This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft File: hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft (raw, json) Hash identifier: qwk15yG4PH1Q1DRU7EaEFKSpoKZPDf3Avh+YK0ax02s= Subject key identifier: AE:18:E4:5E:19:FD:69:C6:FE:C8:49:45:0A:D0:FF:61:E0:F8:E3:4D Authority key identifier: 84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D Certificate issuer: /CN=84a3cf114be4fa4c4ff76b218fad50e51739160d Certificate serial: 019B3C7DDEF35F8235039CEF8C1A9F4DFBEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft Manifest number: 1164 Signing time: Sat 20 Dec 2025 16:00:40 +0000 Manifest this update: Sat 20 Dec 2025 16:00:40 +0000 Manifest next update: Sun 21 Dec 2025 16:00:40 +0000 Files and hashes: 1: hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl (hash: mjWJsHv8VfxJHJjvTIQ6eWA7k/yfSkdzdqcDZSTAPlA=) 2: sudojg6HDCizETctxsBEtvD9ceA.roa (hash: WBqfbYsjDjIGknBmCSsGnzqS8ek9/ghen0y1LOmx5Ns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:de:f3:5f:82:35:03:9c:ef:8c:1a:9f:4d:fb:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84a3cf114be4fa4c4ff76b218fad50e51739160d Validity Not Before: Dec 20 16:00:40 2025 GMT Not After : Dec 21 16:00:40 2025 GMT Subject: CN=ae18e45e19fd69c6fec849450ad0ff61e0f8e34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c5:cd:6e:c6:ce:85:33:22:29:fb:ce:6e:89: af:de:07:2c:79:3d:8b:af:a0:60:ca:5b:e3:37:e7: 55:95:0e:c5:84:72:26:c8:bf:35:67:4c:a3:90:9a: e5:ff:5c:e2:d5:0e:ec:ae:d2:14:f6:7f:5a:98:96: d6:73:c6:e5:0e:19:1b:c8:fe:c7:7c:57:1b:fb:ee: 99:d5:f5:ff:cb:4f:67:9f:c6:e7:5f:42:fe:71:63: e0:88:be:1b:28:fa:b4:f3:70:b6:bc:be:5c:76:2c: 71:36:03:11:c7:a9:51:8e:74:49:a6:74:dd:42:db: 98:53:f3:a7:2a:d6:66:72:37:06:1a:96:e2:0e:9a: 43:8f:62:dd:c3:34:34:ad:1c:3d:5a:9c:5c:d3:ef: 90:ed:ad:f1:0b:6a:00:21:85:cd:aa:28:fe:43:f4: b5:72:05:a6:a6:aa:0d:b7:b2:fd:30:58:78:44:c8: 7d:7f:90:39:e8:9c:dd:b7:62:a5:76:d4:cb:61:34: 52:7e:60:b3:5c:fe:30:40:b9:4d:33:de:5f:8c:af: ff:d4:7a:74:50:4f:77:75:a7:b6:35:0c:5f:38:37: 43:cd:55:9d:64:fd:81:0f:7f:26:ac:f1:64:f6:84: 75:25:37:b3:91:f3:e2:f7:14:f9:bc:75:35:3f:af: 54:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:18:E4:5E:19:FD:69:C6:FE:C8:49:45:0A:D0:FF:61:E0:F8:E3:4D X509v3 Authority Key Identifier: keyid:84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:06:d9:20:9b:7d:2f:e9:9d:74:d8:67:3f:e4:78:d6:c6:32: 6e:37:55:36:9a:1c:c6:2c:9e:5a:71:2e:c2:9a:20:e8:47:27: 19:60:4b:6f:1b:de:75:24:5d:94:43:73:d8:d3:51:fa:a9:d7: 3f:77:eb:60:db:04:42:53:2d:b6:b0:8b:cf:8f:9c:a4:b5:54: e4:bb:b1:d7:c0:50:9f:c6:24:ca:66:8b:6c:74:ea:8c:44:bb: ee:66:a1:f0:cc:b6:34:55:88:e1:65:71:f5:12:b5:a6:54:c9: 63:e8:32:8a:d4:0e:49:78:c4:3c:e3:48:fc:4f:84:09:aa:ab: e6:70:05:3a:78:a2:5d:1d:10:83:e2:c4:b3:36:32:2f:b1:e8: 06:bb:ab:f3:6f:6c:f2:ee:55:75:01:07:97:34:21:a4:c2:58: 69:f3:83:20:98:e6:79:26:44:da:fe:8a:c2:83:c2:19:fa:e5: f6:19:16:7a:aa:26:92:e7:2b:40:72:93:5b:a3:8f:fb:b4:1a: e6:df:d0:3e:31:cb:14:51:52:2d:ba:95:55:63:7d:c3:c4:7a: 15:52:00:5f:b4:14:e7:25:43:31:92:cb:0e:2a:d8:99:1b:6c: 74:39:40:fd:f2:03:4a:9e:a6:30:ca:a4:97:a7:f1:cb:37:d2: c8:c2:4e:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fd7zX4I1A5zvjBqfTfvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YTNjZjExNGJlNGZhNGM0ZmY3NmIyMThmYWQ1MGU1MTcz OTE2MGQwHhcNMjUxMjIwMTYwMDQwWhcNMjUxMjIxMTYwMDQwWjAzMTEwLwYDVQQD EyhhZTE4ZTQ1ZTE5ZmQ2OWM2ZmVjODQ5NDUwYWQwZmY2MWUwZjhlMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MXNbsbOhTMiKfvObomv3gcseT2L r6BgylvjN+dVlQ7FhHImyL81Z0yjkJrl/1zi1Q7srtIU9n9amJbWc8blDhkbyP7H fFcb++6Z1fX/y09nn8bnX0L+cWPgiL4bKPq083C2vL5cdixxNgMRx6lRjnRJpnTd QtuYU/OnKtZmcjcGGpbiDppDj2LdwzQ0rRw9Wpxc0++Q7a3xC2oAIYXNqij+Q/S1 cgWmpqoNt7L9MFh4RMh9f5A56Jzdt2KldtTLYTRSfmCzXP4wQLlNM95fjK//1Hp0 UE93dae2NQxfODdDzVWdZP2BD38mrPFk9oR1JTezkfPi9xT5vHU1P69UoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4Y5F4Z/WnG/shJRQrQ/2Hg+ONNMB8GA1UdIwQY MBaAFISjzxFL5PpMT/drIY+tUOUXORYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEtQUEVVdmsta3hQOTJzaGo2MVE1UmM1RmcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MDVmNDYtN2Q0Yy00NmI4LWJhYTUt NTM5MzI5YmVkNDZlLzEvaEtQUEVVdmsta3hQOTJzaGo2MVE1UmM1RmcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82MDVmNDYtN2Q0Yy00NmI4LWJhYTUtNTM5MzI5YmVkNDZl LzEvaEtQUEVVdmsta3hQOTJzaGo2MVE1UmM1RmcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQbZIJt9 L+mddNhnP+R41sYybjdVNpocxiyeWnEuwpog6EcnGWBLbxvedSRdlENz2NNR+qnX P3frYNsEQlMttrCLz4+cpLVU5Lux18BQn8YkymaLbHTqjES77mah8My2NFWI4WVx 9RK1plTJY+gyitQOSXjEPONI/E+ECaqr5nAFOniiXR0Qg+LEszYyL7HoBrur829s 8u5VdQEHlzQhpMJYafODIJjmeSZE2v6KwoPCGfrl9hkWeqomkucrQHKTW6OP+7Qa 5t/QPjHLFFFSLbqVVWN9w8R6FVIAX7QU5yVDMZLLDirYmRtsdDlA/fIDSp6mMMqk l6fxyzfSyMJOaA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:11:09 2025 by rpki-client