This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json) Hash identifier: VwfngGPJxRmv2fmEL7hNMoXjK69Xg0leMJxUkdroQf0= Subject key identifier: 4E:72:1E:B7:70:06:24:84:7E:D7:A9:89:31:3A:3A:13:27:D4:A7:F3 Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99 Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99 Certificate serial: 019B0CDB765A17902F20799A6FFE8DBBBF6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft Manifest number: 03E9 Signing time: Thu 11 Dec 2025 10:01:07 +0000 Manifest this update: Thu 11 Dec 2025 10:01:07 +0000 Manifest next update: Fri 12 Dec 2025 10:01:07 +0000 Files and hashes: 1: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: OUOQfzesvxuyDuTPxS4lEsdAxKGYimhP/Cd/3WcnsXk=) 2: tVaiZFiLINawsOK82OFMO15DejQ.roa (hash: 8nEDMZ8EuVxpyIr0H29BICF51Bn0ST34hEU28E7vWbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:db:76:5a:17:90:2f:20:79:9a:6f:fe:8d:bb:bf:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99 Validity Not Before: Dec 11 10:01:07 2025 GMT Not After : Dec 12 10:01:07 2025 GMT Subject: CN=4e721eb7700624847ed7a989313a3a1327d4a7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:0a:6d:90:48:83:bd:54:95:8e:1b:83:d9: f9:7e:57:d2:37:23:2c:9e:87:dc:29:79:f1:03:ed: 93:04:29:46:ef:87:bf:1c:bc:79:03:55:5d:68:dd: f4:63:c0:21:29:90:24:6b:53:16:69:d2:29:9c:c6: 58:da:4e:f3:84:d4:97:c9:89:87:2d:d2:63:b2:62: f4:24:d1:70:ed:04:4c:dc:59:12:a1:24:83:4d:5d: d0:f7:b9:21:fe:e4:7b:1f:3d:7f:bc:6b:bd:e2:b0: 8f:49:54:37:8f:dc:e1:7f:f4:f9:02:e3:7b:f4:bd: 25:7e:ee:56:d0:a0:b6:e5:b4:70:cf:68:dc:8b:f9: 49:cd:f9:45:2c:96:7f:c6:b8:0a:0b:5c:19:7c:19: 20:d0:0e:09:f9:c0:22:14:11:ed:90:d8:eb:a1:b5: 3e:a5:e3:a0:a5:93:a1:2a:64:40:6c:d1:67:73:9d: df:56:87:b6:a9:56:73:fc:fd:ca:b1:91:ce:28:67: 26:7f:d9:62:b8:4c:6d:2d:24:65:34:b2:a9:d6:c8: 5e:f7:75:8a:ee:b0:76:39:e4:c1:62:d1:4c:61:4d: e5:8e:4d:dc:fa:4e:5f:51:f2:d9:cc:14:87:a2:d0: 5c:c8:99:b3:2f:6c:81:ad:b1:c5:91:91:6a:bb:7c: cf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:72:1E:B7:70:06:24:84:7E:D7:A9:89:31:3A:3A:13:27:D4:A7:F3 X509v3 Authority Key Identifier: keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:8a:f0:e4:ea:96:9c:d8:15:bc:02:f7:d2:b3:82:f8:a9:10: bb:ae:35:16:bb:b1:30:b7:18:65:2e:af:50:93:42:d6:e1:d2: 60:50:95:c7:14:c6:3f:9c:21:37:8c:8a:f3:8e:ba:a6:d0:9b: 23:50:6c:71:28:6d:f6:3c:76:f5:0c:5c:dc:d9:c8:03:84:15: ba:00:97:53:c7:51:fe:05:fd:9b:9b:ff:20:6e:78:94:14:91: bd:ea:00:62:ed:0c:a9:b2:e8:25:da:6a:65:b3:5a:92:1d:f9: b8:64:d7:cc:f9:44:60:9d:f5:c6:00:76:fa:0a:db:13:28:b9: ab:96:82:db:68:6f:0f:90:7f:f9:ab:fe:b8:a5:4f:ef:4c:8b: 47:a6:8a:d2:a2:db:7f:2e:d8:4d:b5:dc:bc:8e:58:02:4e:80: 59:ac:81:38:06:9c:5c:34:44:5b:4c:9b:b4:fa:6c:34:28:1e: c1:07:83:f4:54:91:a3:34:78:b5:da:8c:1f:f3:ec:c1:24:ba: c0:3b:90:2c:f7:53:fc:3f:b4:f0:74:2d:0c:e6:98:2d:9e:3e: 3a:43:14:36:e8:e2:7f:7c:2b:0e:91:bc:3f:c4:36:c1:f7:79: c7:c9:f9:06:a4:56:5c:7f:36:a6:84:54:c1:b1:42:00:f2:84: 92:e1:9c:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsM23ZaF5AvIHmab/6Nu79vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTNkMWU4NjE4ZWY4ZmFlODA3NWRkZDU4MjcwZDA5NDAw NmJlOTkwHhcNMjUxMjExMTAwMTA3WhcNMjUxMjEyMTAwMTA3WjAzMTEwLwYDVQQD Eyg0ZTcyMWViNzcwMDYyNDg0N2VkN2E5ODkzMTNhM2ExMzI3ZDRhN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUgKbZBIg71UlY4bg9n5flfSNyMs nofcKXnxA+2TBClG74e/HLx5A1VdaN30Y8AhKZAka1MWadIpnMZY2k7zhNSXyYmH LdJjsmL0JNFw7QRM3FkSoSSDTV3Q97kh/uR7Hz1/vGu94rCPSVQ3j9zhf/T5AuN7 9L0lfu5W0KC25bRwz2jci/lJzflFLJZ/xrgKC1wZfBkg0A4J+cAiFBHtkNjrobU+ peOgpZOhKmRAbNFnc53fVoe2qVZz/P3KsZHOKGcmf9liuExtLSRlNLKp1she93WK 7rB2OeTBYtFMYU3ljk3c+k5fUfLZzBSHotBcyJmzL2yBrbHFkZFqu3zPOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5yHrdwBiSEftepiTE6OhMn1KfzMB8GA1UdIwQY MBaAFIRT0ehhjvj66Add3VgnDQlABr6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEt ZDRhZTQwNzEzMjhmLzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEtZDRhZTQwNzEzMjhm LzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYrw5OqW nNgVvAL30rOC+KkQu641FruxMLcYZS6vUJNC1uHSYFCVxxTGP5whN4yK8466ptCb I1BscSht9jx29Qxc3NnIA4QVugCXU8dR/gX9m5v/IG54lBSRveoAYu0MqbLoJdpq ZbNakh35uGTXzPlEYJ31xgB2+grbEyi5q5aC22hvD5B/+av+uKVP70yLR6aK0qLb fy7YTbXcvI5YAk6AWayBOAacXDREW0ybtPpsNCgewQeD9FSRozR4tdqMH/PswSS6 wDuQLPdT/D+08HQtDOaYLZ4+OkMUNujif3wrDpG8P8Q2wfd5x8n5BqRWXH82poRU wbFCAPKEkuGcMg== -----END CERTIFICATE-----Generated at Thu Dec 11 15:09:54 2025 by rpki-client