This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json) Hash identifier: HNo2XaXHLHSMEeA3Zg5LAsaa+Y43l3oE6Nln/Guum1Q= Subject key identifier: 99:56:FD:50:A7:23:1D:16:7B:63:87:82:95:97:73:62:5F:31:2D:DC Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51 Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251 Certificate serial: 019B0DB709E4294E35E660179A76A786440B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft Manifest number: 1439 Signing time: Thu 11 Dec 2025 14:00:57 +0000 Manifest this update: Thu 11 Dec 2025 14:00:57 +0000 Manifest next update: Fri 12 Dec 2025 14:00:57 +0000 Files and hashes: 1: gTuMJj4zNk4inmWeuwHt2oopg5M.roa (hash: zopPOsMBU8dt9Dr0i+LUD1TPbnQUzJ4uDKxUzfrnRiY=) 2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: X2np4eHR2CCSGjQYJhe73nnE+H/y2Pmb5L0bJ5NrOMs=) 3: rnwY-7oYw6V-trqxlfGxfeIKZIY.roa (hash: Yep0/R2aV0HSvC5J3JSqbOslIcQ/KKdPdI5bChqi8Qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:09:e4:29:4e:35:e6:60:17:9a:76:a7:86:44:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84a69fc568894cb3985edef22216bd99974de251 Validity Not Before: Dec 11 14:00:57 2025 GMT Not After : Dec 12 14:00:57 2025 GMT Subject: CN=9956fd50a7231d167b638782959773625f312ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:55:06:e1:0f:2b:e6:00:01:91:5f:ae:be: 20:c1:8e:96:b7:f8:7a:6f:63:d9:06:4c:ab:73:15: 4b:dd:9c:26:69:a2:9a:54:ab:2d:ba:63:9d:c3:38: 40:7c:f3:37:a9:0a:91:57:84:0a:ed:55:41:a7:d6: 3e:85:1f:f5:07:91:cb:2a:03:06:a0:bc:31:5d:8c: 8a:75:a7:bd:ae:9e:0d:41:ad:b7:44:1d:de:e6:9f: 49:a6:77:01:c3:41:03:b8:b6:5c:7b:8b:80:98:8b: 38:95:12:09:c3:99:a2:b7:b3:4f:26:2c:2b:4e:15: fd:d9:7a:4a:04:d1:f3:ec:0e:38:56:9c:26:4f:b7: 96:a2:7b:82:26:c0:d6:3b:65:55:31:47:5e:10:91: da:9e:01:39:99:cc:86:ff:6c:b9:ee:f4:0b:bd:f7: 16:21:a0:3a:c2:d1:35:24:84:e8:c6:32:b4:d9:e2: 57:8e:92:20:1b:8a:ed:45:26:98:a8:81:31:4e:36: 4b:71:b9:d4:bf:a9:b2:32:48:d4:c7:fc:f7:35:e0: a3:8a:2d:64:c9:f8:f0:df:00:12:49:d3:31:fe:cc: 6f:a9:c8:13:aa:fe:a6:46:48:0b:f7:d5:e6:d2:7a: 1f:fe:6e:ca:75:0f:96:e1:d5:f0:55:f5:87:db:0a: 53:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:56:FD:50:A7:23:1D:16:7B:63:87:82:95:97:73:62:5F:31:2D:DC X509v3 Authority Key Identifier: keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:11:07:b2:33:6e:dd:d4:04:db:6d:ca:17:b3:bb:2a:88:9a: 46:84:40:90:f2:b6:70:a7:bd:2a:12:bf:e8:2e:b9:11:ef:24: 41:49:e3:8e:4f:63:a8:c5:40:b6:97:7b:81:4b:98:51:4d:21: 9f:c4:e1:99:44:88:74:8b:d7:ec:b9:81:cc:a1:11:f3:32:21: 2b:42:d5:c6:98:98:10:e3:a4:32:db:9c:8e:aa:3c:88:db:a0: fa:53:70:8e:f8:79:8b:ce:40:cf:51:ac:4a:26:4e:3c:0b:3d: 05:12:7e:65:49:de:ac:dc:6f:4d:c9:21:d3:a1:09:0e:4a:34: 30:c0:83:36:3d:6e:ec:c9:d1:0d:f4:2b:de:d0:07:8d:f9:d6: 97:df:81:90:35:0a:af:ae:8a:22:13:79:19:9d:3a:3a:7d:7e: 13:fe:79:74:39:0f:81:72:49:6b:f9:3b:79:e1:7a:15:9e:ed: 77:0c:cc:5c:f3:c7:1c:77:59:cc:c0:a0:e5:82:f9:08:5f:27: 59:b5:43:1b:9d:74:fe:16:a2:9d:e3:25:b9:4b:6d:74:db:5c: 9f:96:e8:8b:a5:26:2f:5d:d4:44:54:05:7f:2e:21:da:39:e9: 34:fe:29:e6:05:d0:3e:65:cd:7a:c6:f4:af:78:bc:5c:80:7a: d2:e4:4c:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtwnkKU415mAXmnanhkQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YTY5ZmM1Njg4OTRjYjM5ODVlZGVmMjIyMTZiZDk5OTc0 ZGUyNTEwHhcNMjUxMjExMTQwMDU3WhcNMjUxMjEyMTQwMDU3WjAzMTEwLwYDVQQD Eyg5OTU2ZmQ1MGE3MjMxZDE2N2I2Mzg3ODI5NTk3NzM2MjVmMzEyZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5tVBuEPK+YAAZFfrr4gwY6Wt/h6 b2PZBkyrcxVL3ZwmaaKaVKstumOdwzhAfPM3qQqRV4QK7VVBp9Y+hR/1B5HLKgMG oLwxXYyKdae9rp4NQa23RB3e5p9JpncBw0EDuLZce4uAmIs4lRIJw5mit7NPJiwr ThX92XpKBNHz7A44VpwmT7eWonuCJsDWO2VVMUdeEJHangE5mcyG/2y57vQLvfcW IaA6wtE1JIToxjK02eJXjpIgG4rtRSaYqIExTjZLcbnUv6myMkjUx/z3NeCjii1k yfjw3wASSdMx/sxvqcgTqv6mRkgL99Xm0nof/m7KdQ+W4dXwVfWH2wpTBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlW/VCnIx0We2OHgpWXc2JfMS3cMB8GA1UdIwQY MBaAFISmn8VoiUyzmF7e8iIWvZmXTeJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEt NDM3ZmU1MGJiNGY3LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEtNDM3ZmU1MGJiNGY3 LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxEHsjNu 3dQE223KF7O7KoiaRoRAkPK2cKe9KhK/6C65Ee8kQUnjjk9jqMVAtpd7gUuYUU0h n8ThmUSIdIvX7LmBzKER8zIhK0LVxpiYEOOkMtucjqo8iNug+lNwjvh5i85Az1Gs SiZOPAs9BRJ+ZUnerNxvTckh06EJDko0MMCDNj1u7MnRDfQr3tAHjfnWl9+BkDUK r66KIhN5GZ06On1+E/55dDkPgXJJa/k7eeF6FZ7tdwzMXPPHHHdZzMCg5YL5CF8n WbVDG510/haineMluUttdNtcn5boi6UmL13URFQFfy4h2jnpNP4p5gXQPmXNesb0 r3i8XIB60uRMlw== -----END CERTIFICATE-----Generated at Thu Dec 11 17:32:03 2025 by rpki-client