This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json) Hash identifier: cipn88qYwfmSnZ6LF7A+wq6cKFsT+Mb0Q210wOrZNhk= Subject key identifier: 1F:59:83:8F:7E:7D:60:B2:F3:4F:76:C4:75:72:30:B2:63:FB:10:09 Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae Certificate serial: 019B3456F21AB180E95DF237413B92FC818C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft Manifest number: 1409 Signing time: Fri 19 Dec 2025 02:01:11 +0000 Manifest this update: Fri 19 Dec 2025 02:01:11 +0000 Manifest next update: Sat 20 Dec 2025 02:01:11 +0000 Files and hashes: 1: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: tgSCAjLZbuxtyMMDJ2I0TpmWQ5eSJaYDgn4dBKGTEv8=) 2: UYoraKeZIaoa2wVuoomivtXbxRQ.roa (hash: 64MFcCCoNK8y5TAb4sImtBVWhOrUKow/FlcIn/ABu34=) 3: bce9mz0b3BUGOMHAJWY8rMCRxek.roa (hash: IEeWzdb92Rel/sak0WfNMG3iDCwAJHBVrKmaRSr9eNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:f2:1a:b1:80:e9:5d:f2:37:41:3b:92:fc:81:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae Validity Not Before: Dec 19 02:01:11 2025 GMT Not After : Dec 20 02:01:11 2025 GMT Subject: CN=1f59838f7e7d60b2f34f76c4757230b263fb1009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:42:48:f3:59:65:a4:86:57:f9:74:f7:10:c5: e5:3e:9d:a0:4e:d4:7a:59:2c:38:37:9e:5a:a7:17: 5a:8b:52:4c:cc:f2:9e:3c:9d:4c:f4:16:15:de:09: 4a:36:44:a0:f5:b6:2e:9f:db:0a:f9:ac:32:4d:f4: 58:c7:85:e4:fb:cc:f9:ef:9d:a6:93:26:0a:09:9f: 52:6d:39:fb:d9:12:f7:b0:31:58:9c:1e:80:75:da: 0a:2e:4e:ef:87:1c:5e:f6:53:39:d7:16:d1:8d:ec: 56:d6:9b:21:c0:75:af:ab:7c:dd:f4:db:ae:86:e7: b6:48:e5:be:d8:88:c1:cb:d9:46:e8:fb:3f:9d:e8: 9f:c8:98:a0:94:aa:09:a0:c7:98:28:34:be:cd:48: a7:5c:cd:e3:05:cb:00:bc:b2:79:76:9e:b8:83:dc: fe:4a:e4:f3:49:d0:10:73:65:f1:05:56:2a:06:d3: cd:dd:07:d9:30:eb:d8:ee:6c:2b:bc:2b:fa:e5:9c: d8:07:81:22:1a:69:62:58:86:19:d4:77:aa:95:3f: e9:25:c0:79:31:c1:c4:1c:42:74:ba:0e:c1:89:c6: 83:80:77:87:2e:51:25:c0:e3:9f:2e:90:d3:64:00: f4:8d:b4:38:86:62:23:c4:eb:a0:da:d8:60:6f:53: 8e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:59:83:8F:7E:7D:60:B2:F3:4F:76:C4:75:72:30:B2:63:FB:10:09 X509v3 Authority Key Identifier: keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:cf:9d:33:0d:44:98:a1:40:41:ff:47:02:e7:2b:3a:d4:44: d7:31:02:1c:66:7e:e2:11:c3:d8:9e:d7:e2:04:a2:76:72:64: 2d:85:fe:0b:b2:31:f2:01:18:3a:c2:df:1a:b0:0a:d9:0d:3d: ae:c6:bd:a8:c6:66:80:af:29:7a:aa:97:1f:ed:f8:31:05:eb: 0f:b5:55:91:46:ba:b5:0c:d0:82:90:f9:a9:58:35:bc:a5:5d: ff:9c:d2:c0:1c:8f:8a:63:1a:68:a4:a3:28:1f:f8:b4:28:90: 0a:53:f2:bc:1b:f6:00:9e:39:cc:4d:56:3e:c7:02:ae:ab:06: 53:47:9b:76:93:60:e3:a0:57:28:34:ed:7a:f7:2f:ac:0c:63: f0:f7:4b:fb:4b:94:3b:f0:4b:8b:68:97:99:cb:96:74:e0:d6: 5d:e1:f0:62:ab:62:a1:f9:b7:3e:bd:2a:94:b0:20:26:79:d5: 10:44:23:e7:78:c3:09:20:eb:1a:82:58:48:76:21:b2:f2:1b: 27:83:4c:27:f5:bd:88:65:da:88:f1:d3:3a:99:e5:00:12:44: 90:15:ea:b0:34:8e:81:1c:c2:d2:c8:e1:d2:f5:b4:c6:52:08: 20:7b:d9:06:ba:3d:60:fb:ea:05:02:57:fb:40:17:3f:e6:e7: 51:f4:7f:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VvIasYDpXfI3QTuS/IGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNGMzMjA4NmUxZTk4NDUwNTY5MWIwMWY1OTg1ZGY3YTM2 YjI0YWUwHhcNMjUxMjE5MDIwMTExWhcNMjUxMjIwMDIwMTExWjAzMTEwLwYDVQQD EygxZjU5ODM4ZjdlN2Q2MGIyZjM0Zjc2YzQ3NTcyMzBiMjYzZmIxMDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUJI81llpIZX+XT3EMXlPp2gTtR6 WSw4N55apxdai1JMzPKePJ1M9BYV3glKNkSg9bYun9sK+awyTfRYx4Xk+8z5752m kyYKCZ9SbTn72RL3sDFYnB6AddoKLk7vhxxe9lM51xbRjexW1pshwHWvq3zd9Nuu hue2SOW+2IjBy9lG6Ps/neifyJiglKoJoMeYKDS+zUinXM3jBcsAvLJ5dp64g9z+ SuTzSdAQc2XxBVYqBtPN3QfZMOvY7mwrvCv65ZzYB4EiGmliWIYZ1HeqlT/pJcB5 McHEHEJ0ug7BicaDgHeHLlElwOOfLpDTZAD0jbQ4hmIjxOug2thgb1OOzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9Zg49+fWCy8092xHVyMLJj+xAJMB8GA1UdIwQY MBaAFB5MMghuHphFBWkbAfWYXfejaySuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYt OThjZTE0NmYxODI0LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYtOThjZTE0NmYxODI0 LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx8+dMw1E mKFAQf9HAucrOtRE1zECHGZ+4hHD2J7X4gSidnJkLYX+C7Ix8gEYOsLfGrAK2Q09 rsa9qMZmgK8peqqXH+34MQXrD7VVkUa6tQzQgpD5qVg1vKVd/5zSwByPimMaaKSj KB/4tCiQClPyvBv2AJ45zE1WPscCrqsGU0ebdpNg46BXKDTtevcvrAxj8PdL+0uU O/BLi2iXmcuWdODWXeHwYqtiofm3Pr0qlLAgJnnVEEQj53jDCSDrGoJYSHYhsvIb J4NMJ/W9iGXaiPHTOpnlABJEkBXqsDSOgRzC0sjh0vW0xlIIIHvZBro9YPvqBQJX +0AXP+bnUfR/Wg== -----END CERTIFICATE-----Generated at Fri Dec 19 09:15:48 2025 by rpki-client