This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json) Hash identifier: lBNgnqHCNjhZz2mNVr8VZJCVhYzFjW/PNSFg/SHBwAc= Subject key identifier: C0:FA:57:4D:80:83:14:7F:AC:EF:7C:1A:B4:1B:CA:D4:58:82:5A:96 Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec Certificate serial: 019AE3716D6D5EBA0D80BAC8442BF825B509 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft Manifest number: 05DD Signing time: Wed 03 Dec 2025 09:00:52 +0000 Manifest this update: Wed 03 Dec 2025 09:00:52 +0000 Manifest next update: Thu 04 Dec 2025 09:00:52 +0000 Files and hashes: 1: KOsVP5bePK5N3aNgh_Mf2tcpMMI.roa (hash: 7uBjlY68CN9kyBrkClnf/o/c0vAf129ok+umjgiD7ws=) 2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: ZTL2Ocic+dbZ34/nijdN+wX6igDqAWdtbYRVfQA65bI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:71:6d:6d:5e:ba:0d:80:ba:c8:44:2b:f8:25:b5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec Validity Not Before: Dec 3 09:00:52 2025 GMT Not After : Dec 4 09:00:52 2025 GMT Subject: CN=c0fa574d8083147facef7c1ab41bcad458825a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ae:a1:9b:cd:a2:f6:8e:f4:59:e3:e7:4f:87: 78:7f:f9:70:4f:f0:a1:d3:2d:80:85:a6:5e:ad:9f: af:6a:3b:9b:bd:f6:ff:fb:6c:cf:14:b1:28:b2:4d: a3:19:8c:91:8f:0f:26:3b:1f:a3:02:4c:d6:0c:8b: 72:5a:0d:9c:3e:2f:e5:1e:0a:a8:30:f3:f4:94:7e: 2f:fb:df:ba:a2:88:80:ef:f7:50:7b:c6:be:70:d0: b7:ae:f5:8d:c7:f6:53:40:74:54:03:81:39:08:8b: a7:af:2f:07:68:c7:c7:3c:25:2d:7d:f9:b9:f1:97: f4:d8:0b:84:c2:60:6d:cd:17:ec:17:0b:55:70:72: 48:b2:09:46:21:3d:39:5a:a7:01:81:80:65:1d:8e: 99:93:b6:47:da:f4:58:b4:2c:b2:48:54:1e:cf:31: 75:9f:fa:61:46:71:4a:dd:b1:3a:00:67:74:b1:50: c5:3d:6e:00:50:c9:6c:5c:c3:09:c1:3e:2f:86:8b: d4:6b:62:2f:92:a3:f1:f9:b5:f9:de:a2:8e:d1:63: d9:bd:6f:9b:e0:78:7a:b8:b8:54:97:23:8b:57:90: 57:44:c5:5d:eb:b1:d4:d3:41:a1:65:e4:ec:07:dd: af:bb:48:9e:cc:da:04:c6:25:89:18:21:40:6a:dd: 2b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FA:57:4D:80:83:14:7F:AC:EF:7C:1A:B4:1B:CA:D4:58:82:5A:96 X509v3 Authority Key Identifier: keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:23:d8:b8:14:d9:7c:fc:06:a5:80:05:42:e8:15:83:6e:4d: e8:08:d3:1f:78:f4:11:25:12:f1:55:bd:33:a9:22:4f:52:9f: f3:33:20:81:c1:76:fa:cb:58:43:e2:1d:0a:61:27:4d:94:64: ce:ff:0a:d2:2f:09:9c:f2:ae:8c:d3:22:ed:a0:d6:79:bb:50: 0b:94:71:d4:6a:18:3f:a9:4c:10:05:25:ac:87:89:be:04:b5: 58:76:79:f1:fe:3d:7d:3e:66:8a:c0:c1:18:98:cd:03:08:85: a2:da:46:74:16:0f:4a:7b:8a:7d:dd:dd:78:0b:f0:9e:df:bb: 4a:99:04:cd:0b:dd:f1:95:00:dc:e3:91:d9:22:8f:c9:cf:d7: a5:41:8f:0f:3e:15:bf:a1:7a:af:ca:4e:65:37:21:3e:01:b7: cb:80:b5:5a:99:89:74:7e:1b:25:19:5c:12:0f:9b:ac:4e:57: 31:b5:a1:91:6f:a7:d6:52:c2:d6:53:e6:a9:8d:1f:65:a7:a3: 15:ba:03:84:ac:9a:94:17:1b:4b:7c:51:07:b2:a1:cd:1a:01: 28:ac:69:73:c7:44:f7:00:45:48:b2:be:91:78:ae:6e:bf:5c: 85:85:98:ce:07:52:9f:ec:a8:16:fc:c1:6d:81:b3:1a:53:82: 10:6c:39:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrjcW1tXroNgLrIRCv4JbUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZTk5MTM0MTcxYjU4NjNmNjJmMjJiN2Q3YWJmNzQwMzQ5 NTI4ZWMwHhcNMjUxMjAzMDkwMDUyWhcNMjUxMjA0MDkwMDUyWjAzMTEwLwYDVQQD EyhjMGZhNTc0ZDgwODMxNDdmYWNlZjdjMWFiNDFiY2FkNDU4ODI1YTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a6hm82i9o70WePnT4d4f/lwT/Ch 0y2AhaZerZ+vajubvfb/+2zPFLEosk2jGYyRjw8mOx+jAkzWDItyWg2cPi/lHgqo MPP0lH4v+9+6ooiA7/dQe8a+cNC3rvWNx/ZTQHRUA4E5CIunry8HaMfHPCUtffm5 8Zf02AuEwmBtzRfsFwtVcHJIsglGIT05WqcBgYBlHY6Zk7ZH2vRYtCyySFQezzF1 n/phRnFK3bE6AGd0sVDFPW4AUMlsXMMJwT4vhovUa2IvkqPx+bX53qKO0WPZvW+b 4Hh6uLhUlyOLV5BXRMVd67HU00GhZeTsB92vu0iezNoExiWJGCFAat0rsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMD6V02AgxR/rO98GrQbytRYglqWMB8GA1UdIwQY MBaAFIbpkTQXG1hj9i8it9er90A0lSjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQt ZGE5NTgwOGJhMmMxLzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQtZGE5NTgwOGJhMmMx LzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCPYuBTZ fPwGpYAFQugVg25N6AjTH3j0ESUS8VW9M6kiT1Kf8zMggcF2+stYQ+IdCmEnTZRk zv8K0i8JnPKujNMi7aDWebtQC5Rx1GoYP6lMEAUlrIeJvgS1WHZ58f49fT5misDB GJjNAwiFotpGdBYPSnuKfd3deAvwnt+7SpkEzQvd8ZUA3OOR2SKPyc/XpUGPDz4V v6F6r8pOZTchPgG3y4C1WpmJdH4bJRlcEg+brE5XMbWhkW+n1lLC1lPmqY0fZaej FboDhKyalBcbS3xRB7KhzRoBKKxpc8dE9wBFSLK+kXiubr9chYWYzgdSn+yoFvzB bYGzGlOCEGw5OQ== -----END CERTIFICATE-----Generated at Wed Dec 3 12:42:04 2025 by rpki-client