This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft File: hUu3qjkIyZjePEL34YSVOLBZJhc.mft (raw, json) Hash identifier: Cwe7pE7DQjdDcOmZ5WrKv5lAcucaDHCP4PjRkIkhCeQ= Subject key identifier: C2:7D:57:FE:37:00:D0:39:BE:0E:38:AD:0E:6F:E0:C2:3A:D2:AC:3E Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17 Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617 Certificate serial: 019AF23F7A4AC71AAD4590E13BBBB651E6AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft Manifest number: 0FE3 Signing time: Sat 06 Dec 2025 06:00:37 +0000 Manifest this update: Sat 06 Dec 2025 06:00:37 +0000 Manifest next update: Sun 07 Dec 2025 06:00:37 +0000 Files and hashes: 1: hUu3qjkIyZjePEL34YSVOLBZJhc.crl (hash: 1Yydk0S684EGzPzkAvFlR4gJ/8JfYRmHggozldSClTE=) 2: pkoA1nbX0r8lwiVwxbfu80R8kOU.roa (hash: dAPrEkvaKQk5s5Z7WHpV1G3F1Sw4lOg/QTiasC7ZX1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7a:4a:c7:1a:ad:45:90:e1:3b:bb:b6:51:e6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617 Validity Not Before: Dec 6 06:00:37 2025 GMT Not After : Dec 7 06:00:37 2025 GMT Subject: CN=c27d57fe3700d039be0e38ad0e6fe0c23ad2ac3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:fe:25:0e:f0:42:a6:6d:85:a9:46:eb:4e: c1:51:da:7b:ae:4d:a9:d4:94:99:af:a1:5e:65:40: f5:17:e5:e3:17:5b:dc:ec:4f:85:aa:01:9f:07:c1: 79:ce:c3:91:0f:bf:13:c4:99:2b:08:af:75:03:82: 47:be:29:01:8e:c0:db:4c:17:c0:25:c5:60:84:38: b2:12:e9:04:61:0a:46:97:f1:0f:8a:fb:66:f2:5f: 30:06:75:e5:5e:e8:68:87:eb:c9:52:76:96:14:79: 1b:43:50:ea:47:81:28:7e:29:86:f2:9e:02:68:3a: 9a:2a:b1:44:f7:08:54:46:e5:5b:c6:b7:c3:7b:05: d5:12:11:3a:8d:bf:51:d9:82:94:33:98:50:be:e6: ee:3c:d7:11:3a:3a:eb:7d:c8:69:fc:a1:0c:6f:b4: ea:20:9f:5f:6c:37:97:f1:26:fb:09:40:35:72:51: a5:3d:d5:d4:2b:1b:fd:ed:fb:36:c1:33:08:9e:76: e4:05:8b:c5:9e:68:5a:c3:66:c2:b2:84:a9:8f:a4: bf:4d:c9:da:b4:32:e1:be:9f:9e:9e:b2:f7:bc:47: 22:8c:00:ef:b0:9f:66:09:ac:1b:0f:8f:d8:0a:14: ff:e6:16:91:50:9f:82:b2:1c:5b:e9:1b:4b:80:53: cd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7D:57:FE:37:00:D0:39:BE:0E:38:AD:0E:6F:E0:C2:3A:D2:AC:3E X509v3 Authority Key Identifier: keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c7:bc:34:8a:dc:26:a0:35:f9:9e:0c:20:33:76:ae:7c:44: 8f:8c:21:b7:e4:e7:a3:9a:02:88:f1:da:73:a8:2e:ce:30:32: 42:98:9d:58:67:dd:7a:21:bb:52:55:ef:80:67:65:de:0b:ef: 49:30:26:c9:25:f5:01:da:d0:20:c9:38:dc:29:02:31:c5:1f: c3:2c:51:df:36:de:fd:bb:df:9f:e6:f6:ec:0d:2a:55:7a:8d: 33:de:e4:dc:34:ba:2a:51:df:3d:6e:85:fe:3e:65:88:8e:6d: 61:13:21:8d:1b:09:8e:94:9f:9a:5e:a4:70:30:fa:4e:73:2e: 9d:68:d9:a0:50:5b:de:6c:c0:e1:f1:8e:54:e9:4a:00:8e:d5: 90:33:b9:cf:c5:93:21:72:41:4e:17:22:7c:48:a1:c7:02:c8: 94:37:07:3a:24:0a:ca:bf:46:1f:34:a2:32:f6:d6:90:b4:5f: 02:e8:0a:6a:85:f2:98:ad:2b:ee:94:95:a5:d0:61:2b:66:51: d6:b6:ce:f3:cb:93:c3:c9:51:d1:13:88:cc:26:46:f9:cd:a4: ed:a8:3a:8e:7a:19:cc:a5:c5:39:98:f7:78:87:80:e9:df:fe: c0:21:16:c7:75:2d:40:1f:fb:1a:13:fd:aa:12:30:e7:1d:60: 70:7f:e4:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3pKxxqtRZDhO7u2UearMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGJiN2FhMzkwOGM5OThkZTNjNDJmN2UxODQ5NTM4YjA1 OTI2MTcwHhcNMjUxMjA2MDYwMDM3WhcNMjUxMjA3MDYwMDM3WjAzMTEwLwYDVQQD EyhjMjdkNTdmZTM3MDBkMDM5YmUwZTM4YWQwZTZmZTBjMjNhZDJhYzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnX+JQ7wQqZthalG607BUdp7rk2p 1JSZr6FeZUD1F+XjF1vc7E+FqgGfB8F5zsORD78TxJkrCK91A4JHvikBjsDbTBfA JcVghDiyEukEYQpGl/EPivtm8l8wBnXlXuhoh+vJUnaWFHkbQ1DqR4EofimG8p4C aDqaKrFE9whURuVbxrfDewXVEhE6jb9R2YKUM5hQvubuPNcROjrrfchp/KEMb7Tq IJ9fbDeX8Sb7CUA1clGlPdXUKxv97fs2wTMInnbkBYvFnmhaw2bCsoSpj6S/Tcna tDLhvp+enrL3vEcijADvsJ9mCawbD4/YChT/5haRUJ+Cshxb6RtLgFPNrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ9V/43ANA5vg44rQ5v4MI60qw+MB8GA1UdIwQY MBaAFIVLt6o5CMmY3jxC9+GElTiwWSYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2Et NjRlNTJiOWRkOGQxLzEvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2EtNjRlNTJiOWRkOGQx LzEvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8e8NIrc JqA1+Z4MIDN2rnxEj4wht+Tno5oCiPHac6guzjAyQpidWGfdeiG7UlXvgGdl3gvv STAmySX1AdrQIMk43CkCMcUfwyxR3zbe/bvfn+b27A0qVXqNM97k3DS6KlHfPW6F /j5liI5tYRMhjRsJjpSfml6kcDD6TnMunWjZoFBb3mzA4fGOVOlKAI7VkDO5z8WT IXJBThcifEihxwLIlDcHOiQKyr9GHzSiMvbWkLRfAugKaoXymK0r7pSVpdBhK2ZR 1rbO88uTw8lR0ROIzCZG+c2k7ag6jnoZzKXFOZj3eIeA6d/+wCEWx3UtQB/7GhP9 qhIw5x1gcH/kWA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:07 2025 by rpki-client