This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json) Hash identifier: ipddsnRu1WIi8ieo06zL/4KU6zC3vQO3uru4rhz6c2U= Subject key identifier: DF:26:82:F8:C1:9E:11:AB:C2:26:03:6D:D4:5D:75:6E:31:1A:99:B0 Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16 Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516 Certificate serial: 019AF49C3F507B00A975E880AE6E273CAB04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft Manifest number: 0C26 Signing time: Sat 06 Dec 2025 17:01:11 +0000 Manifest this update: Sat 06 Dec 2025 17:01:11 +0000 Manifest next update: Sun 07 Dec 2025 17:01:11 +0000 Files and hashes: 1: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: CIfGCE//EPARBC/bK5t1jsxJBv5dpyPRpjrzjj2SlWw=) 2: IGa7QfhbXaDsGCT9xJOI5gdu6yw.roa (hash: X0y8/lBS1BHPwzQ2lfqfjmgEWEXvXO2MftnVLJbE6FY=) 3: VwEoUNw-ez0MhDo9hKLki2sD7x8.roa (hash: hJNorU0BhP7KaHlsAZlKF465rhSAsAGROKIAje3NnsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:3f:50:7b:00:a9:75:e8:80:ae:6e:27:3c:ab:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516 Validity Not Before: Dec 6 17:01:11 2025 GMT Not After : Dec 7 17:01:11 2025 GMT Subject: CN=df2682f8c19e11abc226036dd45d756e311a99b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:96:8f:bd:a6:11:18:86:e9:25:79:3d:0e: 9d:3f:8c:d4:d2:76:ea:5e:25:3b:5b:6f:f5:87:44: 63:4b:76:70:d5:99:58:62:78:24:45:09:db:3e:1c: 03:f8:bc:73:eb:df:4c:50:f0:4b:bf:91:80:3e:0f: 3f:40:77:c3:a6:e7:a1:d8:03:fc:21:fc:9b:89:81: ad:d7:e3:18:4f:ce:e6:f0:95:84:ca:d3:a8:4e:02: e7:d8:47:0e:83:a1:63:c7:df:5f:4c:40:67:c2:c8: 52:f5:36:50:f2:e2:b4:74:f7:0b:25:1f:1f:af:db: 42:8e:f5:e4:2b:00:36:0f:84:67:12:5d:70:73:87: 61:d3:8e:a4:8b:dc:c2:61:6b:c0:56:57:c3:59:34: 95:73:91:7a:e1:08:f0:27:8c:61:0c:26:4c:e9:89: a3:ba:bb:a6:6c:29:f3:d8:92:3b:54:d2:2d:4a:9a: ef:e8:90:2b:a0:35:f5:d5:09:31:00:1d:7f:9b:4a: 5d:42:14:4d:05:60:89:fe:38:62:29:ca:bc:d6:e2: c0:90:49:8e:99:20:54:e8:6e:c3:28:41:28:cc:92: 3a:70:d2:b5:c9:fa:42:c1:48:8a:32:be:04:e4:b5: c6:95:2c:c1:da:93:0e:98:b3:67:03:bd:93:9b:17: fd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:26:82:F8:C1:9E:11:AB:C2:26:03:6D:D4:5D:75:6E:31:1A:99:B0 X509v3 Authority Key Identifier: keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c3:36:37:73:b1:69:8d:f5:e3:11:88:32:95:bf:d3:a7:1c: af:9f:a5:e8:5e:d9:d7:e6:d9:da:0b:30:d8:e6:58:04:37:4c: a2:4f:06:09:b0:d8:0c:29:e0:83:27:8c:99:6a:38:84:8d:ff: 60:91:3e:fe:c0:23:d2:62:c5:80:86:5d:0c:8f:fa:b7:6f:7c: a3:2e:9a:0c:1a:a7:1b:0c:b6:9f:d7:66:ef:71:3b:27:63:a9: 92:e3:53:43:99:fd:ab:1f:66:ed:0e:03:b1:57:ee:04:9f:c9: d3:b6:28:cc:8b:21:a6:1c:a9:ec:52:6b:36:89:ed:dc:91:f5: fc:47:a1:49:50:38:69:c1:ca:77:0e:b2:f8:a4:53:4e:31:c0: 8c:e3:0e:68:ec:9c:9f:b4:cd:29:8c:b8:40:74:79:8e:de:b7: 7c:01:b8:60:1e:0b:89:fb:97:d5:a1:7b:85:97:22:af:7c:b4: 8e:04:4d:2a:d5:46:e8:ba:ed:c4:e8:6e:22:0e:1d:3d:6b:0c: 5f:68:30:2f:88:08:fb:45:53:a8:6f:a7:e8:e2:94:1f:c9:28: ea:5e:ec:bd:62:3e:e2:5e:78:77:79:76:db:1c:5f:2c:d1:39: e0:44:40:bf:14:64:01:70:ef:25:60:c5:e7:e6:9f:36:63:d6: ca:59:12:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nD9QewCpdeiArm4nPKsEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlN2IyZTI0M2Y4YWE5NTQ1OTc5MzJiY2RjZDlhZjY1NjBk Y2U1MTYwHhcNMjUxMjA2MTcwMTExWhcNMjUxMjA3MTcwMTExWjAzMTEwLwYDVQQD EyhkZjI2ODJmOGMxOWUxMWFiYzIyNjAzNmRkNDVkNzU2ZTMxMWE5OWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQGWj72mERiG6SV5PQ6dP4zU0nbq XiU7W2/1h0RjS3Zw1ZlYYngkRQnbPhwD+Lxz699MUPBLv5GAPg8/QHfDpueh2AP8 IfybiYGt1+MYT87m8JWEytOoTgLn2EcOg6Fjx99fTEBnwshS9TZQ8uK0dPcLJR8f r9tCjvXkKwA2D4RnEl1wc4dh046ki9zCYWvAVlfDWTSVc5F64QjwJ4xhDCZM6Ymj urumbCnz2JI7VNItSprv6JAroDX11QkxAB1/m0pdQhRNBWCJ/jhiKcq81uLAkEmO mSBU6G7DKEEozJI6cNK1yfpCwUiKMr4E5LXGlSzB2pMOmLNnA72Tmxf9OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8mgvjBnhGrwiYDbdRddW4xGpmwMB8GA1UdIwQY MBaAFB57LiQ/iqlUWXkyvNzZr2Vg3OUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMt ZDU0OTU1NjQzY2Q5LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMtZDU0OTU1NjQzY2Q5 LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcM2N3Ox aY314xGIMpW/06ccr5+l6F7Z1+bZ2gsw2OZYBDdMok8GCbDYDCnggyeMmWo4hI3/ YJE+/sAj0mLFgIZdDI/6t298oy6aDBqnGwy2n9dm73E7J2OpkuNTQ5n9qx9m7Q4D sVfuBJ/J07YozIshphyp7FJrNont3JH1/EehSVA4acHKdw6y+KRTTjHAjOMOaOyc n7TNKYy4QHR5jt63fAG4YB4LifuX1aF7hZcir3y0jgRNKtVG6LrtxOhuIg4dPWsM X2gwL4gI+0VTqG+n6OKUH8ko6l7svWI+4l54d3l22xxfLNE54ERAvxRkAXDvJWDF 5+afNmPWylkSPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:21:08 2025 by rpki-client