This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft File: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json) Hash identifier: PrywejtPg0CauO2Kof0LaHVaGgVLCskwSwjCtnC+bxA= Subject key identifier: 1A:35:92:F4:89:0C:20:9E:FA:69:7F:FA:D3:06:F0:D6:67:FC:AF:91 Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA Certificate issuer: /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea Certificate serial: 019B2BF91F9701F954B69E0A5ACD394A73D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft Manifest number: 1312 Signing time: Wed 17 Dec 2025 11:01:45 +0000 Manifest this update: Wed 17 Dec 2025 11:01:45 +0000 Manifest next update: Thu 18 Dec 2025 11:01:45 +0000 Files and hashes: 1: 414nKkHebTOgTqZ_q2PSfPTH6Dw.roa (hash: Iwsiv1vVrSzN0K3T7lWIZIu0VA5UnMuyCHwLiMjnve8=) 2: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: Ht7bp9fl9OZqXO10Mqv3HKXw87nXRTIuZSFD2KJKP4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f9:1f:97:01:f9:54:b6:9e:0a:5a:cd:39:4a:73:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea Validity Not Before: Dec 17 11:01:45 2025 GMT Not After : Dec 18 11:01:45 2025 GMT Subject: CN=1a3592f4890c209efa697ffad306f0d667fcaf91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ef:a7:82:e5:68:a1:21:96:eb:29:dd:bf:3b: f5:4b:da:e4:5f:8b:e8:e4:ae:14:43:2d:1c:3e:38: 18:f5:d6:90:47:6b:42:73:54:93:7a:42:1f:76:98: ac:a3:aa:e4:44:08:64:6d:b7:91:50:79:81:8f:8e: 10:5e:85:de:84:a2:bf:5d:d0:94:3e:bb:19:a6:61: 1e:6d:3b:16:61:0e:42:c4:c7:be:d1:0e:aa:bd:f6: 73:d6:61:68:d2:a5:9f:96:ed:56:85:1d:cd:f5:f9: 2c:c2:78:f4:26:18:cf:6a:64:87:c8:bc:b1:0f:37: 7d:d5:dc:0e:2d:79:6e:ee:86:66:70:f4:42:69:40: eb:31:b4:93:30:d7:1a:4a:67:a0:7f:01:86:a3:93: 00:89:dc:fa:33:45:69:32:d2:1d:b7:b2:b1:c9:8d: 53:7d:a3:42:5b:5c:8a:3c:91:ee:78:18:b9:97:10: f2:a8:89:36:1a:99:0f:13:89:88:45:04:aa:bd:bb: a1:30:52:14:c9:99:22:c4:12:bc:bf:a9:7e:91:c4: ed:22:49:36:f5:37:86:47:ac:99:1a:50:82:94:f0: 2f:ad:a6:61:48:fc:cd:07:24:2a:1c:b3:88:5b:1b: 5d:5b:61:16:6b:63:d8:66:28:72:74:b1:ed:fa:c8: 28:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:35:92:F4:89:0C:20:9E:FA:69:7F:FA:D3:06:F0:D6:67:FC:AF:91 X509v3 Authority Key Identifier: keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:c3:35:f1:33:e3:38:9b:d5:79:1e:b0:ab:2e:0b:e2:4d:55: ab:98:68:00:2c:72:5d:dd:34:fc:43:0f:51:d3:71:67:97:c7: 2b:98:cc:27:05:d5:89:79:07:4a:f6:5b:56:a1:52:e7:33:b4: 35:9c:46:be:e5:6e:25:e0:63:2f:59:7d:f6:15:2e:9d:af:2c: fb:ae:33:a1:11:38:25:d5:b9:7d:66:de:d4:19:1a:4d:55:7d: cd:a3:86:0a:55:e2:36:a4:e4:4b:99:3f:e9:2e:2d:a3:a8:ff: 2d:9d:05:0e:0d:a8:02:2a:61:73:c3:8a:5b:84:e4:97:5d:e6: 17:5b:f8:89:b8:af:13:cd:44:61:f3:21:2b:a0:47:43:34:e0: 15:7d:54:ac:a0:07:7c:a9:1d:c0:bc:40:2e:28:5c:5c:af:8c: 87:6a:21:43:20:c9:e0:bb:b0:b3:f6:a8:6e:e0:27:39:a3:b5: 7c:8c:5a:ff:09:75:49:aa:40:e5:8d:52:e2:4d:8b:41:f4:2d: a1:e4:3b:61:e9:5a:fc:c0:35:2b:68:23:5e:80:9a:f0:f1:89: 66:66:a2:b8:f5:82:e6:57:e8:ce:6a:3f:63:0a:c7:7f:e9:d2: 45:11:23:af:d0:77:ce:15:00:cb:14:54:fc:0f:90:a9:13:cd: 95:50:0a:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+R+XAflUtp4KWs05SnPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZmIwODdmZmI3ZjYxY2UxMTNmNjkzNDVlNGQ1MGExMTM4 MDhmZWEwHhcNMjUxMjE3MTEwMTQ1WhcNMjUxMjE4MTEwMTQ1WjAzMTEwLwYDVQQD EygxYTM1OTJmNDg5MGMyMDllZmE2OTdmZmFkMzA2ZjBkNjY3ZmNhZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu+nguVooSGW6yndvzv1S9rkX4vo 5K4UQy0cPjgY9daQR2tCc1STekIfdpiso6rkRAhkbbeRUHmBj44QXoXehKK/XdCU PrsZpmEebTsWYQ5CxMe+0Q6qvfZz1mFo0qWflu1WhR3N9fkswnj0JhjPamSHyLyx Dzd91dwOLXlu7oZmcPRCaUDrMbSTMNcaSmegfwGGo5MAidz6M0VpMtIdt7KxyY1T faNCW1yKPJHueBi5lxDyqIk2GpkPE4mIRQSqvbuhMFIUyZkixBK8v6l+kcTtIkk2 9TeGR6yZGlCClPAvraZhSPzNByQqHLOIWxtdW2EWa2PYZihydLHt+sgoDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBo1kvSJDCCe+ml/+tMG8NZn/K+RMB8GA1UdIwQY MBaAFBz7CH/7f2HOET9pNF5NUKETgI/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZGQ1MWUtYmNhMS00ODkyLWI5N2Et NjlhYTUzYzY5ZDU0LzEvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9mZGQ1MWUtYmNhMS00ODkyLWI5N2EtNjlhYTUzYzY5ZDU0 LzEvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2sM18TPj OJvVeR6wqy4L4k1Vq5hoACxyXd00/EMPUdNxZ5fHK5jMJwXViXkHSvZbVqFS5zO0 NZxGvuVuJeBjL1l99hUuna8s+64zoRE4JdW5fWbe1BkaTVV9zaOGClXiNqTkS5k/ 6S4to6j/LZ0FDg2oAiphc8OKW4Tkl13mF1v4ibivE81EYfMhK6BHQzTgFX1UrKAH fKkdwLxALihcXK+Mh2ohQyDJ4Luws/aobuAnOaO1fIxa/wl1SapA5Y1S4k2LQfQt oeQ7Yela/MA1K2gjXoCa8PGJZmaiuPWC5lfozmo/YwrHf+nSRREjr9B3zhUAyxRU /A+QqRPNlVAKKA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:48:35 2025 by rpki-client