This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft File: hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft (raw, json) Hash identifier: LoDkqEZ+FDcvaJRGTD1BiHH9sX4PktZjhH41pHFXZuU= Subject key identifier: 92:E8:4F:77:FE:74:9F:7B:BD:13:D3:31:AD:93:83:49:74:53:8B:A0 Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68 Certificate issuer: /CN=864f301e590b83eaa38fc121b6609ff6fe52b868 Certificate serial: 019B243F56B75B9EBE5CE2E7573B4630F293 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft Manifest number: 135E Signing time: Mon 15 Dec 2025 23:01:29 +0000 Manifest this update: Mon 15 Dec 2025 23:01:29 +0000 Manifest next update: Tue 16 Dec 2025 23:01:29 +0000 Files and hashes: 1: F1oKspcJIA5CxkgGbXIBC4yC3wU.roa (hash: AKm+230ZJqvJyVXgtMkmTb/sN72RWRXH+8ONP+ImAwA=) 2: hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl (hash: IFftzLdNGEyvpdHr/YkbNd8ftXe81bG9swjbK234wBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3f:56:b7:5b:9e:be:5c:e2:e7:57:3b:46:30:f2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868 Validity Not Before: Dec 15 23:01:29 2025 GMT Not After : Dec 16 23:01:29 2025 GMT Subject: CN=92e84f77fe749f7bbd13d331ad93834974538ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e2:c4:9f:a0:f1:4e:29:72:79:e6:35:ab:6f: ba:f9:2e:62:87:4a:8f:74:24:33:95:b8:c1:74:a9: 2d:b7:ff:89:74:fe:9f:71:d6:55:0e:18:e1:d1:86: ec:f6:22:74:b0:d8:62:f1:69:29:3c:52:c7:3f:a8: 2a:5a:c5:6e:2a:05:3d:a6:d6:23:f5:f7:83:84:7a: 5a:d6:5b:f4:7d:6a:3a:7b:e0:ef:b9:4b:1e:e2:8b: 4d:d0:1d:f4:11:63:a3:3d:98:9e:49:14:3f:f8:d8: 34:f6:77:c6:f1:37:0b:3b:57:18:03:3e:25:4c:1a: 51:fe:9e:8c:4c:9e:42:91:5b:01:88:92:4e:fd:fe: 8f:5d:fc:4d:8e:7a:d4:4f:d4:e4:7e:21:d8:43:09: 49:75:15:27:08:21:07:8d:10:4f:2a:3c:ac:d7:89: 19:ef:50:84:d6:42:5a:95:6d:b2:1d:28:6d:2c:98: f3:b0:9a:32:6c:44:a7:6b:52:5f:f7:21:d5:04:00: 96:5e:09:67:44:0a:5f:ab:4e:d3:e0:1a:1d:07:75: b2:c6:e7:59:31:21:bb:25:3b:41:f5:04:03:a9:c2: ba:ec:5d:ee:48:47:be:35:b7:01:2f:dd:08:25:fb: e7:57:ce:48:69:42:2f:ee:4b:3a:cf:04:60:b0:fa: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E8:4F:77:FE:74:9F:7B:BD:13:D3:31:AD:93:83:49:74:53:8B:A0 X509v3 Authority Key Identifier: keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ea:e4:60:98:5a:51:4e:de:d6:4e:e9:d6:63:b7:a3:e3:38: 20:51:c6:8a:d6:9a:ff:8b:96:fa:4d:52:00:f4:fb:ca:bc:68: 5e:49:3f:9c:f2:f7:87:d2:60:36:d6:26:86:3a:9f:c2:10:06: dc:43:24:34:45:a0:49:2d:2b:c8:e0:4b:be:31:76:20:fe:74: 98:42:86:13:2d:c7:5e:a9:04:1d:f6:15:58:9c:3c:b4:9f:e8: cf:79:37:82:4f:7c:4f:ca:75:9a:41:86:1f:34:6e:75:3f:cf: 77:91:37:b9:20:c3:d1:c9:ad:e1:ce:b4:e7:bf:3f:d4:9e:ab: e4:3c:ab:4a:7f:64:3c:ae:fe:86:07:b2:32:de:c4:24:c6:88: 3f:db:98:38:5b:f8:9f:21:e3:5d:3f:67:1c:25:23:06:14:a3: e7:d2:c0:60:7b:e2:d7:df:c1:81:5a:99:73:43:54:d8:70:76: 6b:84:a6:d0:8d:59:71:61:d2:03:39:3c:5b:45:e5:ca:fb:a6: f9:e6:55:5e:53:4a:ba:a1:62:e4:fc:4d:ee:90:10:17:31:e4: f5:4e:4f:50:8a:a7:9d:38:6c:30:09:a7:f9:a2:e2:27:8b:5e: 25:f6:62:51:14:61:45:8f:53:b1:e3:d2:28:eb:0f:79:ef:ca: f1:9e:a2:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskP1a3W56+XOLnVztGMPKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGYzMDFlNTkwYjgzZWFhMzhmYzEyMWI2NjA5ZmY2ZmU1 MmI4NjgwHhcNMjUxMjE1MjMwMTI5WhcNMjUxMjE2MjMwMTI5WjAzMTEwLwYDVQQD Eyg5MmU4NGY3N2ZlNzQ5ZjdiYmQxM2QzMzFhZDkzODM0OTc0NTM4YmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquLEn6DxTilyeeY1q2+6+S5ih0qP dCQzlbjBdKktt/+JdP6fcdZVDhjh0Ybs9iJ0sNhi8WkpPFLHP6gqWsVuKgU9ptYj 9feDhHpa1lv0fWo6e+DvuUse4otN0B30EWOjPZieSRQ/+Ng09nfG8TcLO1cYAz4l TBpR/p6MTJ5CkVsBiJJO/f6PXfxNjnrUT9TkfiHYQwlJdRUnCCEHjRBPKjys14kZ 71CE1kJalW2yHShtLJjzsJoybESna1Jf9yHVBACWXglnRApfq07T4BodB3WyxudZ MSG7JTtB9QQDqcK67F3uSEe+NbcBL90IJfvnV85IaUIv7ks6zwRgsPqVvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLoT3f+dJ97vRPTMa2Tg0l0U4ugMB8GA1UdIwQY MBaAFIZPMB5ZC4Pqo4/BIbZgn/b+UrhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGs4d0hsa0xnLXFqajhFaHRtQ2Y5djVTdUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82MjRmNjQtMGE0YS00ZDI1LWFmY2Ut MGYzOWM0YjM0MzFkLzEvaGs4d0hsa0xnLXFqajhFaHRtQ2Y5djVTdUdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi82MjRmNjQtMGE0YS00ZDI1LWFmY2UtMGYzOWM0YjM0MzFk LzEvaGs4d0hsa0xnLXFqajhFaHRtQ2Y5djVTdUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOrkYJha UU7e1k7p1mO3o+M4IFHGitaa/4uW+k1SAPT7yrxoXkk/nPL3h9JgNtYmhjqfwhAG 3EMkNEWgSS0ryOBLvjF2IP50mEKGEy3HXqkEHfYVWJw8tJ/oz3k3gk98T8p1mkGG HzRudT/Pd5E3uSDD0cmt4c60578/1J6r5DyrSn9kPK7+hgeyMt7EJMaIP9uYOFv4 nyHjXT9nHCUjBhSj59LAYHvi19/BgVqZc0NU2HB2a4Sm0I1ZcWHSAzk8W0Xlyvum +eZVXlNKuqFi5PxN7pAQFzHk9U5PUIqnnThsMAmn+aLiJ4teJfZiURRhRY9TsePS KOsPee/K8Z6icg== -----END CERTIFICATE-----Generated at Tue Dec 16 03:17:18 2025 by rpki-client