This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft File: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft (raw, json) Hash identifier: Mq2I9tnkZ2dGiZNWTeg1T8qGSfrnnc8Xe+QCqj4dREk= Subject key identifier: 58:D1:E0:3B:89:53:B1:75:B1:41:DE:07:4B:FE:E7:74:02:75:A3:06 Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C Certificate issuer: /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c Certificate serial: 019B1EAA980FC9B094E8877C6CD6BED37317 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft Manifest number: 0990 Signing time: Sun 14 Dec 2025 21:00:54 +0000 Manifest this update: Sun 14 Dec 2025 21:00:54 +0000 Manifest next update: Mon 15 Dec 2025 21:00:54 +0000 Files and hashes: 1: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl (hash: 41kRVtHfmNbQqwgeFKiozyzM6l0IyzbRgoO87INZC0U=) 2: oiBFy3pkObmB-SUVyi8mjUeggCE.roa (hash: DrQMitQl5NyHBIDeRzh85R9x2+NpayUje01H5X2GJbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:98:0f:c9:b0:94:e8:87:7c:6c:d6:be:d3:73:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c Validity Not Before: Dec 14 21:00:54 2025 GMT Not After : Dec 15 21:00:54 2025 GMT Subject: CN=58d1e03b8953b175b141de074bfee7740275a306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:43:70:86:c3:1d:60:e2:40:98:a5:f2:c9:a2: fc:91:94:d4:1e:a5:65:a7:f3:50:23:3a:79:10:13: 1a:a1:0e:85:f1:70:77:02:5b:49:9c:cc:12:10:e0: 77:3b:28:52:aa:0e:5d:d4:13:41:4f:4e:43:c6:93: 16:c9:27:a0:22:f2:25:11:6b:79:83:0c:91:47:68: 9c:4e:24:52:68:92:52:a0:4f:97:3f:08:97:eb:30: 8d:11:1c:04:9f:3a:48:39:a1:2c:ea:70:1c:cd:c2: 6e:cd:3f:33:08:44:49:94:b6:ee:e7:9d:b4:13:fd: 75:d8:d4:c7:46:c0:3c:ba:e2:b1:20:da:82:46:a0: ae:ec:b4:aa:b3:51:db:9d:d4:6e:7c:7c:32:b9:00: 9f:f5:6e:7e:7b:7c:71:b0:30:e1:a8:c0:86:0f:82: da:c7:87:1e:ce:70:55:7a:8b:bf:c9:85:74:29:a2: c8:80:51:41:16:be:78:a5:92:4f:78:62:75:ad:67: 6c:ab:8c:a7:d2:bf:d8:5a:aa:62:56:f1:db:49:21: 1d:78:95:15:da:26:1a:f3:a5:9b:ae:c3:33:26:13: d3:9f:8b:4b:55:1d:f6:7c:77:61:ca:e7:3a:c8:3e: 30:54:6b:3e:b4:8b:76:23:3e:89:f4:c4:c5:2d:9b: db:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D1:E0:3B:89:53:B1:75:B1:41:DE:07:4B:FE:E7:74:02:75:A3:06 X509v3 Authority Key Identifier: keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:99:a9:65:ad:8d:c2:8d:80:f5:96:2b:4a:bb:33:d4:d9:34: 86:0a:cc:83:e8:1b:cc:52:fa:ae:e6:be:db:a4:14:3e:60:7c: 4a:39:18:74:6a:8f:cf:5e:51:3b:15:f3:ba:7a:33:5d:b0:7b: d0:e9:44:f3:ba:95:98:6d:d3:6e:30:7f:a1:f5:4a:89:c8:71: 13:1a:16:3b:2d:ab:6b:a4:26:cf:24:c0:d5:01:5b:9c:89:8f: a6:40:03:73:d8:73:8f:8e:b4:cc:ed:da:26:9b:e6:6b:b8:54: a9:19:27:0e:77:ff:4b:e4:5a:9b:e6:89:80:a6:9d:c9:36:dd: 87:34:e8:90:33:f3:d3:5f:70:cb:70:d2:a4:73:0d:c9:0e:ee: 68:52:b4:a8:82:60:ae:16:a8:59:d0:6a:5c:c3:ed:27:ef:27: 9f:6c:bd:f5:2b:b9:f2:4a:30:a6:e6:52:02:4c:b7:4d:d0:98: 3f:35:14:2b:4c:44:23:55:5b:aa:2b:e5:42:5c:b9:57:66:8a: 50:b2:64:6b:86:3e:de:e2:39:d0:d6:3b:21:31:82:b8:c9:26: 3e:ee:d6:e0:21:19:15:fb:50:99:2b:f6:93:a2:ec:61:57:9c: 4a:f3:30:0a:41:69:cd:b2:ee:a7:d7:19:c7:20:f0:19:5c:69: 74:d0:e7:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqpgPybCU6Id8bNa+03MXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZWUxMjY4ZmUwYWFkZjMxN2FiNDRmZDgxNmQxMGZlNTRk ZGZjMGMwHhcNMjUxMjE0MjEwMDU0WhcNMjUxMjE1MjEwMDU0WjAzMTEwLwYDVQQD Eyg1OGQxZTAzYjg5NTNiMTc1YjE0MWRlMDc0YmZlZTc3NDAyNzVhMzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kNwhsMdYOJAmKXyyaL8kZTUHqVl p/NQIzp5EBMaoQ6F8XB3AltJnMwSEOB3OyhSqg5d1BNBT05DxpMWySegIvIlEWt5 gwyRR2icTiRSaJJSoE+XPwiX6zCNERwEnzpIOaEs6nAczcJuzT8zCERJlLbu5520 E/112NTHRsA8uuKxINqCRqCu7LSqs1HbndRufHwyuQCf9W5+e3xxsDDhqMCGD4La x4ceznBVeou/yYV0KaLIgFFBFr54pZJPeGJ1rWdsq4yn0r/YWqpiVvHbSSEdeJUV 2iYa86WbrsMzJhPTn4tLVR32fHdhyuc6yD4wVGs+tIt2Iz6J9MTFLZvbSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjR4DuJU7F1sUHeB0v+53QCdaMGMB8GA1UdIwQY MBaAFIbuEmj+Cq3zF6tE/YFtEP5U3fwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mMzQyNTQtMGU5ZC00ZGM1LWE0MTgt MWI3MTFhZWMxZmJjLzEvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mMzQyNTQtMGU5ZC00ZGM1LWE0MTgtMWI3MTFhZWMxZmJj LzEvaHU0U2FQNEtyZk1YcTBUOWdXMFFfbFRkX0F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5mpZa2N wo2A9ZYrSrsz1Nk0hgrMg+gbzFL6rua+26QUPmB8SjkYdGqPz15ROxXzunozXbB7 0OlE87qVmG3TbjB/ofVKichxExoWOy2ra6QmzyTA1QFbnImPpkADc9hzj460zO3a Jpvma7hUqRknDnf/S+Ram+aJgKadyTbdhzTokDPz019wy3DSpHMNyQ7uaFK0qIJg rhaoWdBqXMPtJ+8nn2y99Su58kowpuZSAky3TdCYPzUUK0xEI1VbqivlQly5V2aK ULJka4Y+3uI50NY7ITGCuMkmPu7W4CEZFftQmSv2k6LsYVecSvMwCkFpzbLup9cZ xyDwGVxpdNDnuw== -----END CERTIFICATE-----Generated at Sun Dec 14 23:15:12 2025 by rpki-client