This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json) Hash identifier: 17mTIFSUdTkdSfx/03CcnJkqGZof4iY6MSI39fWMGKg= Subject key identifier: 36:08:70:76:42:6B:9D:20:63:50:A9:AE:B9:66:A5:FB:E3:9B:9F:D3 Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e Certificate serial: 019B0F010A6515587180A7EB40227E01F4E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft Manifest number: 0590 Signing time: Thu 11 Dec 2025 20:01:24 +0000 Manifest this update: Thu 11 Dec 2025 20:01:24 +0000 Manifest next update: Fri 12 Dec 2025 20:01:24 +0000 Files and hashes: 1: 94kIYfqeFgknlBrr_TOvpCgSdqU.roa (hash: 81jYnPOJR+qUf9stNF6tQ8TBm+nuWM6vD4G5gF21A04=) 2: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: l0bU00u47ufbuWBjjB3Mrb5IGKXxsp68B7KByOkVx98=) 3: l4DfAejnNf8QL8LGIhGHT7CKlPg.roa (hash: UVDw7ayj2zIkMp75EMvrYNj0kdy6A1Nen9DvYGACBW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:0a:65:15:58:71:80:a7:eb:40:22:7e:01:f4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e Validity Not Before: Dec 11 20:01:24 2025 GMT Not After : Dec 12 20:01:24 2025 GMT Subject: CN=36087076426b9d206350a9aeb966a5fbe39b9fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:98:d2:1f:12:ed:5c:ab:2c:d1:36:30:38:af: dc:3b:62:87:1a:c1:18:5c:81:86:58:cf:39:8f:c0: 82:1d:9b:5f:a0:b5:74:44:11:42:fc:69:4d:59:14: 6c:8c:6d:ed:0d:eb:91:69:cc:53:aa:59:d8:30:a3: 3f:c3:df:3d:37:7a:dc:05:20:95:61:03:90:8d:5c: f9:82:22:e0:7c:9d:f9:26:38:c0:0d:a9:7c:1b:9f: 78:32:18:90:ef:27:a1:75:2e:b3:2d:56:74:49:0e: 97:a3:63:e3:b1:e7:78:80:7b:47:e4:dc:e1:ec:76: de:f4:0f:f7:d0:c2:e0:a0:ce:30:f6:0d:62:c2:3f: 16:8c:38:76:ef:b1:49:a1:b6:0c:9e:81:68:09:ff: 1a:7e:96:20:a7:31:09:02:ea:d5:73:3e:fd:ff:d1: 21:93:ce:97:fb:9c:a1:22:12:d6:d2:08:f1:10:8e: 11:ee:b7:93:cf:53:cb:3b:05:88:2f:4a:61:20:96: 1a:4f:12:28:d0:85:33:58:7a:c5:a4:1e:86:63:83: bf:f0:01:fb:f2:33:4f:de:a6:af:42:6b:e5:9a:eb: d4:77:fa:78:2a:83:84:34:fa:1a:40:27:fc:bd:71: 15:01:12:27:53:06:30:98:5f:ac:b8:f9:f7:41:be: a7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:08:70:76:42:6B:9D:20:63:50:A9:AE:B9:66:A5:FB:E3:9B:9F:D3 X509v3 Authority Key Identifier: keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a0:8c:a0:a7:43:c5:20:c1:e7:b9:db:be:8b:b3:b6:62:c9: e9:09:e1:64:09:9a:65:d9:4a:e5:42:8d:ca:c6:cf:2f:4f:b9: e0:f3:2f:30:c9:87:c0:3a:fe:62:d0:3b:f6:6d:5b:94:e3:a4: 14:14:89:e6:01:9b:b9:79:19:93:fd:78:a3:de:d5:58:7c:ed: 9c:d6:2a:e9:35:39:19:32:bd:23:15:4a:c1:cd:63:50:88:77: 5d:c0:74:ae:8f:65:bb:c3:2d:60:0e:d9:8d:3a:50:77:9a:04: d6:4a:78:85:7d:d7:0d:70:62:05:e5:5e:50:86:5b:91:ca:11: 46:c2:41:01:b7:38:73:3a:f4:8b:ff:fd:3f:c9:79:91:5d:7a: 3f:24:8c:70:d7:84:7b:1a:51:f1:ee:ae:80:a7:f7:d7:3b:bc: 99:9c:00:ab:be:ca:c9:51:88:7a:06:84:45:f2:e0:60:47:13: 23:93:48:53:7f:49:63:6b:8c:9e:b7:39:a8:f7:08:e9:5d:94: 95:72:16:0f:b3:4b:65:7b:6c:6d:48:e1:c6:88:e7:77:1e:bb: f6:43:20:16:8e:86:f8:66:68:fe:22:67:a5:b3:6a:b5:b6:14: ae:b0:4a:0e:f0:f8:bc:07:23:56:38:3b:13:1a:19:57:b5:96: 93:2a:c0:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAQplFVhxgKfrQCJ+AfTjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMTUwMDA3NzJiM2MzZmEyYmJkNzcyN2QzZDM4OTM5MWEx NDYzM2UwHhcNMjUxMjExMjAwMTI0WhcNMjUxMjEyMjAwMTI0WjAzMTEwLwYDVQQD EygzNjA4NzA3NjQyNmI5ZDIwNjM1MGE5YWViOTY2YTVmYmUzOWI5ZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JjSHxLtXKss0TYwOK/cO2KHGsEY XIGGWM85j8CCHZtfoLV0RBFC/GlNWRRsjG3tDeuRacxTqlnYMKM/w989N3rcBSCV YQOQjVz5giLgfJ35JjjADal8G594MhiQ7yehdS6zLVZ0SQ6Xo2Pjsed4gHtH5Nzh 7Hbe9A/30MLgoM4w9g1iwj8WjDh277FJobYMnoFoCf8afpYgpzEJAurVcz79/9Eh k86X+5yhIhLW0gjxEI4R7reTz1PLOwWIL0phIJYaTxIo0IUzWHrFpB6GY4O/8AH7 8jNP3qavQmvlmuvUd/p4KoOENPoaQCf8vXEVARInUwYwmF+suPn3Qb6nawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYIcHZCa50gY1Cprrlmpfvjm5/TMB8GA1UdIwQY MBaAFB0VAAdys8P6K713J9PTiTkaFGM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jZDY0NzgtY2VmNi00YTcwLWI0ODgt YjIxMjlmYjRjYTVhLzEvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9jZDY0NzgtY2VmNi00YTcwLWI0ODgtYjIxMjlmYjRjYTVh LzEvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqCMoKdD xSDB57nbvouztmLJ6QnhZAmaZdlK5UKNysbPL0+54PMvMMmHwDr+YtA79m1blOOk FBSJ5gGbuXkZk/14o97VWHztnNYq6TU5GTK9IxVKwc1jUIh3XcB0ro9lu8MtYA7Z jTpQd5oE1kp4hX3XDXBiBeVeUIZbkcoRRsJBAbc4czr0i//9P8l5kV16PySMcNeE expR8e6ugKf31zu8mZwAq77KyVGIegaERfLgYEcTI5NIU39JY2uMnrc5qPcI6V2U lXIWD7NLZXtsbUjhxojndx679kMgFo6G+GZo/iJnpbNqtbYUrrBKDvD4vAcjVjg7 ExoZV7WWkyrAnw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:13:25 2025 by rpki-client