This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft File: Hms-F_m50MMT0FMCNCUnWydF_IM.mft (raw, json) Hash identifier: NusRfzw2xYklK6d/s6v90+PNmZB/vWhyaj/U+PHfNUk= Subject key identifier: D1:28:9A:73:75:10:78:0B:69:19:97:71:E1:B9:28:D5:90:D2:F7:A3 Authority key identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83 Certificate issuer: /CN=1e6b3e17f9b9d0c313d053023425275b2745fc83 Certificate serial: 019AF1642CD3BC777CAA44B3C66E9B09BA8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: Hms-F_m50MMT0FMCNCUnWydF_IM.crl (hash: Z/eF6R95KUPWjrsA8/UphG90CaWy5Ie543tzJBc//dg=) 2: UdTz9ESnCBONhFhPnKTJSPAPKew.roa (hash: 0eKPRYHWi1Fk+s60KVEthvqfye7EFF2oFsVLARt647E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2c:d3:bc:77:7c:aa:44:b3:c6:6e:9b:09:ba:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e6b3e17f9b9d0c313d053023425275b2745fc83 Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=d1289a737510780b69199771e1b928d590d2f7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:3c:30:f1:c9:1e:f7:2d:7e:26:f6:cc:ed: 33:14:f9:b4:23:3c:ad:52:ef:39:32:e3:77:4f:83: ef:5c:85:93:f9:d3:bc:8b:f5:62:18:ac:7b:fb:2e: 23:07:46:7d:8e:6a:ae:f5:81:2e:cc:40:2b:6b:cc: 1c:da:95:35:6b:d0:37:ca:ff:ab:08:c0:5f:d9:6a: ee:84:dd:f8:79:53:32:09:0b:8d:41:db:db:1d:19: db:03:38:60:0e:f0:c2:5a:68:e7:91:5a:ac:2e:44: b5:12:ee:af:ac:51:c4:e2:e8:f3:ad:f3:be:75:6f: 8a:eb:78:2c:e8:8c:10:f6:da:23:56:0c:19:11:e4: 79:89:75:53:2d:58:5d:2a:19:f9:d4:48:86:6c:10: a4:2a:eb:e0:df:c6:ad:ae:cc:60:05:2c:98:30:3c: bb:44:8d:4b:da:a4:f4:00:6f:fb:58:cb:fd:79:05: 3d:eb:f0:e5:6e:6b:16:4f:78:41:69:80:49:a5:e4: 86:21:34:54:05:40:26:90:ba:70:19:89:03:eb:bf: 5e:a6:86:b8:4f:6f:aa:04:58:22:3d:0c:f1:59:43: 87:4c:24:3b:59:24:6b:e9:f9:6f:cb:d7:d4:36:a9: 77:61:14:5b:f2:61:84:59:6d:37:f0:3f:bf:96:4c: 9d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:28:9A:73:75:10:78:0B:69:19:97:71:E1:B9:28:D5:90:D2:F7:A3 X509v3 Authority Key Identifier: keyid:1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a4:8c:f4:db:17:24:e7:fa:4a:1c:ea:e5:ad:e7:ba:79:40: 98:5f:27:b7:19:03:78:0e:3f:91:85:a0:2b:1c:23:22:15:22: a6:e6:fc:1c:38:6c:74:af:19:ef:86:b0:c6:84:18:1e:cf:bc: 6f:06:7e:95:b8:1b:d7:62:80:c7:fd:48:0a:e4:a4:4f:c2:13: 79:aa:22:3b:a7:a6:02:13:0e:5d:8e:73:b9:5e:dc:b2:01:ab: 68:f2:65:42:bd:bf:e1:a1:2e:6e:e6:26:af:9a:7f:33:60:ba: 38:3b:ff:af:e0:96:cd:f9:0f:2b:47:4a:82:f2:25:dd:46:58: 59:f6:15:78:12:88:80:a5:ed:a0:2a:60:24:d5:ba:ca:67:95: 29:cb:39:24:cf:4f:f1:fa:ec:6b:28:d5:c4:e1:ba:b2:6d:54: f5:bd:f7:b7:91:d6:d0:64:f6:c3:f9:a6:77:ac:41:7b:9d:9b: 89:8f:c7:dd:e0:7f:ce:48:74:92:89:f0:01:27:1c:4f:4b:bb: f4:80:cc:83:59:42:ef:7e:2a:25:1d:a9:84:2c:e3:38:9c:8f: 63:1c:c9:db:5d:81:33:c9:82:ea:80:66:2b:9b:11:a5:bf:76: 8a:ca:ad:9e:5d:2d:fb:52:e6:38:4c:96:e5:fa:af:72:ab:67: 2e:03:59:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCzTvHd8qkSzxm6bCbqLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNmIzZTE3ZjliOWQwYzMxM2QwNTMwMjM0MjUyNzViMjc0 NWZjODMwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD EyhkMTI4OWE3Mzc1MTA3ODBiNjkxOTk3NzFlMWI5MjhkNTkwZDJmN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5o8MPHJHvctfib2zO0zFPm0Izyt Uu85MuN3T4PvXIWT+dO8i/ViGKx7+y4jB0Z9jmqu9YEuzEAra8wc2pU1a9A3yv+r CMBf2WruhN34eVMyCQuNQdvbHRnbAzhgDvDCWmjnkVqsLkS1Eu6vrFHE4ujzrfO+ dW+K63gs6IwQ9tojVgwZEeR5iXVTLVhdKhn51EiGbBCkKuvg38atrsxgBSyYMDy7 RI1L2qT0AG/7WMv9eQU96/DlbmsWT3hBaYBJpeSGITRUBUAmkLpwGYkD679epoa4 T2+qBFgiPQzxWUOHTCQ7WSRr6flvy9fUNql3YRRb8mGEWW038D+/lkydywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEomnN1EHgLaRmXceG5KNWQ0vejMB8GA1UdIwQY MBaAFB5rPhf5udDDE9BTAjQlJ1snRfyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG1zLUZfbTUwTU1UMEZNQ05DVW5XeWRGX0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81NmQyMDAtNDE2ZC00NDMwLTg1Yzgt ODdkM2UxODFlNTk0LzEvSG1zLUZfbTUwTU1UMEZNQ05DVW5XeWRGX0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81NmQyMDAtNDE2ZC00NDMwLTg1YzgtODdkM2UxODFlNTk0 LzEvSG1zLUZfbTUwTU1UMEZNQ05DVW5XeWRGX0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqSM9NsX JOf6Shzq5a3nunlAmF8ntxkDeA4/kYWgKxwjIhUipub8HDhsdK8Z74awxoQYHs+8 bwZ+lbgb12KAx/1ICuSkT8ITeaoiO6emAhMOXY5zuV7csgGraPJlQr2/4aEubuYm r5p/M2C6ODv/r+CWzfkPK0dKgvIl3UZYWfYVeBKIgKXtoCpgJNW6ymeVKcs5JM9P 8frsayjVxOG6sm1U9b33t5HW0GT2w/mmd6xBe52biY/H3eB/zkh0konwASccT0u7 9IDMg1lC734qJR2phCzjOJyPYxzJ212BM8mC6oBmK5sRpb92isqtnl0t+1LmOEyW 5fqvcqtnLgNZ3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:46 2025 by rpki-client