This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft File: Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft (raw, json) Hash identifier: kO6UKS2iiyZLOHj454TKf1fRqxqWBctdPEr9g4Qk+Xw= Subject key identifier: F4:FB:F0:02:B8:C0:94:EE:68:AA:3C:93:6B:6F:75:00:91:00:CC:AD Authority key identifier: 1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A Certificate issuer: /CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a Certificate serial: 019AF1D187A32736ED0584BF479B9DC5F565 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft Manifest number: 0599 Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl (hash: 4NYnt/4SohuW052+0lzqBvf+cj8LKHQVU4COYAwMxAs=) 2: dt7OMFAxYi9mfSy74b5_x7Lhpto.roa (hash: 4uikV6DgluHoEAMF2XeMMDlFi1mz2gwrijFHfMDuXc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:87:a3:27:36:ed:05:84:bf:47:9b:9d:c5:f5:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=f4fbf002b8c094ee68aa3c936b6f75009100ccad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:45:36:7e:7d:df:ac:c4:56:25:e5:02:87: 55:9d:32:e0:c1:07:29:ba:73:10:2f:49:7d:56:cf: 28:3e:f0:f2:2a:c6:4f:ca:e2:3c:9d:1c:a0:a9:52: 94:6a:ee:da:fa:8f:64:02:59:94:17:1e:14:63:7e: ed:cb:4a:91:d7:1d:4d:1f:33:00:2e:23:a3:0f:c5: 20:eb:bf:0b:a2:c3:20:af:ec:e0:c7:34:18:51:5d: 22:be:42:aa:fc:8e:2f:15:8f:c0:9b:34:b5:64:a1: 55:72:70:99:a1:e8:03:97:02:bd:68:93:7c:ec:33: e1:79:d3:c1:8c:85:40:b3:35:be:a1:20:eb:3d:bc: 0d:3b:ea:12:fe:a0:03:a2:bc:96:0e:bd:90:93:22: 04:6b:6e:6f:aa:af:d7:71:43:39:37:90:ee:c0:fd: 2e:43:eb:58:8e:92:ae:4e:55:89:d4:3a:d8:86:d6: 8b:94:aa:c7:da:7d:10:c0:f2:d1:48:4e:74:5f:6d: 2a:34:b0:12:69:5c:8f:dc:60:15:97:24:d2:c3:6a: 1e:1c:52:ee:d1:ca:92:52:92:ac:4f:50:2b:9f:90: 1e:32:4b:4d:a5:6f:10:ce:d6:0f:6a:90:6f:ad:ab: 4d:bd:eb:68:af:58:b1:e5:a1:db:7f:cc:29:d7:de: 39:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FB:F0:02:B8:C0:94:EE:68:AA:3C:93:6B:6F:75:00:91:00:CC:AD X509v3 Authority Key Identifier: keyid:1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:12:01:2f:fa:1a:1d:1d:f1:d0:8c:15:b9:bc:77:f5:77:97: f5:aa:b5:67:a9:0b:9b:0a:c6:1d:f6:cd:15:0d:d6:7e:c9:05: 88:58:93:61:35:a0:2c:5e:03:97:56:54:5d:ea:1c:13:05:ea: 96:47:71:a1:94:39:1c:84:f8:78:c9:db:41:95:0e:3e:e9:c6: 3d:43:98:e0:b0:6e:bb:bc:b4:27:60:e2:b3:58:74:9f:25:dc: f1:25:bc:03:a6:3f:f6:87:c0:ae:a9:bb:18:23:64:04:14:e1: 5d:db:21:8b:a0:e1:3e:60:9b:eb:64:2c:f3:bd:b5:e5:f8:fe: 36:ea:db:0a:9d:97:88:a8:74:52:14:c5:e1:a3:3d:b9:91:14: 7e:24:4b:55:eb:a6:92:72:42:3a:c3:79:b9:46:cb:5b:58:48: 94:cd:fc:b1:13:66:98:b9:c1:71:7e:c9:e3:96:12:c1:3e:c0: e4:bf:67:b1:71:f5:d4:28:6b:aa:06:9b:81:7f:41:e4:a4:a6: 35:14:a6:36:5e:0b:e2:6f:5f:4e:b9:3c:6f:c0:39:cf:1c:60: c2:30:d5:74:30:cd:a3:c4:59:41:aa:73:7a:47:cb:2c:c8:5e: 57:e0:34:80:c5:8a:d1:3b:10:24:4d:2e:f0:4f:70:7c:3d:fd: 92:37:66:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YejJzbtBYS/R5udxfVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWUzYzY0Y2FmZDllMjc1MzcwZDRmZDY0OTljM2M1ZDc1 MzljNGEwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD EyhmNGZiZjAwMmI4YzA5NGVlNjhhYTNjOTM2YjZmNzUwMDkxMDBjY2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYdFNn5936zEViXlAodVnTLgwQcp unMQL0l9Vs8oPvDyKsZPyuI8nRygqVKUau7a+o9kAlmUFx4UY37ty0qR1x1NHzMA LiOjD8Ug678LosMgr+zgxzQYUV0ivkKq/I4vFY/AmzS1ZKFVcnCZoegDlwK9aJN8 7DPhedPBjIVAszW+oSDrPbwNO+oS/qADoryWDr2QkyIEa25vqq/XcUM5N5DuwP0u Q+tYjpKuTlWJ1DrYhtaLlKrH2n0QwPLRSE50X20qNLASaVyP3GAVlyTSw2oeHFLu 0cqSUpKsT1Arn5AeMktNpW8QztYPapBvratNvetor1ix5aHbf8wp1945jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT78AK4wJTuaKo8k2tvdQCRAMytMB8GA1UdIwQY MBaAFB6ePGTK/Z4nU3DU/WSZw8XXU5xKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHA0OFpNcjluaWRUY05UOVpKbkR4ZGRUbkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80Nzg5OGEtNzY2Mi00YjExLWE4MGQt MmFhMTcwOTkyZjM3LzEvSHA0OFpNcjluaWRUY05UOVpKbkR4ZGRUbkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC80Nzg5OGEtNzY2Mi00YjExLWE4MGQtMmFhMTcwOTkyZjM3 LzEvSHA0OFpNcjluaWRUY05UOVpKbkR4ZGRUbkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRIBL/oa HR3x0IwVubx39XeX9aq1Z6kLmwrGHfbNFQ3WfskFiFiTYTWgLF4Dl1ZUXeocEwXq lkdxoZQ5HIT4eMnbQZUOPunGPUOY4LBuu7y0J2Dis1h0nyXc8SW8A6Y/9ofArqm7 GCNkBBThXdshi6DhPmCb62Qs87215fj+NurbCp2XiKh0UhTF4aM9uZEUfiRLVeum knJCOsN5uUbLW1hIlM38sRNmmLnBcX7J45YSwT7A5L9nsXH11ChrqgabgX9B5KSm NRSmNl4L4m9fTrk8b8A5zxxgwjDVdDDNo8RZQapzekfLLMheV+A0gMWK0TsQJE0u 8E9wfD39kjdmrg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:26 2025 by rpki-client