This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json) Hash identifier: d2kLcIHsBggXxO3GeuY93QJqsCok7bB5Rsn84hGfuE8= Subject key identifier: 46:36:56:C3:8C:AA:F8:C4:D7:E0:14:DC:C7:70:0F:5D:45:C3:5D:C0 Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9 Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9 Certificate serial: 019AF3F7A84D84577A74454676E5ACCDD523 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft Manifest number: 1712 Signing time: Sat 06 Dec 2025 14:01:25 +0000 Manifest this update: Sat 06 Dec 2025 14:01:25 +0000 Manifest next update: Sun 07 Dec 2025 14:01:25 +0000 Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: gZQQ1ZJqOOLZ6Cu+fCgbPLEqxOB0By6M5IqSDC0Fbtc=) 2: PqAYbce5ZFtorWDJm1IoXprDpjE.roa (hash: tbDVPuUEiQGmvMdLsr4Uj3a9EoVRDD7cfOnaPg9V/Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:a8:4d:84:57:7a:74:45:46:76:e5:ac:cd:d5:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9 Validity Not Before: Dec 6 14:01:25 2025 GMT Not After : Dec 7 14:01:25 2025 GMT Subject: CN=463656c38caaf8c4d7e014dcc7700f5d45c35dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:7b:df:d6:46:c4:3d:78:7f:15:f7:fb:93: a8:5e:c3:a7:8d:31:a8:66:85:5a:82:00:e7:e1:2c: 76:26:46:c0:55:b9:5b:6b:62:6b:69:3c:16:31:71: 94:6c:3f:71:1e:6a:27:c0:e8:04:f2:97:7c:a6:12: 29:43:b9:7d:a9:d2:0b:6b:7c:f3:6c:a1:1a:a7:b1: 58:c5:cd:33:41:f2:d0:5f:c0:d8:98:6b:d6:ed:59: bf:73:51:08:07:1d:c2:d5:d1:0f:00:b6:5a:2a:39: 6f:45:d8:cb:4a:c1:8d:f1:ed:c9:87:11:55:b6:a8: 99:a4:53:d4:93:da:47:c3:0d:a6:7b:f0:4f:b3:49: 06:39:b7:cc:e3:a5:93:2f:3d:04:7d:40:8d:1e:12: ba:c8:11:30:35:5d:fd:58:1b:8f:81:64:ec:52:ce: aa:26:c1:24:8a:d0:f2:d8:dc:14:a3:84:e8:98:f0: 7f:61:f1:64:95:a6:e7:ce:08:cf:d6:44:1c:2e:d3: 0a:1b:db:0f:b0:8f:59:eb:c3:b8:37:5c:76:f9:6e: 5a:38:6d:2d:37:f1:95:5c:29:4a:25:a3:32:53:8b: 12:4d:ba:39:b3:f6:b2:6d:81:3d:bc:d5:fa:f3:c8: 0f:c1:9e:d5:fd:7f:d5:a4:1e:f4:49:f5:6b:f8:70: 40:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:36:56:C3:8C:AA:F8:C4:D7:E0:14:DC:C7:70:0F:5D:45:C3:5D:C0 X509v3 Authority Key Identifier: keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:97:a2:56:45:9c:bf:1f:1f:f1:a1:78:f3:1a:63:b6:10:6e: ab:5a:8e:de:6e:d1:b7:6d:08:f2:74:ee:08:1f:c1:b3:77:b7: 88:d6:a1:1b:51:3d:7c:08:28:06:ad:14:1e:fc:c7:b5:38:c7: 57:c7:c1:5e:e3:bb:f5:ef:ac:e8:27:33:b4:bf:04:e5:36:cb: 84:64:f1:1f:6d:34:45:86:03:d1:06:ba:0b:01:63:ed:97:ef: 82:cb:52:8a:ba:7d:65:72:f4:28:5e:7d:4f:d4:c5:41:60:10: f4:b2:22:e7:a7:8d:44:52:d4:56:57:af:2e:4f:55:df:96:d1: 98:71:3f:ee:08:de:eb:23:64:c8:4d:4f:31:44:bd:41:d2:9f: 14:55:e5:4c:37:7c:d1:75:ca:7a:17:b5:51:6b:86:c2:fd:3a: 3b:83:c6:2e:ae:0b:c9:a0:58:2b:78:db:e0:81:71:c8:49:53: f3:f7:45:fd:28:c4:f0:b5:6a:38:31:64:82:28:ff:02:d4:3d: 69:2f:20:86:8a:9e:87:2a:54:df:d4:78:28:e9:e8:ae:aa:9e: ae:30:de:50:f4:e1:fb:db:8c:14:41:4c:28:f1:48:ef:e8:0c: 29:4d:37:0d:ee:f6:6a:9f:3b:f4:1c:e0:08:dd:d0:5f:e5:bf: ef:aa:6a:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz96hNhFd6dEVGduWszdUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNGU5NTkyMDBhZWE4ZmI5MjkxNThiNzNlOGMwZTY5YTg4 ZGM1ZTkwHhcNMjUxMjA2MTQwMTI1WhcNMjUxMjA3MTQwMTI1WjAzMTEwLwYDVQQD Eyg0NjM2NTZjMzhjYWFmOGM0ZDdlMDE0ZGNjNzcwMGY1ZDQ1YzM1ZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nh739ZGxD14fxX3+5OoXsOnjTGo ZoVaggDn4Sx2JkbAVblba2JraTwWMXGUbD9xHmonwOgE8pd8phIpQ7l9qdILa3zz bKEap7FYxc0zQfLQX8DYmGvW7Vm/c1EIBx3C1dEPALZaKjlvRdjLSsGN8e3JhxFV tqiZpFPUk9pHww2me/BPs0kGObfM46WTLz0EfUCNHhK6yBEwNV39WBuPgWTsUs6q JsEkitDy2NwUo4TomPB/YfFklabnzgjP1kQcLtMKG9sPsI9Z68O4N1x2+W5aOG0t N/GVXClKJaMyU4sSTbo5s/aybYE9vNX688gPwZ7V/X/VpB70SfVr+HBA1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEY2VsOMqvjE1+AU3MdwD11Fw13AMB8GA1UdIwQY MBaAFB1OlZIArqj7kpFYtz6MDmmojcXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEt MmI1MzZjZjdiODI1LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEtMmI1MzZjZjdiODI1 LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJeiVkWc vx8f8aF48xpjthBuq1qO3m7Rt20I8nTuCB/Bs3e3iNahG1E9fAgoBq0UHvzHtTjH V8fBXuO79e+s6CcztL8E5TbLhGTxH200RYYD0Qa6CwFj7ZfvgstSirp9ZXL0KF59 T9TFQWAQ9LIi56eNRFLUVlevLk9V35bRmHE/7gje6yNkyE1PMUS9QdKfFFXlTDd8 0XXKehe1UWuGwv06O4PGLq4LyaBYK3jb4IFxyElT8/dF/SjE8LVqODFkgij/AtQ9 aS8ghoqehypU39R4KOnorqqerjDeUPTh+9uMFEFMKPFI7+gMKU03De72ap879Bzg CN3QX+W/76pqhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:35 2025 by rpki-client