This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft File: HUxgeKWUHFyxV9XylXyzFNftG-0.mft (raw, json) Hash identifier: ajPKOwtRDSxSb0C7FwyAdjYTMKx5e5yGIFz2vMs1Plc= Subject key identifier: 7D:89:40:69:8E:DD:F9:4E:79:C6:C7:1D:30:8F:E7:AE:83:98:F5:56 Authority key identifier: 1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED Certificate issuer: /CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed Certificate serial: 019AF1D23F623D51FA4EB96EB89E6E46182A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft Manifest number: 0B62 Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: HUxgeKWUHFyxV9XylXyzFNftG-0.crl (hash: nFXFjVVF40BDPjRhYu5zrecG7RLpKG7H17Fyv+9Tpwk=) 2: bS6FP0-RWfuMzsBRZquHdjUbynI.roa (hash: kkw9ceZnHPEpX3rLpD2wmL4u+vt4FdSYPPqT4A+84KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3f:62:3d:51:fa:4e:b9:6e:b8:9e:6e:46:18:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=7d8940698eddf94e79c6c71d308fe7ae8398f556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:f5:e2:4c:82:8a:54:7b:df:9c:f3:10:c0: 08:60:15:95:71:91:eb:d4:4e:b2:96:2c:70:e0:66: 2d:76:0b:fd:46:94:83:60:f7:53:ba:ae:b0:bf:51: 3e:2a:dc:4b:71:74:49:15:2b:96:e4:93:72:cf:42: 09:7a:f5:72:67:c8:38:02:e3:46:1a:d9:63:e5:92: 8d:b8:0f:b2:5d:d2:2d:0b:30:40:f1:31:4c:11:52: c3:cf:7f:02:29:ae:f2:0c:4b:ab:78:55:99:a5:83: 9b:4d:2b:46:ea:c9:86:21:f7:44:62:90:b4:02:01: 6a:77:84:2d:8a:e1:00:3a:08:2b:1a:a2:38:64:9c: eb:54:a6:ba:03:9f:b0:5e:cb:85:13:6e:b9:2a:47: 2a:30:1f:0e:d2:86:92:f4:10:39:f5:95:46:19:f0: e6:2b:9f:c2:7a:d8:76:61:91:be:a5:e6:f2:35:3d: cb:7d:61:58:61:43:9f:20:11:c7:35:4c:96:03:e3: 97:c5:5a:a7:3d:26:b8:97:0e:d1:c1:c1:eb:a8:41: dd:f3:a0:a7:e7:55:f9:65:30:3e:c8:6d:c1:f8:b2: 19:c1:d0:e6:7a:d3:68:65:45:f8:30:85:f6:c3:b1: 03:21:b4:a6:2d:2f:e7:e2:31:c1:db:e7:7d:fd:34: d2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:89:40:69:8E:DD:F9:4E:79:C6:C7:1D:30:8F:E7:AE:83:98:F5:56 X509v3 Authority Key Identifier: keyid:1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:d6:a9:58:d0:18:dc:2f:96:2a:c6:29:4c:5d:46:d7:57:e0: a9:96:cc:62:9b:a6:20:7e:a8:b2:fe:ba:d5:dc:48:3d:83:40: 25:f5:8b:97:ce:01:88:06:74:89:1b:84:aa:6a:55:ff:77:9b: 4c:d4:1e:f4:a4:f1:a9:d9:ad:ba:6d:03:86:7f:4c:1c:6b:00: dc:c0:39:b9:ce:cf:15:33:20:0c:3b:c7:c3:54:3f:4a:f4:9e: cc:51:05:fe:1d:94:6c:ae:b7:35:7e:20:34:74:60:e7:4d:f9: 5b:f4:50:a5:b1:a1:4c:20:c1:7e:96:a1:dd:79:7a:a5:11:83: 24:1d:af:8f:32:5d:9b:23:aa:11:99:23:53:e5:3c:0a:9c:9a: 3d:7a:2c:4e:d5:bd:48:3d:86:ca:80:60:d2:89:40:19:86:ff: e3:0e:e5:f1:9b:4c:7c:9c:16:24:42:d0:45:e4:a6:39:13:11: f8:71:d7:6f:1c:74:b1:ed:c5:f9:10:9d:7e:f3:37:81:eb:3b: 10:3c:88:b8:1e:9a:e0:65:8b:92:0a:e5:e9:c4:50:fe:42:ca: 55:fc:3e:0c:40:10:12:cd:93:3c:c6:93:aa:a6:e3:e7:30:7e: 12:1c:8c:db:8b:5a:4d:bc:e3:bd:ff:94:c4:2f:4c:36:1d:23: 73:67:06:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j9iPVH6TrluuJ5uRhgqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNGM2MDc4YTU5NDFjNWNiMTU3ZDVmMjk1N2NiMzE0ZDdl ZDFiZWQwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD Eyg3ZDg5NDA2OThlZGRmOTRlNzljNmM3MWQzMDhmZTdhZTgzOThmNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjf14kyCilR735zzEMAIYBWVcZHr 1E6ylixw4GYtdgv9RpSDYPdTuq6wv1E+KtxLcXRJFSuW5JNyz0IJevVyZ8g4AuNG Gtlj5ZKNuA+yXdItCzBA8TFMEVLDz38CKa7yDEureFWZpYObTStG6smGIfdEYpC0 AgFqd4QtiuEAOggrGqI4ZJzrVKa6A5+wXsuFE265KkcqMB8O0oaS9BA59ZVGGfDm K5/Ceth2YZG+pebyNT3LfWFYYUOfIBHHNUyWA+OXxVqnPSa4lw7RwcHrqEHd86Cn 51X5ZTA+yG3B+LIZwdDmetNoZUX4MIX2w7EDIbSmLS/n4jHB2+d9/TTS7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2JQGmO3flOecbHHTCP566DmPVWMB8GA1UdIwQY MBaAFB1MYHillBxcsVfV8pV8sxTX7RvtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFV4Z2VLV1VIRnl4VjlYeWxYeXpGTmZ0Ry0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zZWYzODYtMDU3MS00NjBlLTg5OTEt OTk2YTYyM2I2MzNlLzEvSFV4Z2VLV1VIRnl4VjlYeWxYeXpGTmZ0Ry0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8zZWYzODYtMDU3MS00NjBlLTg5OTEtOTk2YTYyM2I2MzNl LzEvSFV4Z2VLV1VIRnl4VjlYeWxYeXpGTmZ0Ry0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttapWNAY 3C+WKsYpTF1G11fgqZbMYpumIH6osv661dxIPYNAJfWLl84BiAZ0iRuEqmpV/3eb TNQe9KTxqdmtum0Dhn9MHGsA3MA5uc7PFTMgDDvHw1Q/SvSezFEF/h2UbK63NX4g NHRg5035W/RQpbGhTCDBfpah3Xl6pRGDJB2vjzJdmyOqEZkjU+U8CpyaPXosTtW9 SD2GyoBg0olAGYb/4w7l8ZtMfJwWJELQReSmORMR+HHXbxx0se3F+RCdfvM3ges7 EDyIuB6a4GWLkgrl6cRQ/kLKVfw+DEAQEs2TPMaTqqbj5zB+EhyM24taTbzjvf+U xC9MNh0jc2cGkg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:34:16 2025 by rpki-client