This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft File: Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft (raw, json) Hash identifier: mGxJvPO3DEzfSWwuvAmEELmF0vnDV/dGR7E6p152wdU= Subject key identifier: 2E:68:9B:50:E7:4F:51:30:5C:A0:B3:A4:F6:2F:FB:BA:90:C8:7C:B3 Authority key identifier: 1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3 Certificate issuer: /CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3 Certificate serial: 019B2B8AFC304F31422F1F71CB17F4A66AF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft Manifest number: 0DAD Signing time: Wed 17 Dec 2025 09:01:27 +0000 Manifest this update: Wed 17 Dec 2025 09:01:27 +0000 Manifest next update: Thu 18 Dec 2025 09:01:27 +0000 Files and hashes: 1: Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl (hash: E43omxvdiAZaO0z6fzTBC8YeZWB9PtFqrhkoQWvjFy0=) 2: oaQkn5zr2sFy17og-aVMkuLXdds.roa (hash: VtZ3pTO5W1yzA+ps5HMSQhypm611YNtn0vckyLuCUAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:fc:30:4f:31:42:2f:1f:71:cb:17:f4:a6:6a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3 Validity Not Before: Dec 17 09:01:27 2025 GMT Not After : Dec 18 09:01:27 2025 GMT Subject: CN=2e689b50e74f51305ca0b3a4f62ffbba90c87cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2d:3e:4f:6f:06:8a:a1:7d:05:1c:11:5b:59: f0:21:53:30:ff:a6:0f:94:82:29:5e:88:87:25:38: c4:4a:96:82:ac:46:27:28:6c:d5:4d:c9:4a:94:ef: 38:67:88:e4:08:e7:d9:89:70:2b:97:15:5c:eb:39: 96:bf:81:1b:39:d6:51:d6:fa:7e:d5:7f:22:54:fd: 9f:e7:a6:c4:f8:7e:b8:ca:b4:de:49:55:d7:1b:82: 7c:eb:12:1b:03:e0:06:e0:75:1f:d8:06:0d:7b:6f: da:a7:12:2e:72:45:93:b2:ce:31:67:f6:5c:7f:03: d7:35:52:d3:07:9a:c3:07:b8:88:e4:70:ef:d7:43: f8:83:18:36:a8:af:ef:88:5d:e5:9a:3d:dd:52:78: da:24:28:ac:72:4c:55:28:44:18:9a:d3:39:19:61: d4:c6:e9:6d:28:66:e2:91:35:56:68:58:a9:bc:14: 0b:a4:28:70:8e:7a:f9:2b:83:01:58:dd:4d:13:ad: 03:13:2a:de:2a:22:b8:cf:5a:05:4f:fb:83:93:4d: 2c:db:08:b7:3b:da:1d:19:de:50:38:e7:9f:0b:36: 25:af:96:69:6a:cf:00:cb:a1:f0:6a:86:0f:7a:09: b4:78:97:f6:58:c5:1e:80:9c:bc:96:25:66:2f:ee: e9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:68:9B:50:E7:4F:51:30:5C:A0:B3:A4:F6:2F:FB:BA:90:C8:7C:B3 X509v3 Authority Key Identifier: keyid:1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f6:ce:29:8c:4f:1f:53:58:2e:20:0b:7a:c1:1d:d8:6d:85: 0a:f3:94:49:bc:3c:c5:3c:77:c9:47:22:16:87:7f:e9:8c:70: 46:45:78:42:ad:5c:fb:43:61:19:f8:8b:29:4f:a3:d8:3e:d8: 68:41:8d:62:d4:87:89:c4:ec:b8:35:0f:aa:52:d3:f3:4b:c6: 82:ee:04:68:45:83:ea:bb:c6:d1:3d:06:cb:d5:1c:97:af:20: 37:b7:59:7e:64:29:fe:33:8e:28:d8:c0:2f:23:8e:9a:7b:b1: db:00:b5:0f:14:53:4f:98:25:d0:70:86:43:c1:16:f7:86:90: 44:37:7a:6c:47:c0:a7:89:1c:22:e1:30:84:6c:d5:d7:02:49: 46:5d:fd:1b:84:09:c7:90:e3:e4:b7:1f:8d:ef:18:4e:de:3c: 95:75:cd:47:8c:ff:b8:e3:83:72:b5:ab:09:05:90:d5:de:02: 50:35:37:ba:59:af:e0:c0:30:27:b1:26:a2:b5:8e:15:4c:9f: 81:35:74:ff:2e:25:22:21:f0:1d:50:f0:84:1c:bd:1a:2e:82: 7b:22:61:b5:38:f6:49:fd:02:97:ff:52:27:08:3b:6f:4b:95: 53:38:e5:77:54:9c:30:bd:3a:c9:e2:0c:3e:a1:26:dc:7a:90: 6d:16:80:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrivwwTzFCLx9xyxf0pmryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNDdlMmJmMzk3NDcyMWVhZmJmYjhjMzFmYzUyNzMwMzlk NTA1ZjMwHhcNMjUxMjE3MDkwMTI3WhcNMjUxMjE4MDkwMTI3WjAzMTEwLwYDVQQD EygyZTY4OWI1MGU3NGY1MTMwNWNhMGIzYTRmNjJmZmJiYTkwYzg3Y2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi0+T28GiqF9BRwRW1nwIVMw/6YP lIIpXoiHJTjESpaCrEYnKGzVTclKlO84Z4jkCOfZiXArlxVc6zmWv4EbOdZR1vp+ 1X8iVP2f56bE+H64yrTeSVXXG4J86xIbA+AG4HUf2AYNe2/apxIuckWTss4xZ/Zc fwPXNVLTB5rDB7iI5HDv10P4gxg2qK/viF3lmj3dUnjaJCisckxVKEQYmtM5GWHU xultKGbikTVWaFipvBQLpChwjnr5K4MBWN1NE60DEyreKiK4z1oFT/uDk00s2wi3 O9odGd5QOOefCzYlr5Zpas8Ay6HwaoYPegm0eJf2WMUegJy8liVmL+7pPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5om1DnT1EwXKCzpPYv+7qQyHyzMB8GA1UdIwQY MBaAFB5H4r85dHIer7+4wx/FJzA51QXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZmExMDYtNmFmOC00MzEwLWI0ZDQt ZTM2OWQ2NjAyZTZmLzEvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9hZmExMDYtNmFmOC00MzEwLWI0ZDQtZTM2OWQ2NjAyZTZm LzEvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/bOKYxP H1NYLiALesEd2G2FCvOUSbw8xTx3yUciFod/6YxwRkV4Qq1c+0NhGfiLKU+j2D7Y aEGNYtSHicTsuDUPqlLT80vGgu4EaEWD6rvG0T0Gy9Ucl68gN7dZfmQp/jOOKNjA LyOOmnux2wC1DxRTT5gl0HCGQ8EW94aQRDd6bEfAp4kcIuEwhGzV1wJJRl39G4QJ x5Dj5Lcfje8YTt48lXXNR4z/uOODcrWrCQWQ1d4CUDU3ulmv4MAwJ7EmorWOFUyf gTV0/y4lIiHwHVDwhBy9Gi6CeyJhtTj2Sf0Cl/9SJwg7b0uVUzjld1ScML06yeIM PqEm3HqQbRaApw== -----END CERTIFICATE-----Generated at Wed Dec 17 15:18:08 2025 by rpki-client