This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft File: HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft (raw, json) Hash identifier: MDOLRZwAirybUXZ5VSJxnr7LvbcxAJPTFVHCgeBR/kM= Subject key identifier: B2:92:66:CB:A4:07:A3:EF:FB:55:4E:7E:2A:75:5A:43:00:27:7F:B9 Authority key identifier: 1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8 Certificate issuer: /CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8 Certificate serial: 019B32D7A7DFCB11B2786E664635A6454D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft Manifest number: 0639 Signing time: Thu 18 Dec 2025 19:02:32 +0000 Manifest this update: Thu 18 Dec 2025 19:02:32 +0000 Manifest next update: Fri 19 Dec 2025 19:02:32 +0000 Files and hashes: 1: 6KBWfvurH0ryN0klNLmOfIfXS50.roa (hash: bQYxwK8PunB8us4iL4+kd3a48QuBW1TD23kpBG66hec=) 2: HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl (hash: XfMBJ0quv30bHHRoRN10KIKRqvA4ZMZ49bTcLgRkvrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:a7:df:cb:11:b2:78:6e:66:46:35:a6:45:4d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8 Validity Not Before: Dec 18 19:02:32 2025 GMT Not After : Dec 19 19:02:32 2025 GMT Subject: CN=b29266cba407a3effb554e7e2a755a4300277fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:73:19:8e:a7:43:a2:7b:d6:27:d8:f6:36:75: b9:57:4b:e7:c6:2e:99:71:c2:56:fb:d5:f0:cb:3d: 02:74:80:36:0c:98:6b:44:b1:9b:85:a1:f7:31:4b: 5e:6a:a4:32:73:cd:51:49:53:67:2b:e5:9d:10:04: ba:2b:1b:05:0d:81:12:a8:99:b2:57:fc:3c:9a:13: 62:d2:c6:18:95:90:a5:a5:c4:bc:6f:ae:db:c5:07: f7:75:26:c9:58:9f:47:60:06:d7:30:67:c7:f8:3e: 3f:86:7e:e4:5d:95:30:49:8d:7d:30:53:91:be:e9: 54:cc:4e:28:f6:1f:08:36:04:b6:95:d1:05:0c:98: 5b:60:a5:3c:0c:82:5f:f9:0e:74:d2:5d:a8:01:b0: 68:4d:f1:47:67:83:e1:a5:58:22:84:bf:67:7b:8e: 94:3f:b9:bc:f0:e5:43:16:9c:0f:65:8b:a0:c1:e9: 88:0b:da:2f:f8:1d:31:42:04:70:91:00:74:ae:e7: fc:f9:c8:b0:93:7c:3e:26:74:5e:e8:d0:e0:74:1a: 6e:6e:09:40:18:a0:13:4e:21:e1:09:88:33:8b:dd: 1e:78:40:4b:8a:db:c0:45:4e:d3:8a:f7:63:43:b3: 7f:a0:7c:cc:a7:fe:22:90:1b:77:8c:4d:e2:5f:13: 1a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:92:66:CB:A4:07:A3:EF:FB:55:4E:7E:2A:75:5A:43:00:27:7F:B9 X509v3 Authority Key Identifier: keyid:1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:44:68:ba:49:6c:43:8d:2e:02:ab:81:c3:e4:73:73:f0:f0: 4f:6e:fa:a0:45:a8:fa:5c:6c:ae:0f:c8:0a:23:53:50:83:59: 6f:07:2e:ce:bb:af:49:bd:68:97:2c:ad:88:eb:8b:5a:59:9e: 2b:0e:b1:c8:58:59:21:ed:ab:3a:63:88:31:08:f0:f6:c9:3b: 96:a4:f9:67:c9:83:7f:bf:e4:27:fe:49:d0:e8:a4:0b:c2:89: 47:21:8e:8f:8b:06:e0:50:01:6a:39:82:7e:44:22:68:93:12: b0:14:eb:76:68:28:d5:3f:d5:9c:40:aa:a7:11:57:66:9d:18: 4a:0f:97:16:52:fb:a7:d6:93:b1:05:49:b5:39:98:4a:9e:c1: 99:bf:28:a6:e5:6f:36:c3:cf:48:b1:7c:fb:5e:06:1e:2d:47: 9d:52:25:e0:5b:98:bc:c9:a2:49:28:46:a8:fa:8e:a0:95:8f: 42:10:41:7e:da:0a:28:c1:90:62:f2:8d:ca:53:c6:9b:65:ab: d8:6b:a9:93:60:41:67:81:57:0e:fd:71:92:85:69:ad:dc:6e: a4:c6:78:74:24:0e:0d:94:85:3a:1b:8a:02:39:85:c1:03:a6: b0:23:96:af:9b:9a:ee:4c:1b:b5:0d:f6:67:1e:9b:41:e2:05: d4:8e:79:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy16ffyxGyeG5mRjWmRU2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMTI0NzhiMWNhNGNiYTAzMDk5MWJkOGNiNDRkOWYyNGY1 OWMwYjgwHhcNMjUxMjE4MTkwMjMyWhcNMjUxMjE5MTkwMjMyWjAzMTEwLwYDVQQD EyhiMjkyNjZjYmE0MDdhM2VmZmI1NTRlN2UyYTc1NWE0MzAwMjc3ZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HMZjqdDonvWJ9j2NnW5V0vnxi6Z ccJW+9Xwyz0CdIA2DJhrRLGbhaH3MUteaqQyc81RSVNnK+WdEAS6KxsFDYESqJmy V/w8mhNi0sYYlZClpcS8b67bxQf3dSbJWJ9HYAbXMGfH+D4/hn7kXZUwSY19MFOR vulUzE4o9h8INgS2ldEFDJhbYKU8DIJf+Q500l2oAbBoTfFHZ4PhpVgihL9ne46U P7m88OVDFpwPZYugwemIC9ov+B0xQgRwkQB0ruf8+ciwk3w+JnRe6NDgdBpubglA GKATTiHhCYgzi90eeEBLitvARU7TivdjQ7N/oHzMp/4ikBt3jE3iXxMaVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKSZsukB6Pv+1VOfip1WkMAJ3+5MB8GA1UdIwQY MBaAFB8SR4scpMugMJkb2MtE2fJPWcC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYt MDlmMTUyNGE1MjQ2LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYtMDlmMTUyNGE1MjQ2 LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0Roukls Q40uAquBw+Rzc/DwT276oEWo+lxsrg/ICiNTUINZbwcuzruvSb1olyytiOuLWlme Kw6xyFhZIe2rOmOIMQjw9sk7lqT5Z8mDf7/kJ/5J0OikC8KJRyGOj4sG4FABajmC fkQiaJMSsBTrdmgo1T/VnECqpxFXZp0YSg+XFlL7p9aTsQVJtTmYSp7Bmb8opuVv NsPPSLF8+14GHi1HnVIl4FuYvMmiSShGqPqOoJWPQhBBftoKKMGQYvKNylPGm2Wr 2Gupk2BBZ4FXDv1xkoVprdxupMZ4dCQODZSFOhuKAjmFwQOmsCOWr5ua7kwbtQ32 Zx6bQeIF1I55cQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:39:07 2025 by rpki-client