This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft File: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json) Hash identifier: ImTny1Lhb78nvWFeIkE+PpHWRH4IdYKSflME05/e35k= Subject key identifier: 3A:78:47:2B:2D:51:E1:D7:F1:80:99:1F:D4:B2:4F:AE:29:07:A2:91 Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63 Certificate issuer: /CN=1d43453955846773b5256e4279a03d5a3b2b5963 Certificate serial: 019AF42E0517FD6946104D81B5890F136F6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft Manifest number: 0699 Signing time: Sat 06 Dec 2025 15:00:47 +0000 Manifest this update: Sat 06 Dec 2025 15:00:47 +0000 Manifest next update: Sun 07 Dec 2025 15:00:47 +0000 Files and hashes: 1: 0tTqxzM13bt2v1m4PYXXMoQ5LXU.roa (hash: IIfKmkqir49Glk7zmei/2auCaiHojz2YnRsKfNazlQI=) 2: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: 2ye67cXntsChlkr3NkPID103XfrGA06RfHkwZGYpQSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:05:17:fd:69:46:10:4d:81:b5:89:0f:13:6f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963 Validity Not Before: Dec 6 15:00:47 2025 GMT Not After : Dec 7 15:00:47 2025 GMT Subject: CN=3a78472b2d51e1d7f180991fd4b24fae2907a291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:57:72:38:fe:06:67:d3:bd:53:7b:eb:f8:ec: 64:d0:3f:ce:11:4e:da:4e:62:43:e8:4c:d0:5f:94: f4:f9:6e:68:8f:25:40:75:59:ef:3e:2b:83:79:28: d6:84:ec:57:1f:8c:66:1d:e9:d5:2d:b5:c0:22:d0: 9b:46:2f:a7:1b:f1:d0:f2:dc:45:f3:bc:de:69:49: c5:9f:7e:7f:1f:07:6a:a2:dd:a1:ca:63:89:c3:1d: 2e:64:d1:c4:e8:f6:a9:45:fd:0e:7b:5c:84:02:40: 29:49:4f:df:af:85:45:3d:3d:e9:0d:5f:76:be:02: 5b:92:0e:b7:2e:dd:23:d6:d4:d2:ab:60:3f:5d:65: 5b:f9:9f:2d:1d:3e:30:fc:a0:a2:61:5c:0b:48:09: 54:78:73:c2:6e:2c:06:46:bf:e0:99:42:b8:21:ff: fb:6d:cc:79:10:44:89:19:cd:ae:86:ab:55:f0:52: f1:38:2a:a5:51:d1:e5:26:73:8d:7c:1b:85:87:12: f7:5d:51:96:23:d3:ae:d5:29:59:6a:25:05:ab:cb: cb:8c:4e:49:4e:12:fb:78:62:4a:87:f6:69:fa:d2: 08:bd:a5:d0:30:f9:c9:c4:8d:da:ee:24:aa:55:6c: 83:ef:17:cf:ea:d7:61:d8:70:88:cb:45:63:9d:77: 5f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:78:47:2B:2D:51:E1:D7:F1:80:99:1F:D4:B2:4F:AE:29:07:A2:91 X509v3 Authority Key Identifier: keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:0b:1d:69:5b:73:3a:f8:39:05:d9:1e:2a:66:6c:26:bb:1b: bc:b0:06:3d:af:e5:da:a0:5e:85:d7:ce:7b:3d:0a:95:7d:1a: 0f:50:c0:c4:5a:e1:ac:0c:9a:8c:16:5a:08:28:90:cd:a9:f7: be:ba:c3:cd:8f:10:6d:08:e8:d0:2a:22:ec:67:c9:8e:bd:ac: dd:7f:9a:6d:4e:13:8e:c0:cb:e6:d5:4d:00:de:ce:f1:26:a2: 30:f6:02:e4:5a:89:5a:e5:fe:1b:7f:2b:e1:dd:9f:fd:f5:85: 09:c9:94:89:1e:f0:7f:3f:48:67:29:db:5c:72:80:ac:a7:13: fd:89:c2:79:2d:d0:10:f1:c3:a7:a6:9f:1b:20:42:28:69:f1: 24:84:08:ae:40:0b:d8:cc:d1:02:fa:bb:f6:93:dd:4a:c4:97: e5:82:10:5d:cc:4d:34:4a:6f:44:e3:a2:82:b3:df:e0:31:55: 5e:fd:df:f1:2c:cf:8d:42:eb:d0:92:b7:da:45:75:bb:e6:43: 59:89:81:47:9d:ef:c5:85:c4:a3:c5:75:bc:5b:45:1a:50:bf: d2:f3:30:37:3e:d4:ca:cb:74:09:5b:9f:52:13:f0:69:56:38: c9:65:a2:4a:b2:b1:d7:0c:08:76:a2:10:0c:ad:a8:9e:db:be: 77:dc:a6:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LgUX/WlGEE2BtYkPE29tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDM0NTM5NTU4NDY3NzNiNTI1NmU0Mjc5YTAzZDVhM2Iy YjU5NjMwHhcNMjUxMjA2MTUwMDQ3WhcNMjUxMjA3MTUwMDQ3WjAzMTEwLwYDVQQD EygzYTc4NDcyYjJkNTFlMWQ3ZjE4MDk5MWZkNGIyNGZhZTI5MDdhMjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1dyOP4GZ9O9U3vr+Oxk0D/OEU7a TmJD6EzQX5T0+W5ojyVAdVnvPiuDeSjWhOxXH4xmHenVLbXAItCbRi+nG/HQ8txF 87zeaUnFn35/Hwdqot2hymOJwx0uZNHE6PapRf0Oe1yEAkApSU/fr4VFPT3pDV92 vgJbkg63Lt0j1tTSq2A/XWVb+Z8tHT4w/KCiYVwLSAlUeHPCbiwGRr/gmUK4If/7 bcx5EESJGc2uhqtV8FLxOCqlUdHlJnONfBuFhxL3XVGWI9Ou1SlZaiUFq8vLjE5J ThL7eGJKh/Zp+tIIvaXQMPnJxI3a7iSqVWyD7xfP6tdh2HCIy0VjnXdf/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp4RystUeHX8YCZH9SyT64pB6KRMB8GA1UdIwQY MBaAFB1DRTlVhGdztSVuQnmgPVo7K1ljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVORk9WV0VaM08xSlc1Q2VhQTlXanNyV1dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81OTE0YWYtM2FiOC00MTgyLWE4YWIt YzJjOThkMmI2YTY1LzEvSFVORk9WV0VaM08xSlc1Q2VhQTlXanNyV1dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81OTE0YWYtM2FiOC00MTgyLWE4YWItYzJjOThkMmI2YTY1 LzEvSFVORk9WV0VaM08xSlc1Q2VhQTlXanNyV1dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAsdaVtz Ovg5BdkeKmZsJrsbvLAGPa/l2qBehdfOez0KlX0aD1DAxFrhrAyajBZaCCiQzan3 vrrDzY8QbQjo0Coi7GfJjr2s3X+abU4TjsDL5tVNAN7O8SaiMPYC5FqJWuX+G38r 4d2f/fWFCcmUiR7wfz9IZynbXHKArKcT/YnCeS3QEPHDp6afGyBCKGnxJIQIrkAL 2MzRAvq79pPdSsSX5YIQXcxNNEpvROOigrPf4DFVXv3f8SzPjULr0JK32kV1u+ZD WYmBR53vxYXEo8V1vFtFGlC/0vMwNz7Uyst0CVufUhPwaVY4yWWiSrKx1wwIdqIQ DK2ontu+d9ymZg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:20:46 2025 by rpki-client