This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft File: HpKJoBWvREH4-d9MjFXpiykogc8.mft (raw, json) Hash identifier: jymdPV8x2YHnuFvnVq/Oi4ASIcHIe53Mhjrgyvtkd4g= Subject key identifier: A0:BF:1D:30:7A:1A:54:E1:7F:FA:C7:32:CA:27:F0:9D:D8:D9:1E:E8 Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF Certificate issuer: /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf Certificate serial: 019AF31C6657C2F6F621153B1FC00A51DC7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:55 +0000 Manifest this update: Sat 06 Dec 2025 10:01:55 +0000 Manifest next update: Sun 07 Dec 2025 10:01:55 +0000 Files and hashes: 1: HpKJoBWvREH4-d9MjFXpiykogc8.crl (hash: mVE3EU9E2l+WkFySjRiECvvF5RuAxObCAKa39e7JbYM=) 2: NgTdB5AEPD4DAHaTIZRq0754ZYU.roa (hash: X0ljVmj2cD5On812FnYT4pXdeEcEXod3j6IYZXkhhSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:66:57:c2:f6:f6:21:15:3b:1f:c0:0a:51:dc:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf Validity Not Before: Dec 6 10:01:55 2025 GMT Not After : Dec 7 10:01:55 2025 GMT Subject: CN=a0bf1d307a1a54e17ffac732ca27f09dd8d91ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:76:40:06:bf:b8:e7:03:ac:73:4f:d2:1e: bd:13:ae:44:5d:db:71:bc:5f:8b:fa:d7:23:ae:9c: d1:42:77:34:23:c9:68:62:e5:67:2e:c7:52:ec:6d: 0f:ba:87:98:51:72:f9:28:82:cd:17:75:ad:b6:88: 71:cc:62:c3:11:c1:12:f6:89:c8:59:60:7c:bd:9d: b5:30:bc:70:15:c4:1d:a5:b2:38:4a:2e:e2:76:21: 8e:34:81:d1:fe:01:5d:6d:c1:93:61:ff:3e:c2:85: 88:bb:9c:8c:a2:ad:e4:ca:74:a5:9a:4f:3a:51:b8: 6e:21:6f:e2:77:bc:94:2d:8e:0f:b9:de:e6:54:8f: 53:cb:07:13:51:8b:fa:1c:88:8e:73:68:28:0f:e7: 0a:6d:26:4e:6d:92:2f:33:e6:cf:28:34:7b:ab:d7: 35:ce:d3:87:c8:31:92:f4:8d:c3:e0:b5:be:9d:40: d3:3b:a7:6c:cb:97:c3:52:29:f8:7f:87:2c:98:03: 07:41:38:ec:8f:70:91:0f:4e:f8:9c:3e:89:cc:66: 0e:46:9c:f6:16:2b:88:09:bd:3a:b1:97:dd:bd:80: 25:22:f3:38:61:cd:2b:52:6d:d3:81:28:26:88:1d: 6f:18:70:52:db:8e:76:81:fd:7c:4d:68:ef:a7:98: 95:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BF:1D:30:7A:1A:54:E1:7F:FA:C7:32:CA:27:F0:9D:D8:D9:1E:E8 X509v3 Authority Key Identifier: keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:37:e7:30:92:08:b0:a3:38:e4:44:13:cb:42:43:c5:5d:2f: 79:de:4a:79:60:1a:cb:42:4c:64:13:9b:2a:94:63:99:69:fe: 8d:1d:24:88:54:82:16:72:6f:03:f3:3f:1c:bc:ff:8e:36:6c: 65:74:c4:bd:84:ed:13:f4:9c:c8:f2:9d:14:02:24:f1:84:b9: c3:29:8f:ec:b1:0c:8f:91:61:f1:7f:38:21:eb:d7:cf:a6:bf: 34:2a:41:dd:d9:17:90:48:36:7a:d8:d6:de:2f:14:fb:7e:97: 50:30:b1:46:8b:01:1f:cd:81:87:ee:66:ab:eb:af:7e:7c:7c: d1:0a:2e:88:52:38:a7:a2:ff:f4:66:ab:a6:7c:0b:5f:11:0d: 66:34:92:ff:66:db:39:d1:64:2a:5b:01:a0:4f:28:05:13:fe: 92:c9:a3:ed:95:36:3c:ce:b5:bc:ce:e6:d0:6e:5a:a9:20:4f: 19:2c:88:d3:fc:47:8d:b6:96:b5:8c:cc:6e:9b:ae:59:ed:94: f3:dd:15:66:dd:93:40:f8:71:92:cf:b4:7d:e6:42:bd:80:96: de:44:a8:92:9f:75:7d:df:55:b9:b0:f2:54:20:fd:6b:82:42: 48:19:7c:d5:61:1b:3d:cc:34:ce:11:56:a9:9c:a4:ad:ab:6b: 5c:ee:51:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGZXwvb2IRU7H8AKUdx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOTI4OWEwMTVhZjQ0NDFmOGY5ZGY0YzhjNTVlOThiMjky ODgxY2YwHhcNMjUxMjA2MTAwMTU1WhcNMjUxMjA3MTAwMTU1WjAzMTEwLwYDVQQD EyhhMGJmMWQzMDdhMWE1NGUxN2ZmYWM3MzJjYTI3ZjA5ZGQ4ZDkxZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LB2QAa/uOcDrHNP0h69E65EXdtx vF+L+tcjrpzRQnc0I8loYuVnLsdS7G0PuoeYUXL5KILNF3WttohxzGLDEcES9onI WWB8vZ21MLxwFcQdpbI4Si7idiGONIHR/gFdbcGTYf8+woWIu5yMoq3kynSlmk86 UbhuIW/id7yULY4Pud7mVI9TywcTUYv6HIiOc2goD+cKbSZObZIvM+bPKDR7q9c1 ztOHyDGS9I3D4LW+nUDTO6dsy5fDUin4f4csmAMHQTjsj3CRD074nD6JzGYORpz2 FiuICb06sZfdvYAlIvM4Yc0rUm3TgSgmiB1vGHBS2452gf18TWjvp5iVBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKC/HTB6GlThf/rHMson8J3Y2R7oMB8GA1UdIwQY MBaAFB6SiaAVr0RB+PnfTIxV6YspKIHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBLSm9CV3ZSRUg0LWQ5TWpGWHBpeWtvZ2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yOTE0NjMtOTFjYy00NzA0LTk1Mjgt Njk3OTRmMDUwMjc2LzEvSHBLSm9CV3ZSRUg0LWQ5TWpGWHBpeWtvZ2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yOTE0NjMtOTFjYy00NzA0LTk1MjgtNjk3OTRmMDUwMjc2 LzEvSHBLSm9CV3ZSRUg0LWQ5TWpGWHBpeWtvZ2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzfnMJII sKM45EQTy0JDxV0ved5KeWAay0JMZBObKpRjmWn+jR0kiFSCFnJvA/M/HLz/jjZs ZXTEvYTtE/ScyPKdFAIk8YS5wymP7LEMj5Fh8X84IevXz6a/NCpB3dkXkEg2etjW 3i8U+36XUDCxRosBH82Bh+5mq+uvfnx80QouiFI4p6L/9GarpnwLXxENZjSS/2bb OdFkKlsBoE8oBRP+ksmj7ZU2PM61vM7m0G5aqSBPGSyI0/xHjbaWtYzMbpuuWe2U 890VZt2TQPhxks+0feZCvYCW3kSokp91fd9VubDyVCD9a4JCSBl81WEbPcw0zhFW qZykratrXO5RwA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:59 2025 by rpki-client