This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft File: hplEyiVUvOj0uL_HXaWKjwhdX4E.mft (raw, json) Hash identifier: Us4EQomxPG1ekPxT81TPXYqG4hp7jHNn6kU9Ew/ivo0= Subject key identifier: 48:68:00:65:50:34:BB:1E:66:65:34:26:79:4E:64:D5:F2:89:40:8B Authority key identifier: 86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81 Certificate issuer: /CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81 Certificate serial: 019AF12D00066579F26FF07BA0FA1DA96D40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:00:49 +0000 Manifest this update: Sat 06 Dec 2025 01:00:49 +0000 Manifest next update: Sun 07 Dec 2025 01:00:49 +0000 Files and hashes: 1: hplEyiVUvOj0uL_HXaWKjwhdX4E.crl (hash: UZKSTa8UHLBQNi4DXPlZjnBL8XwVY/baZbs8qugtnLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:00:06:65:79:f2:6f:f0:7b:a0:fa:1d:a9:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81 Validity Not Before: Dec 6 01:00:49 2025 GMT Not After : Dec 7 01:00:49 2025 GMT Subject: CN=486800655034bb1e66653426794e64d5f289408b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:42:6d:3f:f5:e5:69:e5:16:8d:15:19:2e:86: a1:4d:56:5f:16:7c:46:a0:3d:24:52:40:12:f8:9c: ce:0d:b4:c2:6a:bc:eb:cc:80:97:97:a0:8f:9e:46: bd:10:a9:a2:86:d7:e8:5b:d1:a3:43:ab:eb:e7:5d: 82:82:77:5e:ad:d4:89:d2:22:9b:a0:77:c7:2c:f4: 90:19:93:ef:42:71:14:6a:6b:9d:86:3c:63:b0:0e: a1:8c:a7:b4:61:14:d5:44:a2:2e:23:44:9b:0a:fd: e8:b1:4c:3e:73:84:33:94:d6:68:ae:73:a4:63:96: d9:43:46:5b:2c:94:28:2b:c9:69:ab:ad:c1:d7:81: 43:15:59:fd:95:67:c1:6e:2c:f4:e2:67:d3:dd:8c: 7c:6e:4a:4f:34:66:b2:eb:b9:ea:81:24:11:78:01: cd:2d:a4:74:cb:21:6a:af:d9:82:d7:91:82:c9:6a: 4c:cb:a9:b5:b2:3d:7c:96:30:c2:51:00:20:aa:dc: 48:37:a1:2a:20:c1:e6:af:ce:d7:fe:ca:42:3f:73: d4:35:d3:64:19:aa:4b:df:68:92:b9:f8:75:eb:c4: 00:0f:1b:6d:bd:78:5c:98:9a:06:17:42:3a:a7:2c: 55:6d:c3:92:b5:05:97:55:4d:b5:a5:94:a0:48:ab: 91:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:68:00:65:50:34:BB:1E:66:65:34:26:79:4E:64:D5:F2:89:40:8B X509v3 Authority Key Identifier: keyid:86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f5:0a:8b:c6:c3:97:5e:59:19:78:10:a2:a2:9e:c1:f3:fb: 83:01:c3:d3:f0:ac:31:49:4d:19:24:27:e7:27:ec:6f:d9:07: 6b:d9:4f:6f:3f:7d:78:5b:dd:60:38:bc:ea:82:19:bb:8e:8f: fa:5e:d7:c7:3a:4b:dd:9c:85:a6:63:0e:33:78:fd:a3:68:46: cc:bf:5e:4c:b0:69:81:e0:1f:85:36:b0:89:91:b5:e0:c4:52: 10:20:b0:f2:a7:be:d4:1e:3f:a7:9c:6e:82:26:41:c9:b5:e8: 4b:1c:2a:e3:61:4e:9d:da:0c:88:ca:0f:ef:02:ce:b1:b4:cd: 21:1e:ac:14:93:74:75:d6:ed:8b:6f:db:0a:09:45:14:a2:44: c8:e6:8b:25:3a:f3:2d:5d:8e:18:84:c2:3c:bf:97:94:c5:58: 88:ac:ff:47:1b:29:68:a4:ec:cb:5c:58:f9:77:fa:61:14:19: 08:87:4b:e9:ee:22:f5:c1:f1:83:e1:6a:27:6c:79:fe:97:82: dc:ed:13:bc:4f:30:43:b2:ea:7c:9b:ea:46:12:15:49:07:f7: 26:18:3f:f1:2d:12:51:43:a4:db:10:46:8d:17:c7:17:b0:0b: 80:b0:cc:75:d3:5f:7c:cc:41:c3:57:8a:c3:cf:c2:df:14:7f: f0:db:b4:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQAGZXnyb/B7oPodqW1AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OTk0NGNhMjU1NGJjZThmNGI4YmZjNzVkYTU4YThmMDg1 ZDVmODEwHhcNMjUxMjA2MDEwMDQ5WhcNMjUxMjA3MDEwMDQ5WjAzMTEwLwYDVQQD Eyg0ODY4MDA2NTUwMzRiYjFlNjY2NTM0MjY3OTRlNjRkNWYyODk0MDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EJtP/XlaeUWjRUZLoahTVZfFnxG oD0kUkAS+JzODbTCarzrzICXl6CPnka9EKmihtfoW9GjQ6vr512CgnderdSJ0iKb oHfHLPSQGZPvQnEUamudhjxjsA6hjKe0YRTVRKIuI0SbCv3osUw+c4QzlNZornOk Y5bZQ0ZbLJQoK8lpq63B14FDFVn9lWfBbiz04mfT3Yx8bkpPNGay67nqgSQReAHN LaR0yyFqr9mC15GCyWpMy6m1sj18ljDCUQAgqtxIN6EqIMHmr87X/spCP3PUNdNk GapL32iSufh168QADxttvXhcmJoGF0I6pyxVbcOStQWXVU21pZSgSKuRAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhoAGVQNLseZmU0JnlOZNXyiUCLMB8GA1UdIwQY MBaAFIaZRMolVLzo9Li/x12lio8IXV+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85ZmRhZTAtNWM2My00YzA3LTg3M2Et Y2RkYTRiYTZiZDc4LzEvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS85ZmRhZTAtNWM2My00YzA3LTg3M2EtY2RkYTRiYTZiZDc4 LzEvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffUKi8bD l15ZGXgQoqKewfP7gwHD0/CsMUlNGSQn5yfsb9kHa9lPbz99eFvdYDi86oIZu46P +l7XxzpL3ZyFpmMOM3j9o2hGzL9eTLBpgeAfhTawiZG14MRSECCw8qe+1B4/p5xu giZBybXoSxwq42FOndoMiMoP7wLOsbTNIR6sFJN0ddbti2/bCglFFKJEyOaLJTrz LV2OGITCPL+XlMVYiKz/RxspaKTsy1xY+Xf6YRQZCIdL6e4i9cHxg+FqJ2x5/peC 3O0TvE8wQ7LqfJvqRhIVSQf3Jhg/8S0SUUOk2xBGjRfHF7ALgLDMddNffMxBw1eK w8/C3xR/8Nu0Dw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:53 2025 by rpki-client