This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json) Hash identifier: PreiR42IwLTjnI9KpLeo4SJQNAr6zsw5XNr15y63op4= Subject key identifier: 6E:72:12:8D:D0:09:85:2A:8B:96:BC:BA:B5:19:C1:4E:16:D8:3F:B2 Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0 Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0 Certificate serial: 019B0E5BE6F4EC3FB865FE6E4F9008284355 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft Manifest number: 0F35 Signing time: Thu 11 Dec 2025 17:01:02 +0000 Manifest this update: Thu 11 Dec 2025 17:01:02 +0000 Manifest next update: Fri 12 Dec 2025 17:01:02 +0000 Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: aIKfoZRFaajlS7Gn0dPsyEuPnRZJtWpyhZN3izTaTmk=) 2: aRJc7_o9XgAW9PPEgC1zuufULQk.roa (hash: aNwMxPIgMebl0KXeBZmaqOEDWlNAdOizWVRuMjJ0OEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:e6:f4:ec:3f:b8:65:fe:6e:4f:90:08:28:43:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0 Validity Not Before: Dec 11 17:01:02 2025 GMT Not After : Dec 12 17:01:02 2025 GMT Subject: CN=6e72128dd009852a8b96bcbab519c14e16d83fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:75:55:d3:3e:a0:a5:7e:06:62:c9:93:bb: e1:81:63:ac:2e:8f:6b:98:65:c9:4d:2e:cc:b6:47: 79:a9:bb:44:30:f4:1e:66:43:4a:d3:58:ee:49:8e: 83:32:5d:13:fc:94:b8:16:3c:8e:f6:92:b3:f2:e1: 7d:b6:78:f9:bb:1b:88:da:96:73:69:f4:6e:7e:e6: 55:87:72:51:e0:91:09:63:26:41:04:5c:80:5d:8e: de:77:5e:59:fa:07:d7:85:d3:15:58:2b:83:f8:e8: 65:aa:e5:9b:0e:cf:4f:af:e1:21:03:8f:5f:4e:29: 27:69:43:81:b7:c3:15:61:38:b5:e9:dc:73:1c:e6: 85:21:e1:bd:ed:d4:14:2d:fe:ee:c1:14:1a:de:f4: f4:5b:d3:83:78:c0:78:09:f4:c6:83:9e:16:68:18: b8:af:b9:72:04:16:24:b5:da:50:b8:57:ce:9b:e2: 79:e6:97:23:5b:10:35:4a:4f:df:82:a7:d6:22:46: 9a:b7:ec:27:6a:47:6a:57:32:53:14:59:a3:40:20: 75:2f:0f:bb:ce:86:9c:1d:b1:ef:f1:e3:29:fe:2e: 53:ab:23:5e:48:7e:11:bc:fd:f0:ab:6a:59:47:28: ce:9a:d9:a8:05:8a:3e:15:ba:3b:e7:77:fc:e4:44: 28:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:72:12:8D:D0:09:85:2A:8B:96:BC:BA:B5:19:C1:4E:16:D8:3F:B2 X509v3 Authority Key Identifier: keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:8e:d2:17:e3:0e:7e:66:4a:28:05:41:b5:54:42:55:ae:88: b7:9f:2d:9d:50:a5:68:56:d0:e2:d5:7a:f0:38:5b:04:81:5c: 5e:c0:29:e3:2e:96:c4:44:c7:b2:41:65:12:c6:2f:f0:eb:01: 4c:65:bd:89:cc:0c:3f:a4:5f:36:1c:26:d1:0b:c8:2a:a6:3c: bf:7d:80:e1:73:62:38:b9:63:3d:c8:35:f5:f9:e6:e7:85:69: 69:b7:88:6e:fc:b1:ff:3c:40:ed:7e:b6:c1:0e:23:f8:dd:58: cb:08:88:98:99:45:2a:e8:96:33:e3:d9:25:18:ef:76:db:29: ea:c5:f0:df:45:3f:8b:fa:60:61:88:9f:79:ab:02:de:1b:40: ad:b1:41:46:8e:b1:eb:10:7f:de:66:b5:5a:50:2a:14:62:29: 5a:69:b3:0e:67:ec:f2:04:d3:e4:98:ae:e8:f1:15:7a:09:c9: 3a:10:01:e9:d5:15:1a:58:cd:58:a6:52:76:6a:65:a2:83:c9: 38:a7:a9:8a:54:29:ae:1d:6b:42:bc:aa:ad:df:37:13:fd:a0: 0e:54:de:a5:89:8e:78:cd:54:d9:8b:83:02:e9:f9:4b:52:39: ce:e7:0d:c7:f1:03:d4:e0:6d:23:10:0d:7d:62:fe:b5:51:ee: b5:65:3f:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW+b07D+4Zf5uT5AIKENVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYjkzYjgzYmFmYWQ3YmZkOTRmNjc2YzAyMWJhYWI1MTg3 MDA3ZjAwHhcNMjUxMjExMTcwMTAyWhcNMjUxMjEyMTcwMTAyWjAzMTEwLwYDVQQD Eyg2ZTcyMTI4ZGQwMDk4NTJhOGI5NmJjYmFiNTE5YzE0ZTE2ZDgzZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJR1VdM+oKV+BmLJk7vhgWOsLo9r mGXJTS7Mtkd5qbtEMPQeZkNK01juSY6DMl0T/JS4FjyO9pKz8uF9tnj5uxuI2pZz afRufuZVh3JR4JEJYyZBBFyAXY7ed15Z+gfXhdMVWCuD+OhlquWbDs9Pr+EhA49f TiknaUOBt8MVYTi16dxzHOaFIeG97dQULf7uwRQa3vT0W9ODeMB4CfTGg54WaBi4 r7lyBBYktdpQuFfOm+J55pcjWxA1Sk/fgqfWIkaat+wnakdqVzJTFFmjQCB1Lw+7 zoacHbHv8eMp/i5TqyNeSH4RvP3wq2pZRyjOmtmoBYo+Fbo753f85EQozwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5yEo3QCYUqi5a8urUZwU4W2D+yMB8GA1UdIwQY MBaAFB25O4O6+te/2U9nbAIbqrUYcAfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTMwMDktOGYyZS00MjBjLTliZGYt YmU3NDkwODE4NmYwLzEvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTMwMDktOGYyZS00MjBjLTliZGYtYmU3NDkwODE4NmYw LzEvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOI7SF+MO fmZKKAVBtVRCVa6It58tnVClaFbQ4tV68DhbBIFcXsAp4y6WxETHskFlEsYv8OsB TGW9icwMP6RfNhwm0QvIKqY8v32A4XNiOLljPcg19fnm54VpabeIbvyx/zxA7X62 wQ4j+N1YywiImJlFKuiWM+PZJRjvdtsp6sXw30U/i/pgYYifeasC3htArbFBRo6x 6xB/3ma1WlAqFGIpWmmzDmfs8gTT5Jiu6PEVegnJOhAB6dUVGljNWKZSdmplooPJ OKepilQprh1rQryqrd83E/2gDlTepYmOeM1U2YuDAun5S1I5zucNx/ED1OBtIxAN fWL+tVHutWU/vA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:00:55 2025 by rpki-client