This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft File: HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft (raw, json) Hash identifier: +IL+HPWYSlV41UNOUN40F/EaIjojw2YHWbSGjqrSxtA= Subject key identifier: EB:5F:8C:9D:7A:1E:FD:B1:C9:BB:5B:E5:41:CE:3D:95:6B:C7:A6:3E Authority key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1 Certificate issuer: /CN=1d13cd3dde789d294793afce938a533c02bb84d1 Certificate serial: 019AF2766C127EF8B1ADB800F988656E0FFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft Manifest number: 02B7 Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: 7sLKGVGT_a4aX4JcAS8Cl-dwrZk.roa (hash: IALVV6z17EuCMGIEd1EYplZQwtixCOladk+EbbZKzBM=) 2: HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl (hash: zl38nMhslrzkTb+Pv+uYjKkCkKpV2y72FdFqBDS4+zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6c:12:7e:f8:b1:ad:b8:00:f9:88:65:6e:0f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d13cd3dde789d294793afce938a533c02bb84d1 Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=eb5f8c9d7a1efdb1c9bb5be541ce3d956bc7a63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a1:26:ea:84:4f:81:da:aa:7d:a4:57:eb:8e: 0e:80:7c:89:67:a3:31:29:91:53:7a:9c:7e:91:e0: 8b:45:11:0f:e1:83:74:ac:eb:bd:70:3e:78:a0:dc: 7a:89:e8:65:be:9a:03:b3:6f:5b:03:38:af:db:f9: 4b:d3:24:ad:f4:f8:ea:78:82:9d:bf:f5:52:c3:4d: 54:e8:de:3f:30:bb:e2:97:08:d1:a6:0b:b3:c0:f7: e5:15:81:b5:e3:ba:ff:a1:32:a5:09:0f:52:19:ee: 57:14:13:d8:9a:e9:71:21:f2:86:40:e8:1e:48:4d: a0:ec:f9:cd:79:59:5a:79:f7:d6:96:75:69:6c:c0: 03:bc:04:3b:3e:45:f0:7d:7a:1e:5e:04:73:bd:49: 60:0e:0c:32:0f:4d:bd:9b:20:a5:a6:38:3f:57:e9: f1:2a:de:13:9b:54:9c:b5:af:a5:83:00:e4:75:80: 79:66:8d:ac:c3:50:73:3b:59:fb:57:f8:4e:fb:bb: e9:39:4b:fe:de:45:b3:6d:58:de:2a:0c:09:32:e0: ba:c0:70:61:18:f0:dd:06:74:aa:7d:61:cf:22:84: 48:2f:df:30:71:74:ef:8c:96:e5:bf:6e:15:c1:63: 94:eb:ed:73:30:f4:d3:7d:c3:d0:75:af:53:a6:6d: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5F:8C:9D:7A:1E:FD:B1:C9:BB:5B:E5:41:CE:3D:95:6B:C7:A6:3E X509v3 Authority Key Identifier: keyid:1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:73:68:f4:b3:4c:a2:6c:26:8e:57:2f:43:80:08:2a:dc:6f: bb:f4:12:d3:f2:c3:d7:5f:d2:18:cb:c2:98:ad:38:99:b9:2d: 99:d9:5e:60:ab:61:fb:c9:7a:cc:16:c4:0c:a7:58:77:54:25: 86:86:99:77:5c:a7:f3:b1:3d:2d:8d:02:07:11:f6:d6:1a:c4: 96:08:3c:57:4b:a7:2f:72:96:1c:b4:fc:ee:6b:54:4c:98:1b: 27:7e:9d:03:73:77:2a:12:34:67:ba:a6:29:d1:36:4c:f0:8a: 9e:e0:bb:8c:af:9d:1a:3d:7a:e1:05:ba:42:09:a1:c0:99:a0: fd:dc:29:a6:f4:45:38:bd:9b:39:30:7e:28:1e:32:ce:c8:b1: d9:d3:f2:8f:17:f6:c7:0a:db:27:5d:9a:d2:e9:4b:be:a6:fc: cf:48:c9:b8:9a:70:8f:1e:13:51:9e:97:de:c1:cc:32:ca:23: b1:fa:db:33:32:1b:ff:3d:34:c3:5c:8d:af:11:cd:35:9c:d7: 56:7a:44:bd:39:3d:50:23:87:99:0c:ce:18:2e:9b:2f:6f:09: 64:be:f3:58:55:49:35:44:a3:9d:2f:7a:df:a5:54:55:30:88: ec:20:12:1b:6b:71:30:40:c8:dd:34:65:13:9a:1d:dc:ca:4a: 95:8b:88:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmwSfvixrbgA+Yhlbg/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMTNjZDNkZGU3ODlkMjk0NzkzYWZjZTkzOGE1MzNjMDJi Yjg0ZDEwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD EyhlYjVmOGM5ZDdhMWVmZGIxYzliYjViZTU0MWNlM2Q5NTZiYzdhNjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKEm6oRPgdqqfaRX644OgHyJZ6Mx KZFTepx+keCLRREP4YN0rOu9cD54oNx6iehlvpoDs29bAziv2/lL0ySt9PjqeIKd v/VSw01U6N4/MLvilwjRpguzwPflFYG147r/oTKlCQ9SGe5XFBPYmulxIfKGQOge SE2g7PnNeVlaeffWlnVpbMADvAQ7PkXwfXoeXgRzvUlgDgwyD029myClpjg/V+nx Kt4Tm1Scta+lgwDkdYB5Zo2sw1BzO1n7V/hO+7vpOUv+3kWzbVjeKgwJMuC6wHBh GPDdBnSqfWHPIoRIL98wcXTvjJblv24VwWOU6+1zMPTTfcPQda9Tpm25yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtfjJ16Hv2xybtb5UHOPZVrx6Y+MB8GA1UdIwQY MBaAFB0TzT3eeJ0pR5OvzpOKUzwCu4TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kMjlhNWYtYTUyYy00Yzc5LTkzMDMt YTc3Y2FhYzQ2MjVjLzEvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kMjlhNWYtYTUyYy00Yzc5LTkzMDMtYTc3Y2FhYzQ2MjVj LzEvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnNo9LNM omwmjlcvQ4AIKtxvu/QS0/LD11/SGMvCmK04mbktmdleYKth+8l6zBbEDKdYd1Ql hoaZd1yn87E9LY0CBxH21hrElgg8V0unL3KWHLT87mtUTJgbJ36dA3N3KhI0Z7qm KdE2TPCKnuC7jK+dGj164QW6QgmhwJmg/dwppvRFOL2bOTB+KB4yzsix2dPyjxf2 xwrbJ12a0ulLvqb8z0jJuJpwjx4TUZ6X3sHMMsojsfrbMzIb/z00w1yNrxHNNZzX VnpEvTk9UCOHmQzOGC6bL28JZL7zWFVJNUSjnS9636VUVTCI7CASG2txMEDI3TRl E5od3MpKlYuIfg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:38:05 2025 by rpki-client