This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft File: hu-0nfJHSmBCufIQv-qGGxsohu0.mft (raw, json) Hash identifier: i1x+gmzjuTjeqB+t5PCvvVqLzfg1JQgUZ6CISc+1VuY= Subject key identifier: 2D:E5:50:A1:52:8B:93:C0:DE:E9:1A:B0:DA:D5:F5:EF:7F:46:4C:84 Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed Certificate serial: 019AF68A120CEE492A0E1CD9FAD66A0F202D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft Manifest number: 0DDE Signing time: Sun 07 Dec 2025 02:00:34 +0000 Manifest this update: Sun 07 Dec 2025 02:00:34 +0000 Manifest next update: Mon 08 Dec 2025 02:00:34 +0000 Files and hashes: 1: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (hash: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=) 2: aM3cc5239WAy4buFXqwE6avsPpA.roa (hash: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=) 3: hu-0nfJHSmBCufIQv-qGGxsohu0.crl (hash: 1NoudkBLRraf9nw/EFUFhDrExh9f82+L6gD3j2P9xL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:12:0c:ee:49:2a:0e:1c:d9:fa:d6:6a:0f:20:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed Validity Not Before: Dec 7 02:00:34 2025 GMT Not After : Dec 8 02:00:34 2025 GMT Subject: CN=2de550a1528b93c0dee91ab0dad5f5ef7f464c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:90:5c:19:82:ed:1f:0b:a6:48:87:37:4f: 26:2f:5e:e9:52:67:e8:c3:c6:e2:62:2a:49:35:c1: a1:2b:38:03:b0:46:23:ab:99:59:24:eb:92:3b:41: 30:5c:58:fa:50:30:61:0e:fb:86:78:44:b9:7d:cd: 41:db:96:35:05:a8:70:3a:81:06:41:9d:47:57:05: d7:b8:83:60:7e:1a:ee:1c:99:70:64:52:07:11:2b: 8d:01:88:50:b7:89:60:5e:3d:70:45:94:3d:35:dd: 00:cf:29:26:67:ac:ad:c7:46:24:23:fa:6d:b4:9d: 56:a2:5a:01:ca:0b:36:15:54:1a:2b:0e:97:b2:f7: ff:8d:32:93:2f:7f:c9:1f:d5:01:2e:12:0a:47:f7: 62:17:f9:de:ba:ab:b3:c6:3c:b2:60:28:c7:74:38: 1b:aa:9d:ae:a0:30:7e:ba:fb:7b:a5:9b:92:c6:d3: a6:87:0c:d6:93:26:93:e7:f9:c8:82:19:1a:bd:df: de:14:74:59:42:c6:59:89:b7:7a:d4:e1:18:44:e1: d9:9f:b7:52:0d:9b:90:db:67:9e:8b:94:e4:32:de: 1b:90:37:bc:cb:32:08:1f:d8:59:f9:ee:28:b9:e2: 78:5f:aa:19:5d:9b:d5:61:44:81:10:d7:13:0d:8d: 8c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E5:50:A1:52:8B:93:C0:DE:E9:1A:B0:DA:D5:F5:EF:7F:46:4C:84 X509v3 Authority Key Identifier: keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:5b:6a:89:a5:29:03:aa:e7:7c:26:14:a3:20:8e:ec:ad:6d: e2:15:d5:e0:e7:62:8e:b3:52:18:b1:48:62:94:9b:9b:dc:f0: fc:cf:b2:23:34:01:eb:fe:e9:08:26:9c:bb:d0:c9:6e:55:98: 50:3c:3d:87:d7:ec:80:9e:f0:71:91:0c:3c:76:b3:db:e4:63: 19:00:9d:50:c6:3b:1a:01:6f:03:a5:5a:6a:6d:44:2b:84:5b: 3d:7c:7c:e6:57:c1:93:9c:7a:49:c9:80:8f:a3:bd:ad:39:40: 4b:23:6c:1e:16:72:56:96:87:02:33:b8:7f:d4:0f:23:1a:ea: a2:9a:53:dd:5e:dd:a2:f4:eb:41:cc:ed:be:bb:b4:11:d4:6b: c0:1b:18:f8:08:41:13:15:bb:3e:52:40:21:16:bd:48:26:9a: 71:70:e0:c1:ec:d9:a7:90:5d:13:a4:5c:43:36:03:8e:00:a1: 06:16:bc:f7:cb:0f:3d:fd:ce:b9:52:a4:66:56:6d:90:3b:8a: df:70:de:45:01:3f:f7:af:01:5f:47:22:a9:d3:88:83:8d:6e: 68:6b:9a:49:58:2d:b3:68:75:50:5a:6e:80:a9:a1:7f:e6:34: 84:d3:f8:be:8d:c3:e3:2d:2f:1d:38:b1:78:8b:9a:94:45:ec: 78:fd:3a:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ihIM7kkqDhzZ+tZqDyAtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZWZiNDlkZjI0NzRhNjA0MmI5ZjIxMGJmZWE4NjFiMWIy ODg2ZWQwHhcNMjUxMjA3MDIwMDM0WhcNMjUxMjA4MDIwMDM0WjAzMTEwLwYDVQQD EygyZGU1NTBhMTUyOGI5M2MwZGVlOTFhYjBkYWQ1ZjVlZjdmNDY0Yzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQCQXBmC7R8LpkiHN08mL17pUmfo w8biYipJNcGhKzgDsEYjq5lZJOuSO0EwXFj6UDBhDvuGeES5fc1B25Y1BahwOoEG QZ1HVwXXuINgfhruHJlwZFIHESuNAYhQt4lgXj1wRZQ9Nd0AzykmZ6ytx0YkI/pt tJ1WoloBygs2FVQaKw6Xsvf/jTKTL3/JH9UBLhIKR/diF/neuquzxjyyYCjHdDgb qp2uoDB+uvt7pZuSxtOmhwzWkyaT5/nIghkavd/eFHRZQsZZibd61OEYROHZn7dS DZuQ22eei5TkMt4bkDe8yzIIH9hZ+e4oueJ4X6oZXZvVYUSBENcTDY2MGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3lUKFSi5PA3ukasNrV9e9/RkyEMB8GA1UdIwQY MBaAFIbvtJ3yR0pgQrnyEL/qhhsbKIbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5Yjgt OTViMjcxZjJlMjBiLzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5YjgtOTViMjcxZjJlMjBi LzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVtqiaUp A6rnfCYUoyCO7K1t4hXV4OdijrNSGLFIYpSbm9zw/M+yIzQB6/7pCCacu9DJblWY UDw9h9fsgJ7wcZEMPHaz2+RjGQCdUMY7GgFvA6Vaam1EK4RbPXx85lfBk5x6ScmA j6O9rTlASyNsHhZyVpaHAjO4f9QPIxrqoppT3V7dovTrQcztvru0EdRrwBsY+AhB ExW7PlJAIRa9SCaacXDgwezZp5BdE6RcQzYDjgChBha898sPPf3OuVKkZlZtkDuK 33DeRQE/968BX0ciqdOIg41uaGuaSVgts2h1UFpugKmhf+Y0hNP4vo3D4y0vHTix eIualEXseP06Bw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:32:02 2025 by rpki-client