This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft File: HNPDCTm5BqRRWhxlwIg2gptqMok.mft (raw, json) Hash identifier: v/m/AnhXjP2OycbJnnZEsCjpfQ3vpiyn3PvDvA/h96E= Subject key identifier: A6:85:E6:59:B0:4B:89:05:4B:79:C6:5B:1F:87:15:4F:CF:EB:62:31 Authority key identifier: 1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89 Certificate issuer: /CN=1cd3c30939b906a4515a1c65c08836829b6a3289 Certificate serial: 019B59ACB1D0457AAE9CCC4AFFD69D5D6F76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 08:00:48 +0000 Manifest this update: Fri 26 Dec 2025 08:00:48 +0000 Manifest next update: Sat 27 Dec 2025 08:00:48 +0000 Files and hashes: 1: HNPDCTm5BqRRWhxlwIg2gptqMok.crl (hash: h2cejvXxAxRunpTuIGMGBB0ImOyBNRrHasuKLpMhcFg=) 2: zraU6JUbMiPLRortKHmXEnAo1OE.roa (hash: HMXC6yKtO8g8Ym91NRBLoqlps2ZqE/0U22YJBVZue4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:b1:d0:45:7a:ae:9c:cc:4a:ff:d6:9d:5d:6f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cd3c30939b906a4515a1c65c08836829b6a3289 Validity Not Before: Dec 26 08:00:48 2025 GMT Not After : Dec 27 08:00:48 2025 GMT Subject: CN=a685e659b04b89054b79c65b1f87154fcfeb6231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2c:47:e5:48:6e:eb:57:8d:83:e2:2e:21:36: d8:46:a4:9d:6d:9a:fc:68:fb:4c:b4:76:b2:29:1e: 2e:07:13:e2:9a:84:bb:37:b3:b4:a3:5b:5f:3f:a4: 8e:9f:46:74:d7:48:62:f4:16:79:79:75:7a:39:71: f4:ad:dc:ff:55:d8:c6:5e:a9:ff:83:f3:d9:27:5a: fb:52:92:b3:ed:d2:ad:45:d0:b9:de:46:02:e3:84: a1:b6:41:77:ab:ab:fa:4f:a6:19:34:28:5d:da:78: 1f:51:8b:c8:6a:ca:c6:40:95:a7:4b:8e:5b:fc:86: 6d:74:4e:eb:77:8c:f6:92:ed:b2:18:ba:3c:73:5f: 43:bb:68:98:29:f5:7d:b0:ba:a2:17:43:a6:1b:54: a1:10:65:a8:d8:c6:27:7e:a9:7f:49:16:eb:91:04: 36:2c:7d:5a:a4:cf:dd:04:b4:d4:6b:78:9c:16:58: d1:de:1f:74:c2:ee:d1:ca:f5:5c:be:4e:15:6d:a5: c0:a7:65:b1:24:39:86:d5:2a:44:5e:1a:71:19:26: 9f:e5:e9:70:9f:59:00:b9:b8:df:e0:19:60:e6:6d: f3:14:8c:b5:07:f6:c7:ad:83:83:d2:80:55:8c:d1: 60:f3:0a:0c:d4:75:7b:b2:59:17:7f:cc:05:64:e8: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:85:E6:59:B0:4B:89:05:4B:79:C6:5B:1F:87:15:4F:CF:EB:62:31 X509v3 Authority Key Identifier: keyid:1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f4:2e:6f:96:18:1a:bf:02:d4:2b:a5:28:e8:80:5d:c3:72: ed:26:1a:5a:8e:e1:10:62:6b:08:09:00:07:67:8e:8f:f9:a9: 21:31:06:a8:60:da:15:a5:bd:9b:bf:88:74:a7:fd:9d:5f:71: 1b:da:05:c5:4f:d6:aa:1c:39:c1:97:1c:1a:5c:05:f7:8b:9a: 05:e2:87:3d:c2:60:17:12:1a:bc:69:a3:ee:51:37:e5:a2:02: 87:97:03:4b:91:a1:63:0f:64:14:08:e2:3c:a4:b4:ab:0d:76: 54:8d:f2:8c:7a:1b:6a:b7:7e:2c:48:ac:89:0c:ea:b2:7c:13: f4:f7:30:a6:98:92:53:92:ee:78:a7:6f:10:2c:74:7d:67:89: 9e:10:aa:09:7c:4a:01:b9:a4:d4:8a:ec:bd:1f:9b:59:92:da: 61:5c:54:57:66:0a:b7:ce:d9:3c:4e:8a:14:24:f1:13:17:8b: b9:6b:68:a8:bf:1d:25:24:1c:fd:77:3b:8e:a2:6b:13:04:b7: b0:08:70:eb:2a:8c:99:25:c5:b9:f8:ac:76:4b:88:39:91:4c: a4:7c:37:3e:88:b9:2b:ad:da:0c:9f:9c:24:be:8c:49:f4:bc: 61:67:7a:f1:49:b6:e0:50:8a:e0:29:6d:3f:a8:de:f0:79:21: 3b:a6:dc:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrLHQRXqunMxK/9adXW92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZDNjMzA5MzliOTA2YTQ1MTVhMWM2NWMwODgzNjgyOWI2 YTMyODkwHhcNMjUxMjI2MDgwMDQ4WhcNMjUxMjI3MDgwMDQ4WjAzMTEwLwYDVQQD EyhhNjg1ZTY1OWIwNGI4OTA1NGI3OWM2NWIxZjg3MTU0ZmNmZWI2MjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CxH5Uhu61eNg+IuITbYRqSdbZr8 aPtMtHayKR4uBxPimoS7N7O0o1tfP6SOn0Z010hi9BZ5eXV6OXH0rdz/VdjGXqn/ g/PZJ1r7UpKz7dKtRdC53kYC44ShtkF3q6v6T6YZNChd2ngfUYvIasrGQJWnS45b /IZtdE7rd4z2ku2yGLo8c19Du2iYKfV9sLqiF0OmG1ShEGWo2MYnfql/SRbrkQQ2 LH1apM/dBLTUa3icFljR3h90wu7RyvVcvk4VbaXAp2WxJDmG1SpEXhpxGSaf5elw n1kAubjf4Blg5m3zFIy1B/bHrYOD0oBVjNFg8woM1HV7slkXf8wFZOhtjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaF5lmwS4kFS3nGWx+HFU/P62IxMB8GA1UdIwQY MBaAFBzTwwk5uQakUVocZcCINoKbajKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQt MGZmODZlZjk1ZTBmLzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQtMGZmODZlZjk1ZTBm LzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvQub5YY Gr8C1CulKOiAXcNy7SYaWo7hEGJrCAkAB2eOj/mpITEGqGDaFaW9m7+IdKf9nV9x G9oFxU/Wqhw5wZccGlwF94uaBeKHPcJgFxIavGmj7lE35aICh5cDS5GhYw9kFAji PKS0qw12VI3yjHobard+LEisiQzqsnwT9PcwppiSU5LueKdvECx0fWeJnhCqCXxK Abmk1IrsvR+bWZLaYVxUV2YKt87ZPE6KFCTxExeLuWtoqL8dJSQc/Xc7jqJrEwS3 sAhw6yqMmSXFufisdkuIOZFMpHw3Poi5K63aDJ+cJL6MSfS8YWd68Um24FCK4Clt P6je8HkhO6bcuA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:32 2025 by rpki-client