This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft File: hpPf7hdoc561l2wkW1rQBbMljsY.mft (raw, json) Hash identifier: a6ejDSgmW76UEjTJso8iQXohvXxm85EbUc27KoFGMok= Subject key identifier: 0F:52:86:75:3E:2F:0B:FC:7E:CC:6A:38:60:12:CF:89:59:2E:76:E6 Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6 Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6 Certificate serial: 019AF3899DA8157185AD16838ED803B0FBDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:01:13 +0000 Manifest this update: Sat 06 Dec 2025 12:01:13 +0000 Manifest next update: Sun 07 Dec 2025 12:01:13 +0000 Files and hashes: 1: heJEz4aIV8pCovQNxPGHm98CLzg.roa (hash: oSOD/5s+DowUJTv2duSzog5oYqkTO1A7yRox3C69klU=) 2: hpPf7hdoc561l2wkW1rQBbMljsY.crl (hash: nKdpUwVyExdUBQ/fRIHOwp1TnNgSZzO6krWnWMWN5Aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:9d:a8:15:71:85:ad:16:83:8e:d8:03:b0:fb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6 Validity Not Before: Dec 6 12:01:13 2025 GMT Not After : Dec 7 12:01:13 2025 GMT Subject: CN=0f5286753e2f0bfc7ecc6a386012cf89592e76e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:f9:39:c8:af:66:56:d1:0b:86:96:f1:31: 70:ae:3e:af:c5:73:b1:ef:b6:38:bb:04:a4:76:b2: 69:30:7f:1f:f5:83:38:72:86:08:a2:70:f2:4e:ba: 0e:0b:69:c0:46:0c:e3:b5:4a:59:21:4a:c9:34:87: cd:90:61:b1:d2:a5:fa:c1:95:04:48:34:08:46:8c: 44:11:cc:0a:15:01:21:39:41:35:54:8f:da:c7:f4: d6:20:b9:8a:77:d9:1b:c4:24:d2:70:67:f1:9c:0b: dd:47:12:ee:b3:67:e8:05:75:1d:e1:06:88:ff:77: 30:d4:35:f7:bf:bf:f3:ba:4a:b5:df:03:2a:5d:dd: ab:58:33:df:63:0b:bd:b6:b0:00:3f:03:43:1f:df: 3d:8a:ad:b8:4f:34:38:07:2e:46:99:2a:6d:26:ee: da:65:27:f4:fa:5f:33:af:67:90:cf:a9:53:7e:8e: 0b:ed:eb:d7:61:5d:d3:d5:6c:02:cc:7e:de:38:d5: f5:09:3d:ad:05:f1:6b:56:06:9f:02:70:61:53:9c: 56:5a:39:f3:62:e5:d5:c8:be:6f:75:1f:2d:96:ba: be:14:da:a5:1f:2e:1b:f3:8e:e1:94:6d:6d:58:e1: e5:2d:2f:1b:d4:63:06:88:8c:88:da:a3:bc:97:ed: d8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:52:86:75:3E:2F:0B:FC:7E:CC:6A:38:60:12:CF:89:59:2E:76:E6 X509v3 Authority Key Identifier: keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:6f:12:98:04:0a:c9:d2:0d:35:0c:65:f1:16:c3:d1:71:dd: 48:77:3d:fb:03:18:ca:6f:85:6d:6e:4c:50:4e:bd:77:af:36: 67:7a:95:77:1f:9f:a6:bd:0a:47:ce:05:96:28:bd:a7:6e:39: d8:67:c5:4f:f7:38:e8:ef:28:6d:57:95:bc:d2:35:48:6d:b7: 17:89:35:35:1e:e8:74:5c:3c:86:d1:f2:fa:70:6e:a7:d4:e9: d8:da:09:37:fb:c6:c4:c9:30:87:c5:77:43:94:bc:e9:a3:49: 13:fd:47:dc:da:be:7d:e7:d6:60:a9:02:c2:8c:16:67:0c:46: 83:f6:b6:84:7c:2a:e2:42:bb:d2:46:22:d8:3a:6a:78:c7:5a: 76:ef:c1:a5:5b:0c:c5:24:89:fc:b2:91:d1:78:2e:d4:e4:2a: 1d:c0:ec:5a:01:c2:c8:0d:8c:c1:3c:6c:a0:68:ed:e3:03:94: bb:98:bb:67:54:ad:84:8a:cd:fd:a4:a7:6c:69:d6:b1:38:c5: d4:9f:4a:5d:05:b9:f7:da:ee:ed:f4:f9:76:3f:b2:fa:32:94: 57:ff:85:3e:45:4c:05:83:97:12:b3:55:99:b1:db:99:b5:4f: 7f:e8:18:23:e5:cc:25:ba:d1:23:d1:7e:c6:8a:7c:7a:ee:1d: be:21:6f:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZ2oFXGFrRaDjtgDsPvaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OTNkZmVlMTc2ODczOWViNTk3NmMyNDViNWFkMDA1YjMy NThlYzYwHhcNMjUxMjA2MTIwMTEzWhcNMjUxMjA3MTIwMTEzWjAzMTEwLwYDVQQD EygwZjUyODY3NTNlMmYwYmZjN2VjYzZhMzg2MDEyY2Y4OTU5MmU3NmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv35OcivZlbRC4aW8TFwrj6vxXOx 77Y4uwSkdrJpMH8f9YM4coYIonDyTroOC2nARgzjtUpZIUrJNIfNkGGx0qX6wZUE SDQIRoxEEcwKFQEhOUE1VI/ax/TWILmKd9kbxCTScGfxnAvdRxLus2foBXUd4QaI /3cw1DX3v7/zukq13wMqXd2rWDPfYwu9trAAPwNDH989iq24TzQ4By5GmSptJu7a ZSf0+l8zr2eQz6lTfo4L7evXYV3T1WwCzH7eONX1CT2tBfFrVgafAnBhU5xWWjnz YuXVyL5vdR8tlrq+FNqlHy4b847hlG1tWOHlLS8b1GMGiIyI2qO8l+3YlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9ShnU+Lwv8fsxqOGASz4lZLnbmMB8GA1UdIwQY MBaAFIaT3+4XaHOetZdsJFta0AWzJY7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHBQZjdoZG9jNTYxbDJ3a1cxclFCYk1sanNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYjA2M2YtNGMzYy00OTcxLWFlNTAt NjY0ODIwNzFiODE5LzEvaHBQZjdoZG9jNTYxbDJ3a1cxclFCYk1sanNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lYjA2M2YtNGMzYy00OTcxLWFlNTAtNjY0ODIwNzFiODE5 LzEvaHBQZjdoZG9jNTYxbDJ3a1cxclFCYk1sanNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcm8SmAQK ydINNQxl8RbD0XHdSHc9+wMYym+FbW5MUE69d682Z3qVdx+fpr0KR84Flii9p245 2GfFT/c46O8obVeVvNI1SG23F4k1NR7odFw8htHy+nBup9Tp2NoJN/vGxMkwh8V3 Q5S86aNJE/1H3Nq+fefWYKkCwowWZwxGg/a2hHwq4kK70kYi2DpqeMdadu/BpVsM xSSJ/LKR0Xgu1OQqHcDsWgHCyA2MwTxsoGjt4wOUu5i7Z1SthIrN/aSnbGnWsTjF 1J9KXQW599ru7fT5dj+y+jKUV/+FPkVMBYOXErNVmbHbmbVPf+gYI+XMJbrRI9F+ xop8eu4dviFv7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:34 2025 by rpki-client