This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json) Hash identifier: hCd0lCfeGlOK2irDlpOgFWLJJnuzVJCyNOfOifu4EPQ= Subject key identifier: 1F:56:BE:F8:D8:80:0C:8B:B0:F1:91:1E:1C:67:A6:73:EB:F0:B3:F9 Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74 Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674 Certificate serial: 019B330CEA6432C9C5B8B154E2C88ACC9C3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft Manifest number: 0C74 Signing time: Thu 18 Dec 2025 20:00:42 +0000 Manifest this update: Thu 18 Dec 2025 20:00:42 +0000 Manifest next update: Fri 19 Dec 2025 20:00:42 +0000 Files and hashes: 1: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: K82N77oLjUQ1eUaAbJkbVt63uodFk0cVRR6NGmjkk9E=) 2: wWq59skVXk0ZG4IFLK9dggmPZBc.roa (hash: G7C47jomjQ8yRWntSox+zS/AjFvrINeu+2AEHacLP1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:ea:64:32:c9:c5:b8:b1:54:e2:c8:8a:cc:9c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674 Validity Not Before: Dec 18 20:00:42 2025 GMT Not After : Dec 19 20:00:42 2025 GMT Subject: CN=1f56bef8d8800c8bb0f1911e1c67a673ebf0b3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:63:ed:1d:3f:02:cc:f8:25:15:92:75:d6: 01:ad:35:24:8f:8b:a4:3c:1b:a4:59:85:13:1a:3b: 28:39:c3:56:6a:ac:34:4f:f2:d3:17:23:82:fb:61: 8a:76:b7:86:e3:e7:24:57:ee:0e:08:93:97:c4:26: de:64:ec:02:15:a0:d1:66:ff:f9:84:9e:27:aa:f8: 49:09:0d:17:43:b7:71:5b:ee:2b:fe:ff:65:4d:45: 2f:0e:d1:71:fe:2e:d1:fb:d1:07:21:ad:ed:68:f5: 8c:92:5d:a0:4c:78:df:60:ac:46:6f:23:2a:4c:f6: db:e0:7d:e9:97:0b:f2:08:20:cd:11:71:6e:c2:6c: 6b:bd:68:97:a4:ae:95:f0:aa:f0:93:bb:c2:a4:42: e4:e3:e5:e8:77:74:74:2d:89:e0:2e:98:74:c1:81: 0a:7b:17:96:a6:50:d0:72:80:29:a8:85:f5:16:bd: e6:a1:e3:55:a3:b4:05:bf:c4:ae:80:b9:27:3d:55: ff:c9:e2:b0:f0:a8:28:8e:65:35:de:60:61:ea:e2: a7:08:94:00:57:b3:2d:3d:64:81:e8:4f:83:88:9d: 10:5b:4d:a6:74:1c:0a:58:85:7a:fd:99:03:35:c9: 20:5e:2f:7f:36:3b:34:c2:36:dc:69:dd:96:25:d0: db:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:56:BE:F8:D8:80:0C:8B:B0:F1:91:1E:1C:67:A6:73:EB:F0:B3:F9 X509v3 Authority Key Identifier: keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ac:b2:dc:d2:ac:d8:a1:24:ab:ef:f8:0c:e9:3b:5b:94:a6: 9e:c1:d6:51:c0:a2:fb:ec:9c:a9:c6:d3:08:db:ad:37:66:af: 2c:f7:e2:d2:72:33:8c:67:f5:56:a3:cc:96:e1:1b:f3:4f:08: e1:99:69:a8:b3:9d:69:71:74:bf:78:7a:a3:b5:fb:95:c8:ea: 2d:fa:c6:c9:90:39:e5:e2:c7:34:15:78:36:7b:a2:9e:bb:19: 11:d5:5a:75:37:af:15:fb:7f:ab:64:dd:b5:cb:32:ef:7a:73: ca:57:8d:70:c7:1f:6c:86:de:8c:ad:af:71:78:58:7b:6f:d6: ae:c0:fd:27:d9:06:67:dd:5b:cc:00:97:09:77:f7:da:16:2d: 30:f8:a4:6f:93:68:e7:59:e7:5b:b0:8c:e2:83:2b:8b:a7:e7: 1b:1f:50:ca:db:57:33:f0:76:26:3e:52:85:94:d6:a8:84:15: e9:cb:b9:70:9f:a0:b3:28:e5:43:90:ff:30:d7:0c:85:32:5e: 67:35:b0:a5:ea:d2:72:2b:70:60:f1:c3:63:0e:ea:08:e0:2c: f7:4f:06:bf:ea:d4:e7:39:bc:af:bd:d9:ee:fc:c2:1c:25:95: cb:a6:81:2c:98:c9:9b:c2:ea:0b:06:e4:68:0e:b0:24:85:c1: a0:37:6b:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDOpkMsnFuLFU4siKzJw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OWIzNjAwZmQ3MzhlNjk4ZDEyZmVmMjBlMTA2ZTZhOTRl M2I2NzQwHhcNMjUxMjE4MjAwMDQyWhcNMjUxMjE5MjAwMDQyWjAzMTEwLwYDVQQD EygxZjU2YmVmOGQ4ODAwYzhiYjBmMTkxMWUxYzY3YTY3M2ViZjBiM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrFj7R0/Asz4JRWSddYBrTUkj4uk PBukWYUTGjsoOcNWaqw0T/LTFyOC+2GKdreG4+ckV+4OCJOXxCbeZOwCFaDRZv/5 hJ4nqvhJCQ0XQ7dxW+4r/v9lTUUvDtFx/i7R+9EHIa3taPWMkl2gTHjfYKxGbyMq TPbb4H3plwvyCCDNEXFuwmxrvWiXpK6V8Krwk7vCpELk4+Xod3R0LYngLph0wYEK exeWplDQcoApqIX1Fr3moeNVo7QFv8SugLknPVX/yeKw8KgojmU13mBh6uKnCJQA V7MtPWSB6E+DiJ0QW02mdBwKWIV6/ZkDNckgXi9/Njs0wjbcad2WJdDb6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9WvvjYgAyLsPGRHhxnpnPr8LP5MB8GA1UdIwQY MBaAFIabNgD9c45pjRL+8g4QbmqU47Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUt NDI0M2U4OGJkNzZjLzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUtNDI0M2U4OGJkNzZj LzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6yy3NKs 2KEkq+/4DOk7W5SmnsHWUcCi++ycqcbTCNutN2avLPfi0nIzjGf1VqPMluEb808I 4ZlpqLOdaXF0v3h6o7X7lcjqLfrGyZA55eLHNBV4NnuinrsZEdVadTevFft/q2Td tcsy73pzyleNcMcfbIbejK2vcXhYe2/WrsD9J9kGZ91bzACXCXf32hYtMPikb5No 51nnW7CM4oMri6fnGx9QyttXM/B2Jj5ShZTWqIQV6cu5cJ+gsyjlQ5D/MNcMhTJe ZzWwperScitwYPHDYw7qCOAs908Gv+rU5zm8r73Z7vzCHCWVy6aBLJjJm8LqCwbk aA6wJIXBoDdrjA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:30:29 2025 by rpki-client