This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft File: hiuiH8_MNMnZtafGCBWF4KDucK4.mft (raw, json) Hash identifier: qC8Ra0/EdFm+uCIa0rI0ryRLJ7oROg/mpGfBDrsjp2w= Subject key identifier: 1C:44:29:03:4E:D2:0D:97:31:C6:A0:01:0D:58:AE:18:1C:80:6A:90 Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE Certificate issuer: /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae Certificate serial: 019AF24017001ED121452C21019F55EBC11D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft Manifest number: 085B Signing time: Sat 06 Dec 2025 06:01:17 +0000 Manifest this update: Sat 06 Dec 2025 06:01:17 +0000 Manifest next update: Sun 07 Dec 2025 06:01:17 +0000 Files and hashes: 1: hiuiH8_MNMnZtafGCBWF4KDucK4.crl (hash: LLN0qwF7kx++cG4zihbaTxaCr4d5bQDHM42e5wuSFoY=) 2: iVxulShReTYBVaVMHOSAPgJMX4w.roa (hash: K1U4ekJDUmOT/6sNVV1rdRQsFS3D9+kf/By0ijYc4Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:17:00:1e:d1:21:45:2c:21:01:9f:55:eb:c1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae Validity Not Before: Dec 6 06:01:17 2025 GMT Not After : Dec 7 06:01:17 2025 GMT Subject: CN=1c4429034ed20d9731c6a0010d58ae181c806a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:12:b6:51:5c:1e:ba:bf:e2:83:da:71:33:57: ec:67:8f:2c:da:a7:f0:d6:de:07:6c:4d:a4:22:be: 64:0a:12:f6:4f:21:94:9f:ca:dc:67:c2:28:53:dd: 2f:32:52:35:2e:88:9a:d4:32:3c:83:91:16:4a:0e: be:ed:b5:bd:4f:ce:78:3a:29:21:ab:bb:a2:89:93: 72:74:e9:b9:05:f8:60:5b:d3:f4:78:b6:13:10:ce: ba:bf:b5:c6:d3:fa:f8:48:80:40:85:c8:ad:b5:95: af:95:f4:eb:f3:0c:f6:83:d9:71:cb:70:7f:72:c8: 6b:63:20:10:7a:92:f4:15:01:2a:84:26:7d:7f:24: da:4e:84:a7:8c:c2:8d:21:85:58:84:04:d3:bc:cc: c6:74:e4:2e:df:c2:0e:8d:05:01:76:fc:38:97:8c: 52:2b:c3:26:4b:7c:97:96:64:54:7b:02:46:b2:59: 9e:30:43:10:f5:e4:a7:8c:08:d2:5f:04:cb:13:49: 0f:be:e2:53:9e:89:18:f9:ca:be:e6:11:42:43:83: 37:cf:aa:47:69:09:9d:36:f5:1a:2c:72:55:63:10: 72:1a:17:3f:be:13:0f:fb:00:f7:f9:b2:5c:71:0f: e2:2d:fb:2d:40:10:e7:db:1d:d6:1b:f2:40:b2:f7: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:44:29:03:4E:D2:0D:97:31:C6:A0:01:0D:58:AE:18:1C:80:6A:90 X509v3 Authority Key Identifier: keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:61:1c:32:a8:a7:1c:e8:1f:3f:ba:3d:7a:2b:3c:e5:0a:ef: c2:f1:d6:61:85:ac:4d:47:1a:4a:37:f9:a9:28:be:a0:c3:bd: a3:f8:11:b5:6c:6e:25:b9:9a:26:81:2e:47:12:16:f1:9f:4f: dc:76:e4:49:85:be:16:70:b7:04:4f:d7:49:cb:b3:21:4f:c4: 9f:9f:9f:00:af:6e:fe:1d:83:bb:aa:55:d8:6b:84:78:1f:5d: 71:24:09:60:18:7d:6e:c2:fb:47:8a:48:e5:11:14:41:d4:07: 6d:7e:d4:6e:46:42:a4:14:c0:af:b2:f6:15:d7:c7:93:97:63: a6:b2:2f:6d:41:2b:5b:a8:ed:6e:d4:54:c0:6d:d2:6a:88:e0: 87:08:78:2f:30:ec:05:84:b4:d8:3f:3b:b5:a3:e5:cd:2d:5a: ac:cb:6d:c8:99:71:db:c8:46:1a:d9:19:57:e0:87:a3:92:ea: be:12:11:50:9f:49:5a:9c:3a:6f:8a:1b:e5:21:16:c0:d3:03: 21:2c:c0:fa:96:8f:88:05:fa:c7:e3:78:04:dc:45:b1:0f:f4: 54:62:ef:cd:1f:dc:82:9b:7f:ad:1c:d4:e9:6c:35:30:6f:32: 99:60:de:9b:73:0b:50:14:05:6d:16:41:30:33:75:c6:f5:5d: bf:99:6f:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBcAHtEhRSwhAZ9V68EdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MmJhMjFmY2ZjYzM0YzlkOWI1YTdjNjA4MTU4NWUwYTBl ZTcwYWUwHhcNMjUxMjA2MDYwMTE3WhcNMjUxMjA3MDYwMTE3WjAzMTEwLwYDVQQD EygxYzQ0MjkwMzRlZDIwZDk3MzFjNmEwMDEwZDU4YWUxODFjODA2YTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hK2UVweur/ig9pxM1fsZ48s2qfw 1t4HbE2kIr5kChL2TyGUn8rcZ8IoU90vMlI1Loia1DI8g5EWSg6+7bW9T854Oikh q7uiiZNydOm5BfhgW9P0eLYTEM66v7XG0/r4SIBAhcittZWvlfTr8wz2g9lxy3B/ cshrYyAQepL0FQEqhCZ9fyTaToSnjMKNIYVYhATTvMzGdOQu38IOjQUBdvw4l4xS K8MmS3yXlmRUewJGslmeMEMQ9eSnjAjSXwTLE0kPvuJTnokY+cq+5hFCQ4M3z6pH aQmdNvUaLHJVYxByGhc/vhMP+wD3+bJccQ/iLfstQBDn2x3WG/JAsveqWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxEKQNO0g2XMcagAQ1YrhgcgGqQMB8GA1UdIwQY MBaAFIYroh/PzDTJ2bWnxggVheCg7nCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGl1aUg4X01OTW5adGFmR0NCV0Y0S0R1Y0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80NzVlNmYtODlhNS00M2U4LTgzYjkt NDk1YTk1OWIxNmU3LzEvaGl1aUg4X01OTW5adGFmR0NCV0Y0S0R1Y0s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni80NzVlNmYtODlhNS00M2U4LTgzYjktNDk1YTk1OWIxNmU3 LzEvaGl1aUg4X01OTW5adGFmR0NCV0Y0S0R1Y0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGEcMqin HOgfP7o9eis85QrvwvHWYYWsTUcaSjf5qSi+oMO9o/gRtWxuJbmaJoEuRxIW8Z9P 3HbkSYW+FnC3BE/XScuzIU/En5+fAK9u/h2Du6pV2GuEeB9dcSQJYBh9bsL7R4pI 5REUQdQHbX7UbkZCpBTAr7L2FdfHk5djprIvbUErW6jtbtRUwG3Saojghwh4LzDs BYS02D87taPlzS1arMttyJlx28hGGtkZV+CHo5LqvhIRUJ9JWpw6b4ob5SEWwNMD ISzA+paPiAX6x+N4BNxFsQ/0VGLvzR/cgpt/rRzU6Ww1MG8ymWDem3MLUBQFbRZB MDN1xvVdv5lvIw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:32 2025 by rpki-client