This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft File: HpUuiDc295y9nFZHBL88NmIbjso.mft (raw, json) Hash identifier: nJCj1pSMv/BoWbGCqvyDIUOz4elFF9GUQghBzdUE9xw= Subject key identifier: 28:37:76:B0:D7:3F:5A:C1:D2:EE:7F:74:50:62:34:5C:F2:40:E2:5A Authority key identifier: 1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA Certificate issuer: /CN=1e952e883736f79cbd9c564704bf3c36621b8eca Certificate serial: 019AF5410E3199146ED57436A1033967568A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 20:01:12 +0000 Manifest this update: Sat 06 Dec 2025 20:01:12 +0000 Manifest next update: Sun 07 Dec 2025 20:01:12 +0000 Files and hashes: 1: HpUuiDc295y9nFZHBL88NmIbjso.crl (hash: l9XMcesp+NO3wS7SfgbrypagJ2kJpoTuirE/V27Dh7Y=) 2: nfcB4W3-frcdsttLFxfqKvUAYPA.roa (hash: LSLZu1kedUT6p6v50vQ31LG0ikk6bjLybjbis0FT+ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:0e:31:99:14:6e:d5:74:36:a1:03:39:67:56:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e952e883736f79cbd9c564704bf3c36621b8eca Validity Not Before: Dec 6 20:01:12 2025 GMT Not After : Dec 7 20:01:12 2025 GMT Subject: CN=283776b0d73f5ac1d2ee7f745062345cf240e25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:3b:f8:5d:40:e4:4d:d3:6d:58:f3:51:6b: cb:d1:98:66:f0:0d:4f:12:f1:26:6f:48:6b:9a:af: 5f:45:52:73:8a:a9:b2:a2:fc:7b:f4:4f:c5:a3:d8: f5:3c:9f:ae:a6:9a:82:c6:5a:72:cb:98:ff:15:a7: 0a:7b:82:79:7b:86:53:b0:cd:93:d5:6d:f0:46:18: b4:b0:d3:78:c8:ac:f8:a1:3a:c6:3e:ce:52:64:61: b5:0f:d3:ec:0b:2b:30:a7:39:a4:c7:14:76:4d:4e: e3:2d:7a:b3:8b:f0:bf:98:8b:70:6d:dc:f7:0e:7f: 3b:44:7f:e6:d2:90:a8:a8:da:38:5a:aa:a7:9e:d4: 80:b8:03:09:20:81:ce:77:2d:ee:76:4a:5d:f7:61: 0c:e1:70:f2:81:47:39:af:07:e2:8e:28:9e:9d:0a: 90:3c:cc:4d:96:e3:22:25:f1:8e:bd:9e:84:b8:eb: f2:66:61:4a:f1:dc:b4:4e:53:75:4f:09:43:b6:5a: 4e:5d:e8:ea:ce:fa:6b:e8:e1:c8:39:a6:89:ab:0b: 0f:12:dc:68:ca:89:df:54:76:0b:8d:ff:b8:0e:94: dc:7e:46:f8:64:5e:55:6a:64:d8:d7:1d:19:91:82: ba:2e:a4:52:a0:c4:67:17:77:24:17:e3:fa:9b:18: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:37:76:B0:D7:3F:5A:C1:D2:EE:7F:74:50:62:34:5C:F2:40:E2:5A X509v3 Authority Key Identifier: keyid:1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:01:e2:8a:e4:50:7a:b7:01:a7:3b:2c:3d:f7:f2:fd:0f:33: f0:6e:a1:e9:ea:ac:5c:c5:ee:1b:30:f6:22:2f:86:3c:9b:47: 80:3d:b6:b0:86:0b:1e:c2:99:f0:82:1c:8c:5e:86:e7:6e:97: f7:38:7e:5e:fb:9d:8a:51:d2:47:bc:1c:2d:75:91:d5:83:aa: 45:5c:49:28:8f:88:17:d6:5d:88:9f:8c:be:d7:8a:d6:66:9d: c8:a8:b0:1d:aa:68:2b:ba:71:74:f4:31:4e:8e:74:7b:26:9c: cf:da:16:98:da:9c:c8:e0:6c:ea:9d:45:73:48:54:45:a5:68: 5a:80:d0:bb:57:a5:e3:db:48:64:66:32:38:87:5c:c8:3b:a5: 9f:c2:62:a4:3b:a4:73:ea:32:1d:3f:93:7e:f0:a7:e9:65:41: ce:d2:12:77:61:ea:9d:2e:6a:5d:cc:c9:18:0b:c2:46:20:91: f9:c4:39:6f:d8:e0:1b:33:68:d8:5e:b2:92:f3:a9:30:0d:d9: f4:f3:6f:25:cb:eb:7d:69:6f:45:95:34:a9:ed:11:7d:8c:1e: 10:73:54:b8:b4:8c:d5:0d:d6:9e:0f:ff:f2:31:93:cf:7c:e0: 12:33:a7:8b:b0:56:4d:41:4b:ee:79:b0:b7:c2:f7:fb:88:fc: 46:86:e5:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QQ4xmRRu1XQ2oQM5Z1aKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOTUyZTg4MzczNmY3OWNiZDljNTY0NzA0YmYzYzM2NjIx YjhlY2EwHhcNMjUxMjA2MjAwMTEyWhcNMjUxMjA3MjAwMTEyWjAzMTEwLwYDVQQD EygyODM3NzZiMGQ3M2Y1YWMxZDJlZTdmNzQ1MDYyMzQ1Y2YyNDBlMjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcE7+F1A5E3TbVjzUWvL0Zhm8A1P EvEmb0hrmq9fRVJziqmyovx79E/Fo9j1PJ+uppqCxlpyy5j/FacKe4J5e4ZTsM2T 1W3wRhi0sNN4yKz4oTrGPs5SZGG1D9PsCyswpzmkxxR2TU7jLXqzi/C/mItwbdz3 Dn87RH/m0pCoqNo4WqqnntSAuAMJIIHOdy3udkpd92EM4XDygUc5rwfijiienQqQ PMxNluMiJfGOvZ6EuOvyZmFK8dy0TlN1TwlDtlpOXejqzvpr6OHIOaaJqwsPEtxo yonfVHYLjf+4DpTcfkb4ZF5VamTY1x0ZkYK6LqRSoMRnF3ckF+P6mxgA7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCg3drDXP1rB0u5/dFBiNFzyQOJaMB8GA1UdIwQY MBaAFB6VLog3NvecvZxWRwS/PDZiG47KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMTQwYWUtYzA0Ny00ZmY2LTg2NGYt MzU2MDM1NjU3MWE3LzEvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iMTQwYWUtYzA0Ny00ZmY2LTg2NGYtMzU2MDM1NjU3MWE3 LzEvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngHiiuRQ ercBpzssPffy/Q8z8G6h6eqsXMXuGzD2Ii+GPJtHgD22sIYLHsKZ8IIcjF6G526X 9zh+XvudilHSR7wcLXWR1YOqRVxJKI+IF9ZdiJ+MvteK1madyKiwHapoK7pxdPQx To50eyacz9oWmNqcyOBs6p1Fc0hURaVoWoDQu1el49tIZGYyOIdcyDuln8JipDuk c+oyHT+TfvCn6WVBztISd2HqnS5qXczJGAvCRiCR+cQ5b9jgGzNo2F6ykvOpMA3Z 9PNvJcvrfWlvRZU0qe0RfYweEHNUuLSM1Q3Wng//8jGTz3zgEjOni7BWTUFL7nmw t8L3+4j8RoblWQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:45 2025 by rpki-client