This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft File: HPMelYpvqF39UX6lohZ6NZzgJpE.mft (raw, json) Hash identifier: sUPN7Bq+L6rLENrJjv+yglYMT0QJeEdGP0tXu+8qwE0= Subject key identifier: 1D:7C:7E:DB:BC:B7:4F:59:C5:FE:EF:6D:0C:BB:58:06:B3:A8:7F:DE Authority key identifier: 1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91 Certificate issuer: /CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691 Certificate serial: 019B3AFE4E21336B7546FDFAC564EC936F20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 09:01:43 +0000 Manifest this update: Sat 20 Dec 2025 09:01:43 +0000 Manifest next update: Sun 21 Dec 2025 09:01:43 +0000 Files and hashes: 1: 1Az4dE0ZX7KAKDKykX60lhzHZkE.roa (hash: 8wvcW71BfAfRwFPQ94lUDGje+TfkTvnyVdfl40+6qJo=) 2: HPMelYpvqF39UX6lohZ6NZzgJpE.crl (hash: oMZ3YPMBF3+Uv36ktH/0FVZR070CFcrWnCARJtR0aAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:4e:21:33:6b:75:46:fd:fa:c5:64:ec:93:6f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691 Validity Not Before: Dec 20 09:01:43 2025 GMT Not After : Dec 21 09:01:43 2025 GMT Subject: CN=1d7c7edbbcb74f59c5feef6d0cbb5806b3a87fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ed:39:ab:6c:57:69:da:d6:6d:e2:ec:76:0f: 1b:81:eb:ef:16:a2:35:73:70:ed:b0:4b:ee:fa:11: 6b:78:3d:63:7d:a3:41:db:03:47:8c:57:1a:8d:3a: 10:02:5a:04:5b:02:9c:76:d3:8e:8a:01:25:cf:5e: 50:36:c8:a3:27:91:ae:2e:66:83:9c:13:df:0b:d0: 7e:4b:d2:5f:ff:38:d2:20:ff:b2:70:12:66:05:19: b8:8e:bc:76:c9:37:96:4b:07:c0:27:12:b5:0d:28: 7c:52:f1:5d:67:f8:0f:f9:0f:b4:24:23:da:d7:a4: 14:ba:8c:d1:44:9c:78:52:07:4e:07:2d:30:5d:66: 56:5f:a2:3a:ab:b7:b4:da:e6:49:6d:76:a7:9d:54: 73:13:d8:4f:4f:82:f7:06:4e:72:2a:53:d7:b6:29: bb:9a:0d:9a:5e:a1:da:01:9c:7c:74:4d:a8:a7:28: ef:72:e8:6c:ec:c0:04:d1:16:c4:88:df:17:20:0e: 1c:89:9d:5a:08:3a:fe:08:29:f1:af:a3:2c:2b:40: 19:55:4d:6f:63:8d:b4:ca:17:d7:c1:7c:aa:90:fa: fb:b9:e4:ac:dd:50:45:6c:52:55:1c:e4:e6:29:ca: 34:73:c3:f9:91:bb:72:9f:18:ca:0f:5c:6c:2d:a2: fa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7C:7E:DB:BC:B7:4F:59:C5:FE:EF:6D:0C:BB:58:06:B3:A8:7F:DE X509v3 Authority Key Identifier: keyid:1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:74:66:67:c9:b8:9f:8c:8b:7d:16:0c:1f:5a:30:0a:e1:c9: 26:f7:bb:f6:1d:8b:b7:c8:c9:36:70:d8:29:ff:d8:31:da:6c: 05:fe:4a:36:31:f3:e4:38:f9:0c:6e:28:bd:1f:4b:f7:4a:b9: 63:7e:97:d5:92:5e:2e:af:8e:d2:6f:52:9a:5e:bc:5b:4f:f9: 73:1d:a4:3b:9c:a7:ce:92:4c:d5:0c:05:39:41:fa:f6:29:04: 77:1e:3c:ed:0e:6c:f4:bb:27:57:08:76:24:77:92:49:6c:8e: 49:6c:3d:5c:72:e4:10:8a:e9:50:71:e8:3c:e3:5a:b6:72:df: 4a:99:07:ac:12:cf:5c:57:bf:e0:5b:ac:1b:74:f6:7b:2c:fb: d2:a4:d0:07:ca:ed:9f:24:92:9d:96:7b:33:58:82:cb:55:5a: d6:61:ae:0a:cc:e0:74:d8:9c:52:d1:cb:7b:f9:cd:ea:27:58: 5e:f7:ca:5a:21:eb:6a:36:f5:13:9a:26:62:cf:60:41:bf:33: ba:92:61:b9:54:8f:a4:35:f1:4c:97:c8:50:c7:fd:7f:ea:4a: eb:79:29:51:b9:74:de:38:61:f6:05:f7:39:13:6b:c1:b7:be: 2c:4e:41:47:55:dc:c9:d9:90:f8:22:a9:e4:cb:52:cc:e4:b2: 9d:c9:26:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/k4hM2t1Rv36xWTsk28gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZjMxZTk1OGE2ZmE4NWRmZDUxN2VhNWEyMTY3YTM1OWNl MDI2OTEwHhcNMjUxMjIwMDkwMTQzWhcNMjUxMjIxMDkwMTQzWjAzMTEwLwYDVQQD EygxZDdjN2VkYmJjYjc0ZjU5YzVmZWVmNmQwY2JiNTgwNmIzYTg3ZmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje05q2xXadrWbeLsdg8bgevvFqI1 c3DtsEvu+hFreD1jfaNB2wNHjFcajToQAloEWwKcdtOOigElz15QNsijJ5GuLmaD nBPfC9B+S9Jf/zjSIP+ycBJmBRm4jrx2yTeWSwfAJxK1DSh8UvFdZ/gP+Q+0JCPa 16QUuozRRJx4UgdOBy0wXWZWX6I6q7e02uZJbXannVRzE9hPT4L3Bk5yKlPXtim7 mg2aXqHaAZx8dE2opyjvcuhs7MAE0RbEiN8XIA4ciZ1aCDr+CCnxr6MsK0AZVU1v Y420yhfXwXyqkPr7ueSs3VBFbFJVHOTmKco0c8P5kbtynxjKD1xsLaL6EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB18ftu8t09Zxf7vbQy7WAazqH/eMB8GA1UdIwQY MBaAFBzzHpWKb6hd/VF+paIWejWc4CaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFBNZWxZcHZxRjM5VVg2bG9oWjZOWnpnSnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85NWNkMmQtMGQ1Mi00YjA3LWI3NmIt ZDg1M2U3ODQyYjNhLzEvSFBNZWxZcHZxRjM5VVg2bG9oWjZOWnpnSnBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85NWNkMmQtMGQ1Mi00YjA3LWI3NmItZDg1M2U3ODQyYjNh LzEvSFBNZWxZcHZxRjM5VVg2bG9oWjZOWnpnSnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnRmZ8m4 n4yLfRYMH1owCuHJJve79h2Lt8jJNnDYKf/YMdpsBf5KNjHz5Dj5DG4ovR9L90q5 Y36X1ZJeLq+O0m9Sml68W0/5cx2kO5ynzpJM1QwFOUH69ikEdx487Q5s9LsnVwh2 JHeSSWyOSWw9XHLkEIrpUHHoPONatnLfSpkHrBLPXFe/4FusG3T2eyz70qTQB8rt nySSnZZ7M1iCy1Va1mGuCszgdNicUtHLe/nN6idYXvfKWiHrajb1E5omYs9gQb8z upJhuVSPpDXxTJfIUMf9f+pK63kpUbl03jhh9gX3ORNrwbe+LE5BR1XcydmQ+CKp 5MtSzOSynckmHA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:13:22 2025 by rpki-client