This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json) Hash identifier: np1yKMoVkjKWOG3aXbjBx6TLwOjCIXyVnlmtXmu/Ydk= Subject key identifier: C4:62:B0:5B:D9:09:7F:2A:CB:DB:1A:E1:F6:68:E8:28:A5:FE:3C:9F Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56 Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156 Certificate serial: 019B334494085DB4F5797F4D16C6238B98FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft Manifest number: 0350 Signing time: Thu 18 Dec 2025 21:01:30 +0000 Manifest this update: Thu 18 Dec 2025 21:01:30 +0000 Manifest next update: Fri 19 Dec 2025 21:01:30 +0000 Files and hashes: 1: E-uqinJu4BsX4hD4fJ27XeSRRfM.roa (hash: TEk3E/eVLOZFNokaZvtcliN6SvQ4jr1qswSoyGLZrLI=) 2: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: Ba0ZJDqH+KzccQ8bbNZ6PchyQoqB3Ffg2ArQL47mHfE=) 3: jSWGRDdKL-HTUETX8py0S4BUPnw.roa (hash: duy/YDBoOJtBJ6yTq6z5J9MLnvFlUwnH0+KkHirH4Ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:94:08:5d:b4:f5:79:7f:4d:16:c6:23:8b:98:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156 Validity Not Before: Dec 18 21:01:30 2025 GMT Not After : Dec 19 21:01:30 2025 GMT Subject: CN=c462b05bd9097f2acbdb1ae1f668e828a5fe3c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:67:40:ce:f0:94:98:e1:1d:b3:88:9f:33: 2f:99:95:3c:45:0d:33:f7:45:c4:76:35:a7:47:7c: 63:ba:94:d6:a6:eb:c9:9b:b9:84:2a:0d:55:cc:1e: f9:80:a5:c3:03:20:dc:ee:8f:c4:9d:3a:6d:54:d3: 68:c3:4d:c1:b5:97:f5:31:09:bf:a3:2b:92:50:19: dc:91:19:2f:4f:2b:c6:25:07:6b:55:11:49:6c:7f: 6f:0b:32:62:25:a2:db:8e:ea:a9:4d:44:9d:a1:bb: 66:b5:2c:6b:e7:9d:ac:9a:d5:76:97:f4:5a:9c:fe: 75:97:97:34:50:37:b1:77:f4:79:cc:88:13:f9:1d: 8f:29:79:73:f1:8e:16:63:d3:60:f5:34:c3:43:c6: e7:84:6c:e7:2b:61:14:c7:d6:63:53:a7:c7:5d:43: da:b0:48:63:25:37:5f:73:a5:1b:9c:d5:cf:c4:f2: e0:72:c1:60:1d:72:ad:cc:d6:83:ba:04:8f:b2:66: b9:75:c9:b8:69:0b:1f:44:43:65:10:02:99:5b:e2: 8a:7d:a5:d6:5d:69:63:de:41:c0:63:2b:d8:ff:db: ef:16:00:04:8d:a1:a4:19:c6:0f:fc:df:cd:44:7b: 98:d8:2b:5d:f8:8d:f5:20:e7:49:30:a7:38:77:f6: 50:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:62:B0:5B:D9:09:7F:2A:CB:DB:1A:E1:F6:68:E8:28:A5:FE:3C:9F X509v3 Authority Key Identifier: keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:09:85:18:54:6f:fa:55:20:d0:cc:05:6a:25:3b:d4:75:8d: 85:80:bd:8b:a5:2b:eb:86:61:10:f3:74:66:1b:78:65:28:08: 20:72:05:02:77:9e:2a:6b:3f:48:be:3e:7f:83:f9:1f:52:8a: 66:a1:bd:0a:bb:d9:ff:58:f4:9d:b5:13:2b:ec:e7:67:63:72: 95:77:cd:f3:c0:6c:a8:6d:83:fb:15:ac:2f:f6:a2:d5:8c:3f: b6:ee:7e:16:c5:d0:ba:46:34:6d:77:bb:4d:a2:f6:f4:50:fe: 8c:d4:4b:28:65:56:1d:1d:ba:21:47:a1:d7:ce:9d:79:e1:79: 0c:97:f1:d3:8a:a3:77:5b:21:d8:0d:d6:c4:3f:7c:cb:49:2d: 61:f3:50:26:31:78:55:91:4c:dd:47:f8:95:74:54:51:92:02: 7b:13:3e:35:7b:e7:a0:74:2b:63:86:bb:75:f6:28:fd:d5:d7: e6:f4:8c:37:10:b6:9c:78:66:09:f6:ea:c9:5e:ea:95:84:cb: ce:b6:90:4c:d2:cf:a2:09:8d:22:c3:b7:43:32:c2:b0:a7:d4: a4:37:15:1b:a6:e6:f2:44:27:e9:79:cc:84:16:10:8b:ee:8b: f8:ea:9f:71:a2:56:36:4a:42:11:9d:11:7d:9b:c1:06:bc:c7: c8:92:e6:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRJQIXbT1eX9NFsYji5j6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGRmMTEyOGY3ZDQyYzY4ODQ4NjNiNWYyNzNmM2ViYTY1 OTYxNTYwHhcNMjUxMjE4MjEwMTMwWhcNMjUxMjE5MjEwMTMwWjAzMTEwLwYDVQQD EyhjNDYyYjA1YmQ5MDk3ZjJhY2JkYjFhZTFmNjY4ZTgyOGE1ZmUzYzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUBnQM7wlJjhHbOInzMvmZU8RQ0z 90XEdjWnR3xjupTWpuvJm7mEKg1VzB75gKXDAyDc7o/EnTptVNNow03BtZf1MQm/ oyuSUBnckRkvTyvGJQdrVRFJbH9vCzJiJaLbjuqpTUSdobtmtSxr552smtV2l/Ra nP51l5c0UDexd/R5zIgT+R2PKXlz8Y4WY9Ng9TTDQ8bnhGznK2EUx9ZjU6fHXUPa sEhjJTdfc6UbnNXPxPLgcsFgHXKtzNaDugSPsma5dcm4aQsfRENlEAKZW+KKfaXW XWlj3kHAYyvY/9vvFgAEjaGkGcYP/N/NRHuY2Ctd+I31IOdJMKc4d/ZQywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRisFvZCX8qy9sa4fZo6Cil/jyfMB8GA1UdIwQY MBaAFIZN8RKPfULGiEhjtfJz8+umWWFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2Ut ODBkN2ZhNWRmYmI0LzEvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2UtODBkN2ZhNWRmYmI0 LzEvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAmFGFRv +lUg0MwFaiU71HWNhYC9i6Ur64ZhEPN0Zht4ZSgIIHIFAneeKms/SL4+f4P5H1KK ZqG9CrvZ/1j0nbUTK+znZ2NylXfN88BsqG2D+xWsL/ai1Yw/tu5+FsXQukY0bXe7 TaL29FD+jNRLKGVWHR26IUeh186deeF5DJfx04qjd1sh2A3WxD98y0ktYfNQJjF4 VZFM3Uf4lXRUUZICexM+NXvnoHQrY4a7dfYo/dXX5vSMNxC2nHhmCfbqyV7qlYTL zraQTNLPogmNIsO3QzLCsKfUpDcVG6bm8kQn6XnMhBYQi+6L+OqfcaJWNkpCEZ0R fZvBBrzHyJLmdg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:55:41 2025 by rpki-client