This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft File: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json) Hash identifier: kDG48+fMu4NRpNF7FePIltXWxqP7jDM0PrQ/RpX7DWo= Subject key identifier: BF:87:1B:12:F9:53:3F:58:4B:07:C3:09:ED:85:8C:63:D0:F4:5C:29 Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA Certificate issuer: /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba Certificate serial: 019B3CEBD8F96879E02E668BB89FA58E24CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft Manifest number: 0EBE Signing time: Sat 20 Dec 2025 18:00:47 +0000 Manifest this update: Sat 20 Dec 2025 18:00:47 +0000 Manifest next update: Sun 21 Dec 2025 18:00:47 +0000 Files and hashes: 1: GYIm3RDoW42qeN5ZkiYHMu0tDbk.roa (hash: XTL3oyukju4z29vBf0q/HsP5UmJFSc4ge9VlgNDZpjY=) 2: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: 0a0Uc3VrsBLvdIloPiBzjjbkT9oB+I4pEH7QI72Pvy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:d8:f9:68:79:e0:2e:66:8b:b8:9f:a5:8e:24:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba Validity Not Before: Dec 20 18:00:47 2025 GMT Not After : Dec 21 18:00:47 2025 GMT Subject: CN=bf871b12f9533f584b07c309ed858c63d0f45c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:94:38:dc:8f:25:3c:0b:91:b2:f2:f1:f8:e2: e1:4c:17:a6:e8:b0:bc:fc:84:89:31:38:c5:0c:e3: 09:f3:db:c1:33:29:a2:af:7d:07:48:b3:71:d2:04: 48:61:d4:22:58:52:48:68:b9:5e:4b:ef:a7:91:40: 45:81:32:69:bd:65:a8:f7:1e:5c:e7:64:cf:7e:ef: 36:53:95:86:00:b6:00:1b:3f:32:fe:43:bb:84:42: 54:0a:18:05:9a:46:dc:9b:42:b1:31:38:5d:00:78: 17:88:3e:dd:c0:dc:ae:22:8d:d3:1a:29:07:f1:79: aa:61:1f:8d:b8:1f:d8:85:10:ba:02:28:a8:38:93: 1d:e2:8e:c0:d4:b1:a8:a7:4b:18:36:6d:6b:68:eb: 0b:39:12:9a:8b:40:fd:e4:a1:3f:83:5e:ff:cc:2e: 53:e6:13:46:db:32:1c:af:52:25:65:c9:7e:64:9a: ea:45:39:69:00:03:2c:fc:f9:89:90:73:c2:24:44: 32:68:ab:6b:cb:cb:7c:12:77:f8:2b:30:d5:f2:13: 20:46:e0:46:d0:f8:de:f1:14:ad:b5:ec:e5:cf:69: bc:c4:1c:fd:9d:cf:16:9b:fd:02:39:55:fd:a2:46: 9b:21:16:db:bb:d6:62:b1:90:10:78:53:c6:ba:70: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:87:1B:12:F9:53:3F:58:4B:07:C3:09:ED:85:8C:63:D0:F4:5C:29 X509v3 Authority Key Identifier: keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ce:67:31:e0:67:6a:cb:23:89:1f:49:c1:94:07:47:84:7f: 52:1d:9e:d3:bb:67:49:ee:fc:31:f7:8a:e2:3e:72:4e:e3:85: 89:a8:2e:ad:6c:43:e5:12:44:08:c1:86:fc:cb:6c:16:b3:63: eb:cb:f5:76:86:da:c0:b4:01:38:b6:c1:e2:87:dc:fc:89:8d: 5a:69:f2:78:54:f7:e7:87:ab:56:93:c5:c6:8d:97:d4:70:fe: 31:92:6a:d4:41:f5:f2:f7:68:5a:bd:79:87:91:17:e5:2b:c0: 2a:39:eb:4c:36:45:6e:4d:06:27:65:86:e6:4e:80:4f:b1:46: c4:47:7d:a3:62:f3:b8:61:92:f1:8a:f6:72:79:9f:de:2d:16: 32:52:6a:51:fc:01:2e:f4:54:14:ff:df:ae:77:a4:04:97:ae: 66:ff:41:88:b1:ca:63:d0:03:27:88:bb:5f:3b:19:15:78:97: 78:cc:a0:3f:c4:a1:c9:e9:50:e2:32:92:6f:7a:17:9c:3f:82: 7d:b2:42:54:57:b1:e5:91:f2:cb:73:2c:33:2f:28:dc:d5:9f: 14:46:64:a7:15:d1:16:1f:8b:31:58:57:1b:60:bc:10:3d:c1: 6c:1e:15:63:78:01:01:6a:7f:ab:ff:a1:81:63:4c:b5:d0:8f: 9f:e7:f3:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869j5aHngLmaLuJ+ljiTLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWI4NTYyNjE1ZjUxMTBkMzU1MWY4ZWM1ZGQwNTZmYjBh NDhhYmEwHhcNMjUxMjIwMTgwMDQ3WhcNMjUxMjIxMTgwMDQ3WjAzMTEwLwYDVQQD EyhiZjg3MWIxMmY5NTMzZjU4NGIwN2MzMDllZDg1OGM2M2QwZjQ1YzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZQ43I8lPAuRsvLx+OLhTBem6LC8 /ISJMTjFDOMJ89vBMymir30HSLNx0gRIYdQiWFJIaLleS++nkUBFgTJpvWWo9x5c 52TPfu82U5WGALYAGz8y/kO7hEJUChgFmkbcm0KxMThdAHgXiD7dwNyuIo3TGikH 8XmqYR+NuB/YhRC6AiioOJMd4o7A1LGop0sYNm1raOsLORKai0D95KE/g17/zC5T 5hNG2zIcr1IlZcl+ZJrqRTlpAAMs/PmJkHPCJEQyaKtry8t8Enf4KzDV8hMgRuBG 0Pje8RSttezlz2m8xBz9nc8Wm/0COVX9okabIRbbu9ZisZAQeFPGunACmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+HGxL5Uz9YSwfDCe2FjGPQ9FwpMB8GA1UdIwQY MBaAFB6bhWJhX1EQ01UfjsXdBW+wpIq6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAt NTM5YTBmMjY2ODRkLzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAtNTM5YTBmMjY2ODRk LzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVc5nMeBn assjiR9JwZQHR4R/Uh2e07tnSe78MfeK4j5yTuOFiagurWxD5RJECMGG/MtsFrNj 68v1dobawLQBOLbB4ofc/ImNWmnyeFT354erVpPFxo2X1HD+MZJq1EH18vdoWr15 h5EX5SvAKjnrTDZFbk0GJ2WG5k6AT7FGxEd9o2LzuGGS8Yr2cnmf3i0WMlJqUfwB LvRUFP/frnekBJeuZv9BiLHKY9ADJ4i7XzsZFXiXeMygP8ShyelQ4jKSb3oXnD+C fbJCVFex5ZHyy3MsMy8o3NWfFEZkpxXRFh+LMVhXG2C8ED3BbB4VY3gBAWp/q/+h gWNMtdCPn+fzLA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:58:15 2025 by rpki-client