This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json) Hash identifier: g96cqTWHTmp6kCqQV30kRgKJp7QBEH94XMrMEe4vkLI= Subject key identifier: 2F:C4:29:DE:74:0A:C4:AC:CF:39:3A:5B:40:68:48:54:91:CF:AA:DE Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe Certificate serial: 019B3A21DEB4BEF567BB77DC8FC4871CB80F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 05:00:56 +0000 Manifest this update: Sat 20 Dec 2025 05:00:56 +0000 Manifest next update: Sun 21 Dec 2025 05:00:56 +0000 Files and hashes: 1: E0KbPb4RfPbI9ii_1fNlFCQuDLw.roa (hash: be5+koswrVopdsotzqVNJfSpffEio3grzLc2KrNQKj8=) 2: ExjSEeEAZl6w67KQQzB9tboEijs.roa (hash: kHRGvr6/I9lpmyPu60rCwXrYtjs7atLNb5bTbjbxNMY=) 3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: tzLrqRbIFXxDCYAIYvKOoL7hEd+n3zryBJ2fnuVLfdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:de:b4:be:f5:67:bb:77:dc:8f:c4:87:1c:b8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe Validity Not Before: Dec 20 05:00:56 2025 GMT Not After : Dec 21 05:00:56 2025 GMT Subject: CN=2fc429de740ac4accf393a5b4068485491cfaade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0c:06:ab:42:8c:74:bd:66:24:37:34:e9:f0: 3a:d6:21:a5:cd:6b:6d:73:75:4a:13:a2:2c:cf:76: 22:2b:5c:e1:e4:f3:d1:1a:7b:c2:c4:7f:7b:1f:7c: 55:a1:77:b9:1f:1b:12:5b:78:b9:4d:a3:b8:04:b7: 29:ee:8e:41:7f:18:b6:6d:28:10:df:e0:4f:2a:f0: d0:05:69:36:87:d0:50:24:32:57:1e:03:7e:8c:90: 41:f8:10:f5:dc:7b:66:56:27:7c:62:2a:d4:4f:79: ad:6d:48:fb:12:41:b0:a6:03:21:8e:c6:fb:2b:29: 94:9a:af:9e:60:62:e2:12:10:c0:2d:35:93:88:24: f8:1b:ef:5e:04:96:61:6e:15:0f:c3:8c:69:16:aa: f8:bf:67:22:88:1b:bd:f3:51:66:be:74:63:b9:ed: 0a:a4:13:ca:fe:97:d5:56:27:50:05:90:55:46:9c: 0f:fe:e1:69:67:d0:7f:a3:71:5c:aa:ba:ca:29:c7: e7:2e:f7:8f:c0:6c:10:c7:43:fa:18:63:18:fd:75: f4:52:cb:0c:ba:0a:98:c4:ec:12:ad:a0:c7:89:a3: 1f:d7:90:fa:0b:42:5c:97:d4:b1:b3:72:c3:a0:b5: 45:67:d6:77:21:4d:32:af:ec:5a:27:d8:6e:d8:8e: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C4:29:DE:74:0A:C4:AC:CF:39:3A:5B:40:68:48:54:91:CF:AA:DE X509v3 Authority Key Identifier: keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:73:a5:91:bf:59:5f:ae:5a:ad:36:14:33:0d:06:8f:53:d3: 75:ba:46:31:3b:14:31:60:69:b0:ee:12:83:46:32:4d:dc:6f: 5f:25:d5:20:69:ce:4b:40:e4:19:96:fd:7a:53:88:40:dd:d5: be:eb:8e:ee:91:5a:eb:68:e8:dc:e3:8e:34:6f:ae:f4:73:ea: 97:04:ed:32:fc:87:53:38:58:2d:ba:be:e5:4c:12:ff:14:3f: 25:0e:28:bf:52:32:a5:7f:15:c9:ee:a0:ee:bb:f7:64:48:ca: 4f:56:d8:ad:6d:eb:0d:f6:27:6c:7e:84:cc:d4:47:9f:9d:b2: 88:0b:73:bc:ed:a2:e8:f9:f1:92:f7:29:a3:c4:06:df:06:29: 4d:6c:93:bd:a6:c4:e3:e7:d0:11:c2:e6:2a:a0:87:6f:e5:93: e0:f5:ef:85:73:4b:e6:f3:4c:56:53:01:6e:20:ab:7a:7b:ca: 81:47:1a:d4:0c:ab:91:a2:ab:1a:57:09:28:db:92:1f:66:d4: 25:1d:de:24:56:4c:58:4c:d7:4f:19:e7:e7:44:e3:99:ae:8e: 07:ee:4d:23:ad:4a:20:c9:7c:34:15:81:90:5b:89:40:5d:71: 18:a1:ac:84:3c:5c:ab:f1:df:a5:05:97:81:2c:90:4a:f8:b6: 0f:d0:a7:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Id60vvVnu3fcj8SHHLgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YjkxOWEzZmViMGVjOTY2Mjk5ZmYwZmFlOGRlZmNiNDE1 ZTIyZmUwHhcNMjUxMjIwMDUwMDU2WhcNMjUxMjIxMDUwMDU2WjAzMTEwLwYDVQQD EygyZmM0MjlkZTc0MGFjNGFjY2YzOTNhNWI0MDY4NDg1NDkxY2ZhYWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQwGq0KMdL1mJDc06fA61iGlzWtt c3VKE6Isz3YiK1zh5PPRGnvCxH97H3xVoXe5HxsSW3i5TaO4BLcp7o5Bfxi2bSgQ 3+BPKvDQBWk2h9BQJDJXHgN+jJBB+BD13HtmVid8YirUT3mtbUj7EkGwpgMhjsb7 KymUmq+eYGLiEhDALTWTiCT4G+9eBJZhbhUPw4xpFqr4v2ciiBu981FmvnRjue0K pBPK/pfVVidQBZBVRpwP/uFpZ9B/o3FcqrrKKcfnLvePwGwQx0P6GGMY/XX0UssM ugqYxOwSraDHiaMf15D6C0Jcl9Sxs3LDoLVFZ9Z3IU0yr+xaJ9hu2I6WQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/EKd50CsSszzk6W0BoSFSRz6reMB8GA1UdIwQY MBaAFIW5GaP+sOyWYpn/D66N78tBXiL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ZTBmNWEtYzZlNy00M2U4LWJiMjEt NDdkYzA4ZDdlM2JhLzEvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81ZTBmNWEtYzZlNy00M2U4LWJiMjEtNDdkYzA4ZDdlM2Jh LzEvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA03Olkb9Z X65arTYUMw0Gj1PTdbpGMTsUMWBpsO4Sg0YyTdxvXyXVIGnOS0DkGZb9elOIQN3V vuuO7pFa62jo3OOONG+u9HPqlwTtMvyHUzhYLbq+5UwS/xQ/JQ4ov1IypX8Vye6g 7rv3ZEjKT1bYrW3rDfYnbH6EzNRHn52yiAtzvO2i6Pnxkvcpo8QG3wYpTWyTvabE 4+fQEcLmKqCHb+WT4PXvhXNL5vNMVlMBbiCrenvKgUca1AyrkaKrGlcJKNuSH2bU JR3eJFZMWEzXTxnn50Tjma6OB+5NI61KIMl8NBWBkFuJQF1xGKGshDxcq/HfpQWX gSyQSvi2D9Cncg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:06:23 2025 by rpki-client