This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json) Hash identifier: v+QAq5x8ATGH56uDHOkWIA3bhVyv2YuFwy9AQjaxrck= Subject key identifier: 65:03:04:18:6C:19:21:4F:E6:FE:4C:A8:38:19:E2:12:28:13:E5:FE Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b Certificate serial: 019B37C5F66B543BE7C58F3F6BD63B92A01C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft Manifest number: 0729 Signing time: Fri 19 Dec 2025 18:01:19 +0000 Manifest this update: Fri 19 Dec 2025 18:01:19 +0000 Manifest next update: Sat 20 Dec 2025 18:01:19 +0000 Files and hashes: 1: aSUGfC8WVdHXrkeRZf6pzwHN77M.roa (hash: NZqhUfFIINMzbyR/Huf0dRcUDWz5/YZwIQ3PYJryja4=) 2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: wnkeM8AVUwEtUU7ZA9s35YuRXzWMkwJ4CXVrESNnkDs=) 3: qiRFgTjVRdabsTRRM1YWXUGLw64.roa (hash: lCjSoDx/oZnpAtqpweWxZW6jo+ICoZqCCQhV41u6/VM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:f6:6b:54:3b:e7:c5:8f:3f:6b:d6:3b:92:a0:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b Validity Not Before: Dec 19 18:01:19 2025 GMT Not After : Dec 20 18:01:19 2025 GMT Subject: CN=650304186c19214fe6fe4ca83819e2122813e5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:b3:95:33:3d:0c:f1:46:a8:22:d8:08:dc: 1e:d6:e7:fe:97:d5:82:e1:35:bf:c9:bb:86:81:9d: 66:03:93:93:d7:95:b4:ba:e5:87:3f:90:a5:93:f4: 58:94:4d:a3:35:d9:45:f8:96:4d:19:df:10:dd:45: a7:b6:45:0e:f2:f2:cc:cd:db:ac:7d:91:81:1b:96: e5:75:8b:ee:13:fe:4a:06:46:1d:ef:4a:ef:95:a2: 19:dd:a5:4f:77:a7:74:87:81:83:db:33:58:20:c3: 01:82:d6:8b:54:23:b1:fd:23:30:38:0d:19:1e:74: 0c:16:28:6a:36:d2:90:ee:71:d4:9b:de:c9:71:46: 23:10:49:9d:58:87:b1:10:c7:00:aa:28:25:8f:14: f0:3e:73:c3:26:52:9b:6a:03:82:53:48:04:cb:f3: f4:2b:76:8e:e2:84:65:c7:5b:74:96:ce:0a:1f:e3: f3:7f:87:79:e9:00:da:09:64:49:ea:af:0e:49:90: a4:2f:c1:4b:45:26:b0:ed:01:39:f0:f2:dc:0c:ae: cf:38:d3:91:90:81:83:05:c1:a0:d2:d0:97:a7:7c: 3b:bc:b4:be:46:99:0c:26:7f:b4:af:05:12:7f:31: 5f:32:80:b4:d3:db:76:53:2f:be:8d:68:76:f6:40: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:03:04:18:6C:19:21:4F:E6:FE:4C:A8:38:19:E2:12:28:13:E5:FE X509v3 Authority Key Identifier: keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:dc:36:35:c0:fc:56:4b:1a:1c:65:14:27:c8:ac:66:63:7b: fc:b3:56:9c:77:3a:6a:24:af:40:a3:4a:de:e6:83:46:a0:0d: 86:8e:5c:7d:db:f3:32:b5:aa:80:8f:3a:7f:7c:b4:1d:b5:de: b8:0e:0c:86:c1:2a:2b:50:12:01:ff:b6:d2:da:72:d8:53:50: 53:32:56:20:9a:27:f1:df:33:03:ad:69:50:5e:12:00:ba:c3: 43:fb:9c:f7:86:2f:35:48:fb:2f:cd:3e:bc:42:2c:00:cd:56: 9a:c4:9c:6c:35:96:a8:97:91:e5:72:e5:fd:8d:9c:e0:49:ac: 9e:d6:32:0c:a0:df:3f:92:ee:8f:0a:a1:d6:39:de:c4:64:c7: 46:34:38:00:97:ce:82:e1:12:8f:d7:1a:62:3d:64:be:eb:a1: 37:c3:79:29:8f:09:5c:b3:eb:49:a8:8e:a1:79:db:e4:94:58: ea:f8:e4:51:7c:ef:50:b0:9f:0a:1c:49:cd:b5:2d:d6:38:e0: a4:db:c6:b3:bd:1e:99:f2:07:b1:ac:2d:2e:47:61:c8:46:b2: 02:2c:95:17:b0:01:c1:af:f6:20:d3:ea:5c:d1:5b:c3:46:05: 0f:9e:f2:07:d8:b8:53:a3:70:22:fa:bb:e7:e8:3d:f1:48:78: a2:e4:3b:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xfZrVDvnxY8/a9Y7kqAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NDkyZjJhNjkxMDQzM2M1YmNkODI2OWM0NDBlOGMxYzc4 MDBkNmIwHhcNMjUxMjE5MTgwMTE5WhcNMjUxMjIwMTgwMTE5WjAzMTEwLwYDVQQD Eyg2NTAzMDQxODZjMTkyMTRmZTZmZTRjYTgzODE5ZTIxMjI4MTNlNWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEmzlTM9DPFGqCLYCNwe1uf+l9WC 4TW/ybuGgZ1mA5OT15W0uuWHP5Clk/RYlE2jNdlF+JZNGd8Q3UWntkUO8vLMzdus fZGBG5bldYvuE/5KBkYd70rvlaIZ3aVPd6d0h4GD2zNYIMMBgtaLVCOx/SMwOA0Z HnQMFihqNtKQ7nHUm97JcUYjEEmdWIexEMcAqigljxTwPnPDJlKbagOCU0gEy/P0 K3aO4oRlx1t0ls4KH+Pzf4d56QDaCWRJ6q8OSZCkL8FLRSaw7QE58PLcDK7PONOR kIGDBcGg0tCXp3w7vLS+RpkMJn+0rwUSfzFfMoC009t2Uy++jWh29kBQCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUDBBhsGSFP5v5MqDgZ4hIoE+X+MB8GA1UdIwQY MBaAFIVJLyppEEM8W82CacRA6MHHgA1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFVrdktta1FRenhiellKcHhFRG93Y2VBRFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iMzgyMjgtMDg3NS00OTFjLTlkNGYt ZDZhOWEyODI4NGNmLzEvaFVrdktta1FRenhiellKcHhFRG93Y2VBRFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iMzgyMjgtMDg3NS00OTFjLTlkNGYtZDZhOWEyODI4NGNm LzEvaFVrdktta1FRenhiellKcHhFRG93Y2VBRFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNw2NcD8 VksaHGUUJ8isZmN7/LNWnHc6aiSvQKNK3uaDRqANho5cfdvzMrWqgI86f3y0HbXe uA4MhsEqK1ASAf+20tpy2FNQUzJWIJon8d8zA61pUF4SALrDQ/uc94YvNUj7L80+ vEIsAM1WmsScbDWWqJeR5XLl/Y2c4EmsntYyDKDfP5Lujwqh1jnexGTHRjQ4AJfO guESj9caYj1kvuuhN8N5KY8JXLPrSaiOoXnb5JRY6vjkUXzvULCfChxJzbUt1jjg pNvGs70emfIHsawtLkdhyEayAiyVF7ABwa/2INPqXNFbw0YFD57yB9i4U6NwIvq7 5+g98Uh4ouQ7CA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:12:28 2025 by rpki-client