This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft File: HNPDCTm5BqRRWhxlwIg2gptqMok.mft (raw, json) Hash identifier: pPiMToLTbTnFfAu/WhiDmKKlyKfFZCW/1ODFb0S73oo= Subject key identifier: 16:65:B1:69:4F:D5:65:5E:C4:C6:5C:13:B3:92:DB:D8:6F:D7:91:10 Authority key identifier: 1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89 Certificate issuer: /CN=1cd3c30939b906a4515a1c65c08836829b6a3289 Certificate serial: 019B2F303C40088243A6227FCE85ECFE1FE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 02:00:48 +0000 Manifest this update: Thu 18 Dec 2025 02:00:48 +0000 Manifest next update: Fri 19 Dec 2025 02:00:48 +0000 Files and hashes: 1: HNPDCTm5BqRRWhxlwIg2gptqMok.crl (hash: RvncptHmrdVd0QUaN/o55qYcd6NJ7UNkX5rZ4+a++OY=) 2: zraU6JUbMiPLRortKHmXEnAo1OE.roa (hash: HMXC6yKtO8g8Ym91NRBLoqlps2ZqE/0U22YJBVZue4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:3c:40:08:82:43:a6:22:7f:ce:85:ec:fe:1f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cd3c30939b906a4515a1c65c08836829b6a3289 Validity Not Before: Dec 18 02:00:48 2025 GMT Not After : Dec 19 02:00:48 2025 GMT Subject: CN=1665b1694fd5655ec4c65c13b392dbd86fd79110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8a:be:3e:ad:1a:2e:85:37:76:f2:08:74:9d: 93:96:c1:6b:37:6b:e3:b6:7e:95:50:f8:6e:53:c9: 1e:e3:b1:e3:b1:a6:e5:fb:85:6a:b4:52:52:04:3c: 79:a0:5c:3f:63:68:05:60:26:b1:b2:3e:8d:79:5d: ca:43:b2:3c:88:c9:6b:b1:18:f9:8b:8a:15:03:bf: 10:df:45:17:54:3e:c0:26:88:b9:88:85:b0:88:3a: 55:42:4d:f2:1b:d8:3e:ea:6f:62:90:1e:24:f3:6c: 44:fb:76:0b:2a:9c:c0:02:7e:3a:ef:a5:78:21:30: df:34:b3:4f:da:ed:0a:93:52:8b:1b:a6:67:3f:0b: cd:25:20:5d:bf:94:1c:6a:94:5a:e7:88:b2:a8:24: db:b3:dc:87:46:fc:86:fb:16:71:ad:93:c3:a2:15: 55:f0:bf:51:9a:4d:2d:96:ef:1e:96:de:62:62:0d: 43:0d:05:fe:d6:8d:47:80:53:1a:05:85:2d:95:4a: 4c:cc:ad:3c:9d:ef:5a:24:72:87:3b:24:e1:c9:5b: 21:d8:78:2c:17:ea:9d:3a:40:65:80:49:33:86:b5: a3:e9:7d:81:6e:06:80:16:d8:5b:a9:11:d8:62:66: 6d:38:ec:e7:25:97:50:23:62:8a:a6:1c:a6:c9:f8: d1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:65:B1:69:4F:D5:65:5E:C4:C6:5C:13:B3:92:DB:D8:6F:D7:91:10 X509v3 Authority Key Identifier: keyid:1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5f:ae:9f:59:24:a2:b7:4e:bb:09:e1:61:ac:c3:47:89:7a: 07:d5:4a:cd:41:90:09:00:05:78:ef:65:cf:d2:21:33:8a:00: e7:5c:e6:cd:58:2a:3c:f6:b1:3f:3f:13:db:14:55:88:c0:59: 46:9c:20:a1:24:a1:8c:8f:c7:49:e9:98:85:c2:23:ea:93:5c: 8d:90:74:cc:3d:5e:dc:7b:6a:f1:3d:10:c0:e8:26:41:b1:ea: 88:f6:c3:26:23:78:12:7d:bb:5f:4c:91:1c:07:4f:fb:7b:b6: 88:9f:a9:86:f7:4a:f7:65:d7:34:73:d1:22:36:98:e8:26:6d: e6:46:e9:b2:1e:c8:23:9a:21:0c:a3:06:72:3d:3b:a0:fb:29: be:2e:ab:bf:c6:af:46:e8:dd:63:fb:92:07:ef:6f:6f:4c:91: 88:a6:03:32:f3:02:1e:bc:70:a4:0b:26:02:56:26:06:e4:b6: 37:8e:b2:32:e1:af:68:0c:6c:56:77:4c:e4:77:92:a8:9c:a3: ad:a4:5a:10:a1:4c:fb:cb:4e:a5:cd:05:4d:78:b1:1e:9b:4b: a0:84:b8:fe:66:fb:9c:6e:ba:c0:78:95:85:05:43:1f:4f:84: 15:09:5e:52:62:26:96:25:d0:ea:76:bf:5e:80:85:d0:a3:49: 3a:08:d6:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMDxACIJDpiJ/zoXs/h/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZDNjMzA5MzliOTA2YTQ1MTVhMWM2NWMwODgzNjgyOWI2 YTMyODkwHhcNMjUxMjE4MDIwMDQ4WhcNMjUxMjE5MDIwMDQ4WjAzMTEwLwYDVQQD EygxNjY1YjE2OTRmZDU2NTVlYzRjNjVjMTNiMzkyZGJkODZmZDc5MTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoq+Pq0aLoU3dvIIdJ2TlsFrN2vj tn6VUPhuU8ke47Hjsabl+4VqtFJSBDx5oFw/Y2gFYCaxsj6NeV3KQ7I8iMlrsRj5 i4oVA78Q30UXVD7AJoi5iIWwiDpVQk3yG9g+6m9ikB4k82xE+3YLKpzAAn4676V4 ITDfNLNP2u0Kk1KLG6ZnPwvNJSBdv5QcapRa54iyqCTbs9yHRvyG+xZxrZPDohVV 8L9Rmk0tlu8elt5iYg1DDQX+1o1HgFMaBYUtlUpMzK08ne9aJHKHOyThyVsh2Hgs F+qdOkBlgEkzhrWj6X2BbgaAFthbqRHYYmZtOOznJZdQI2KKphymyfjR4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZlsWlP1WVexMZcE7OS29hv15EQMB8GA1UdIwQY MBaAFBzTwwk5uQakUVocZcCINoKbajKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQt MGZmODZlZjk1ZTBmLzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQtMGZmODZlZjk1ZTBm LzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfF+un1kk ordOuwnhYazDR4l6B9VKzUGQCQAFeO9lz9IhM4oA51zmzVgqPPaxPz8T2xRViMBZ RpwgoSShjI/HSemYhcIj6pNcjZB0zD1e3Htq8T0QwOgmQbHqiPbDJiN4En27X0yR HAdP+3u2iJ+phvdK92XXNHPRIjaY6CZt5kbpsh7II5ohDKMGcj07oPspvi6rv8av RujdY/uSB+9vb0yRiKYDMvMCHrxwpAsmAlYmBuS2N46yMuGvaAxsVndM5HeSqJyj raRaEKFM+8tOpc0FTXixHptLoIS4/mb7nG66wHiVhQVDH0+EFQleUmImliXQ6na/ XoCF0KNJOgjWcw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:08:47 2025 by rpki-client