This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft File: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft (raw, json) Hash identifier: 0IGfTwPAVJMvaJi/22nNwJlttzCzeZo5OMa1N4omYNc= Subject key identifier: 57:04:54:B4:68:7A:06:D2:BC:A9:98:E2:EF:1C:9D:AE:28:E7:85:4F Authority key identifier: 1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A Certificate issuer: /CN=1ca4bf6c9a50c81f04b029836a427861ad72829a Certificate serial: 019B5ABF682970074F1ABECD8C9FFD7D6691 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft Manifest number: 0E07 Signing time: Fri 26 Dec 2025 13:00:52 +0000 Manifest this update: Fri 26 Dec 2025 13:00:52 +0000 Manifest next update: Sat 27 Dec 2025 13:00:52 +0000 Files and hashes: 1: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl (hash: hKktr9sdlohVKJu/PKyqcAkvJXjSKwa2J3sZwPbJAJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:68:29:70:07:4f:1a:be:cd:8c:9f:fd:7d:66:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ca4bf6c9a50c81f04b029836a427861ad72829a Validity Not Before: Dec 26 13:00:52 2025 GMT Not After : Dec 27 13:00:52 2025 GMT Subject: CN=570454b4687a06d2bca998e2ef1c9dae28e7854f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b5:d6:a5:f7:b8:cd:89:8a:db:a4:17:02:12: 8c:ae:97:34:c6:69:44:be:75:44:52:89:bb:30:47: 49:c3:05:33:7d:7f:63:4a:32:2e:b2:36:51:4a:38: db:e2:e0:69:c5:af:b5:a6:9e:13:27:b0:99:50:c1: a0:c3:53:9c:4f:ab:90:69:06:ed:b1:01:d4:e3:1f: 57:6b:55:0b:8d:a2:cb:57:f2:6b:f1:99:a1:0f:f7: 45:20:01:4f:b2:84:9b:44:ae:d9:4e:ad:9a:b7:68: 76:09:88:1b:fa:82:37:26:4b:89:73:0f:13:e2:40: 97:fe:df:74:25:44:f3:64:1a:1a:5b:1a:37:7e:9b: 52:ab:0b:5d:73:20:e3:6f:86:73:d6:0f:7b:ec:6f: fd:98:d9:9f:39:11:fd:1f:d4:a9:2b:20:09:ff:f7: 80:33:95:0c:f7:1a:8c:17:38:66:29:ab:80:b3:0a: 9c:a5:ca:bc:5f:ab:33:a7:7f:d8:f3:b1:0b:ac:20: bf:e6:6e:e7:2a:2f:f4:59:74:ad:65:f3:13:68:38: f0:9a:5f:76:94:24:ad:db:01:f2:73:03:2d:c8:c4: 46:8a:25:b3:c7:68:92:3f:2a:19:33:a1:99:f8:45: fb:24:ad:72:80:73:b3:d7:a1:9e:62:ef:78:ec:f4: f4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:04:54:B4:68:7A:06:D2:BC:A9:98:E2:EF:1C:9D:AE:28:E7:85:4F X509v3 Authority Key Identifier: keyid:1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:8e:d5:e2:b9:8c:c5:eb:44:a5:55:fe:fe:21:ef:66:c6:04: 0b:24:a2:8a:f6:7a:8d:b1:c0:cd:c9:f5:4c:1a:9b:19:c6:4f: 29:78:18:15:c3:5e:59:0f:7e:2a:d9:c7:f5:c4:ef:24:b9:e5: 29:d1:19:35:af:11:34:09:bf:29:fb:cd:08:73:27:e0:1d:2c: 37:ff:8e:4d:60:64:08:1a:80:aa:0d:7e:b0:2a:d3:f5:12:ea: 06:47:ba:1c:0c:49:f0:f0:04:ef:b0:8a:3a:97:e8:14:a2:9b: 4e:3a:d1:f4:9d:0d:20:9b:fb:d7:71:25:26:8e:0a:eb:ce:8e: e3:b6:36:cb:bf:48:83:0c:d9:b4:68:c3:e0:7d:7c:88:1b:b1: 31:d9:4a:c0:75:cb:cd:ce:68:92:3e:0b:98:be:68:13:d1:89: fb:44:b8:9e:73:26:95:42:0b:01:ea:f6:3b:a3:73:60:b9:4d: 91:bc:f1:7d:24:e5:86:26:6b:46:07:5d:4a:26:94:c4:fc:3d: d8:a4:97:6d:78:7d:6c:24:2b:61:da:1c:27:c6:6e:c7:da:3f: 07:65:02:d6:a6:d9:65:04:3b:6f:6e:92:fc:7f:80:d4:0a:df: cb:bd:85:73:28:84:5a:a1:91:9c:af:16:e3:99:a8:f7:ca:1a: 6a:05:11:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav2gpcAdPGr7NjJ/9fWaRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYTRiZjZjOWE1MGM4MWYwNGIwMjk4MzZhNDI3ODYxYWQ3 MjgyOWEwHhcNMjUxMjI2MTMwMDUyWhcNMjUxMjI3MTMwMDUyWjAzMTEwLwYDVQQD Eyg1NzA0NTRiNDY4N2EwNmQyYmNhOTk4ZTJlZjFjOWRhZTI4ZTc4NTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7XWpfe4zYmK26QXAhKMrpc0xmlE vnVEUom7MEdJwwUzfX9jSjIusjZRSjjb4uBpxa+1pp4TJ7CZUMGgw1OcT6uQaQbt sQHU4x9Xa1ULjaLLV/Jr8ZmhD/dFIAFPsoSbRK7ZTq2at2h2CYgb+oI3JkuJcw8T 4kCX/t90JUTzZBoaWxo3fptSqwtdcyDjb4Zz1g977G/9mNmfORH9H9SpKyAJ//eA M5UM9xqMFzhmKauAswqcpcq8X6szp3/Y87ELrCC/5m7nKi/0WXStZfMTaDjwml92 lCSt2wHycwMtyMRGiiWzx2iSPyoZM6GZ+EX7JK1ygHOz16GeYu947PT0GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcEVLRoegbSvKmY4u8cna4o54VPMB8GA1UdIwQY MBaAFBykv2yaUMgfBLApg2pCeGGtcoKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEtTX2JKcFF5QjhFc0NtRGFrSjRZYTF5Z3BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lYmQwNjEtNmMwMC00YzhiLWE4OGUt NWY4NGI2OGRkMDQ0LzEvSEtTX2JKcFF5QjhFc0NtRGFrSjRZYTF5Z3BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lYmQwNjEtNmMwMC00YzhiLWE4OGUtNWY4NGI2OGRkMDQ0 LzEvSEtTX2JKcFF5QjhFc0NtRGFrSjRZYTF5Z3BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGI7V4rmM xetEpVX+/iHvZsYECySiivZ6jbHAzcn1TBqbGcZPKXgYFcNeWQ9+KtnH9cTvJLnl KdEZNa8RNAm/KfvNCHMn4B0sN/+OTWBkCBqAqg1+sCrT9RLqBke6HAxJ8PAE77CK OpfoFKKbTjrR9J0NIJv713ElJo4K686O47Y2y79IgwzZtGjD4H18iBuxMdlKwHXL zc5okj4LmL5oE9GJ+0S4nnMmlUILAer2O6NzYLlNkbzxfSTlhiZrRgddSiaUxPw9 2KSXbXh9bCQrYdocJ8Zux9o/B2UC1qbZZQQ7b26S/H+A1Arfy72FcyiEWqGRnK8W 45mo98oaagURNg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:06 2025 by rpki-client