This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft File: HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json) Hash identifier: q2f8ZE3UDul1aoMTv58HWGYvZNlHLWVfNuJctLFGrRg= Subject key identifier: 28:F9:A1:8B:66:09:14:EE:3E:F3:D0:D5:BF:2C:B3:84:04:E3:A7:B0 Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A Certificate issuer: /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a Certificate serial: 019B3A9001F68EFF2BCDC9140FCC4C3F29E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft Manifest number: 0583 Signing time: Sat 20 Dec 2025 07:01:14 +0000 Manifest this update: Sat 20 Dec 2025 07:01:14 +0000 Manifest next update: Sun 21 Dec 2025 07:01:14 +0000 Files and hashes: 1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: vN4Z1IvdRTmSMMJqiHWtBdgndeVUXwxknViNxabfeEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:01:f6:8e:ff:2b:cd:c9:14:0f:cc:4c:3f:29:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a Validity Not Before: Dec 20 07:01:14 2025 GMT Not After : Dec 21 07:01:14 2025 GMT Subject: CN=28f9a18b660914ee3ef3d0d5bf2cb38404e3a7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4f:8f:07:39:a6:7f:a2:15:03:ae:e8:72:e1: cc:e9:65:40:96:aa:b5:b3:87:49:19:6c:09:44:63: db:97:9e:c6:34:b5:09:ce:88:98:3a:db:51:27:5c: 76:29:e6:26:27:37:2a:77:eb:db:66:44:ad:f6:03: 9c:a8:73:17:2a:8e:44:d3:0e:7a:a4:db:68:db:95: e9:5d:a2:c6:7c:15:d7:62:61:f5:d8:40:c4:4f:7c: 2e:6a:75:e9:ed:76:1d:b9:21:93:59:1f:5c:04:1a: 73:3f:c0:4f:83:65:8e:d7:43:13:c4:2b:d2:f3:fe: 7f:70:c4:a6:f4:d9:ae:b9:a5:d4:5d:84:0c:b1:11: 4b:47:f7:66:0b:32:54:d9:d7:ba:af:94:d2:d4:71: c3:2c:bf:38:94:87:1b:df:ca:31:cb:7c:1b:ed:b1: c0:49:b9:ce:d3:76:51:54:84:1d:1e:d9:a7:66:c6: ae:c4:2a:2a:56:8c:80:8e:2d:da:a4:da:1a:a7:0b: 9f:4a:ed:e6:11:df:b8:53:b2:39:a3:5d:ef:0f:9a: 75:6b:a4:5f:d3:7c:6e:c7:aa:c6:80:f4:8d:93:e5: 3a:00:a6:4f:40:df:37:98:c4:ce:d8:a3:0f:de:12: 3f:59:9d:fc:08:00:87:5b:8d:d4:07:91:24:50:76: 06:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F9:A1:8B:66:09:14:EE:3E:F3:D0:D5:BF:2C:B3:84:04:E3:A7:B0 X509v3 Authority Key Identifier: keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:64:81:8f:da:d5:41:5a:79:98:5e:74:cc:ad:84:dc:17:ec: a1:d8:d9:76:95:31:55:ae:2b:64:34:95:81:20:9c:2f:cf:59: d5:89:b7:37:16:14:12:73:b8:8c:9b:54:fe:2c:79:69:99:37: 2f:07:ad:43:6e:7b:31:ce:39:03:73:3b:a9:56:d8:94:cd:8a: 3e:2b:82:8a:bd:e6:6d:79:be:4a:1f:34:77:32:36:cd:3d:6c: 95:a5:51:71:e2:b1:89:0f:64:16:0b:ed:2b:44:16:67:00:7d: f1:24:a2:a2:a2:20:ea:42:52:3a:c9:3f:d8:a1:60:86:e6:16: d9:94:1b:32:c9:97:a6:3e:dc:a8:05:af:c2:9e:3f:0c:d9:dd: bc:ec:7b:97:ea:ec:7e:9c:1f:43:03:d9:77:25:82:df:cd:50: cc:8b:c6:dc:80:b4:5b:23:5f:23:aa:91:86:2b:f1:6d:9c:a3: cd:27:a0:8e:12:9f:c8:01:8b:11:fc:27:37:5d:e3:95:2d:58: c0:67:ec:7a:04:42:ec:5c:4f:15:b6:7c:f4:a9:58:05:d8:00: b6:1b:27:e9:7f:26:c9:38:ea:b8:e5:f9:d7:b9:a0:f4:43:43: 60:13:cc:d6:81:cd:cc:03:00:b7:3a:f1:39:61:d0:cf:0b:4f: 12:7b:a2:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kAH2jv8rzckUD8xMPynnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMWI0MWM5MjczZDVlNzYwNWRhMDAyY2Q2YzQwYmQ3MmU1 YWY0MWEwHhcNMjUxMjIwMDcwMTE0WhcNMjUxMjIxMDcwMTE0WjAzMTEwLwYDVQQD EygyOGY5YTE4YjY2MDkxNGVlM2VmM2QwZDViZjJjYjM4NDA0ZTNhN2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6k+PBzmmf6IVA67ocuHM6WVAlqq1 s4dJGWwJRGPbl57GNLUJzoiYOttRJ1x2KeYmJzcqd+vbZkSt9gOcqHMXKo5E0w56 pNto25XpXaLGfBXXYmH12EDET3wuanXp7XYduSGTWR9cBBpzP8BPg2WO10MTxCvS 8/5/cMSm9NmuuaXUXYQMsRFLR/dmCzJU2de6r5TS1HHDLL84lIcb38oxy3wb7bHA SbnO03ZRVIQdHtmnZsauxCoqVoyAji3apNoapwufSu3mEd+4U7I5o13vD5p1a6Rf 03xux6rGgPSNk+U6AKZPQN83mMTO2KMP3hI/WZ38CACHW43UB5EkUHYGZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCj5oYtmCRTuPvPQ1b8ss4QE46ewMB8GA1UdIwQY MBaAFB8bQcknPV52BdoALNbEC9cuWvQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHh0QnlTYzlYbllGMmdBczFzUUwxeTVhOUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iYzI3MjktM2EzMC00Yjk4LThjNDgt NTgxYTdmOTAyMzVhLzEvSHh0QnlTYzlYbllGMmdBczFzUUwxeTVhOUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iYzI3MjktM2EzMC00Yjk4LThjNDgtNTgxYTdmOTAyMzVh LzEvSHh0QnlTYzlYbllGMmdBczFzUUwxeTVhOUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGSBj9rV QVp5mF50zK2E3BfsodjZdpUxVa4rZDSVgSCcL89Z1Ym3NxYUEnO4jJtU/ix5aZk3 LwetQ257Mc45A3M7qVbYlM2KPiuCir3mbXm+Sh80dzI2zT1slaVRceKxiQ9kFgvt K0QWZwB98SSioqIg6kJSOsk/2KFghuYW2ZQbMsmXpj7cqAWvwp4/DNndvOx7l+rs fpwfQwPZdyWC381QzIvG3IC0WyNfI6qRhivxbZyjzSegjhKfyAGLEfwnN13jlS1Y wGfsegRC7FxPFbZ89KlYBdgAthsn6X8myTjquOX517mg9ENDYBPM1oHNzAMAtzrx OWHQzwtPEnui3A== -----END CERTIFICATE-----Generated at Sat Dec 20 11:29:29 2025 by rpki-client