVnID5lBBYQ1bwhWXak8OItLNqBtkapqNCr/ewUSY+5Kfrt3TF ztHtiVh7N4rqGXp/ZijjcpDoJIsqUSSheSeVS/JnKuXpGkcAsargAyKmxCL/FGlT ehHphS79O4dPN5TNCohiy3PF4RqjMciiGIaVJMRoAYUhAKUkRAtXjw8hyhIDThwv ABLNQcCDtQqHWFn0oL2lHX4zrvMZxPl7jfYyiswva8pjgwX4ydqaEMw+rfRVjQab QRrIpE66G8WnfA== -----END CERTIFICATE-----Generated at Tue Dec 23 11:03:04 2025 by rpki-client