This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft File: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft (raw, json) Hash identifier: z6hFAJgC9PaLMxcd8eGnbnzYa0i4oCdN709iDhVY6k0= Subject key identifier: 9A:38:D2:83:3C:E1:0D:88:95:A2:AE:DF:9B:15:12:79:C0:5E:AE:DE Authority key identifier: F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A Certificate issuer: /CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a Certificate serial: 019AF27698702C51EB285F930A149AAD75BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft Manifest number: 1517 Signing time: Sat 06 Dec 2025 07:00:49 +0000 Manifest this update: Sat 06 Dec 2025 07:00:49 +0000 Manifest next update: Sun 07 Dec 2025 07:00:49 +0000 Files and hashes: 1: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl (hash: 38D0p4JrvJf5DJNKgSesgY62Xy9hVjfjbsQtLTvCV1c=) 2: IPJ2H-DbyJS39-MqiGd6rorhNdk.roa (hash: s/YiZX5EGRobWwsqigpJwSULaBic38Nv8k8vwPxeO3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:98:70:2c:51:eb:28:5f:93:0a:14:9a:ad:75:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a Validity Not Before: Dec 6 07:00:49 2025 GMT Not After : Dec 7 07:00:49 2025 GMT Subject: CN=9a38d2833ce10d8895a2aedf9b151279c05eaede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:85:65:40:57:b7:1a:98:f3:17:6b:84:cc: 32:6c:71:07:c8:44:bc:84:bb:d2:42:7f:8e:5c:1a: b2:8a:f5:e4:b1:90:bf:1d:a3:6e:77:aa:49:72:10: 18:c8:ef:bc:ee:27:9f:fc:a1:ea:a2:e9:64:3f:60: cb:55:76:d9:c6:1e:ee:62:e9:e1:cd:73:dd:de:1e: ab:b7:a3:6d:d7:36:89:4c:c4:61:6e:3c:40:0c:d4: 5d:1a:56:3f:c4:3d:92:9e:3a:df:ca:7b:e7:bd:c3: 24:75:c7:2c:6d:ce:26:e4:98:57:fb:37:82:ee:be: 4f:29:b2:be:ef:14:26:ba:3c:67:40:10:25:cc:82: 40:18:b2:d4:8a:5f:70:96:22:02:05:00:b8:6a:9a: 49:b0:78:d3:9f:80:99:b7:e9:de:98:13:0a:fe:18: 08:f5:d4:c5:b6:8a:d7:8e:33:e8:9d:b6:8b:b0:4a: b7:ef:aa:5d:bb:a5:47:0b:24:dd:e3:97:3a:7c:8d: b8:2e:d5:7a:2c:b2:9e:46:e7:da:1f:8a:26:a3:84: 98:a8:b0:9e:b9:a1:56:d8:70:e6:7f:79:5a:eb:e8: e2:07:94:9d:40:45:19:74:49:ab:4f:7a:52:bd:82: 07:8f:06:a9:17:b1:90:96:61:2e:34:73:e7:dd:77: 96:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:38:D2:83:3C:E1:0D:88:95:A2:AE:DF:9B:15:12:79:C0:5E:AE:DE X509v3 Authority Key Identifier: keyid:F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7f:fe:40:b8:b9:24:17:0b:17:07:84:4f:fd:00:89:2c:21: e8:e6:34:e1:51:ac:62:8b:2a:e7:c8:67:be:dc:5e:ba:af:cf: 4f:3e:33:60:d2:f1:a6:3c:28:4a:a5:6a:c6:de:bc:c4:66:23: 3b:93:e5:c0:e2:8c:d1:54:fe:39:52:b8:73:4d:80:ed:f2:9c: d6:d8:f8:92:89:c1:29:57:b1:37:e3:31:16:70:81:bd:b3:10: 40:46:be:f4:32:61:01:d9:41:88:2c:68:66:5d:df:65:2f:9a: 09:27:5b:f9:ee:dc:4b:ba:da:34:44:0a:08:fe:ae:66:d3:62: a6:3c:e1:d8:da:9d:da:05:f9:f1:39:54:7c:bf:3a:0a:f1:81: 20:ae:24:b0:0d:3b:d9:a0:f4:5d:8f:66:53:92:76:c3:71:51: cf:5c:7f:bc:34:9f:5b:a7:c8:2c:8b:ba:28:bd:bf:d1:93:fb: ca:dd:ef:96:db:04:c3:12:95:d6:4e:c3:49:3d:2d:4d:4a:94: 67:ac:61:2c:fb:a1:59:6b:2d:5f:28:b7:04:6d:7f:07:b2:11: 59:96:46:d4:51:1d:6d:29:21:47:59:c0:d4:70:a5:d5:49:a3: 2b:3c:da:ec:f6:83:76:c0:03:ea:12:88:e7:0f:49:3e:7b:00: 66:2a:04:75 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrydphwLFHrKF+TChSarXW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NzUzZTJmNzIzMGRkYjdiYzBlNjRlMzU4YWY5N2MzMThk ODhiNmEwHhcNMjUxMjA2MDcwMDQ5WhcNMjUxMjA3MDcwMDQ5WjAzMTEwLwYDVQQD Eyg5YTM4ZDI4MzNjZTEwZDg4OTVhMmFlZGY5YjE1MTI3OWMwNWVhZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQCFZUBXtxqY8xdrhMwybHEHyES8 hLvSQn+OXBqyivXksZC/HaNud6pJchAYyO+87ief/KHqoulkP2DLVXbZxh7uYunh zXPd3h6rt6Nt1zaJTMRhbjxADNRdGlY/xD2SnjrfynvnvcMkdccsbc4m5JhX+zeC 7r5PKbK+7xQmujxnQBAlzIJAGLLUil9wliICBQC4appJsHjTn4CZt+nemBMK/hgI 9dTFtorXjjPonbaLsEq376pdu6VHCyTd45c6fI24LtV6LLKeRufaH4omo4SYqLCe uaFW2HDmf3la6+jiB5SdQEUZdEmrT3pSvYIHjwapF7GQlmEuNHPn3XeWBwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJo40oM84Q2IlaKu35sVEnnAXq7eMB8GA1UdIwQY MBaAFPh1Pi9yMN23vA5k41ivl8MY2ItqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IVS1MM0l3M2JlOERtVGpXSy1Yd3hqWWkyby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvNmY5NjA0LTQ4MGMtNDgzNy1hZmYy LWQ1YzFhYTVhZTM5OC8xLzEtSFUtTDNJdzNiZThEbVRqV0stWHd4allpMm8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzhjLzZmOTYwNC00ODBjLTQ4MzctYWZmMi1kNWMxYWE1YWUz OTgvMS8xLUhVLUwzSXczYmU4RG1UaldLLVh3eGpZaTJvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3/+ QLi5JBcLFweET/0AiSwh6OY04VGsYosq58hnvtxeuq/PTz4zYNLxpjwoSqVqxt68 xGYjO5PlwOKM0VT+OVK4c02A7fKc1tj4konBKVexN+MxFnCBvbMQQEa+9DJhAdlB iCxoZl3fZS+aCSdb+e7cS7raNEQKCP6uZtNipjzh2Nqd2gX58TlUfL86CvGBIK4k sA072aD0XY9mU5J2w3FRz1x/vDSfW6fILIu6KL2/0ZP7yt3vltsEwxKV1k7DST0t TUqUZ6xhLPuhWWstXyi3BG1/B7IRWZZG1FEdbSkhR1nA1HCl1UmjKzza7PaDdsAD 6hKI5w9JPnsAZioEdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:01 2025 by rpki-client