This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft File: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json) Hash identifier: /wZnHSkeXMuLCSViKnTvkE1qUewojRyAZYmvcsKJPhQ= Subject key identifier: E3:E2:09:9E:EF:DC:F8:F3:FB:15:AA:49:52:54:81:4E:5B:D4:92:97 Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA Certificate issuer: /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea Certificate serial: 019AF209787B12FC9475B7B83DFEDF39E4E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft Manifest number: 12F4 Signing time: Sat 06 Dec 2025 05:01:38 +0000 Manifest this update: Sat 06 Dec 2025 05:01:38 +0000 Manifest next update: Sun 07 Dec 2025 05:01:38 +0000 Files and hashes: 1: 414nKkHebTOgTqZ_q2PSfPTH6Dw.roa (hash: Iwsiv1vVrSzN0K3T7lWIZIu0VA5UnMuyCHwLiMjnve8=) 2: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: 7/zOnj/aAS6LZ9jUu56eOXdT8EPSj1B5e5xHVhII5j0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:78:7b:12:fc:94:75:b7:b8:3d:fe:df:39:e4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea Validity Not Before: Dec 6 05:01:38 2025 GMT Not After : Dec 7 05:01:38 2025 GMT Subject: CN=e3e2099eefdcf8f3fb15aa495254814e5bd49297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:83:47:31:a6:41:17:da:76:e9:c9:bc:de:3e: bb:cc:88:f5:10:0f:ce:46:cf:a6:9a:a9:a9:3e:9d: 47:a8:97:e2:de:8b:d8:c6:8e:b7:9b:e2:6a:0a:27: 44:fb:8f:e1:3c:74:d0:e9:b5:42:e0:d9:c2:7a:b8: c7:0f:e5:4d:13:a1:14:aa:ea:28:9f:b0:02:a0:72: ad:11:90:82:a9:da:74:cb:76:0f:7f:d4:cf:73:39: e4:d6:47:94:ba:86:9a:58:6d:f7:88:30:8d:e1:c0: 13:14:f6:6f:b8:8f:be:de:a9:4b:8b:ca:85:03:0b: af:11:9c:30:09:7e:62:6a:bb:8d:3f:89:32:74:3d: 97:f9:23:cd:6a:e3:af:83:cb:ee:7f:8b:c1:a5:7b: 1d:f2:b7:67:dd:f6:99:68:47:91:1a:18:65:6a:0e: e7:e5:a3:c5:d9:12:17:ba:e2:1d:73:06:43:ed:d3: 55:2b:7b:de:07:a1:54:8e:1a:11:bf:c1:b8:b2:9d: 3d:b4:e4:eb:75:63:e3:54:e2:74:c6:4e:ee:9d:95: f0:b5:fe:b1:73:8c:15:33:ee:00:aa:df:c8:90:87: 12:e5:4a:52:6f:aa:0f:de:51:78:cc:51:63:7c:c1: ea:ab:e3:03:09:85:6d:bf:26:dc:62:39:49:00:49: 77:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E2:09:9E:EF:DC:F8:F3:FB:15:AA:49:52:54:81:4E:5B:D4:92:97 X509v3 Authority Key Identifier: keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6a:e2:85:47:93:6e:c5:d6:da:bc:a5:47:b3:b4:76:ef:a3: a5:3b:90:e6:f8:79:7c:6f:e3:56:1e:15:4a:ab:39:05:fe:84: 7d:cd:56:ff:2a:c6:0a:83:fc:0f:de:93:9a:9a:45:86:da:18: 37:39:86:32:d7:ca:20:b4:bc:82:68:72:11:c0:62:a5:f5:60: be:55:e3:68:b4:42:f1:94:c5:1d:59:8b:f5:5c:17:12:96:fb: 6e:38:b2:f4:40:8a:8e:5f:5d:6d:cb:68:8b:51:03:b4:f1:79: 9d:ba:51:af:94:d6:aa:6b:77:c6:12:75:03:90:ef:e4:35:21: c5:8f:70:69:57:d4:e6:db:ef:3b:6d:69:b6:0e:17:eb:c1:e4: cc:a1:24:60:ad:b4:5a:36:a9:8d:71:11:0a:d8:83:54:82:8c: 48:e3:01:0a:77:81:19:b9:3e:20:c9:8b:ab:bf:0f:78:60:8a: 32:e6:ed:77:1f:d6:f0:27:fc:5b:3f:f9:63:e3:b6:24:d9:fb: df:82:fb:6d:a2:34:7d:6d:74:d2:1d:5a:68:23:46:7a:39:d8: e9:63:f6:aa:96:07:a0:52:99:32:75:cd:8c:d8:c2:3b:aa:16: 83:c6:33:70:89:60:56:b8:8e:84:e4:c8:45:c2:8e:1f:47:65: 27:ac:59:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXh7EvyUdbe4Pf7fOeToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZmIwODdmZmI3ZjYxY2UxMTNmNjkzNDVlNGQ1MGExMTM4 MDhmZWEwHhcNMjUxMjA2MDUwMTM4WhcNMjUxMjA3MDUwMTM4WjAzMTEwLwYDVQQD EyhlM2UyMDk5ZWVmZGNmOGYzZmIxNWFhNDk1MjU0ODE0ZTViZDQ5Mjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloNHMaZBF9p26cm83j67zIj1EA/O Rs+mmqmpPp1HqJfi3ovYxo63m+JqCidE+4/hPHTQ6bVC4NnCerjHD+VNE6EUquoo n7ACoHKtEZCCqdp0y3YPf9TPcznk1keUuoaaWG33iDCN4cATFPZvuI++3qlLi8qF AwuvEZwwCX5iaruNP4kydD2X+SPNauOvg8vuf4vBpXsd8rdn3faZaEeRGhhlag7n 5aPF2RIXuuIdcwZD7dNVK3veB6FUjhoRv8G4sp09tOTrdWPjVOJ0xk7unZXwtf6x c4wVM+4Aqt/IkIcS5UpSb6oP3lF4zFFjfMHqq+MDCYVtvybcYjlJAEl3/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPiCZ7v3Pjz+xWqSVJUgU5b1JKXMB8GA1UdIwQY MBaAFBz7CH/7f2HOET9pNF5NUKETgI/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZGQ1MWUtYmNhMS00ODkyLWI5N2Et NjlhYTUzYzY5ZDU0LzEvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9mZGQ1MWUtYmNhMS00ODkyLWI5N2EtNjlhYTUzYzY5ZDU0 LzEvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWrihUeT bsXW2rylR7O0du+jpTuQ5vh5fG/jVh4VSqs5Bf6Efc1W/yrGCoP8D96TmppFhtoY NzmGMtfKILS8gmhyEcBipfVgvlXjaLRC8ZTFHVmL9VwXEpb7bjiy9ECKjl9dbcto i1EDtPF5nbpRr5TWqmt3xhJ1A5Dv5DUhxY9waVfU5tvvO21ptg4X68HkzKEkYK20 WjapjXERCtiDVIKMSOMBCneBGbk+IMmLq78PeGCKMubtdx/W8Cf8Wz/5Y+O2JNn7 34L7baI0fW100h1aaCNGejnY6WP2qpYHoFKZMnXNjNjCO6oWg8YzcIlgVriOhOTI RcKOH0dlJ6xZ1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:31:39 2025 by rpki-client