This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft File: HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json) Hash identifier: TueO9vH/AMX62nEc5ht2No2e39CMfItAq8AUk8sEyPU= Subject key identifier: 05:82:F4:08:9A:4D:D8:E5:72:09:71:B2:7C:86:CA:67:B1:5F:F2:11 Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63 Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063 Certificate serial: 019B3D22DF06F8B203F4355EAE4EB02F65F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft Manifest number: 0F0B Signing time: Sat 20 Dec 2025 19:00:53 +0000 Manifest this update: Sat 20 Dec 2025 19:00:53 +0000 Manifest next update: Sun 21 Dec 2025 19:00:53 +0000 Files and hashes: 1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: caFhOD3ZWUTOrXUduKJmwZugKIcHd/xn0rH+z5nOhrw=) 2: qBbXPlomssD9zrP_xFljqdR0LbI.roa (hash: Gow+NF8w68xqHQfvdIHVUtAvsOi+ZzLSZN8/SeU/9ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:df:06:f8:b2:03:f4:35:5e:ae:4e:b0:2f:65:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063 Validity Not Before: Dec 20 19:00:53 2025 GMT Not After : Dec 21 19:00:53 2025 GMT Subject: CN=0582f4089a4dd8e5720971b27c86ca67b15ff211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:29:18:eb:f6:61:83:f0:dc:bf:12:55:b2:fc: b4:9a:53:36:33:b9:bb:4c:35:28:c6:5d:ab:5b:4f: 3f:d6:0f:1c:13:ed:61:5a:c1:9d:99:e6:da:47:79: b9:59:5d:b9:99:12:58:ed:8f:30:37:63:df:4f:da: 66:5f:6f:e7:76:7b:40:e6:1f:e5:cd:86:77:53:1b: 3e:45:87:23:23:21:fb:a3:40:68:b7:f0:2d:e7:8d: 04:27:dc:09:a5:14:e1:3d:aa:8d:c1:49:b1:ef:bf: e3:31:77:fe:62:dc:98:25:41:42:c6:d3:57:b2:df: 92:1e:1b:93:78:64:c7:57:d7:00:c8:11:81:a8:b4: cd:75:1d:a1:fb:a2:ee:46:b7:51:98:14:3f:ea:cf: 12:42:06:d5:0b:17:d1:e7:91:86:41:ee:3c:7c:2e: 93:e7:53:21:ae:3f:a5:2f:04:92:6c:e9:6c:af:98: cc:ac:3c:54:39:ed:5e:bb:6b:1e:d2:da:2c:53:9f: 76:61:f7:7d:f4:8e:fc:8c:a0:26:45:98:26:be:96: 19:77:a8:5e:4e:83:1f:60:29:e8:bd:ea:07:ce:84: f7:06:57:7c:37:91:1b:80:6d:74:43:23:01:cd:0f: 37:9c:1d:42:ce:0f:e9:d6:b0:37:97:b3:e0:b4:4b: 25:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:82:F4:08:9A:4D:D8:E5:72:09:71:B2:7C:86:CA:67:B1:5F:F2:11 X509v3 Authority Key Identifier: keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:eb:19:77:56:ea:bc:81:49:de:49:14:7d:32:9a:2e:72:46: 6f:22:40:c2:ec:2a:de:1b:13:ec:2c:db:f2:4e:c5:d5:db:f7: c5:ee:de:f9:fb:51:61:5a:6e:b7:a6:f4:57:02:ea:2c:ff:84: 27:2f:f5:a7:e6:ba:04:7b:5f:1c:e2:1c:13:46:cc:1c:f2:32: 16:24:71:40:2b:86:39:a2:60:fb:39:8a:0e:51:32:2b:52:ee: 39:ac:00:2e:a6:ef:ed:05:03:52:29:99:e8:a5:20:f0:20:6a: 71:6a:4e:34:88:6b:0d:79:1c:9b:83:57:66:ef:2f:bf:06:b6: fd:fc:ba:eb:51:e2:24:fb:a7:9e:43:7d:28:a9:0c:3d:e0:66: 6d:1a:bc:b5:3f:93:1f:ad:08:a0:36:f1:1c:44:65:f0:28:bf: d6:9c:7c:3e:e2:4c:fc:04:4c:64:c1:a6:28:49:e5:0c:18:f7: 88:ec:f9:ab:a4:cf:0e:d3:41:47:9e:f2:d4:06:de:8a:fd:ab: 4e:ab:ee:ae:84:00:41:97:6c:db:74:62:8e:f3:65:65:07:eb: 65:5d:4f:2b:10:8a:0c:73:da:76:d5:34:b6:48:86:cf:d7:85: 2d:1f:88:71:56:4f:5e:85:d5:fc:80:d6:32:fb:26:54:f8:fb: f9:79:44:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9It8G+LID9DVerk6wL2X0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMTI5M2NiYmUyZjY5MjU0MGQzY2M1YTZlODIzNjYwNDk0 YzQwNjMwHhcNMjUxMjIwMTkwMDUzWhcNMjUxMjIxMTkwMDUzWjAzMTEwLwYDVQQD EygwNTgyZjQwODlhNGRkOGU1NzIwOTcxYjI3Yzg2Y2E2N2IxNWZmMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ykY6/Zhg/DcvxJVsvy0mlM2M7m7 TDUoxl2rW08/1g8cE+1hWsGdmebaR3m5WV25mRJY7Y8wN2PfT9pmX2/ndntA5h/l zYZ3Uxs+RYcjIyH7o0Bot/At540EJ9wJpRThPaqNwUmx77/jMXf+YtyYJUFCxtNX st+SHhuTeGTHV9cAyBGBqLTNdR2h+6LuRrdRmBQ/6s8SQgbVCxfR55GGQe48fC6T 51Mhrj+lLwSSbOlsr5jMrDxUOe1eu2se0tosU592Yfd99I78jKAmRZgmvpYZd6he ToMfYCnoveoHzoT3Bld8N5EbgG10QyMBzQ83nB1Czg/p1rA3l7PgtEsl7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWC9AiaTdjlcglxsnyGymexX/IRMB8GA1UdIwQY MBaAFB8Sk8u+L2klQNPMWm6CNmBJTEBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQt MjY5NzE1OTlhNTU0LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQtMjY5NzE1OTlhNTU0 LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+sZd1bq vIFJ3kkUfTKaLnJGbyJAwuwq3hsT7Czb8k7F1dv3xe7e+ftRYVput6b0VwLqLP+E Jy/1p+a6BHtfHOIcE0bMHPIyFiRxQCuGOaJg+zmKDlEyK1LuOawALqbv7QUDUimZ 6KUg8CBqcWpONIhrDXkcm4NXZu8vvwa2/fy661HiJPunnkN9KKkMPeBmbRq8tT+T H60IoDbxHERl8Ci/1px8PuJM/ARMZMGmKEnlDBj3iOz5q6TPDtNBR57y1Abeiv2r TqvuroQAQZds23RijvNlZQfrZV1PKxCKDHPadtU0tkiGz9eFLR+IcVZPXoXV/IDW MvsmVPj7+XlEhQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:04:57 2025 by rpki-client