This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json) Hash identifier: YwBZd1J5FhJFXya67jsad5/pPJb3q6r4R1O0F6U9PiM= Subject key identifier: 95:BE:32:A1:BD:17:A5:82:A9:04:D6:A6:86:1B:FF:0B:D5:5E:9B:9C Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed Certificate serial: 019B5907BB6215C0172466B21255D457EBC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft Manifest number: 0E11 Signing time: Fri 26 Dec 2025 05:00:37 +0000 Manifest this update: Fri 26 Dec 2025 05:00:37 +0000 Manifest next update: Sat 27 Dec 2025 05:00:37 +0000 Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=) 2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=) 3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: 3Kxb0A7X2JuPo6JchetJ/EyAgpR8qdyR583Qx+135iA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:bb:62:15:c0:17:24:66:b2:12:55:d4:57:eb:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed Validity Not Before: Dec 26 05:00:37 2025 GMT Not After : Dec 27 05:00:37 2025 GMT Subject: CN=95be32a1bd17a582a904d6a6861bff0bd55e9b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:d8:da:5a:74:46:40:0f:6d:25:93:d9:b2: cc:37:d3:e6:e7:ef:c6:dc:62:71:33:4b:8c:a4:c5: 94:a2:21:c1:b1:af:7e:ae:78:30:b4:b3:dc:12:37: 9f:2c:45:54:ab:8a:53:91:59:96:6c:e9:37:6c:25: 4f:95:18:e4:5c:d7:ab:60:80:38:f4:be:e2:2b:c5: e8:04:21:19:42:0b:0a:6a:97:96:d3:9d:00:97:20: 3b:b1:d4:ba:f4:b1:67:1f:41:34:75:6a:eb:4f:a6: 1e:df:f2:13:bd:ba:1e:ee:f4:28:1f:a2:ec:6a:82: 8d:3d:b2:61:55:13:b8:24:fe:36:6f:8c:50:1b:4d: f2:ad:92:2b:ee:51:0f:e1:cf:9c:a3:f2:9f:c8:12: af:d7:2c:ae:36:18:ed:49:ad:bf:39:65:9f:e4:2a: 0b:40:ac:82:73:32:84:f8:db:66:3b:50:a3:29:93: 38:43:61:5d:1a:38:02:b3:90:b6:04:91:d4:c0:0c: 16:45:c7:23:11:30:f7:be:11:59:f9:9e:17:0f:12: 64:e5:16:4f:8c:4e:c5:d5:29:a3:cf:1a:5e:ae:42: 30:d4:14:20:1a:d8:a0:96:66:e8:8a:18:6c:d4:8d: 30:e6:6c:47:90:68:fc:0a:dc:f8:4c:88:6a:37:c4: 22:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BE:32:A1:BD:17:A5:82:A9:04:D6:A6:86:1B:FF:0B:D5:5E:9B:9C X509v3 Authority Key Identifier: keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:66:c1:e2:4c:85:c8:90:aa:74:92:81:c2:f7:31:4d:32:aa: df:2e:18:6d:08:49:28:b0:40:f2:21:b0:13:be:3e:9f:6e:06: 2d:75:60:c7:31:52:1c:05:9e:31:b9:fc:2f:12:95:9a:62:7d: ef:9f:36:5c:8e:c5:82:02:2f:df:42:9c:bd:2d:97:5a:7a:b7: 5d:68:cc:a9:b1:dd:28:28:be:f8:d2:5a:63:c3:f6:40:c2:eb: 4c:86:4b:87:74:49:cf:53:d4:cc:57:8d:81:e6:ec:07:a4:db: a8:e6:58:e7:b7:cc:27:69:4f:b5:74:d8:92:2b:bd:0b:75:57: 43:73:b4:a7:00:76:f5:a4:99:49:f4:40:82:4a:d4:d0:e4:0f: 8b:e6:dd:ef:4b:51:bc:63:1b:02:a3:e3:76:dc:53:a6:fc:88: 5f:14:24:cf:16:4b:58:00:a6:cb:2e:d6:0d:51:0c:c0:12:cd: 58:b8:3d:b6:4e:81:45:01:66:2f:cf:94:d5:bf:49:5b:4a:9c: 07:cc:0e:96:c4:64:d4:0d:92:45:07:20:b9:e6:7a:8a:fc:2e: 97:a9:bf:e6:e8:73:8a:52:18:8a:f5:6c:0b:df:f4:37:4c:38: 11:43:7b:4b:fd:ae:9c:d9:3a:2f:c0:51:a8:67:8b:af:36:26: f3:3a:e9:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB7tiFcAXJGayElXUV+vDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZWZiNDlkZjI0NzRhNjA0MmI5ZjIxMGJmZWE4NjFiMWIy ODg2ZWQwHhcNMjUxMjI2MDUwMDM3WhcNMjUxMjI3MDUwMDM3WjAzMTEwLwYDVQQD Eyg5NWJlMzJhMWJkMTdhNTgyYTkwNGQ2YTY4NjFiZmYwYmQ1NWU5YjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7jY2lp0RkAPbSWT2bLMN9Pm5+/G 3GJxM0uMpMWUoiHBsa9+rngwtLPcEjefLEVUq4pTkVmWbOk3bCVPlRjkXNerYIA4 9L7iK8XoBCEZQgsKapeW050AlyA7sdS69LFnH0E0dWrrT6Ye3/ITvboe7vQoH6Ls aoKNPbJhVRO4JP42b4xQG03yrZIr7lEP4c+co/KfyBKv1yyuNhjtSa2/OWWf5CoL QKyCczKE+NtmO1CjKZM4Q2FdGjgCs5C2BJHUwAwWRccjETD3vhFZ+Z4XDxJk5RZP jE7F1SmjzxperkIw1BQgGtiglmboihhs1I0w5mxHkGj8Ctz4TIhqN8Qi2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJW+MqG9F6WCqQTWpoYb/wvVXpucMB8GA1UdIwQY MBaAFIbvtJ3yR0pgQrnyEL/qhhsbKIbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5Yjgt OTViMjcxZjJlMjBiLzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5YjgtOTViMjcxZjJlMjBi LzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGbB4kyF yJCqdJKBwvcxTTKq3y4YbQhJKLBA8iGwE74+n24GLXVgxzFSHAWeMbn8LxKVmmJ9 7582XI7FggIv30KcvS2XWnq3XWjMqbHdKCi++NJaY8P2QMLrTIZLh3RJz1PUzFeN gebsB6TbqOZY57fMJ2lPtXTYkiu9C3VXQ3O0pwB29aSZSfRAgkrU0OQPi+bd70tR vGMbAqPjdtxTpvyIXxQkzxZLWACmyy7WDVEMwBLNWLg9tk6BRQFmL8+U1b9JW0qc B8wOlsRk1A2SRQcgueZ6ivwul6m/5uhzilIYivVsC9/0N0w4EUN7S/2unNk6L8BR qGeLrzYm8zrpUA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:23 2025 by rpki-client