This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json) Hash identifier: /zvNSZsYKLyChIuFTAUQLcaaMBI42KsA7M7f2QBxt/M= Subject key identifier: 3E:79:73:DF:D1:57:B3:0F:29:A3:47:02:AB:BC:E0:00:A2:D3:90:6D Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99 Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99 Certificate serial: 019AF1D1CB34AE589FCD89720097CF7590D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft Manifest number: 03DB Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: KotqQ9+CwXY3q1qpEJw/Y5530fMqI9S4Z/v6rogXlC4=) 2: tVaiZFiLINawsOK82OFMO15DejQ.roa (hash: 8nEDMZ8EuVxpyIr0H29BICF51Bn0ST34hEU28E7vWbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:cb:34:ae:58:9f:cd:89:72:00:97:cf:75:90:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99 Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=3e7973dfd157b30f29a34702abbce000a2d3906d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:5d:3b:42:67:bd:37:95:6c:95:2c:b2:e7: c6:4a:9b:24:aa:60:7c:01:65:4f:b1:b0:21:00:b0: 70:20:cf:d5:53:b4:50:0c:4b:68:fe:9e:61:49:21: cf:a6:12:56:66:d1:2c:83:c2:ac:cb:41:d7:82:a5: 55:57:42:17:68:e3:21:aa:f2:a8:07:32:95:dc:b6: 42:7d:00:6e:12:fd:4d:05:52:98:05:f6:3d:da:af: 19:f2:16:b2:a2:06:cb:19:49:09:ef:c7:87:eb:87: cf:77:c5:31:91:78:b2:c0:f9:54:64:86:ad:ea:45: 18:75:27:6f:8d:56:02:73:ee:e6:ab:d4:0f:0e:61: 3c:6e:29:a4:07:d8:b8:cd:e1:c0:2c:8f:be:be:71: 95:99:b1:05:f7:d2:fe:6b:6f:5d:6a:b5:65:c1:21: fd:2a:e0:b2:30:a4:78:24:d9:99:7b:c0:bf:fa:95: 80:95:04:73:df:81:3b:92:82:80:26:ab:6b:3f:78: 33:fd:33:d2:42:9e:3f:23:c8:38:81:32:e2:06:46: 9b:c7:d4:a3:b7:ca:9c:63:28:82:26:01:51:06:5b: 7e:ea:c8:df:b1:82:c7:d7:e1:a4:f1:13:17:fa:97: a3:cf:d2:85:e4:d5:8f:a3:32:9f:6f:8f:83:e8:6f: b4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:79:73:DF:D1:57:B3:0F:29:A3:47:02:AB:BC:E0:00:A2:D3:90:6D X509v3 Authority Key Identifier: keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:81:17:11:7c:89:4c:05:b9:40:1e:14:84:c2:83:2d:6f:24: b6:be:66:6c:9f:cc:ff:b4:56:45:79:86:50:bc:b2:16:45:72: b0:25:43:bf:51:4c:ab:e5:dd:bd:25:9f:e4:2b:38:b0:08:57: 80:06:81:5e:56:3b:18:5f:67:3e:01:6b:db:93:4d:b3:53:aa: 7e:0c:9e:e4:87:a2:59:02:da:c8:08:3f:79:4b:f7:1b:a6:39: 04:7d:db:09:e7:bc:ec:63:16:ad:49:f9:09:62:72:71:7b:a2: a5:80:cb:99:71:19:ad:13:2b:d3:5a:65:d0:e0:33:68:68:6e: a9:38:39:95:e1:e5:35:e8:85:4b:75:1c:93:13:e0:79:41:b9: 27:5b:12:35:37:57:96:d7:cd:fa:1c:c2:5e:ed:47:ca:e4:c3: 6d:e1:94:08:ca:7c:b2:0e:07:19:61:98:9c:20:59:44:75:48: c8:64:a7:fc:5e:23:17:e3:11:bf:12:dd:f4:b7:ea:dc:62:50: b6:85:5e:43:f0:1b:1a:f2:29:6c:b6:e3:26:48:5d:e9:c1:ba: 16:b4:cc:f3:d5:8e:86:f5:12:e0:00:c3:82:07:71:87:4c:20: f7:bf:8d:6e:c4:2f:f0:15:13:44:58:6d:4b:f7:64:a9:87:d1: 33:37:80:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cs0rlifzYlyAJfPdZDUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTNkMWU4NjE4ZWY4ZmFlODA3NWRkZDU4MjcwZDA5NDAw NmJlOTkwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD EygzZTc5NzNkZmQxNTdiMzBmMjlhMzQ3MDJhYmJjZTAwMGEyZDM5MDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukNdO0JnvTeVbJUssufGSpskqmB8 AWVPsbAhALBwIM/VU7RQDEto/p5hSSHPphJWZtEsg8Ksy0HXgqVVV0IXaOMhqvKo BzKV3LZCfQBuEv1NBVKYBfY92q8Z8hayogbLGUkJ78eH64fPd8UxkXiywPlUZIat 6kUYdSdvjVYCc+7mq9QPDmE8bimkB9i4zeHALI++vnGVmbEF99L+a29darVlwSH9 KuCyMKR4JNmZe8C/+pWAlQRz34E7koKAJqtrP3gz/TPSQp4/I8g4gTLiBkabx9Sj t8qcYyiCJgFRBlt+6sjfsYLH1+Gk8RMX+pejz9KF5NWPozKfb4+D6G+02wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD55c9/RV7MPKaNHAqu84ACi05BtMB8GA1UdIwQY MBaAFIRT0ehhjvj66Add3VgnDQlABr6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEt ZDRhZTQwNzEzMjhmLzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEtZDRhZTQwNzEzMjhm LzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4EXEXyJ TAW5QB4UhMKDLW8ktr5mbJ/M/7RWRXmGULyyFkVysCVDv1FMq+XdvSWf5Cs4sAhX gAaBXlY7GF9nPgFr25NNs1Oqfgye5IeiWQLayAg/eUv3G6Y5BH3bCee87GMWrUn5 CWJycXuipYDLmXEZrRMr01pl0OAzaGhuqTg5leHlNeiFS3UckxPgeUG5J1sSNTdX ltfN+hzCXu1HyuTDbeGUCMp8sg4HGWGYnCBZRHVIyGSn/F4jF+MRvxLd9Lfq3GJQ toVeQ/AbGvIpbLbjJkhd6cG6FrTM89WOhvUS4ADDggdxh0wg97+NbsQv8BUTRFht S/dkqYfRMzeAzw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:45 2025 by rpki-client