This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json) Hash identifier: uqPohKBNPGpHMxL5Fv17ixPcWmEQ1tz9Bq+3MYFavt0= Subject key identifier: 9A:DD:AE:E2:6C:FC:7F:CF:A8:20:3B:F3:A1:83:F8:2B:0A:7B:CB:F3 Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e Certificate serial: 019B0E93601C432E85730A08B84BC96CE750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft Manifest number: 1775 Signing time: Thu 11 Dec 2025 18:01:37 +0000 Manifest this update: Thu 11 Dec 2025 18:01:37 +0000 Manifest next update: Fri 12 Dec 2025 18:01:37 +0000 Files and hashes: 1: 00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa (hash: aMgYbVg4QnX7hEPLeHEda/b4JrNnLv1+waEJzECfh2Q=) 2: UNDXrDbQNDGfw9Atw8J1Rhg9324.roa (hash: wsuYDSHLl9ueT9Z/8hPQn0p6GzwP0XVwWj6eE/OeB10=) 3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: TEVMxengOILYc3pjKOm/Xm4ZXlNMohc4HztiMpVkaOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:60:1c:43:2e:85:73:0a:08:b8:4b:c9:6c:e7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e Validity Not Before: Dec 11 18:01:37 2025 GMT Not After : Dec 12 18:01:37 2025 GMT Subject: CN=9addaee26cfc7fcfa8203bf3a183f82b0a7bcbf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:f2:27:53:ea:7b:74:0b:6d:61:c0:0f:32: 11:13:6f:49:80:ae:43:2f:f4:6c:f5:31:84:3f:7d: c3:71:bf:94:2c:be:db:a0:58:61:6b:e0:0b:d5:2d: a8:7b:98:f8:77:1f:44:70:dd:6e:3a:a6:56:a3:c7: 94:7c:f1:b1:4c:09:66:89:64:8d:35:07:03:4a:36: 7c:e6:3d:80:83:17:b3:c0:dc:06:d2:f3:d7:7c:8a: 6c:9d:1d:1c:72:39:55:23:f9:9a:06:09:11:e4:5d: de:b6:6c:73:e9:e7:0d:55:bb:07:f8:1e:ac:68:15: b5:29:cb:23:0b:f8:e8:2a:27:4f:d0:9c:00:cf:db: 78:48:d0:9d:9e:b0:82:04:ef:21:a0:45:1b:ff:a8: 16:fe:a2:db:fd:03:10:5e:a7:e1:f1:09:b7:7f:71: aa:c3:9b:aa:33:81:4b:f7:f9:3b:e7:2e:eb:28:07: c0:51:9a:a7:86:94:22:b2:18:8b:12:0b:7e:5b:98: 34:45:7a:85:d1:6c:aa:be:6c:20:73:ff:b0:4e:55: b0:25:69:14:ff:04:53:95:72:37:14:b5:02:71:91: 2c:57:b5:4b:42:56:dc:16:7d:cf:4b:dd:68:26:42: f4:7d:cb:48:52:78:9b:1d:ea:c8:d7:be:53:97:be: 52:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DD:AE:E2:6C:FC:7F:CF:A8:20:3B:F3:A1:83:F8:2B:0A:7B:CB:F3 X509v3 Authority Key Identifier: keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e9:9f:d4:cf:2a:c1:b3:8f:5b:43:8c:0a:ad:89:a9:16:b0: 0d:20:04:7e:95:f4:b0:2b:ad:bf:6f:68:90:d9:c6:35:92:1e: 26:ee:2e:59:51:cb:09:3f:e5:01:a4:01:58:8f:d5:37:64:a0: 21:7a:6d:1f:19:97:71:5c:c7:a3:05:7b:e3:09:d0:a0:95:65: 81:3e:40:63:c5:05:50:36:74:99:b0:97:b4:c0:db:fd:fa:d4: 5f:84:23:66:2d:3b:10:a4:ae:86:1f:97:38:95:24:c7:25:08: 8d:a0:95:67:58:1a:dc:a0:ed:e2:c8:75:e9:eb:3f:c7:c4:60: a4:9f:74:f7:9c:cf:be:78:78:64:1c:0a:bd:20:12:88:c3:cf: f4:e7:92:d0:63:a8:90:7e:c9:8b:9d:41:94:fb:48:1c:8f:66: d7:af:67:73:3f:81:af:7d:69:7e:24:e8:51:26:d5:ec:55:12: 15:24:f5:41:37:d0:67:26:09:9a:f4:a5:04:c2:52:4d:c5:23: 33:eb:ab:2e:20:a9:b3:39:b6:e4:2f:26:87:2e:42:e1:9c:58: c2:50:4b:05:e2:62:6a:80:dc:a1:b4:09:40:04:dd:2d:10:cb: ba:db:5d:34:6e:98:59:a0:a4:9d:cd:f7:69:a5:48:c6:9e:e0: 07:bb:f2:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk2AcQy6FcwoIuEvJbOdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGIwZTEzY2YyN2FmZjY2YmU3MzBiZWNlOThlMDRiMDBm ZGZiOWUwHhcNMjUxMjExMTgwMTM3WhcNMjUxMjEyMTgwMTM3WjAzMTEwLwYDVQQD Eyg5YWRkYWVlMjZjZmM3ZmNmYTgyMDNiZjNhMTgzZjgyYjBhN2JjYmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLnyJ1Pqe3QLbWHADzIRE29JgK5D L/Rs9TGEP33Dcb+ULL7boFhha+AL1S2oe5j4dx9EcN1uOqZWo8eUfPGxTAlmiWSN NQcDSjZ85j2AgxezwNwG0vPXfIpsnR0ccjlVI/maBgkR5F3etmxz6ecNVbsH+B6s aBW1KcsjC/joKidP0JwAz9t4SNCdnrCCBO8hoEUb/6gW/qLb/QMQXqfh8Qm3f3Gq w5uqM4FL9/k75y7rKAfAUZqnhpQishiLEgt+W5g0RXqF0Wyqvmwgc/+wTlWwJWkU /wRTlXI3FLUCcZEsV7VLQlbcFn3PS91oJkL0fctIUnibHerI175Tl75SZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrdruJs/H/PqCA786GD+CsKe8vzMB8GA1UdIwQY MBaAFIZLDhPPJ6/2a+cwvs6Y4EsA/fueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYt ZmM0NGE4YWNlMzcwLzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYtZmM0NGE4YWNlMzcw LzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGumf1M8q wbOPW0OMCq2JqRawDSAEfpX0sCutv29okNnGNZIeJu4uWVHLCT/lAaQBWI/VN2Sg IXptHxmXcVzHowV74wnQoJVlgT5AY8UFUDZ0mbCXtMDb/frUX4QjZi07EKSuhh+X OJUkxyUIjaCVZ1ga3KDt4sh16es/x8RgpJ9095zPvnh4ZBwKvSASiMPP9OeS0GOo kH7Ji51BlPtIHI9m169ncz+Br31pfiToUSbV7FUSFST1QTfQZyYJmvSlBMJSTcUj M+urLiCpszm25C8mhy5C4ZxYwlBLBeJiaoDcobQJQATdLRDLuttdNG6YWaCknc33 aaVIxp7gB7vyRQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:29 2025 by rpki-client