This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json) Hash identifier: XDl20qE/vCqhBhSgzSZn+v9gxkOU3UMOxQeHPay0cyI= Subject key identifier: 8F:7B:F5:46:7F:EB:2A:86:71:EC:F1:1F:2A:37:BC:ED:E4:4D:EA:9F Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae Certificate serial: 019B26D296044C683F2FBA81EE0DEBC689BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft Manifest number: 1402 Signing time: Tue 16 Dec 2025 11:01:33 +0000 Manifest this update: Tue 16 Dec 2025 11:01:33 +0000 Manifest next update: Wed 17 Dec 2025 11:01:33 +0000 Files and hashes: 1: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: H9/4FcKk325K60+oP2xlbCHL7KNnk6p+zpcTH0REiow=) 2: UYoraKeZIaoa2wVuoomivtXbxRQ.roa (hash: 64MFcCCoNK8y5TAb4sImtBVWhOrUKow/FlcIn/ABu34=) 3: bce9mz0b3BUGOMHAJWY8rMCRxek.roa (hash: IEeWzdb92Rel/sak0WfNMG3iDCwAJHBVrKmaRSr9eNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:96:04:4c:68:3f:2f:ba:81:ee:0d:eb:c6:89:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae Validity Not Before: Dec 16 11:01:33 2025 GMT Not After : Dec 17 11:01:33 2025 GMT Subject: CN=8f7bf5467feb2a8671ecf11f2a37bcede44dea9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:63:3e:e4:db:b7:48:a6:46:af:2d:f7:d0: 3f:a5:25:15:76:4b:c1:5b:28:2e:e4:80:01:35:a6: f7:ed:c0:77:1b:03:c8:62:29:8a:1d:82:24:e7:cf: 6b:a3:31:46:ad:99:a2:9a:fc:c4:bc:dc:a4:71:71: f6:67:fc:a8:74:8d:89:8d:cf:88:10:94:62:0c:c9: 0a:fe:77:44:e6:9b:a6:79:2c:20:37:81:ff:e7:db: 74:b4:1f:b7:ff:6d:48:77:54:ef:a1:9d:80:68:e4: 62:20:ab:ca:65:d8:3b:93:e4:59:a9:9a:e6:58:0d: 7a:fc:32:94:69:80:01:69:37:14:8a:9a:fb:30:dd: c3:1d:e6:d4:b6:f0:9b:d7:ac:98:92:2f:dc:26:78: fe:17:db:a7:0a:37:72:bb:b9:59:21:3d:42:04:ec: 21:f5:c7:4e:6b:32:4e:18:68:94:1a:c3:6b:c3:c6: df:9a:79:a1:0d:f7:1a:d5:38:e6:47:10:57:8b:c7: 11:81:2d:ad:41:2c:b1:c4:ab:a2:3e:53:1e:6d:6a: 70:ff:f2:52:1e:57:49:81:d1:03:7e:d7:f2:8f:85: fc:dd:67:7d:96:cf:fa:c8:1b:82:50:4c:ab:72:a8: 18:4f:2d:a1:34:c8:1d:73:ef:84:4f:c9:bb:bf:f5: 50:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7B:F5:46:7F:EB:2A:86:71:EC:F1:1F:2A:37:BC:ED:E4:4D:EA:9F X509v3 Authority Key Identifier: keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:66:c6:13:25:c7:45:ef:e8:30:64:8a:b5:7a:90:20:5a:4a: f5:b9:6a:b0:12:7c:48:f3:eb:0f:4c:9c:2e:83:c7:e7:fe:e0: 4e:09:a4:c4:1f:a4:f1:1f:07:04:8f:7f:81:9d:3b:51:8e:79: 34:1a:fb:77:60:bc:38:fa:a4:2b:f0:a7:4e:69:db:80:e2:89: 0d:60:59:45:c2:9a:ea:43:d2:8b:e1:aa:3a:d4:95:44:d2:ba: 1f:78:2b:a0:6d:30:fe:c1:94:e1:fe:8e:dd:6f:c4:da:2c:6d: 68:dd:63:45:23:f2:15:63:21:eb:64:c2:f4:e6:3d:b0:dc:b4: 87:f0:bf:b7:9d:b6:23:04:2c:25:97:12:46:8e:06:d4:75:d0: 9f:1a:b9:80:39:3f:38:ae:35:7d:84:be:00:45:df:ab:a2:b4: af:e6:92:4a:d5:78:7d:e3:b0:9e:95:3a:e7:05:54:e3:66:e7: 6f:fd:d8:fe:40:0d:5e:fa:62:10:f6:fc:0c:d6:df:38:a9:8a: 2e:81:4c:9b:64:e1:ce:45:64:f0:f0:4e:cb:e8:4d:63:47:b4: 0b:52:9a:50:7d:9d:1b:1c:db:32:5e:5e:c0:de:59:43:eb:ec: 8b:89:84:fa:0c:66:3e:5f:ed:c5:1e:6d:90:b5:3a:22:76:35: c6:9e:a1:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0pYETGg/L7qB7g3rxom6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNGMzMjA4NmUxZTk4NDUwNTY5MWIwMWY1OTg1ZGY3YTM2 YjI0YWUwHhcNMjUxMjE2MTEwMTMzWhcNMjUxMjE3MTEwMTMzWjAzMTEwLwYDVQQD Eyg4ZjdiZjU0NjdmZWIyYTg2NzFlY2YxMWYyYTM3YmNlZGU0NGRlYTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVljPuTbt0imRq8t99A/pSUVdkvB Wygu5IABNab37cB3GwPIYimKHYIk589rozFGrZmimvzEvNykcXH2Z/yodI2Jjc+I EJRiDMkK/ndE5pumeSwgN4H/59t0tB+3/21Id1TvoZ2AaORiIKvKZdg7k+RZqZrm WA16/DKUaYABaTcUipr7MN3DHebUtvCb16yYki/cJnj+F9unCjdyu7lZIT1CBOwh 9cdOazJOGGiUGsNrw8bfmnmhDfca1TjmRxBXi8cRgS2tQSyxxKuiPlMebWpw//JS HldJgdEDftfyj4X83Wd9ls/6yBuCUEyrcqgYTy2hNMgdc++ET8m7v/VQAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI979UZ/6yqGcezxHyo3vO3kTeqfMB8GA1UdIwQY MBaAFB5MMghuHphFBWkbAfWYXfejaySuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYt OThjZTE0NmYxODI0LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYtOThjZTE0NmYxODI0 LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwWbGEyXH Re/oMGSKtXqQIFpK9blqsBJ8SPPrD0ycLoPH5/7gTgmkxB+k8R8HBI9/gZ07UY55 NBr7d2C8OPqkK/CnTmnbgOKJDWBZRcKa6kPSi+GqOtSVRNK6H3groG0w/sGU4f6O 3W/E2ixtaN1jRSPyFWMh62TC9OY9sNy0h/C/t522IwQsJZcSRo4G1HXQnxq5gDk/ OK41fYS+AEXfq6K0r+aSStV4feOwnpU65wVU42bnb/3Y/kANXvpiEPb8DNbfOKmK LoFMm2ThzkVk8PBOy+hNY0e0C1KaUH2dGxzbMl5ewN5ZQ+vsi4mE+gxmPl/txR5t kLU6InY1xp6h8A== -----END CERTIFICATE-----Generated at Tue Dec 16 15:01:26 2025 by rpki-client