This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft File: HpKJoBWvREH4-d9MjFXpiykogc8.mft (raw, json) Hash identifier: h50QlEWub03EpCgiO9MZLgeaieXlMesqeRgGvXWbZ8w= Subject key identifier: 65:23:C7:A3:36:61:88:09:2A:D9:35:F8:F6:D9:6E:34:51:03:82:FF Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF Certificate issuer: /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf Certificate serial: 019B4A03A8D2AE9AE3576BA8D584BDB9F319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 07:01:52 +0000 Manifest this update: Tue 23 Dec 2025 07:01:52 +0000 Manifest next update: Wed 24 Dec 2025 07:01:52 +0000 Files and hashes: 1: HpKJoBWvREH4-d9MjFXpiykogc8.crl (hash: klAwBQa+8/qWgOTXdIyml2TIiV3yiwiVGOZRfXaA+Io=) 2: NgTdB5AEPD4DAHaTIZRq0754ZYU.roa (hash: X0ljVmj2cD5On812FnYT4pXdeEcEXod3j6IYZXkhhSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:a8:d2:ae:9a:e3:57:6b:a8:d5:84:bd:b9:f3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf Validity Not Before: Dec 23 07:01:52 2025 GMT Not After : Dec 24 07:01:52 2025 GMT Subject: CN=6523c7a3366188092ad935f8f6d96e34510382ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a7:da:5a:11:6d:39:6f:cc:a5:e8:df:00:6d: c7:f3:8e:cd:5b:7f:b2:20:a3:f1:d1:cd:61:7f:4e: ef:f5:62:5b:9e:63:9e:03:25:a9:6b:54:07:1a:3c: 24:d0:a4:e7:55:26:17:34:86:06:cc:71:13:9e:85: 11:b2:3e:fb:4c:34:f9:6e:ab:4d:76:1b:ed:ca:13: 11:79:44:33:33:e9:07:b2:31:00:5c:c8:cb:51:af: bd:e1:65:a9:96:88:81:f9:b6:0b:82:80:21:1e:5c: ca:50:17:a8:8a:15:8f:67:f3:19:b7:c3:f9:df:83: 96:75:70:d5:ae:3d:08:0c:6f:20:0f:67:63:ab:31: 92:4b:70:16:73:33:1d:ae:dc:e1:ae:8d:04:ec:8a: a9:2b:f5:02:ca:fb:8a:28:ac:e0:a0:3f:01:56:8a: 7b:1d:dd:d2:46:d5:e1:35:13:2d:fd:02:fc:dc:0c: 44:94:45:c8:7d:7d:ce:34:e3:55:42:73:9b:1e:bd: b0:48:5c:cc:c4:ee:33:fb:7c:3d:5e:08:5c:8c:31: c9:96:c2:64:16:c0:26:11:6e:49:2e:2c:c5:8a:c8: fe:24:e4:f1:a9:bd:5c:72:a8:35:45:3d:7d:6a:be: 98:e1:ef:26:fd:33:e6:ff:7a:ea:75:b9:e4:60:3f: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:23:C7:A3:36:61:88:09:2A:D9:35:F8:F6:D9:6E:34:51:03:82:FF X509v3 Authority Key Identifier: keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:36:43:30:ee:bc:d3:55:c5:31:65:a9:11:46:d6:94:07:0e: 66:62:c6:8b:11:1c:8e:da:84:fa:e4:8b:a1:69:6f:eb:9c:d6: ec:f6:d5:34:97:01:88:d8:e2:89:c2:cb:54:95:7e:bc:a6:77: 8b:c7:25:77:50:1f:e3:b2:d3:b1:d5:3c:e7:0b:b7:c1:5e:56: b7:97:f1:00:26:48:b2:d5:fb:19:24:ef:db:3e:0a:de:5c:2b: 4d:56:34:74:b6:65:88:be:8c:2e:f5:8f:35:68:33:d4:28:85: f9:5e:8a:25:24:e3:c0:72:24:83:3d:74:5a:91:82:b0:42:10: 77:fd:0c:bb:c6:59:38:42:8f:68:bb:3e:81:e0:9e:83:a3:2c: 6d:6b:b0:f6:ae:ec:02:52:0d:c8:d4:65:43:11:30:d0:e3:04: 46:b3:05:5a:f4:2b:48:17:49:47:7a:65:3e:90:53:da:d1:8a: 7f:ac:38:d4:44:c1:7f:5c:92:a1:18:f3:90:dd:4d:00:b6:8d: 35:17:72:c8:81:13:dc:2d:29:f2:c3:0d:a2:e5:35:e5:55:ce: d8:55:35:4d:2d:f2:4a:c8:51:29:09:22:f8:d0:1f:92:3e:46: f3:ad:82:33:d9:12:ad:11:c0:2d:27:7f:a9:ec:21:89:6f:6c: bf:01:5e:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA6jSrprjV2uo1YS9ufMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOTI4OWEwMTVhZjQ0NDFmOGY5ZGY0YzhjNTVlOThiMjky ODgxY2YwHhcNMjUxMjIzMDcwMTUyWhcNMjUxMjI0MDcwMTUyWjAzMTEwLwYDVQQD Eyg2NTIzYzdhMzM2NjE4ODA5MmFkOTM1ZjhmNmQ5NmUzNDUxMDM4MmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqafaWhFtOW/MpejfAG3H847NW3+y IKPx0c1hf07v9WJbnmOeAyWpa1QHGjwk0KTnVSYXNIYGzHETnoURsj77TDT5bqtN dhvtyhMReUQzM+kHsjEAXMjLUa+94WWploiB+bYLgoAhHlzKUBeoihWPZ/MZt8P5 34OWdXDVrj0IDG8gD2djqzGSS3AWczMdrtzhro0E7IqpK/UCyvuKKKzgoD8BVop7 Hd3SRtXhNRMt/QL83AxElEXIfX3ONONVQnObHr2wSFzMxO4z+3w9XghcjDHJlsJk FsAmEW5JLizFisj+JOTxqb1ccqg1RT19ar6Y4e8m/TPm/3rqdbnkYD+WJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUjx6M2YYgJKtk1+PbZbjRRA4L/MB8GA1UdIwQY MBaAFB6SiaAVr0RB+PnfTIxV6YspKIHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBLSm9CV3ZSRUg0LWQ5TWpGWHBpeWtvZ2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yOTE0NjMtOTFjYy00NzA0LTk1Mjgt Njk3OTRmMDUwMjc2LzEvSHBLSm9CV3ZSRUg0LWQ5TWpGWHBpeWtvZ2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yOTE0NjMtOTFjYy00NzA0LTk1MjgtNjk3OTRmMDUwMjc2 LzEvSHBLSm9CV3ZSRUg0LWQ5TWpGWHBpeWtvZ2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDZDMO68 01XFMWWpEUbWlAcOZmLGixEcjtqE+uSLoWlv65zW7PbVNJcBiNjiicLLVJV+vKZ3 i8cld1Af47LTsdU85wu3wV5Wt5fxACZIstX7GSTv2z4K3lwrTVY0dLZliL6MLvWP NWgz1CiF+V6KJSTjwHIkgz10WpGCsEIQd/0Mu8ZZOEKPaLs+geCeg6MsbWuw9q7s AlINyNRlQxEw0OMERrMFWvQrSBdJR3plPpBT2tGKf6w41ETBf1ySoRjzkN1NALaN NRdyyIET3C0p8sMNouU15VXO2FU1TS3ySshRKQki+NAfkj5G862CM9kSrRHALSd/ qewhiW9svwFe3Q== -----END CERTIFICATE-----Generated at Tue Dec 23 16:28:11 2025 by rpki-client