This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json) Hash identifier: chJPjiUphd4WShE08NxPtp4/HlFwiJupq4C23dnnhLE= Subject key identifier: 4F:8F:DB:C0:7A:DD:58:49:E7:8B:BF:5C:59:A2:6E:65:84:68:45:2D Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13 Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013 Certificate serial: 019B4693FAD8DD06E37FF2B9D4DAC0FC405F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft Manifest number: 0452 Signing time: Mon 22 Dec 2025 15:01:01 +0000 Manifest this update: Mon 22 Dec 2025 15:01:01 +0000 Manifest next update: Tue 23 Dec 2025 15:01:01 +0000 Files and hashes: 1: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: PNd5hD2P5cqd9N1FYL7LWINmTQcmX4TpNxjp0uv8sSM=) 2: PFjB0suzwepgpRQg4ijZdi1aKI8.roa (hash: YjFJJun3pz3vvGFXjSMeL596davTUmL7ryORKEoBTmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:fa:d8:dd:06:e3:7f:f2:b9:d4:da:c0:fc:40:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013 Validity Not Before: Dec 22 15:01:01 2025 GMT Not After : Dec 23 15:01:01 2025 GMT Subject: CN=4f8fdbc07add5849e78bbf5c59a26e658468452d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3a:e5:d9:09:49:9e:dc:9e:a5:fc:24:98:3f: 6e:16:34:37:f4:09:23:8d:f6:89:2b:39:a8:eb:58: 7e:f9:5e:a6:f1:aa:81:3c:d5:6a:1d:4f:8d:d2:63: a7:62:77:9f:ea:c6:98:0f:70:00:62:55:a5:d1:8e: da:3c:cd:52:11:07:36:69:46:47:c9:76:4a:ef:65: 50:7d:07:2b:99:6f:55:3c:80:fe:ed:07:4e:5c:be: a9:ab:b5:ea:84:e9:f5:d7:d3:d0:5e:74:92:41:90: d7:ca:82:16:bb:24:19:13:e0:08:a9:6c:6f:6e:35: d7:d9:4e:f7:16:2a:ca:74:a9:fe:a4:e1:97:d0:6d: 42:11:13:ac:ac:a7:dc:33:36:97:af:a3:b8:bf:27: b8:cb:46:c7:95:93:34:24:b9:b5:9e:06:11:e9:d9: fb:5e:90:8a:0e:d7:c6:4c:cd:ea:0b:b5:53:af:19: c7:d1:0b:31:0c:80:96:4f:27:dd:a0:ba:10:67:90: 9a:77:25:99:84:a9:0d:9b:a9:15:8e:b4:b0:ce:63: b3:ba:1f:79:42:8a:51:b7:5e:5f:94:53:b2:4d:e4: 2f:e8:d4:06:f0:27:6f:77:21:ed:78:33:46:53:69: 2d:90:89:0e:db:c2:b0:e5:1e:c9:5b:9c:ae:27:f8: dd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8F:DB:C0:7A:DD:58:49:E7:8B:BF:5C:59:A2:6E:65:84:68:45:2D X509v3 Authority Key Identifier: keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e8:9c:ce:d2:e4:ee:2d:c1:4a:a1:5b:83:d7:89:37:b9:e7: ef:4e:1f:da:3f:45:f0:d4:1c:54:d2:f7:b4:53:89:41:8d:55: 17:ab:6a:ae:f1:8f:65:be:93:7a:52:7b:35:0f:72:d9:b2:ac: 38:33:c0:e0:e0:e5:3f:53:5f:57:df:26:d1:5f:2e:97:a6:0d: e9:f3:12:9f:f5:0c:b6:17:f3:1c:99:19:6d:84:a8:87:92:a6: c5:54:22:4b:32:77:2a:a4:28:36:06:f5:0e:f9:f6:b9:ab:88: a5:7b:be:2e:2d:46:7f:cb:25:34:12:04:fe:90:4a:2e:5c:da: 71:0d:48:80:58:41:10:fe:49:49:05:7f:f5:b4:68:73:24:53: 01:f1:65:6e:18:cb:02:19:7f:cb:ee:e7:1e:b9:02:6d:fe:aa: e1:d6:41:23:0a:56:ee:9c:94:42:7f:af:48:41:11:b2:8a:ab: e7:5d:4a:b9:f5:76:5b:17:97:27:db:4d:fe:02:a3:87:d4:1c: 96:b4:eb:29:43:f0:8b:fc:67:88:80:4d:5d:85:15:b5:42:2f: fe:e9:60:f7:a9:f9:67:33:6a:d2:76:c4:af:d2:48:3b:4a:19: e5:4f:68:55:2e:b0:80:46:fc:89:a9:ab:d8:c3:f8:02:f3:c2: 68:b6:35:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk/rY3Qbjf/K51NrA/EBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlODI4ZGU3MWRkZDc4MDQ1NzMxMjhkMjZlZTQ1YzAzOTAx YzgwMTMwHhcNMjUxMjIyMTUwMTAxWhcNMjUxMjIzMTUwMTAxWjAzMTEwLwYDVQQD Eyg0ZjhmZGJjMDdhZGQ1ODQ5ZTc4YmJmNWM1OWEyNmU2NTg0Njg0NTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Drl2QlJntyepfwkmD9uFjQ39Akj jfaJKzmo61h++V6m8aqBPNVqHU+N0mOnYnef6saYD3AAYlWl0Y7aPM1SEQc2aUZH yXZK72VQfQcrmW9VPID+7QdOXL6pq7XqhOn119PQXnSSQZDXyoIWuyQZE+AIqWxv bjXX2U73FirKdKn+pOGX0G1CEROsrKfcMzaXr6O4vye4y0bHlZM0JLm1ngYR6dn7 XpCKDtfGTM3qC7VTrxnH0QsxDICWTyfdoLoQZ5CadyWZhKkNm6kVjrSwzmOzuh95 QopRt15flFOyTeQv6NQG8CdvdyHteDNGU2ktkIkO28Kw5R7JW5yuJ/jd9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+P28B63VhJ54u/XFmibmWEaEUtMB8GA1UdIwQY MBaAFB6Cjecd3XgEVzEo0m7kXAOQHIATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2Mjct NzBjOGM3MGUzMmIwLzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2MjctNzBjOGM3MGUzMmIw LzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+icztLk 7i3BSqFbg9eJN7nn704f2j9F8NQcVNL3tFOJQY1VF6tqrvGPZb6TelJ7NQ9y2bKs ODPA4ODlP1NfV98m0V8ul6YN6fMSn/UMthfzHJkZbYSoh5KmxVQiSzJ3KqQoNgb1 Dvn2uauIpXu+Li1Gf8slNBIE/pBKLlzacQ1IgFhBEP5JSQV/9bRocyRTAfFlbhjL Ahl/y+7nHrkCbf6q4dZBIwpW7pyUQn+vSEERsoqr511KufV2WxeXJ9tN/gKjh9Qc lrTrKUPwi/xniIBNXYUVtUIv/ulg96n5ZzNq0nbEr9JIO0oZ5U9oVS6wgEb8iamr 2MP4AvPCaLY1sA== -----END CERTIFICATE-----Generated at Mon Dec 22 19:27:19 2025 by rpki-client