This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft File: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json) Hash identifier: owf/oRBHrUQGP0Rbyw430dq4wU2ifURWlX9gnhzL4NY= Subject key identifier: 3F:92:08:ED:39:45:B3:E3:F0:19:D3:B1:68:DF:3F:C1:BF:0C:A4:A5 Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA Certificate issuer: /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba Certificate serial: 019B353247ED02521C373D252841F29290F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft Manifest number: 0EBA Signing time: Fri 19 Dec 2025 06:00:46 +0000 Manifest this update: Fri 19 Dec 2025 06:00:46 +0000 Manifest next update: Sat 20 Dec 2025 06:00:46 +0000 Files and hashes: 1: GYIm3RDoW42qeN5ZkiYHMu0tDbk.roa (hash: XTL3oyukju4z29vBf0q/HsP5UmJFSc4ge9VlgNDZpjY=) 2: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: 5QZd8cO6pb2XxxbVBhr6t8U2jJb03gilcw/pg2M981k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:47:ed:02:52:1c:37:3d:25:28:41:f2:92:90:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba Validity Not Before: Dec 19 06:00:46 2025 GMT Not After : Dec 20 06:00:46 2025 GMT Subject: CN=3f9208ed3945b3e3f019d3b168df3fc1bf0ca4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:20:37:9d:9c:03:e8:e4:4f:20:c2:ce:77:ea: 9d:91:26:f7:49:a4:06:32:e4:4e:3c:bd:83:12:f6: be:8b:82:27:57:e0:52:f0:94:fa:15:7a:7d:c6:34: 01:00:86:2d:55:af:5f:e1:9d:1a:74:35:57:99:16: 3c:65:9f:b9:e2:6d:02:46:44:7f:69:5f:26:1b:55: 3a:9e:22:1d:49:3a:56:88:eb:d0:8a:09:95:b5:b4: 67:3c:94:7d:cf:8c:e4:7e:b4:d7:50:27:e4:cb:56: 31:57:3b:01:9d:cb:bb:52:de:e3:be:ad:77:9b:e5: 37:6f:3a:7c:0d:db:78:01:1c:c1:f0:94:aa:a4:97: c1:43:b6:da:cc:e2:9e:b1:aa:1a:0e:ea:4a:51:44: 85:06:98:a5:9f:9e:28:e7:0e:df:d4:ed:f2:09:84: 3e:18:98:bb:cc:86:bc:1d:47:bb:ab:70:52:e8:2d: 67:9c:8d:c4:8f:a3:cc:75:85:ac:06:29:48:32:85: b8:7b:c3:29:af:ae:1c:31:d6:66:34:dd:6a:ad:8f: cc:f0:98:12:d9:07:cd:3c:ae:69:45:b7:97:ca:4f: c8:7f:e6:18:e0:5f:3e:38:7b:d1:54:b7:bd:89:14: 37:2b:c5:dc:7c:82:72:3f:6e:4a:d5:a2:7f:7c:eb: 5a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:92:08:ED:39:45:B3:E3:F0:19:D3:B1:68:DF:3F:C1:BF:0C:A4:A5 X509v3 Authority Key Identifier: keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:04:88:bf:64:3e:c4:62:0a:b5:8a:d7:37:c1:e1:23:39:0a: d3:6d:b9:39:1d:2c:bc:2a:2b:5e:00:9b:ab:e1:9f:69:1e:6b: c1:b3:60:f2:0a:cb:81:eb:e3:17:9f:29:58:79:1e:f1:83:7e: 94:91:2a:e6:d2:5d:21:90:48:9e:87:16:1b:e4:ba:0c:5e:79: 8f:b9:47:7d:3f:4e:49:17:2c:cc:d4:67:b4:4f:1b:c8:f2:72: 8b:db:5e:4c:e5:e7:89:08:84:d1:d1:4b:bd:9e:70:20:06:c9: 35:91:86:1b:1b:87:a1:84:58:90:5d:e7:7c:df:e8:55:9a:e3: 34:26:bb:8a:5c:7b:3b:06:d6:7c:7b:00:41:19:3f:e1:89:30: 70:73:35:e9:9b:01:5d:37:58:6b:3f:bc:12:cf:96:53:ca:cb: 9e:d6:dd:a7:f7:45:7a:7d:ef:c4:6f:81:60:b5:6d:ee:7d:bc: e3:ca:4a:98:25:b0:08:e3:12:c8:b8:3c:03:3d:17:e3:dc:7a: 9f:50:03:6e:65:96:97:4f:2d:6c:80:e6:99:8a:6a:00:59:1a: ef:10:65:86:b8:3b:ea:4e:24:6c:af:56:ff:f5:d3:31:5f:70: bd:d2:67:b4:e1:1b:26:6b:d2:c5:79:1a:52:95:b5:44:51:cf: 7b:2b:ca:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MkftAlIcNz0lKEHykpDzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWI4NTYyNjE1ZjUxMTBkMzU1MWY4ZWM1ZGQwNTZmYjBh NDhhYmEwHhcNMjUxMjE5MDYwMDQ2WhcNMjUxMjIwMDYwMDQ2WjAzMTEwLwYDVQQD EygzZjkyMDhlZDM5NDViM2UzZjAxOWQzYjE2OGRmM2ZjMWJmMGNhNGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiA3nZwD6ORPIMLOd+qdkSb3SaQG MuROPL2DEva+i4InV+BS8JT6FXp9xjQBAIYtVa9f4Z0adDVXmRY8ZZ+54m0CRkR/ aV8mG1U6niIdSTpWiOvQigmVtbRnPJR9z4zkfrTXUCfky1YxVzsBncu7Ut7jvq13 m+U3bzp8Ddt4ARzB8JSqpJfBQ7bazOKesaoaDupKUUSFBpiln54o5w7f1O3yCYQ+ GJi7zIa8HUe7q3BS6C1nnI3Ej6PMdYWsBilIMoW4e8Mpr64cMdZmNN1qrY/M8JgS 2QfNPK5pRbeXyk/If+YY4F8+OHvRVLe9iRQ3K8XcfIJyP25K1aJ/fOtaEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+SCO05RbPj8BnTsWjfP8G/DKSlMB8GA1UdIwQY MBaAFB6bhWJhX1EQ01UfjsXdBW+wpIq6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAt NTM5YTBmMjY2ODRkLzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAtNTM5YTBmMjY2ODRk LzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQSIv2Q+ xGIKtYrXN8HhIzkK0225OR0svCorXgCbq+GfaR5rwbNg8grLgevjF58pWHke8YN+ lJEq5tJdIZBInocWG+S6DF55j7lHfT9OSRcszNRntE8byPJyi9teTOXniQiE0dFL vZ5wIAbJNZGGGxuHoYRYkF3nfN/oVZrjNCa7ilx7OwbWfHsAQRk/4YkwcHM16ZsB XTdYaz+8Es+WU8rLntbdp/dFen3vxG+BYLVt7n2848pKmCWwCOMSyLg8Az0X49x6 n1ADbmWWl08tbIDmmYpqAFka7xBlhrg76k4kbK9W//XTMV9wvdJntOEbJmvSxXka UpW1RFHPeyvKKw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:12:07 2025 by rpki-client