This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json) Hash identifier: Ophtwl0sdOIEzb2GzV72UWZd1Ek99f4qz1wPeI3bWnw= Subject key identifier: 79:C8:22:6C:21:86:C2:0F:A3:43:BD:ED:6E:A4:87:5D:9C:26:DE:D5 Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3 Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3 Certificate serial: 019B353287DAF1223250A11A5261E382F99F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 06:01:02 +0000 Manifest this update: Fri 19 Dec 2025 06:01:02 +0000 Manifest next update: Sat 20 Dec 2025 06:01:02 +0000 Files and hashes: 1: S-FqJ5rHJScfH16THhv-Awb7K-Q.roa (hash: qZ4G5Ir5+2IF3qwAQCRLSDxYrzLLeDBCxC9VdbkE9zU=) 2: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: zX4mRCjDxnvXR0I1fNhl3CszEVTPADWNerFjtc8LfOI=) 3: ie3Ij3d9SbHwlFZKN1iAPlTDPF8.roa (hash: LDgmzuKBYv7wHEv9dhDlxCP+uQjNRE91nisvU0AfRTM=) 4: pWgX5JiF8p7IJPd1N7EyBTiovEk.roa (hash: b0ArhWGdNOXnp+wzwnp1QcD9Bn6HmXnGIfByPMG51fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:87:da:f1:22:32:50:a1:1a:52:61:e3:82:f9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3 Validity Not Before: Dec 19 06:01:02 2025 GMT Not After : Dec 20 06:01:02 2025 GMT Subject: CN=79c8226c2186c20fa343bded6ea4875d9c26ded5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:db:07:bd:e3:fa:d5:2b:d5:3d:f0:a4:69:9b: d2:97:52:27:89:c6:75:d6:5b:5d:82:5f:9f:59:6b: 67:7b:c5:08:11:51:ce:3d:34:f2:a9:e9:67:55:be: dd:29:fc:da:20:41:f9:35:3e:37:86:18:c8:b4:98: b3:dd:32:7c:1c:81:b4:96:6e:b4:c1:0e:be:d6:94: 74:c4:1d:12:03:3e:ef:47:a3:d2:62:fe:66:cd:2c: a6:96:37:5f:0f:a4:63:51:ba:bf:71:bc:c4:f2:c7: ce:1f:92:cf:1e:bc:8f:3c:6d:76:80:6f:c0:85:dd: 68:7e:a9:f3:56:98:96:ba:d7:b5:91:c9:c4:1a:a9: 85:d9:56:21:82:28:41:fb:38:2a:3c:4a:1d:d4:8b: 34:dd:ae:97:f7:96:bb:3c:d4:a1:6a:0a:99:8a:db: 82:f5:5f:c7:db:ad:6a:93:f6:59:1c:b4:ca:71:96: c9:cd:e8:0f:8c:ea:eb:73:a0:86:36:0f:3f:0f:a2: bc:9e:64:4d:16:e9:42:3d:f8:c8:19:d1:68:ef:96: f7:cb:52:21:a2:cf:bd:62:b4:c8:d0:db:83:9c:e5: e2:4d:0a:6d:ea:ec:4f:1e:72:6b:2a:39:c9:fc:7c: ab:2e:89:24:8e:67:05:f0:b1:49:e8:ff:43:48:5b: 82:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C8:22:6C:21:86:C2:0F:A3:43:BD:ED:6E:A4:87:5D:9C:26:DE:D5 X509v3 Authority Key Identifier: keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:37:ab:8e:bd:65:36:a8:1a:8a:96:bd:84:bd:8b:d1:43:5e: d5:be:9f:7a:80:2f:b1:50:78:41:95:68:d2:64:8b:1a:94:1b: 72:94:c5:f9:04:25:46:8e:52:5b:19:a9:af:44:40:12:d0:17: 64:a1:41:3a:9c:fa:cc:e9:4b:ff:c5:af:b2:95:c6:0b:92:91: d4:bc:03:c2:24:0a:e1:f1:77:29:2f:31:ba:94:6a:f4:b3:b3: da:25:ce:dc:9a:8e:f8:7b:71:72:c6:6f:4f:ab:ce:5b:a8:38: bb:ca:22:9f:72:f9:a5:21:4a:02:3c:b1:82:7d:20:f7:56:17: 14:9a:50:f3:42:ed:48:b9:d1:16:4a:50:61:32:d4:d0:62:b9: 50:2c:65:cf:f7:a5:68:ef:43:6f:9b:72:37:18:3b:c7:d7:f8: 66:20:b8:23:32:07:79:10:d2:05:bb:9b:0b:32:99:1a:5f:a6: 0e:2a:06:f4:ad:fa:ec:c3:c7:7b:f4:1f:c3:49:1d:73:28:6d: e5:a0:7c:f4:7e:89:0f:19:c2:ed:22:66:4e:a6:e6:ac:33:99: be:62:5d:6e:87:27:3d:5b:2a:b8:64:68:3d:23:50:31:0a:1c: 6b:fb:37:8e:a1:da:68:ea:7a:7f:ae:a7:03:e2:54:0a:42:7e: 5a:f3:eb:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mofa8SIyUKEaUmHjgvmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MTA3ZTNmZDliOTRiNGIzNmU2YThmMzcwZTg2NTBhN2Y1 N2U2YzMwHhcNMjUxMjE5MDYwMTAyWhcNMjUxMjIwMDYwMTAyWjAzMTEwLwYDVQQD Eyg3OWM4MjI2YzIxODZjMjBmYTM0M2JkZWQ2ZWE0ODc1ZDljMjZkZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59sHveP61SvVPfCkaZvSl1InicZ1 1ltdgl+fWWtne8UIEVHOPTTyqelnVb7dKfzaIEH5NT43hhjItJiz3TJ8HIG0lm60 wQ6+1pR0xB0SAz7vR6PSYv5mzSymljdfD6RjUbq/cbzE8sfOH5LPHryPPG12gG/A hd1ofqnzVpiWute1kcnEGqmF2VYhgihB+zgqPEod1Is03a6X95a7PNShagqZituC 9V/H261qk/ZZHLTKcZbJzegPjOrrc6CGNg8/D6K8nmRNFulCPfjIGdFo75b3y1Ih os+9YrTI0NuDnOXiTQpt6uxPHnJrKjnJ/HyrLokkjmcF8LFJ6P9DSFuCoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnIImwhhsIPo0O97W6kh12cJt7VMB8GA1UdIwQY MBaAFIcQfj/ZuUtLNuao83DoZQp/V+bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTkzOTAtODA0OC00M2I5LTgyYjUt NzYxZGFiMzg5YjViLzEvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hNTkzOTAtODA0OC00M2I5LTgyYjUtNzYxZGFiMzg5YjVi LzEvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjerjr1l Nqgaipa9hL2L0UNe1b6feoAvsVB4QZVo0mSLGpQbcpTF+QQlRo5SWxmpr0RAEtAX ZKFBOpz6zOlL/8WvspXGC5KR1LwDwiQK4fF3KS8xupRq9LOz2iXO3JqO+HtxcsZv T6vOW6g4u8oin3L5pSFKAjyxgn0g91YXFJpQ80LtSLnRFkpQYTLU0GK5UCxlz/el aO9Db5tyNxg7x9f4ZiC4IzIHeRDSBbubCzKZGl+mDioG9K367MPHe/Qfw0kdcyht 5aB89H6JDxnC7SJmTqbmrDOZvmJdbocnPVsquGRoPSNQMQoca/s3jqHaaOp6f66n A+JUCkJ+WvPrxg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:07:18 2025 by rpki-client