This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json) Hash identifier: UyYOSYo9xBWuGsUWyiYjizZvCWYIvLZ1FjWxZczqBl0= Subject key identifier: D3:58:28:F9:06:24:47:94:12:4E:D2:32:52:8A:6E:62:F2:F9:56:A2 Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74 Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674 Certificate serial: 019AF1642082375897B88F2C71C608F28539 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft Manifest number: 0C52 Signing time: Sat 06 Dec 2025 02:01:02 +0000 Manifest this update: Sat 06 Dec 2025 02:01:02 +0000 Manifest next update: Sun 07 Dec 2025 02:01:02 +0000 Files and hashes: 1: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: 62DniKCftwxGy4rOswn3ybG/5qEudjvO9tANY1POOcU=) 2: wWq59skVXk0ZG4IFLK9dggmPZBc.roa (hash: G7C47jomjQ8yRWntSox+zS/AjFvrINeu+2AEHacLP1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:20:82:37:58:97:b8:8f:2c:71:c6:08:f2:85:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674 Validity Not Before: Dec 6 02:01:02 2025 GMT Not After : Dec 7 02:01:02 2025 GMT Subject: CN=d35828f906244794124ed232528a6e62f2f956a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d9:d7:18:42:88:d6:30:27:12:4b:d3:1f:3e: 97:c4:47:ac:6e:dc:17:22:d5:72:d9:cc:49:1a:4a: a2:a7:f0:8d:07:97:8b:9e:c8:6d:b9:5f:0f:2f:c7: 32:84:ad:61:cc:ec:f8:f5:32:3e:3b:08:75:21:00: 69:4e:35:f4:7c:cd:59:1a:6f:b1:d3:7c:d9:2d:0a: e9:1e:77:ab:69:61:4f:a4:cb:91:65:78:d1:17:0e: c1:ba:26:f6:50:91:ed:0a:07:4d:17:41:6d:49:a1: ed:a5:7e:6d:f3:74:e0:59:0d:d9:35:e7:49:b0:ef: ec:4c:54:38:b1:0d:19:64:a5:4d:d6:4c:c3:cb:32: aa:d7:a6:00:95:33:2c:49:d6:cd:a3:ed:1e:fa:85: 0e:2e:82:26:6b:9e:03:44:c1:9e:01:d7:e3:9c:67: 6a:44:bc:45:c4:12:7c:07:08:a4:1e:05:80:14:c8: 48:ad:0b:91:c0:90:6e:64:68:f3:a3:07:8a:ff:04: 3a:cb:7f:98:23:df:32:c5:e6:cb:c7:81:21:f0:b0: e3:cf:0b:04:eb:fa:e6:a0:b7:93:c1:1f:2b:6c:af: 7a:68:a7:c4:c4:97:36:61:6b:a7:a7:52:7a:c2:af: c3:7c:b9:ae:e7:1f:87:05:13:c7:0d:0d:a4:3c:31: e9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:58:28:F9:06:24:47:94:12:4E:D2:32:52:8A:6E:62:F2:F9:56:A2 X509v3 Authority Key Identifier: keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:87:37:65:e6:88:c2:9e:86:fb:8a:12:c9:34:fd:c1:cd:f0: 74:69:fd:20:53:62:49:eb:27:d9:b3:34:2a:15:92:94:cb:80: 39:9e:a4:88:31:8d:d4:f3:2c:4f:5c:89:b1:0f:7f:dd:cd:c5: 54:26:2b:00:5f:fe:5b:d1:1f:f3:96:ce:13:d0:06:bc:a2:ac: 10:ce:56:71:58:80:71:62:0b:37:00:79:aa:00:ea:44:d8:36: 71:ed:25:5c:7d:c9:10:a6:dc:62:d0:7d:9c:8c:a0:08:d9:36: bb:f8:4d:be:0b:c2:12:ec:87:6b:28:4f:e6:66:0b:3e:39:5e: 2e:39:6b:2a:ee:8b:05:97:87:5f:a9:5f:50:b5:7f:ed:85:03: ab:2e:32:da:15:96:b8:21:3e:ad:30:98:6e:05:a0:9c:ba:cf: 48:ef:f3:f0:09:d4:e6:ac:8e:92:44:e2:7a:38:3b:c0:1d:8c: a2:30:31:4b:ff:82:75:30:6d:81:7a:b1:c0:a1:b4:47:0c:f5: 37:1e:47:aa:84:6a:bd:1a:7b:33:e8:d4:60:0b:3d:4b:2e:f5: 4a:68:44:e3:53:e9:58:91:e7:69:c9:8e:dc:65:83:32:f0:84: d9:b2:30:f3:1a:21:b4:35:4e:13:88:e3:9a:b7:31:1a:9d:94: 67:f5:b1:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCCCN1iXuI8sccYI8oU5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OWIzNjAwZmQ3MzhlNjk4ZDEyZmVmMjBlMTA2ZTZhOTRl M2I2NzQwHhcNMjUxMjA2MDIwMTAyWhcNMjUxMjA3MDIwMTAyWjAzMTEwLwYDVQQD EyhkMzU4MjhmOTA2MjQ0Nzk0MTI0ZWQyMzI1MjhhNmU2MmYyZjk1NmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdnXGEKI1jAnEkvTHz6XxEesbtwX ItVy2cxJGkqip/CNB5eLnshtuV8PL8cyhK1hzOz49TI+Owh1IQBpTjX0fM1ZGm+x 03zZLQrpHneraWFPpMuRZXjRFw7Buib2UJHtCgdNF0FtSaHtpX5t83TgWQ3ZNedJ sO/sTFQ4sQ0ZZKVN1kzDyzKq16YAlTMsSdbNo+0e+oUOLoIma54DRMGeAdfjnGdq RLxFxBJ8BwikHgWAFMhIrQuRwJBuZGjzoweK/wQ6y3+YI98yxebLx4Eh8LDjzwsE 6/rmoLeTwR8rbK96aKfExJc2YWunp1J6wq/DfLmu5x+HBRPHDQ2kPDHpnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNYKPkGJEeUEk7SMlKKbmLy+VaiMB8GA1UdIwQY MBaAFIabNgD9c45pjRL+8g4QbmqU47Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUt NDI0M2U4OGJkNzZjLzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUtNDI0M2U4OGJkNzZj LzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4c3ZeaI wp6G+4oSyTT9wc3wdGn9IFNiSesn2bM0KhWSlMuAOZ6kiDGN1PMsT1yJsQ9/3c3F VCYrAF/+W9Ef85bOE9AGvKKsEM5WcViAcWILNwB5qgDqRNg2ce0lXH3JEKbcYtB9 nIygCNk2u/hNvgvCEuyHayhP5mYLPjleLjlrKu6LBZeHX6lfULV/7YUDqy4y2hWW uCE+rTCYbgWgnLrPSO/z8AnU5qyOkkTiejg7wB2MojAxS/+CdTBtgXqxwKG0Rwz1 Nx5HqoRqvRp7M+jUYAs9Sy71SmhE41PpWJHnacmO3GWDMvCE2bIw8xohtDVOE4jj mrcxGp2UZ/WxUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:31 2025 by rpki-client