This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft File: hpA1wxdzT2Ybv4XCGEFVofNhat0.mft (raw, json) Hash identifier: w5+KH1Mu7xcn5rDX874a0W8YVQ7RLXW+0m5/bDv7FbM= Subject key identifier: 7B:8C:F3:23:6E:F3:8E:4D:F3:66:8C:1D:47:D4:4A:F6:C8:22:AC:EE Authority key identifier: 86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD Certificate issuer: /CN=869035c317734f661bbf85c2184155a1f3616add Certificate serial: 019AF31C2D1E829ED9CAE49714B6BAD8F6C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft Manifest number: 12E8 Signing time: Sat 06 Dec 2025 10:01:41 +0000 Manifest this update: Sat 06 Dec 2025 10:01:41 +0000 Manifest next update: Sun 07 Dec 2025 10:01:41 +0000 Files and hashes: 1: AFoF1GuFzHjl8hWS56zz0OT3Bgg.roa (hash: tZKNbZDCtPOdNWQDTedTIFStwLgZ/2vtLmBHU+SWAQk=) 2: hpA1wxdzT2Ybv4XCGEFVofNhat0.crl (hash: ouZSGpSbb4gUD0AS+8FkXwOe2IsbWD0xWA9b2EDsS/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2d:1e:82:9e:d9:ca:e4:97:14:b6:ba:d8:f6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=869035c317734f661bbf85c2184155a1f3616add Validity Not Before: Dec 6 10:01:41 2025 GMT Not After : Dec 7 10:01:41 2025 GMT Subject: CN=7b8cf3236ef38e4df3668c1d47d44af6c822acee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ba:95:29:95:10:a3:4d:e5:ba:17:8f:ce:58: e3:07:79:47:bc:97:79:36:49:f2:66:94:2b:3f:9d: bb:01:ce:c7:0e:58:a0:49:19:54:85:07:b3:1d:3d: 32:29:67:7f:03:10:c4:b1:ea:a7:14:90:2f:84:38: e9:42:d2:15:67:25:b0:ee:f7:d2:cb:60:47:e9:eb: 87:14:33:c6:b9:46:5b:a5:39:2f:ab:5d:1b:ea:5d: 2b:eb:9b:da:65:a7:00:e1:49:ab:5a:e0:30:0f:0f: 36:4a:ce:4e:2b:57:37:50:61:94:fd:1d:f8:79:5c: 94:19:e0:72:ea:4a:48:9e:3f:c3:7a:a0:37:10:19: de:89:82:7d:8c:4e:89:4c:f3:0f:df:aa:81:9b:e4: 90:17:6b:9d:bd:4d:8e:37:6f:39:38:cf:23:bb:eb: bc:04:67:6b:e4:42:fc:06:33:27:c4:7a:b7:9e:4d: 3a:51:37:ec:f4:b5:15:24:a4:db:f7:44:03:97:7e: fd:9a:90:07:54:ad:d2:b8:70:7c:93:72:36:ed:45: 78:e2:fe:7a:70:df:a1:4d:fb:58:1b:2f:3d:72:2d: 0e:78:e6:f9:94:0d:8b:12:98:d6:6c:da:cf:7a:f3: de:36:e5:09:42:f5:38:50:b9:54:ee:ab:8f:0a:8d: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8C:F3:23:6E:F3:8E:4D:F3:66:8C:1D:47:D4:4A:F6:C8:22:AC:EE X509v3 Authority Key Identifier: keyid:86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c7:e3:6e:24:6d:62:e9:26:29:88:56:1b:43:46:40:62:e6: 49:a4:19:03:33:d5:0c:ac:28:9e:73:d2:7f:e1:ce:36:12:d5: d7:45:05:f1:7d:20:47:3c:44:58:6c:c4:bc:a9:2a:e2:e9:34: ae:dd:79:3f:9d:61:cd:f7:11:16:f2:5e:c7:2f:ec:86:c8:62: 0d:2c:33:1f:52:ef:5b:82:c6:7c:69:3f:90:5c:56:9d:77:14: 77:09:43:b3:c7:74:ac:31:7e:ab:03:59:d5:c9:7b:43:5a:e2: e3:e5:1d:48:1d:75:ea:7a:bf:17:9a:47:0f:dd:9b:07:ec:0c: ff:77:65:7f:eb:51:54:69:9c:56:35:97:34:76:98:7a:00:97: 8a:f4:0e:e7:79:e9:dc:f8:b7:0c:ac:15:3e:9d:fd:a8:15:c4: b7:e8:d8:f2:c5:16:a1:5a:3a:eb:b8:d6:61:b1:05:72:ae:79: 80:8f:12:50:cf:1c:22:f9:8d:eb:2f:4f:0e:4c:f9:a6:71:a6: af:cb:af:9c:40:ae:a5:96:1b:0d:f0:bb:b9:24:0a:a6:b6:b1: af:d3:3c:69:40:8b:b7:c8:87:25:b8:af:a4:02:21:2b:55:6c: a8:59:61:06:62:99:f0:a7:21:6d:31:2d:0a:a2:88:7c:65:71: 2a:37:80:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHC0egp7ZyuSXFLa62PbEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OTAzNWMzMTc3MzRmNjYxYmJmODVjMjE4NDE1NWExZjM2 MTZhZGQwHhcNMjUxMjA2MTAwMTQxWhcNMjUxMjA3MTAwMTQxWjAzMTEwLwYDVQQD Eyg3YjhjZjMyMzZlZjM4ZTRkZjM2NjhjMWQ0N2Q0NGFmNmM4MjJhY2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57qVKZUQo03luhePzljjB3lHvJd5 NknyZpQrP527Ac7HDligSRlUhQezHT0yKWd/AxDEseqnFJAvhDjpQtIVZyWw7vfS y2BH6euHFDPGuUZbpTkvq10b6l0r65vaZacA4UmrWuAwDw82Ss5OK1c3UGGU/R34 eVyUGeBy6kpInj/DeqA3EBneiYJ9jE6JTPMP36qBm+SQF2udvU2ON285OM8ju+u8 BGdr5EL8BjMnxHq3nk06UTfs9LUVJKTb90QDl379mpAHVK3SuHB8k3I27UV44v56 cN+hTftYGy89ci0OeOb5lA2LEpjWbNrPevPeNuUJQvU4ULlU7quPCo3BAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuM8yNu845N82aMHUfUSvbIIqzuMB8GA1UdIwQY MBaAFIaQNcMXc09mG7+FwhhBVaHzYWrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHBBMXd4ZHpUMllidjRYQ0dFRlZvZk5oYXQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zZmQ3NzQtM2Q3OS00NGIxLTg3OGEt NjAyOGMyNjU0OTQwLzEvaHBBMXd4ZHpUMllidjRYQ0dFRlZvZk5oYXQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8zZmQ3NzQtM2Q3OS00NGIxLTg3OGEtNjAyOGMyNjU0OTQw LzEvaHBBMXd4ZHpUMllidjRYQ0dFRlZvZk5oYXQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsfjbiRt YukmKYhWG0NGQGLmSaQZAzPVDKwonnPSf+HONhLV10UF8X0gRzxEWGzEvKkq4uk0 rt15P51hzfcRFvJexy/shshiDSwzH1LvW4LGfGk/kFxWnXcUdwlDs8d0rDF+qwNZ 1cl7Q1ri4+UdSB116nq/F5pHD92bB+wM/3dlf+tRVGmcVjWXNHaYegCXivQO53np 3Pi3DKwVPp39qBXEt+jY8sUWoVo667jWYbEFcq55gI8SUM8cIvmN6y9PDkz5pnGm r8uvnECupZYbDfC7uSQKpraxr9M8aUCLt8iHJbivpAIhK1VsqFlhBmKZ8KchbTEt CqKIfGVxKjeAoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:10 2025 by rpki-client