This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json) Hash identifier: 9OHavmWxyTECP9/b4TxxISLnuMOPEfzzdb0La4nQGag= Subject key identifier: 6A:06:BB:10:43:DE:10:E0:54:94:AC:42:38:EF:89:72:80:90:C6:26 Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e Certificate serial: 019B3AFE3ABA0A3F65AA78775B73B01D2734 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 09:01:38 +0000 Manifest this update: Sat 20 Dec 2025 09:01:38 +0000 Manifest next update: Sun 21 Dec 2025 09:01:38 +0000 Files and hashes: 1: 00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa (hash: aMgYbVg4QnX7hEPLeHEda/b4JrNnLv1+waEJzECfh2Q=) 2: UNDXrDbQNDGfw9Atw8J1Rhg9324.roa (hash: wsuYDSHLl9ueT9Z/8hPQn0p6GzwP0XVwWj6eE/OeB10=) 3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: rRZaMqON2Jvfatls/6eYv7JjMEmGqF/i90fRxjpGaUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:3a:ba:0a:3f:65:aa:78:77:5b:73:b0:1d:27:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e Validity Not Before: Dec 20 09:01:38 2025 GMT Not After : Dec 21 09:01:38 2025 GMT Subject: CN=6a06bb1043de10e05494ac4238ef89728090c626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:11:a6:7f:21:c2:ad:d9:6e:57:ce:04:9a:31: fc:59:e6:4a:1e:8d:fd:2c:49:20:d9:77:2c:26:9d: ef:c1:03:50:60:a9:33:1e:b4:1c:84:45:c6:b2:08: dd:e8:91:34:18:fe:33:38:b8:c3:da:2f:6a:54:45: a5:f5:61:14:90:1c:2e:f5:62:44:95:64:7b:f2:d1: 3f:75:fb:ef:96:b3:e1:1d:a3:b2:67:0b:0e:e4:8f: 0a:6c:4a:a1:c7:6f:42:13:d1:1b:19:2f:44:cb:13: c9:11:23:93:f0:0d:b9:33:8d:c8:5a:14:29:7c:50: 37:e4:42:22:99:e2:c5:37:b0:f5:73:dc:e6:98:11: f1:9c:bb:ac:18:6a:00:5d:02:ee:bf:e5:86:1d:be: 86:06:cf:60:c7:2c:ba:1f:03:e9:ae:5e:54:7b:8f: 64:b6:f7:67:00:14:43:a0:81:d8:81:be:8c:f4:eb: e8:51:c5:f0:f2:8f:49:59:57:e5:47:a6:69:3a:9a: e9:fd:17:57:da:9b:c0:14:f2:33:3f:7c:0e:f0:1e: 95:c4:81:a1:2c:d8:24:7f:0c:c6:3b:be:d8:e1:6e: 2f:72:c0:b7:65:b1:6c:34:ab:d4:73:45:d3:a2:00: 8e:d0:80:ee:74:15:a9:48:8c:41:0c:a7:47:24:7f: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:06:BB:10:43:DE:10:E0:54:94:AC:42:38:EF:89:72:80:90:C6:26 X509v3 Authority Key Identifier: keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0d:96:2e:7d:82:4f:91:21:21:0e:24:e7:30:ba:4f:88:1d: 40:12:65:2a:b3:9a:32:90:8d:76:6a:c4:35:52:99:a2:0e:10: 67:37:32:f7:5e:ef:7f:dd:e9:ef:ba:76:ea:e3:68:11:c2:3b: b6:99:58:44:ba:d1:b0:0b:b6:96:77:06:05:3f:87:22:b3:c5: f4:dc:c3:42:d0:29:70:0c:79:57:52:e1:f8:eb:05:e2:c6:d5: 9b:f9:57:a8:ca:69:38:cd:8a:79:4d:77:dd:d4:d2:a5:46:75: ff:39:46:e7:14:64:de:a5:91:64:25:f2:ad:d8:39:5c:19:76: 49:18:f0:f4:bc:b2:f6:9a:f0:85:01:d7:51:b0:8e:0b:4d:be: 39:be:ad:2d:2f:49:e0:07:f6:25:14:65:36:13:2f:3f:9b:cb: da:a9:6b:76:3c:72:d3:ff:46:04:32:9b:53:58:ad:70:49:30: 89:ec:12:b1:2a:6b:df:cf:3e:79:a3:90:ca:04:79:5e:de:1a: 8b:2f:89:26:32:53:9a:af:df:65:da:6d:90:e9:90:38:27:4b: 0c:d6:39:fa:e0:19:bd:cb:6d:bf:93:fc:91:37:90:d9:96:9f: 91:b0:61:b5:bb:a4:09:3c:57:ae:13:04:34:ad:02:79:f5:c6: 94:68:ac:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/jq6Cj9lqnh3W3OwHSc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGIwZTEzY2YyN2FmZjY2YmU3MzBiZWNlOThlMDRiMDBm ZGZiOWUwHhcNMjUxMjIwMDkwMTM4WhcNMjUxMjIxMDkwMTM4WjAzMTEwLwYDVQQD Eyg2YTA2YmIxMDQzZGUxMGUwNTQ5NGFjNDIzOGVmODk3MjgwOTBjNjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhGmfyHCrdluV84EmjH8WeZKHo39 LEkg2XcsJp3vwQNQYKkzHrQchEXGsgjd6JE0GP4zOLjD2i9qVEWl9WEUkBwu9WJE lWR78tE/dfvvlrPhHaOyZwsO5I8KbEqhx29CE9EbGS9EyxPJESOT8A25M43IWhQp fFA35EIimeLFN7D1c9zmmBHxnLusGGoAXQLuv+WGHb6GBs9gxyy6HwPprl5Ue49k tvdnABRDoIHYgb6M9OvoUcXw8o9JWVflR6ZpOprp/RdX2pvAFPIzP3wO8B6VxIGh LNgkfwzGO77Y4W4vcsC3ZbFsNKvUc0XTogCO0IDudBWpSIxBDKdHJH+tBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoGuxBD3hDgVJSsQjjviXKAkMYmMB8GA1UdIwQY MBaAFIZLDhPPJ6/2a+cwvs6Y4EsA/fueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYt ZmM0NGE4YWNlMzcwLzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYtZmM0NGE4YWNlMzcw LzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUA2WLn2C T5EhIQ4k5zC6T4gdQBJlKrOaMpCNdmrENVKZog4QZzcy917vf93p77p26uNoEcI7 tplYRLrRsAu2lncGBT+HIrPF9NzDQtApcAx5V1Lh+OsF4sbVm/lXqMppOM2KeU13 3dTSpUZ1/zlG5xRk3qWRZCXyrdg5XBl2SRjw9Lyy9prwhQHXUbCOC02+Ob6tLS9J 4Af2JRRlNhMvP5vL2qlrdjxy0/9GBDKbU1itcEkwiewSsSpr388+eaOQygR5Xt4a iy+JJjJTmq/fZdptkOmQOCdLDNY5+uAZvcttv5P8kTeQ2ZafkbBhtbukCTxXrhME NK0CefXGlGisQw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:19:42 2025 by rpki-client