This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft File: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json) Hash identifier: VciBqShjTfShSEgF12vVfaIMtklQKpKelwJVXthM1eY= Subject key identifier: B4:10:D1:08:A0:AA:1F:72:0C:15:FC:49:50:48:71:BE:D7:65:A9:92 Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA Certificate issuer: /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba Certificate serial: 019AF19AACD72AC9CBEF737330F6D6A7472C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft Manifest number: 0E97 Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: GYIm3RDoW42qeN5ZkiYHMu0tDbk.roa (hash: XTL3oyukju4z29vBf0q/HsP5UmJFSc4ge9VlgNDZpjY=) 2: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: ZKDTk09MWKMv/sGz+aBb2tYwwgGEIyxgup00/paQ08s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ac:d7:2a:c9:cb:ef:73:73:30:f6:d6:a7:47:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=b410d108a0aa1f720c15fc49504871bed765a992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d0:80:9e:e7:be:58:16:cd:ad:3a:b0:0b:c8: 7a:3a:b2:78:8b:18:60:e3:e0:ad:8b:3b:ac:68:6e: dd:a0:43:70:ee:ad:2f:cf:0b:6b:7c:a0:cc:e1:c3: 31:37:c2:c3:90:f2:ed:bc:8b:f7:64:52:e4:45:5d: 25:04:18:4c:2d:85:24:ef:44:5d:7a:fd:7d:96:82: 45:91:08:07:ef:84:19:c5:a3:ed:4a:07:bd:3b:de: c2:9e:75:67:b0:f2:4b:ee:30:3b:28:6b:cc:75:e4: e5:eb:8b:c0:d4:33:d9:30:9b:0c:d4:5b:47:35:72: 90:b4:f5:32:db:85:1b:74:a6:59:58:c0:98:31:f1: 9e:f1:00:2c:66:08:ab:2e:4f:bd:31:ed:18:f8:19: c4:37:13:8f:72:26:73:18:83:46:f9:ef:4e:0d:74: 5d:35:cb:09:d8:d3:ae:5f:34:e4:d6:64:37:45:f9: c1:7a:db:78:8a:c2:98:5a:4e:d9:5a:5d:91:f2:87: e3:80:36:80:7d:94:7c:58:1c:90:3f:99:fe:94:fd: 91:09:b9:da:a8:77:14:07:17:3f:5e:a0:f1:1d:aa: 07:c6:f8:d6:d9:f3:c8:29:09:78:62:02:a8:24:d8: a5:49:e1:3e:21:17:dc:c7:8a:0c:13:55:0a:e5:a8: 6a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:10:D1:08:A0:AA:1F:72:0C:15:FC:49:50:48:71:BE:D7:65:A9:92 X509v3 Authority Key Identifier: keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:fb:1b:d5:39:05:fe:bc:86:92:38:28:79:53:e6:99:9a:4d: b0:08:e5:1f:9f:7a:22:cb:38:93:3b:0d:d4:f0:44:23:28:19: 38:ae:9f:e8:67:6e:fc:7c:65:9f:50:e5:bb:35:e9:5d:3f:5a: 72:31:fc:a3:7a:73:07:e7:6a:a7:6b:96:f0:47:d9:d8:7b:92: a5:21:0a:3d:34:7b:f6:2b:69:bd:68:c7:ff:5e:4f:73:74:b4: 17:30:a4:ee:c5:33:b1:00:73:83:a6:7c:a8:de:49:cc:d1:2f: 35:52:9c:1e:1a:a6:c0:eb:7d:8e:3e:8f:b3:cb:fb:09:40:8f: 53:ed:da:46:84:b4:c2:87:2b:77:a6:13:30:6e:3f:a2:64:98: 2c:31:e7:fd:cd:38:51:be:c1:7e:99:5b:1c:12:32:61:1b:72: 1a:b4:da:d2:46:71:7c:e8:d9:5c:96:79:5b:ca:88:8b:4f:5f: ca:d3:5d:05:ba:2e:aa:ad:3f:d8:8c:c9:7d:46:c2:e1:22:4a: fc:26:0d:41:95:5c:f4:be:f0:85:e1:a8:18:49:b5:97:4f:02: f6:5d:f0:26:2c:69:5a:68:76:3a:ab:eb:62:bc:25:5d:df:be: 69:a9:60:5e:c4:fb:e9:41:e8:71:f8:09:06:54:41:b4:9e:a6: 04:c1:08:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqzXKsnL73NzMPbWp0csMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWI4NTYyNjE1ZjUxMTBkMzU1MWY4ZWM1ZGQwNTZmYjBh NDhhYmEwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD EyhiNDEwZDEwOGEwYWExZjcyMGMxNWZjNDk1MDQ4NzFiZWQ3NjVhOTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dCAnue+WBbNrTqwC8h6OrJ4ixhg 4+CtizusaG7doENw7q0vzwtrfKDM4cMxN8LDkPLtvIv3ZFLkRV0lBBhMLYUk70Rd ev19loJFkQgH74QZxaPtSge9O97CnnVnsPJL7jA7KGvMdeTl64vA1DPZMJsM1FtH NXKQtPUy24UbdKZZWMCYMfGe8QAsZgirLk+9Me0Y+BnENxOPciZzGING+e9ODXRd NcsJ2NOuXzTk1mQ3RfnBett4isKYWk7ZWl2R8ofjgDaAfZR8WByQP5n+lP2RCbna qHcUBxc/XqDxHaoHxvjW2fPIKQl4YgKoJNilSeE+IRfcx4oME1UK5ahqawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQQ0Qigqh9yDBX8SVBIcb7XZamSMB8GA1UdIwQY MBaAFB6bhWJhX1EQ01UfjsXdBW+wpIq6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAt NTM5YTBmMjY2ODRkLzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAtNTM5YTBmMjY2ODRk LzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPsb1TkF /ryGkjgoeVPmmZpNsAjlH596Iss4kzsN1PBEIygZOK6f6Gdu/Hxln1DluzXpXT9a cjH8o3pzB+dqp2uW8EfZ2HuSpSEKPTR79itpvWjH/15Pc3S0FzCk7sUzsQBzg6Z8 qN5JzNEvNVKcHhqmwOt9jj6Ps8v7CUCPU+3aRoS0wocrd6YTMG4/omSYLDHn/c04 Ub7BfplbHBIyYRtyGrTa0kZxfOjZXJZ5W8qIi09fytNdBbouqq0/2IzJfUbC4SJK /CYNQZVc9L7wheGoGEm1l08C9l3wJixpWmh2OqvrYrwlXd++aalgXsT76UHocfgJ BlRBtJ6mBMEIrw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:50 2025 by rpki-client