This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft File: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft (raw, json) Hash identifier: oukhQGQ6aeU6bRqiGZcYFkJclpItQfHoMIo/wUtp6XM= Subject key identifier: 94:44:D6:8C:CC:37:22:5D:E8:08:49:AC:08:71:75:7B:C2:ED:C6:B7 Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C Certificate issuer: /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c Certificate serial: 019B1CBBD6A0AB152D2BC6666C74DC5ED16A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft Manifest number: 098F Signing time: Sun 14 Dec 2025 12:00:30 +0000 Manifest this update: Sun 14 Dec 2025 12:00:30 +0000 Manifest next update: Mon 15 Dec 2025 12:00:30 +0000 Files and hashes: 1: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl (hash: EOu9zOFzwsN6deDNkP+qSOYAE8sJxQJOaM8H4pj2Rsg=) 2: oiBFy3pkObmB-SUVyi8mjUeggCE.roa (hash: DrQMitQl5NyHBIDeRzh85R9x2+NpayUje01H5X2GJbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bb:d6:a0:ab:15:2d:2b:c6:66:6c:74:dc:5e:d1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c Validity Not Before: Dec 14 12:00:30 2025 GMT Not After : Dec 15 12:00:30 2025 GMT Subject: CN=9444d68ccc37225de80849ac0871757bc2edc6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:1b:1c:e9:65:74:fd:2d:c4:6c:82:b4:51: 41:7c:2f:70:c9:85:ea:95:e6:3c:8e:71:b5:b9:cc: f2:0f:fa:1f:ba:27:eb:e7:65:a6:9a:d0:43:b9:5f: 3d:62:7a:f4:d9:5b:13:4b:50:73:97:0e:14:05:bc: 83:fd:4a:5c:55:b3:5f:a0:18:88:7d:51:39:7f:1b: 3d:fe:30:e5:38:6e:93:11:26:64:53:c3:2f:31:a1: c4:66:74:25:2e:9d:ed:00:45:cd:32:79:de:0a:0f: f9:1a:ae:87:4b:e5:5a:4c:a7:93:bc:88:7f:5b:f5: f3:ea:a8:96:c2:ac:43:c4:2c:70:d6:79:b8:10:d0: 21:c9:2b:55:2c:30:6a:46:02:ea:f2:ff:cc:64:22: fc:ff:4b:f5:a8:47:37:7e:c2:cd:2e:97:d4:24:95: b0:6d:87:aa:68:60:05:82:72:9a:61:8a:86:40:b7: ae:37:eb:a3:4e:5f:e5:2e:0c:fb:cb:fb:72:6b:1c: 35:4c:52:d8:c9:72:05:27:5c:dd:b7:68:2b:20:40: 7b:12:41:8e:f2:20:24:03:9e:b9:6d:d6:ef:9c:1b: fb:da:5a:fb:75:5a:e5:8d:5c:02:1c:4d:83:e8:16: 81:f1:8d:c4:12:84:a5:d4:66:8c:95:ba:dd:78:c4: 42:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:44:D6:8C:CC:37:22:5D:E8:08:49:AC:08:71:75:7B:C2:ED:C6:B7 X509v3 Authority Key Identifier: keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:e4:da:d1:66:70:1a:96:f5:ad:61:33:c4:92:5e:06:7d:cc: 4a:cf:4b:f5:8a:65:4f:09:5f:6a:98:86:94:b5:d5:57:83:0d: 10:6c:cc:f5:9c:1f:6c:0a:12:9d:b0:85:ec:cc:7d:2e:be:53: 1d:5b:29:ce:28:f3:f5:d1:d4:86:f5:f6:c4:0d:f9:9f:47:97: a4:7c:a5:ff:87:50:3f:70:51:45:29:15:c1:6c:88:b2:38:57: 9f:f1:c1:44:84:6e:57:83:29:ee:bb:b2:9c:6f:cd:89:bc:7d: a4:7b:f9:70:8e:c6:39:7b:18:eb:0b:aa:ad:fc:74:52:ba:7a: d2:51:e1:2b:55:3c:23:fd:f5:c2:a0:b0:d3:fe:bc:e8:bb:7e: 7b:8d:fb:b2:50:31:61:15:ea:10:f9:ee:01:a5:46:12:ee:a4: 43:04:04:92:aa:75:f9:2d:36:75:41:e6:14:5f:5d:ee:f8:d1: 75:7e:ef:b9:40:5a:d5:fd:71:36:16:da:37:55:1a:a4:27:f6: 0b:1d:89:3a:db:d1:7e:f1:ff:de:51:b3:2e:59:6d:24:d2:ea: 71:3e:81:55:46:f8:7d:d1:fb:0e:6f:81:f1:e0:a1:c7:a4:f5: dd:8a:97:a7:e8:dd:59:f3:4d:20:d4:fd:a1:2a:37:4d:c6:eb: c4:50:38:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscu9agqxUtK8ZmbHTcXtFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZWUxMjY4ZmUwYWFkZjMxN2FiNDRmZDgxNmQxMGZlNTRk ZGZjMGMwHhcNMjUxMjE0MTIwMDMwWhcNMjUxMjE1MTIwMDMwWjAzMTEwLwYDVQQD Eyg5NDQ0ZDY4Y2NjMzcyMjVkZTgwODQ5YWMwODcxNzU3YmMyZWRjNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssEbHOlldP0txGyCtFFBfC9wyYXq leY8jnG1uczyD/ofuifr52WmmtBDuV89Ynr02VsTS1Bzlw4UBbyD/UpcVbNfoBiI fVE5fxs9/jDlOG6TESZkU8MvMaHEZnQlLp3tAEXNMnneCg/5Gq6HS+VaTKeTvIh/ W/Xz6qiWwqxDxCxw1nm4ENAhyStVLDBqRgLq8v/MZCL8/0v1qEc3fsLNLpfUJJWw bYeqaGAFgnKaYYqGQLeuN+ujTl/lLgz7y/tyaxw1TFLYyXIFJ1zdt2grIEB7EkGO 8iAkA565bdbvnBv72lr7dVrljVwCHE2D6BaB8Y3EEoSl1GaMlbrdeMRC2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRE1ozMNyJd6AhJrAhxdXvC7ca3MB8GA1UdIwQY MBaAFIbuEmj+Cq3zF6tE/YFtEP5U3fwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mMzQyNTQtMGU5ZC00ZGM1LWE0MTgt MWI3MTFhZWMxZmJjLzEvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mMzQyNTQtMGU5ZC00ZGM1LWE0MTgtMWI3MTFhZWMxZmJj LzEvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuuTa0WZw Gpb1rWEzxJJeBn3MSs9L9YplTwlfapiGlLXVV4MNEGzM9ZwfbAoSnbCF7Mx9Lr5T HVspzijz9dHUhvX2xA35n0eXpHyl/4dQP3BRRSkVwWyIsjhXn/HBRIRuV4Mp7ruy nG/Nibx9pHv5cI7GOXsY6wuqrfx0Urp60lHhK1U8I/31wqCw0/686Lt+e437slAx YRXqEPnuAaVGEu6kQwQEkqp1+S02dUHmFF9d7vjRdX7vuUBa1f1xNhbaN1UapCf2 Cx2JOtvRfvH/3lGzLlltJNLqcT6BVUb4fdH7Dm+B8eChx6T13YqXp+jdWfNNINT9 oSo3TcbrxFA4gg== -----END CERTIFICATE-----Generated at Sun Dec 14 21:40:27 2025 by rpki-client