This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft File: uwKqn6RfyXvbLm3I_Ap_A3HITek.mft (raw, json) Hash identifier: FBYSiWgZLulXl2O+z1w/C3e6uP0G4CILtRAaQT4i2ak= Subject key identifier: CC:9D:1B:9D:32:0E:76:34:93:01:CA:9C:72:71:4D:EF:51:B2:A4:F2 Authority key identifier: BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9 Certificate issuer: /CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9 Certificate serial: 019AF12EC5839CB2D2D201BE472F59201084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft Manifest number: 030C Signing time: Sat 06 Dec 2025 01:02:45 +0000 Manifest this update: Sat 06 Dec 2025 01:02:45 +0000 Manifest next update: Sun 07 Dec 2025 01:02:45 +0000 Files and hashes: 1: R5Jq1FBCLvbBgZNwF7Icfpxv3yE.roa (hash: ir5koZmhGGNuMOajWDB8hvuKf0qBoIQa1qm6cPf+lx4=) 2: uwKqn6RfyXvbLm3I_Ap_A3HITek.crl (hash: jX1g2JQXwaqdvaKXaHAV+hxEGhN+MKswuwZC2T6Fk4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c5:83:9c:b2:d2:d2:01:be:47:2f:59:20:10:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9 Validity Not Before: Dec 6 01:02:45 2025 GMT Not After : Dec 7 01:02:45 2025 GMT Subject: CN=cc9d1b9d320e76349301ca9c72714def51b2a4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3f:3b:4a:f3:67:75:78:d6:e8:0f:50:a0:4a: 42:41:76:72:1b:0c:b8:5a:51:bc:a7:4c:ee:2d:06: 11:d8:aa:17:e7:67:15:b0:21:6c:87:aa:4d:bc:9e: 6e:64:52:13:41:54:a4:40:12:e8:17:5f:d2:8d:09: 13:5d:63:60:82:9b:b7:07:ac:e8:8b:3a:b9:8d:6f: 26:82:7d:42:e1:93:73:dc:45:e8:ab:bd:35:25:b6: a4:a7:92:5c:1d:50:ba:71:0e:eb:cf:e9:75:b1:8e: 9e:bf:c7:07:01:8d:aa:71:e8:7d:b8:b8:66:0a:6f: ea:86:f3:71:fd:1c:8b:f9:12:d8:5c:8c:58:41:d9: c1:38:af:e7:57:58:90:4b:32:e8:7f:ff:b2:9f:da: 00:34:75:ff:92:d4:98:ea:b1:4f:90:61:36:b4:28: 3e:2b:dc:6e:41:71:ef:b7:68:b6:06:4e:5a:1b:bb: b6:06:1c:78:df:bb:f9:7d:81:47:07:9d:31:d7:a8: b4:49:95:68:c3:fc:08:3b:a8:f9:02:db:1a:e0:9d: fa:68:63:cb:73:e9:bc:ed:af:24:86:d0:51:f2:a7: 76:da:3b:bf:bc:cf:9b:b4:cd:c0:cb:ee:da:43:50: 41:5e:b1:46:39:35:cf:e5:dd:53:e1:75:2e:15:97: 55:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9D:1B:9D:32:0E:76:34:93:01:CA:9C:72:71:4D:EF:51:B2:A4:F2 X509v3 Authority Key Identifier: keyid:BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:39:78:ea:65:2f:ec:b3:57:a4:f0:8f:5f:22:8d:48:47:a4: ad:f8:d9:bc:fd:c8:5e:14:f2:65:57:3b:28:2c:79:fc:ae:a8: 5d:34:f3:ef:80:e1:87:0c:14:d6:b3:8e:22:ac:cb:39:6f:c0: a1:40:f2:02:56:69:f9:93:fb:19:bf:25:a0:5b:a5:6e:25:0c: 96:94:cd:54:76:a8:41:36:60:2e:b9:0d:ed:16:19:38:5a:5b: ac:68:f7:e0:da:9a:11:67:ea:03:c0:93:ee:a9:58:64:69:44: 17:7c:36:8c:7f:b5:32:21:2f:f7:e9:d7:e7:7c:27:99:ea:a5: a0:cb:fd:4b:02:2e:55:21:ba:ba:66:07:be:2e:ff:17:b3:f1: 06:0b:17:48:53:61:9f:2f:16:28:38:6f:eb:ad:3a:e7:38:33: 92:68:14:0d:45:2d:bc:ec:a4:27:df:9d:ad:a3:95:9d:46:64: 00:5c:d1:e2:8c:aa:90:3c:ef:03:7f:31:07:ab:36:15:8f:85: 24:e3:27:a2:6c:ce:8d:df:c0:e3:4d:cf:d2:4e:13:4e:6d:e9: 21:f4:df:be:4b:69:d9:2d:2d:8a:aa:29:2e:54:43:f5:88:cc: 0f:c2:29:e5:72:83:09:74:28:1b:cc:d7:f3:9e:36:b8:55:cc: 1d:9e:7d:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsWDnLLS0gG+Ry9ZIBCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMDJhYTlmYTQ1ZmM5N2JkYjJlNmRjOGZjMGE3ZjAzNzFj ODRkZTkwHhcNMjUxMjA2MDEwMjQ1WhcNMjUxMjA3MDEwMjQ1WjAzMTEwLwYDVQQD EyhjYzlkMWI5ZDMyMGU3NjM0OTMwMWNhOWM3MjcxNGRlZjUxYjJhNGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj87SvNndXjW6A9QoEpCQXZyGwy4 WlG8p0zuLQYR2KoX52cVsCFsh6pNvJ5uZFITQVSkQBLoF1/SjQkTXWNggpu3B6zo izq5jW8mgn1C4ZNz3EXoq701Jbakp5JcHVC6cQ7rz+l1sY6ev8cHAY2qceh9uLhm Cm/qhvNx/RyL+RLYXIxYQdnBOK/nV1iQSzLof/+yn9oANHX/ktSY6rFPkGE2tCg+ K9xuQXHvt2i2Bk5aG7u2Bhx437v5fYFHB50x16i0SZVow/wIO6j5Atsa4J36aGPL c+m87a8khtBR8qd22ju/vM+btM3Ay+7aQ1BBXrFGOTXP5d1T4XUuFZdVowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMydG50yDnY0kwHKnHJxTe9RsqTyMB8GA1UdIwQY MBaAFLsCqp+kX8l72y5tyPwKfwNxyE3pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXdLcW42UmZ5WHZiTG0zSV9BcF9BM0hJVGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jYzIwMzktMjQ1MS00MDVlLWIwNmQt YWMxODNhOWFkZWIxLzEvdXdLcW42UmZ5WHZiTG0zSV9BcF9BM0hJVGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jYzIwMzktMjQ1MS00MDVlLWIwNmQtYWMxODNhOWFkZWIx LzEvdXdLcW42UmZ5WHZiTG0zSV9BcF9BM0hJVGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzl46mUv 7LNXpPCPXyKNSEekrfjZvP3IXhTyZVc7KCx5/K6oXTTz74DhhwwU1rOOIqzLOW/A oUDyAlZp+ZP7Gb8loFulbiUMlpTNVHaoQTZgLrkN7RYZOFpbrGj34NqaEWfqA8CT 7qlYZGlEF3w2jH+1MiEv9+nX53wnmeqloMv9SwIuVSG6umYHvi7/F7PxBgsXSFNh ny8WKDhv66065zgzkmgUDUUtvOykJ9+draOVnUZkAFzR4oyqkDzvA38xB6s2FY+F JOMnomzOjd/A403P0k4TTm3pIfTfvktp2S0tiqopLlRD9YjMD8Ip5XKDCXQoG8zX 8542uFXMHZ59vw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:46 2025 by rpki-client