This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json) Hash identifier: /P+W2rd1kk/a5SdHc0JgOQjsWcbgcbAKjeS4Ai/Qgz0= Subject key identifier: 3F:EC:EF:8B:B7:02:D5:90:95:05:39:FB:3F:E5:20:A8:4F:7C:01:24 Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99 Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99 Certificate serial: 019B356985444361F9415247972162250B89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft Manifest number: 03FE Signing time: Fri 19 Dec 2025 07:01:06 +0000 Manifest this update: Fri 19 Dec 2025 07:01:06 +0000 Manifest next update: Sat 20 Dec 2025 07:01:06 +0000 Files and hashes: 1: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: GgDJPtZy6aTJzCnnrIsVNGDh+7SVahMc95lwUYRj3Eg=) 2: tVaiZFiLINawsOK82OFMO15DejQ.roa (hash: 8nEDMZ8EuVxpyIr0H29BICF51Bn0ST34hEU28E7vWbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:85:44:43:61:f9:41:52:47:97:21:62:25:0b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99 Validity Not Before: Dec 19 07:01:06 2025 GMT Not After : Dec 20 07:01:06 2025 GMT Subject: CN=3fecef8bb702d590950539fb3fe520a84f7c0124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:52:e2:0d:80:1e:57:54:94:50:91:1c:bf:ba: ea:be:9a:b6:c2:31:e3:78:1c:83:66:2a:d6:f0:7b: 6e:75:c4:f7:89:67:d3:b3:a8:7e:d2:b3:b8:37:ee: 55:75:9b:62:65:02:f7:46:c5:b4:dd:ce:46:2e:b0: 98:62:8a:43:2c:97:dc:a2:08:6e:5d:be:f5:a9:c7: 41:95:b1:f9:68:29:f5:0d:1d:58:a6:14:2c:97:c5: b2:46:c6:71:b4:34:a8:a4:bc:ee:7a:cb:70:7c:22: fe:c1:96:3e:95:72:13:77:66:fa:ca:bc:9f:4a:aa: 70:30:37:4d:af:09:db:99:12:2b:0a:4b:9d:09:96: bc:d0:a1:b0:c2:6a:a8:7e:d5:dc:01:aa:d8:61:a6: 3b:f9:75:af:9b:60:5d:8a:a4:41:64:f6:a4:4f:d8: 45:cc:d9:b1:0f:3f:d4:94:a9:69:a6:c9:ad:af:c9: fc:3c:44:c5:c3:dd:f0:ee:99:4b:d0:7d:48:8e:c9: 8e:52:6d:25:f0:75:49:dd:aa:d9:bd:31:8e:e8:e2: 70:7d:2b:c3:70:3d:57:0d:3d:b1:e5:dd:29:bb:ee: 70:7f:74:01:d9:e7:17:c0:a1:27:e9:fe:e1:da:16: b3:9e:3e:41:8f:87:43:ff:06:c6:42:43:8d:f7:52: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EC:EF:8B:B7:02:D5:90:95:05:39:FB:3F:E5:20:A8:4F:7C:01:24 X509v3 Authority Key Identifier: keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:82:bd:d5:fe:4c:23:5a:1c:17:1a:ed:76:da:99:cc:98:b1: 9f:79:53:e4:04:5e:a0:60:5e:65:e2:ce:6a:b1:f3:63:ed:2a: d1:ec:7e:4d:87:b9:d3:ed:9c:b3:5d:ed:7a:66:c9:c4:74:93: 8d:c9:6e:64:95:a3:cd:f9:99:3a:73:26:7d:e0:36:ab:97:af: ae:86:ea:00:47:f0:63:f9:31:84:81:3c:87:9b:19:fc:e0:14: 1f:5c:b2:80:9f:bb:b0:fc:ad:03:4f:43:3c:09:83:85:ca:26: 93:39:93:86:69:27:24:5a:2f:17:8e:40:2e:2c:31:d6:1c:a1: da:51:fe:6a:0d:48:38:b8:c8:7b:8e:e5:b2:f4:f1:2a:b8:0b: 69:bf:f7:1c:e5:aa:5a:6e:8e:be:66:80:37:ba:9a:9a:e0:2b: 46:00:e4:37:77:64:4a:92:c6:4c:31:04:ff:5d:48:70:8e:0d: 0c:fc:63:dd:4b:c9:7d:4b:90:69:6b:cf:23:64:30:d3:12:22: ba:32:32:2e:b8:17:d4:d4:89:4d:a1:e8:db:86:24:91:dd:e5: ba:fe:95:94:9f:52:8e:fc:97:e5:cd:71:dd:6a:02:d8:e3:a8: 4a:50:77:14:93:ef:b4:a6:a1:d1:5e:40:49:f3:14:6c:e1:b5: fd:fe:87:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aYVEQ2H5QVJHlyFiJQuJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTNkMWU4NjE4ZWY4ZmFlODA3NWRkZDU4MjcwZDA5NDAw NmJlOTkwHhcNMjUxMjE5MDcwMTA2WhcNMjUxMjIwMDcwMTA2WjAzMTEwLwYDVQQD EygzZmVjZWY4YmI3MDJkNTkwOTUwNTM5ZmIzZmU1MjBhODRmN2MwMTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVLiDYAeV1SUUJEcv7rqvpq2wjHj eByDZirW8HtudcT3iWfTs6h+0rO4N+5VdZtiZQL3RsW03c5GLrCYYopDLJfcoghu Xb71qcdBlbH5aCn1DR1YphQsl8WyRsZxtDSopLzuestwfCL+wZY+lXITd2b6yryf SqpwMDdNrwnbmRIrCkudCZa80KGwwmqoftXcAarYYaY7+XWvm2BdiqRBZPakT9hF zNmxDz/UlKlppsmtr8n8PETFw93w7plL0H1IjsmOUm0l8HVJ3arZvTGO6OJwfSvD cD1XDT2x5d0pu+5wf3QB2ecXwKEn6f7h2haznj5Bj4dD/wbGQkON91Lt/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/s74u3AtWQlQU5+z/lIKhPfAEkMB8GA1UdIwQY MBaAFIRT0ehhjvj66Add3VgnDQlABr6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEt ZDRhZTQwNzEzMjhmLzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEtZDRhZTQwNzEzMjhm LzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYK91f5M I1ocFxrtdtqZzJixn3lT5AReoGBeZeLOarHzY+0q0ex+TYe50+2cs13tembJxHST jcluZJWjzfmZOnMmfeA2q5evrobqAEfwY/kxhIE8h5sZ/OAUH1yygJ+7sPytA09D PAmDhcomkzmThmknJFovF45ALiwx1hyh2lH+ag1IOLjIe47lsvTxKrgLab/3HOWq Wm6OvmaAN7qamuArRgDkN3dkSpLGTDEE/11IcI4NDPxj3UvJfUuQaWvPI2Qw0xIi ujIyLrgX1NSJTaHo24Ykkd3luv6VlJ9SjvyX5c1x3WoC2OOoSlB3FJPvtKah0V5A SfMUbOG1/f6Hcg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:35:14 2025 by rpki-client