This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft File: HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft (raw, json) Hash identifier: SS34oMuN6/yHCux8Zbg4uJThM56GMLYGhB5LWpYBmO4= Subject key identifier: 84:9D:98:32:37:F1:5C:C9:16:B3:BD:12:5A:E1:2C:33:DB:8C:E1:87 Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E Certificate issuer: /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e Certificate serial: 019AF1D1CC1D253496196BE8EFD74EAA9B3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl (hash: VkjckZlOwZ8BUQ7k28Yke+00xyXiSGpMb4lLqT2vljk=) 2: ZFvHbKMASPTw38lOs9oWeuw1U-4.roa (hash: HZhplikQvG33rAVAtLNyD/3IfM/BXxh9qsmuRDaoo/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:cc:1d:25:34:96:19:6b:e8:ef:d7:4e:aa:9b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=849d983237f15cc916b3bd125ae12c33db8ce187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:55:99:12:17:eb:5b:11:03:74:58:57:a4:c9: d1:43:a7:e2:b2:7f:fc:44:b5:f3:37:c2:ed:3b:aa: c4:4c:06:b7:e2:ae:9a:5a:a0:ef:b1:04:9e:51:ee: a7:69:0f:d8:ae:e6:94:ab:2a:9b:e3:48:12:2a:3a: ff:c5:0d:50:cb:a9:47:bc:47:ff:fb:1d:fb:0c:11: d6:70:42:86:8a:e5:f9:66:05:c3:ce:6c:5b:cb:d2: 03:66:44:84:72:bc:67:04:44:74:39:cd:96:7f:ba: 62:41:2a:ca:2d:aa:30:38:67:83:bb:ec:5f:6a:63: 94:7b:20:4b:03:e6:20:0c:00:31:f8:32:6f:45:da: fc:cc:03:22:4c:9d:df:29:0e:ef:ba:b9:92:af:d8: f4:f5:23:b9:f2:77:b3:7f:d0:58:a2:73:4f:f3:39: f0:e5:b6:09:f6:3c:2e:15:20:7d:5f:0c:35:72:ac: f0:a1:a9:98:a1:44:a3:1c:94:b8:9f:1a:ec:32:6a: 70:70:7f:20:20:b7:15:d3:00:6f:eb:24:34:14:59: 37:e4:c6:9d:cb:e6:4d:4b:35:ad:61:d8:8b:10:8a: 9f:b0:b6:51:7e:73:21:87:1f:96:ad:39:bc:24:32: 1c:77:a9:ad:0f:98:44:20:5c:a9:9f:58:51:53:f6: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9D:98:32:37:F1:5C:C9:16:B3:BD:12:5A:E1:2C:33:DB:8C:E1:87 X509v3 Authority Key Identifier: keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:74:21:99:89:25:fc:19:f2:06:2b:85:72:cc:91:5a:97:50: d8:1e:56:ba:a0:40:3e:cd:0d:8a:3a:c0:33:6c:f7:5b:27:87: 18:18:d4:88:23:8d:f5:51:ba:18:87:fb:3f:71:27:06:eb:dd: 66:06:a7:bf:d7:4f:ac:d7:bc:f7:35:79:19:ac:3d:98:5a:0d: cd:dc:b2:f1:90:1a:38:d3:6b:c9:0d:3b:e1:59:4d:75:56:5e: cc:20:ed:07:6b:27:cb:b7:08:e9:fe:2d:1c:f2:d4:11:d7:24: 2b:f0:e5:5f:9f:cb:9e:7e:61:b7:c7:c2:16:0a:40:23:ce:22: 38:62:27:d7:07:84:bb:c4:d7:e7:0a:2e:ac:79:1b:0d:79:41: ef:81:60:33:21:df:74:41:f8:cf:3f:37:37:4b:13:c0:1f:a9: 84:bd:7d:99:ab:40:65:16:45:82:c0:42:dd:c5:a1:e6:69:2b: 04:2e:8c:c3:6c:a7:e9:b4:a6:b4:8d:e1:b3:cd:7b:bd:01:09: 9c:f3:c9:45:61:5b:29:09:07:45:a4:e7:de:93:cd:5c:e9:38: 14:f2:7e:1c:b0:59:91:f1:13:cf:ea:1f:1a:00:57:24:f8:02: 9b:d0:87:ab:54:9e:23:97:4a:c8:85:cb:e3:58:f8:43:5a:57: 8f:f3:0c:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cwdJTSWGWvo79dOqps7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZDlhOTQ2NzllYzlhYjMzZTY1ZTA2OWM5YWE0NDBkYjI3 M2UxNGUwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD Eyg4NDlkOTgzMjM3ZjE1Y2M5MTZiM2JkMTI1YWUxMmMzM2RiOGNlMTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFWZEhfrWxEDdFhXpMnRQ6fisn/8 RLXzN8LtO6rETAa34q6aWqDvsQSeUe6naQ/YruaUqyqb40gSKjr/xQ1Qy6lHvEf/ +x37DBHWcEKGiuX5ZgXDzmxby9IDZkSEcrxnBER0Oc2Wf7piQSrKLaowOGeDu+xf amOUeyBLA+YgDAAx+DJvRdr8zAMiTJ3fKQ7vurmSr9j09SO58nezf9BYonNP8znw 5bYJ9jwuFSB9Xww1cqzwoamYoUSjHJS4nxrsMmpwcH8gILcV0wBv6yQ0FFk35Mad y+ZNSzWtYdiLEIqfsLZRfnMhhx+WrTm8JDIcd6mtD5hEIFypn1hRU/Y2EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISdmDI38VzJFrO9ElrhLDPbjOGHMB8GA1UdIwQY MBaAFB3ZqUZ57JqzPmXgacmqRA2yc+FOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGRtcFJubnNtck0tWmVCcHlhcEVEYkp6NFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hM2I5YjktMjE3Yy00MWM5LTk0NzYt MjdkZDBhZDJhZGYzLzEvSGRtcFJubnNtck0tWmVCcHlhcEVEYkp6NFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hM2I5YjktMjE3Yy00MWM5LTk0NzYtMjdkZDBhZDJhZGYz LzEvSGRtcFJubnNtck0tWmVCcHlhcEVEYkp6NFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXQhmYkl /BnyBiuFcsyRWpdQ2B5WuqBAPs0NijrAM2z3WyeHGBjUiCON9VG6GIf7P3EnBuvd Zganv9dPrNe89zV5Gaw9mFoNzdyy8ZAaONNryQ074VlNdVZezCDtB2sny7cI6f4t HPLUEdckK/DlX5/Lnn5ht8fCFgpAI84iOGIn1weEu8TX5wourHkbDXlB74FgMyHf dEH4zz83N0sTwB+phL19matAZRZFgsBC3cWh5mkrBC6Mw2yn6bSmtI3hs817vQEJ nPPJRWFbKQkHRaTn3pPNXOk4FPJ+HLBZkfETz+ofGgBXJPgCm9CHq1SeI5dKyIXL 41j4Q1pXj/MMfw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:33 2025 by rpki-client