This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft File: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json) Hash identifier: 2P8cKZoO9ewqO359W4WfbMkE7MLPa7EYqqFp+WQKs3g= Subject key identifier: D2:74:0E:A1:A5:76:6E:ED:7C:EA:C5:B7:54:5F:73:06:4B:2B:B1:63 Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA Certificate issuer: /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea Certificate serial: 019B35A1094FD5AFA02F78A7B0F11695A325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft Manifest number: 1317 Signing time: Fri 19 Dec 2025 08:01:44 +0000 Manifest this update: Fri 19 Dec 2025 08:01:44 +0000 Manifest next update: Sat 20 Dec 2025 08:01:44 +0000 Files and hashes: 1: 414nKkHebTOgTqZ_q2PSfPTH6Dw.roa (hash: Iwsiv1vVrSzN0K3T7lWIZIu0VA5UnMuyCHwLiMjnve8=) 2: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: qtljrYUwfZr0TQEhSbn6rZ8MoZslHqBSRL6/nxW+NZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a1:09:4f:d5:af:a0:2f:78:a7:b0:f1:16:95:a3:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea Validity Not Before: Dec 19 08:01:44 2025 GMT Not After : Dec 20 08:01:44 2025 GMT Subject: CN=d2740ea1a5766eed7ceac5b7545f73064b2bb163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8c:82:19:07:51:c0:b0:7c:33:a2:45:05:d4: 15:fe:fa:55:24:3a:72:99:d9:93:8b:b6:66:53:6d: f0:43:3a:52:32:a2:ef:9b:f8:96:8e:c7:48:cb:b2: 2c:c2:c9:3a:42:2f:c5:31:93:83:6c:82:fe:66:42: cc:15:3d:a3:f3:d8:08:ef:55:75:4b:eb:39:80:e8: 08:92:f1:e6:8b:0e:b2:3c:8e:f5:32:b6:b0:c6:d7: eb:a3:60:eb:88:20:21:f9:18:be:32:21:41:d5:be: ef:e5:52:4c:9e:75:b6:94:cd:54:26:d1:05:88:67: 85:0b:b7:6d:c4:8d:b5:3f:a9:3c:4b:26:a0:d7:cd: e8:92:71:c1:01:09:4a:58:e1:75:96:52:2e:ee:a1: 19:ee:f4:05:b7:b7:7e:8e:d7:39:da:5b:71:e7:93: 94:12:83:77:23:5c:ff:f4:6e:82:26:42:c3:7e:80: 1c:11:c9:11:40:9f:ab:03:06:eb:b3:3f:fc:cd:2a: 51:77:4c:35:28:8e:23:70:a0:bc:aa:6a:2f:96:af: 4a:1e:1a:1f:31:f6:b3:f1:92:74:3f:d0:cb:4f:8e: b4:db:ad:9b:9c:4c:f9:8b:af:2d:27:b1:e1:d7:56: 74:37:c4:54:5e:05:26:6c:eb:6b:79:6a:2c:a1:b3: 64:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:74:0E:A1:A5:76:6E:ED:7C:EA:C5:B7:54:5F:73:06:4B:2B:B1:63 X509v3 Authority Key Identifier: keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:6f:31:bd:3d:d1:19:47:d4:a0:46:62:64:bf:58:a3:9b:a7: e2:81:92:d3:4b:00:49:4a:76:de:3d:5d:23:d4:14:79:ce:6d: ea:b1:26:33:cc:6a:64:22:6e:22:e8:79:45:44:53:a6:9e:a8: 9b:a4:b8:92:0b:84:a9:11:ec:9a:32:94:24:5f:4d:44:d0:cc: 41:a5:8a:54:d9:8b:63:d2:25:da:1a:08:08:b1:43:4c:64:23: 04:fc:f9:c1:fe:b2:05:78:e7:a3:8a:4f:02:4e:3e:e1:37:ad: fb:7d:14:cf:4d:b6:e5:17:20:36:16:d0:13:64:d9:d8:2a:d8: 93:4c:7c:31:3d:20:ae:a6:58:18:72:2a:57:6b:5c:d4:34:c5: 3c:2e:84:4f:bf:02:3d:21:75:4b:07:94:00:24:28:d1:e8:c6: 8e:69:ec:5f:50:b9:51:63:aa:f1:b3:82:da:3f:aa:be:b1:21: 63:28:a7:3b:c2:5c:35:1d:b1:bb:f2:5e:79:cd:27:ea:33:49: 0d:61:d5:2f:4e:02:54:75:4a:b3:22:d7:c3:c1:ba:92:92:10: e4:5c:7b:26:59:9f:89:90:05:31:f7:9d:37:b2:6c:36:3c:63: 9c:5e:8c:c9:3e:1c:a0:40:c5:db:06:2c:74:2f:92:99:be:3b: 38:e7:ea:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oQlP1a+gL3insPEWlaMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZmIwODdmZmI3ZjYxY2UxMTNmNjkzNDVlNGQ1MGExMTM4 MDhmZWEwHhcNMjUxMjE5MDgwMTQ0WhcNMjUxMjIwMDgwMTQ0WjAzMTEwLwYDVQQD EyhkMjc0MGVhMWE1NzY2ZWVkN2NlYWM1Yjc1NDVmNzMwNjRiMmJiMTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oyCGQdRwLB8M6JFBdQV/vpVJDpy mdmTi7ZmU23wQzpSMqLvm/iWjsdIy7Iswsk6Qi/FMZODbIL+ZkLMFT2j89gI71V1 S+s5gOgIkvHmiw6yPI71Mrawxtfro2DriCAh+Ri+MiFB1b7v5VJMnnW2lM1UJtEF iGeFC7dtxI21P6k8Syag183oknHBAQlKWOF1llIu7qEZ7vQFt7d+jtc52ltx55OU EoN3I1z/9G6CJkLDfoAcEckRQJ+rAwbrsz/8zSpRd0w1KI4jcKC8qmovlq9KHhof Mfaz8ZJ0P9DLT460262bnEz5i68tJ7Hh11Z0N8RUXgUmbOtreWosobNkJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ0DqGldm7tfOrFt1RfcwZLK7FjMB8GA1UdIwQY MBaAFBz7CH/7f2HOET9pNF5NUKETgI/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZGQ1MWUtYmNhMS00ODkyLWI5N2Et NjlhYTUzYzY5ZDU0LzEvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9mZGQ1MWUtYmNhMS00ODkyLWI5N2EtNjlhYTUzYzY5ZDU0 LzEvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA228xvT3R GUfUoEZiZL9Yo5un4oGS00sASUp23j1dI9QUec5t6rEmM8xqZCJuIuh5RURTpp6o m6S4kguEqRHsmjKUJF9NRNDMQaWKVNmLY9Il2hoICLFDTGQjBPz5wf6yBXjno4pP Ak4+4Tet+30Uz0225RcgNhbQE2TZ2CrYk0x8MT0grqZYGHIqV2tc1DTFPC6ET78C PSF1SweUACQo0ejGjmnsX1C5UWOq8bOC2j+qvrEhYyinO8JcNR2xu/Jeec0n6jNJ DWHVL04CVHVKsyLXw8G6kpIQ5Fx7JlmfiZAFMfedN7JsNjxjnF6MyT4coEDF2wYs dC+Smb47OOfqwQ== -----END CERTIFICATE-----Generated at Fri Dec 19 16:37:08 2025 by rpki-client