This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json) Hash identifier: X8C4DlvcSZwOCeGX1nUwKeeWx3wdMpRx+EQqR+Bgt+k= Subject key identifier: 4E:D5:65:FB:A0:84:B7:10:DF:84:65:C5:56:52:22:3A:2C:51:63:6F Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e Certificate serial: 019B47028DDE47EB46EBD52B3CEE57A6C651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft Manifest number: 05AD Signing time: Mon 22 Dec 2025 17:01:48 +0000 Manifest this update: Mon 22 Dec 2025 17:01:48 +0000 Manifest next update: Tue 23 Dec 2025 17:01:48 +0000 Files and hashes: 1: 94kIYfqeFgknlBrr_TOvpCgSdqU.roa (hash: 81jYnPOJR+qUf9stNF6tQ8TBm+nuWM6vD4G5gF21A04=) 2: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: DdOHlsYwc2erNM9PtfkTMlef774bY1JgmIJxk/3sX10=) 3: l4DfAejnNf8QL8LGIhGHT7CKlPg.roa (hash: UVDw7ayj2zIkMp75EMvrYNj0kdy6A1Nen9DvYGACBW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:8d:de:47:eb:46:eb:d5:2b:3c:ee:57:a6:c6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e Validity Not Before: Dec 22 17:01:48 2025 GMT Not After : Dec 23 17:01:48 2025 GMT Subject: CN=4ed565fba084b710df8465c55652223a2c51636f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4f:67:9c:78:6a:0c:e4:21:83:ff:0a:dc:82: e4:37:b5:f4:9e:a9:2b:90:dd:94:36:76:f4:11:7c: 71:44:16:7a:77:ab:07:3b:8c:9d:61:1c:bb:0b:c6: 02:b3:eb:2e:c0:10:d7:06:66:c6:c8:70:bb:ca:88: ce:9e:fb:0d:07:6f:94:3f:09:23:a5:69:24:42:c7: 0e:70:80:74:49:0f:c0:9c:56:3f:ea:5f:54:48:df: d7:a3:9a:22:29:3c:d2:d2:ea:14:a3:77:07:6d:2b: 99:83:98:c1:c0:2c:b0:dc:45:29:1c:b3:75:05:bb: fb:06:80:e4:a8:f6:c5:10:24:ef:c5:8d:27:6d:3b: 84:3a:e0:c6:bb:da:c2:fb:b6:bc:53:fb:ef:c4:81: 9f:90:f4:a3:b8:47:dc:3f:eb:40:30:06:ab:8e:97: 19:eb:d8:16:83:2e:42:54:f6:22:d3:12:88:f2:d9: e3:88:d7:fd:47:59:5a:0a:7b:0f:19:7d:a8:a5:7a: 0e:c1:a2:01:2a:eb:24:93:05:01:87:64:7c:d5:ca: b4:bd:d2:1d:64:b6:6e:4f:73:fd:f9:15:6e:8d:47: aa:43:eb:41:1a:15:22:16:b4:45:cc:bd:57:ba:5c: 35:9a:f9:69:c5:4d:99:34:43:7a:cd:3e:88:88:b2: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D5:65:FB:A0:84:B7:10:DF:84:65:C5:56:52:22:3A:2C:51:63:6F X509v3 Authority Key Identifier: keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:06:54:6a:cf:31:15:da:b6:40:f0:36:72:b8:1d:96:16:13: 4b:c9:69:8a:e3:3e:3e:c9:fb:96:1d:e5:77:cc:b2:45:6e:99: b9:1c:cc:90:2b:7f:5e:6a:e9:cf:bb:1b:a4:d3:ae:ef:7b:58: 5b:c4:54:da:3c:6b:92:33:3e:d1:43:d6:a4:8f:9b:e3:2f:77: ad:fa:25:29:23:49:88:f7:b3:fd:77:88:c6:6b:16:65:59:13: 1f:55:c9:85:8b:c5:db:f4:fa:7f:f0:9e:89:13:e2:6b:e0:4d: 20:6d:0d:e4:fd:8c:ba:75:4d:45:b4:7f:f6:09:7a:a2:d2:29: a4:12:bc:61:85:6c:2e:5a:ae:10:8f:36:8e:43:57:4b:51:e2: 9c:ce:49:e5:64:5c:21:20:c7:14:e0:18:de:57:8e:15:9d:59: 9c:67:2d:3d:35:85:3f:31:fa:3e:7e:c2:da:1f:5e:42:16:c8: 05:0b:a1:cc:ca:11:6f:25:51:3a:53:16:94:8c:7b:18:ef:37: 9a:3e:4d:80:25:ef:7d:78:72:b8:21:d3:04:cd:6b:be:ec:9f: 97:a4:04:a1:d0:33:aa:ad:41:70:e3:17:16:71:79:d5:26:db: 80:ab:71:6d:2b:9c:4f:b3:f4:30:16:ed:ca:f4:e3:a7:a7:d0: 6e:73:e4:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAo3eR+tG69UrPO5XpsZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMTUwMDA3NzJiM2MzZmEyYmJkNzcyN2QzZDM4OTM5MWEx NDYzM2UwHhcNMjUxMjIyMTcwMTQ4WhcNMjUxMjIzMTcwMTQ4WjAzMTEwLwYDVQQD Eyg0ZWQ1NjVmYmEwODRiNzEwZGY4NDY1YzU1NjUyMjIzYTJjNTE2MzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k9nnHhqDOQhg/8K3ILkN7X0nqkr kN2UNnb0EXxxRBZ6d6sHO4ydYRy7C8YCs+suwBDXBmbGyHC7yojOnvsNB2+UPwkj pWkkQscOcIB0SQ/AnFY/6l9USN/Xo5oiKTzS0uoUo3cHbSuZg5jBwCyw3EUpHLN1 Bbv7BoDkqPbFECTvxY0nbTuEOuDGu9rC+7a8U/vvxIGfkPSjuEfcP+tAMAarjpcZ 69gWgy5CVPYi0xKI8tnjiNf9R1laCnsPGX2opXoOwaIBKuskkwUBh2R81cq0vdId ZLZuT3P9+RVujUeqQ+tBGhUiFrRFzL1Xulw1mvlpxU2ZNEN6zT6IiLKkMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7VZfughLcQ34RlxVZSIjosUWNvMB8GA1UdIwQY MBaAFB0VAAdys8P6K713J9PTiTkaFGM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jZDY0NzgtY2VmNi00YTcwLWI0ODgt YjIxMjlmYjRjYTVhLzEvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9jZDY0NzgtY2VmNi00YTcwLWI0ODgtYjIxMjlmYjRjYTVh LzEvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAZUas8x Fdq2QPA2crgdlhYTS8lpiuM+Psn7lh3ld8yyRW6ZuRzMkCt/Xmrpz7sbpNOu73tY W8RU2jxrkjM+0UPWpI+b4y93rfolKSNJiPez/XeIxmsWZVkTH1XJhYvF2/T6f/Ce iRPia+BNIG0N5P2MunVNRbR/9gl6otIppBK8YYVsLlquEI82jkNXS1HinM5J5WRc ISDHFOAY3leOFZ1ZnGctPTWFPzH6Pn7C2h9eQhbIBQuhzMoRbyVROlMWlIx7GO83 mj5NgCXvfXhyuCHTBM1rvuyfl6QEodAzqq1BcOMXFnF51SbbgKtxbSucT7P0MBbt yvTjp6fQbnPkMw== -----END CERTIFICATE-----Generated at Tue Dec 23 03:19:53 2025 by rpki-client