This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft File: HISp5A-Qddjq_PaKAkhPUpJAlWo.mft (raw, json) Hash identifier: 86K5uTmTkmGbwWDpQzbHO6I8wJbVgzoJGy8bZ0Iwy4w= Subject key identifier: E0:89:F6:27:D6:C7:9A:48:6B:81:BD:5E:0C:89:DB:81:47:19:4E:60 Authority key identifier: 1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A Certificate issuer: /CN=1c84a9e40f9075d8eafcf68a02484f529240956a Certificate serial: 019AF163FADA4A1B86C33DB93E2CD644171E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft Manifest number: 1281 Signing time: Sat 06 Dec 2025 02:00:52 +0000 Manifest this update: Sat 06 Dec 2025 02:00:52 +0000 Manifest next update: Sun 07 Dec 2025 02:00:52 +0000 Files and hashes: 1: HISp5A-Qddjq_PaKAkhPUpJAlWo.crl (hash: yhisg29p0hm6uPh44a1h0VAJH/Wc2LAzSM9fji0ipOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fa:da:4a:1b:86:c3:3d:b9:3e:2c:d6:44:17:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c84a9e40f9075d8eafcf68a02484f529240956a Validity Not Before: Dec 6 02:00:52 2025 GMT Not After : Dec 7 02:00:52 2025 GMT Subject: CN=e089f627d6c79a486b81bd5e0c89db8147194e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:10:76:5f:a1:62:a5:b1:50:60:cd:1a:6e:a3: f8:dd:61:4d:70:0d:6e:d5:2b:8e:37:6b:f5:7f:2b: 00:c9:ec:93:c6:bd:3d:a4:69:95:38:f5:60:83:30: 26:ee:12:23:50:81:23:a5:05:a8:5a:90:f5:ba:9b: 1d:fb:66:1a:4f:2b:62:bd:47:64:78:cd:fc:e7:eb: f7:fc:ce:f0:39:32:0c:14:df:67:04:74:4f:8e:e6: 0b:14:94:15:f6:4f:cc:a3:af:8a:71:35:df:f9:ff: 01:8c:70:a2:32:28:98:87:0d:0b:a6:80:b0:43:2b: 02:1d:8c:46:69:d0:4a:e2:73:81:7b:d2:48:fb:54: b4:74:32:0e:2a:48:0c:f2:2e:2b:6f:4a:af:04:2b: 77:ea:61:bc:51:85:43:ec:d6:92:1a:4b:6b:22:62: cf:1b:c3:53:f9:fd:1b:ad:46:44:2f:26:f2:b8:2b: 79:78:6a:ce:28:68:fa:7a:d6:de:3a:84:08:0e:86: 4f:15:09:1a:8a:3b:2b:be:6d:1f:58:6d:be:37:ea: 56:ae:34:4f:ac:fb:c2:68:9a:d0:7d:f0:c1:c8:ec: c7:2e:b2:5c:c4:fc:35:2f:60:75:77:96:5d:c6:1d: 20:f6:10:d6:46:59:ae:6b:d7:b6:de:d9:85:61:fb: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:89:F6:27:D6:C7:9A:48:6B:81:BD:5E:0C:89:DB:81:47:19:4E:60 X509v3 Authority Key Identifier: keyid:1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6d:88:8b:ee:11:76:b4:7f:b8:16:08:fc:04:a0:d6:9f:9c: 57:63:72:10:fb:66:d7:e0:5a:80:79:51:8a:59:c1:8f:b5:7d: a5:46:7b:80:ee:a8:0e:d7:89:9b:f2:1b:02:e9:8e:b2:ab:18: 95:03:a7:02:a9:b7:eb:28:2a:20:e1:c5:67:e5:31:b6:03:97: 39:9e:4e:66:91:3d:10:66:1b:92:95:d0:53:38:38:b8:dd:0e: c7:51:77:84:ff:c4:8d:66:27:7b:f3:6e:94:80:88:78:5a:ed: 58:b9:09:a3:f5:8e:89:af:f9:97:cd:f5:d2:fe:2d:6f:a7:dd: f1:9d:b0:8e:b7:05:95:3e:ca:6f:56:76:54:34:65:88:36:c2: 1d:3d:ae:2b:d7:9a:ae:ba:52:49:d8:f6:c5:f0:3a:99:58:0a: 54:62:7f:5a:b9:e3:ce:88:d7:ed:97:88:a6:78:d0:58:ef:d0: 69:c7:88:9a:35:35:f6:6c:45:5c:c7:50:df:2a:84:88:a4:35: 32:c9:cd:5d:e8:1c:a3:b8:07:34:87:18:0b:e8:86:e9:8b:31: 92:40:f8:c6:ac:b3:45:17:d8:03:5f:78:fa:d8:e9:ce:1e:3a: ba:cc:64:c4:a9:6b:c1:e2:68:02:52:9f:c1:75:00:c8:31:d1: 7e:dc:f3:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/raShuGwz25PizWRBceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjODRhOWU0MGY5MDc1ZDhlYWZjZjY4YTAyNDg0ZjUyOTI0 MDk1NmEwHhcNMjUxMjA2MDIwMDUyWhcNMjUxMjA3MDIwMDUyWjAzMTEwLwYDVQQD EyhlMDg5ZjYyN2Q2Yzc5YTQ4NmI4MWJkNWUwYzg5ZGI4MTQ3MTk0ZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxB2X6FipbFQYM0abqP43WFNcA1u 1SuON2v1fysAyeyTxr09pGmVOPVggzAm7hIjUIEjpQWoWpD1upsd+2YaTytivUdk eM385+v3/M7wOTIMFN9nBHRPjuYLFJQV9k/Mo6+KcTXf+f8BjHCiMiiYhw0LpoCw QysCHYxGadBK4nOBe9JI+1S0dDIOKkgM8i4rb0qvBCt36mG8UYVD7NaSGktrImLP G8NT+f0brUZELybyuCt5eGrOKGj6etbeOoQIDoZPFQkaijsrvm0fWG2+N+pWrjRP rPvCaJrQffDByOzHLrJcxPw1L2B1d5Zdxh0g9hDWRlmua9e23tmFYfvH3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCJ9ifWx5pIa4G9XgyJ24FHGU5gMB8GA1UdIwQY MBaAFByEqeQPkHXY6vz2igJIT1KSQJVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wZGExZmYtOWNmOS00YWQ5LTg4Mzkt NWMzZmFmMzczOTdhLzEvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8wZGExZmYtOWNmOS00YWQ5LTg4MzktNWMzZmFmMzczOTdh LzEvSElTcDVBLVFkZGpxX1BhS0FraFBVcEpBbFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS22Ii+4R drR/uBYI/ASg1p+cV2NyEPtm1+BagHlRilnBj7V9pUZ7gO6oDteJm/IbAumOsqsY lQOnAqm36ygqIOHFZ+UxtgOXOZ5OZpE9EGYbkpXQUzg4uN0Ox1F3hP/EjWYne/Nu lICIeFrtWLkJo/WOia/5l8310v4tb6fd8Z2wjrcFlT7Kb1Z2VDRliDbCHT2uK9ea rrpSSdj2xfA6mVgKVGJ/WrnjzojX7ZeIpnjQWO/QaceImjU19mxFXMdQ3yqEiKQ1 MsnNXegco7gHNIcYC+iG6YsxkkD4xqyzRRfYA194+tjpzh46usxkxKlrweJoAlKf wXUAyDHRftzzkw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:54 2025 by rpki-client