This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft File: HDP7O3JSC4FpopKNU4LknWda0GA.mft (raw, json) Hash identifier: EOG/ECH/6o/OEhNXuPEIK/HNovV3kRY1IbAFSiQ8b+E= Subject key identifier: 9B:08:69:D8:FC:C3:A5:FB:38:F7:3F:21:E6:F2:60:2D:FE:38:39:15 Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60 Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060 Certificate serial: 019B1014D31FC74419E159BAA989ACFB04AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft Manifest number: 151E Signing time: Fri 12 Dec 2025 01:02:38 +0000 Manifest this update: Fri 12 Dec 2025 01:02:38 +0000 Manifest next update: Sat 13 Dec 2025 01:02:38 +0000 Files and hashes: 1: HDP7O3JSC4FpopKNU4LknWda0GA.crl (hash: /VXe3uPCx5nKwNqfpxoSULkQcZOe52A6LV3t3aiNxMI=) 2: jHj1kA03qC8i8hguuEC8ASnj4XQ.roa (hash: 6J5ezyoc/LI46xWXhW/cUUltYyOZg4CBJG0jaVAl1nQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:d3:1f:c7:44:19:e1:59:ba:a9:89:ac:fb:04:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060 Validity Not Before: Dec 12 01:02:38 2025 GMT Not After : Dec 13 01:02:38 2025 GMT Subject: CN=9b0869d8fcc3a5fb38f73f21e6f2602dfe383915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:ea:60:0d:de:e0:c8:76:c2:5b:ca:4a:38: 36:33:01:a9:a4:19:6f:cc:af:62:ab:d3:ad:d3:08: de:00:d5:de:ad:d3:31:dc:cc:98:e1:18:b0:e3:25: 30:b1:8a:55:98:08:36:b5:5c:ce:e9:ed:ca:b2:28: eb:77:2e:b4:39:83:04:48:d2:5c:6e:5f:b4:77:29: d7:51:96:7e:ea:b2:02:a5:73:e6:1d:ed:29:18:79: 64:17:8d:ec:03:7c:21:9b:98:20:01:40:57:3c:06: 02:04:67:ca:9d:69:43:6d:3d:d2:50:de:da:42:be: 1b:0b:94:7a:8a:4a:9f:37:18:ec:28:f6:72:be:a9: 2d:56:44:3e:69:81:0f:63:54:a7:45:48:4c:75:d4: d5:5d:b1:e3:76:77:17:f8:67:2d:da:f4:01:e2:f6: 6c:f0:16:c7:1e:42:31:d4:b3:d4:26:53:65:7f:1a: 51:e4:da:e9:1f:92:53:e2:cc:5c:ba:19:37:60:b2: bf:d4:c4:3c:94:73:92:c0:2d:c9:ff:a5:c6:df:ab: 2f:76:b3:cf:39:f9:1c:65:9f:a4:a4:7e:33:8c:e8: 11:d1:54:d6:e5:b3:82:12:58:b3:e0:a1:9a:4c:6c: 8b:c2:44:07:21:51:bf:98:b2:cf:71:5a:f7:a6:85: 04:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:08:69:D8:FC:C3:A5:FB:38:F7:3F:21:E6:F2:60:2D:FE:38:39:15 X509v3 Authority Key Identifier: keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:3e:d2:85:c2:eb:8d:d0:92:d0:93:e2:19:79:da:ae:2f:50: 14:37:94:ad:db:59:ef:0c:30:fc:05:fc:ed:b7:50:fa:03:9a: 15:bf:b5:bc:ee:38:0d:e6:f9:2c:ef:04:0b:29:25:02:f2:af: db:9d:fa:39:9f:66:be:59:d6:d0:1f:44:b0:1a:be:08:29:cb: 14:64:80:48:74:a8:3c:bf:28:86:35:55:d4:29:b9:85:d6:67: 2f:29:2b:20:dc:80:b9:ac:44:b3:26:8c:55:54:b1:b3:5f:5d: cc:21:4f:82:27:2c:2c:d3:44:3a:07:d0:6d:cd:6b:09:41:3f: b2:b3:07:22:99:f6:0a:fb:fe:b9:82:73:69:59:5f:59:8c:ee: 8b:aa:13:f9:78:69:f2:d5:09:67:8f:cb:17:1a:3f:ee:14:64: 67:cd:bf:75:38:53:1c:9d:1f:57:38:80:51:5d:f1:a0:a6:a2: ac:e3:8b:98:c1:42:b0:5c:9c:ae:da:f5:5b:f2:a1:d6:c6:38: 20:44:12:07:e7:c8:72:5e:99:c9:2c:5a:69:2e:f4:31:75:09: b9:7c:f8:81:d9:6d:2e:f1:a1:7d:34:0b:b2:7c:ec:57:33:75: 51:3a:e1:13:53:c4:6f:a4:5c:d5:54:0d:21:f6:49:ad:f8:cf: 58:9b:56:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFNMfx0QZ4Vm6qYms+wSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMzNmYjNiNzI1MjBiODE2OWEyOTI4ZDUzODJlNDlkNjc1 YWQwNjAwHhcNMjUxMjEyMDEwMjM4WhcNMjUxMjEzMDEwMjM4WjAzMTEwLwYDVQQD Eyg5YjA4NjlkOGZjYzNhNWZiMzhmNzNmMjFlNmYyNjAyZGZlMzgzOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhbqYA3e4Mh2wlvKSjg2MwGppBlv zK9iq9Ot0wjeANXerdMx3MyY4Riw4yUwsYpVmAg2tVzO6e3Ksijrdy60OYMESNJc bl+0dynXUZZ+6rICpXPmHe0pGHlkF43sA3whm5ggAUBXPAYCBGfKnWlDbT3SUN7a Qr4bC5R6ikqfNxjsKPZyvqktVkQ+aYEPY1SnRUhMddTVXbHjdncX+Gct2vQB4vZs 8BbHHkIx1LPUJlNlfxpR5NrpH5JT4sxcuhk3YLK/1MQ8lHOSwC3J/6XG36svdrPP OfkcZZ+kpH4zjOgR0VTW5bOCEliz4KGaTGyLwkQHIVG/mLLPcVr3poUERwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsIadj8w6X7OPc/IebyYC3+ODkVMB8GA1UdIwQY MBaAFBwz+ztyUguBaaKSjVOC5J1nWtBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MjFlOWUtNTI0My00ZDIwLWI0NDct OTUwNDU1ODY4MDJlLzEvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80MjFlOWUtNTI0My00ZDIwLWI0NDctOTUwNDU1ODY4MDJl LzEvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApT7ShcLr jdCS0JPiGXnari9QFDeUrdtZ7www/AX87bdQ+gOaFb+1vO44Deb5LO8ECyklAvKv 2536OZ9mvlnW0B9EsBq+CCnLFGSASHSoPL8ohjVV1Cm5hdZnLykrINyAuaxEsyaM VVSxs19dzCFPgicsLNNEOgfQbc1rCUE/srMHIpn2Cvv+uYJzaVlfWYzui6oT+Xhp 8tUJZ4/LFxo/7hRkZ82/dThTHJ0fVziAUV3xoKairOOLmMFCsFycrtr1W/Kh1sY4 IEQSB+fIcl6ZySxaaS70MXUJuXz4gdltLvGhfTQLsnzsVzN1UTrhE1PEb6Rc1VQN IfZJrfjPWJtW/A== -----END CERTIFICATE-----Generated at Fri Dec 12 08:41:33 2025 by rpki-client