This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json) Hash identifier: Tb2hgrXYlerxzaPMHAQwFdnxhJgzkQFp+JFcBOwaUAU= Subject key identifier: C7:26:1D:CD:0E:E0:17:DE:5B:27:DF:E9:E0:C6:36:72:67:29:98:D7 Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b Certificate serial: 019B52CF1CD1DBA5B853F8BA17235DDF3C52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft Manifest number: 0737 Signing time: Thu 25 Dec 2025 00:01:03 +0000 Manifest this update: Thu 25 Dec 2025 00:01:03 +0000 Manifest next update: Fri 26 Dec 2025 00:01:03 +0000 Files and hashes: 1: aSUGfC8WVdHXrkeRZf6pzwHN77M.roa (hash: NZqhUfFIINMzbyR/Huf0dRcUDWz5/YZwIQ3PYJryja4=) 2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: mL+ni+5huLuYh+B2BWjLW6dme8mRl2IezBdJ+GdwBCI=) 3: qiRFgTjVRdabsTRRM1YWXUGLw64.roa (hash: lCjSoDx/oZnpAtqpweWxZW6jo+ICoZqCCQhV41u6/VM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:1c:d1:db:a5:b8:53:f8:ba:17:23:5d:df:3c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b Validity Not Before: Dec 25 00:01:03 2025 GMT Not After : Dec 26 00:01:03 2025 GMT Subject: CN=c7261dcd0ee017de5b27dfe9e0c63672672998d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:6a:a1:04:60:a9:03:b7:b0:6f:9f:34:ae: b0:c9:b2:aa:ae:d7:42:75:b1:00:7b:e2:1c:0b:06: e5:6b:00:12:9a:53:1d:11:0c:b5:e5:ab:db:b9:93: df:4f:2e:62:e0:bf:a8:8a:1a:dc:02:9e:2e:40:fa: df:c7:7f:3d:67:fb:6b:74:2b:33:47:c2:a8:4d:75: fa:8d:7d:d3:a0:ee:d8:79:49:c6:33:53:dd:b5:7f: 56:01:49:25:bc:26:a0:8c:43:31:55:46:be:a8:0d: b6:08:8a:1e:2c:12:bf:1c:84:e5:38:a1:d7:15:5c: de:da:67:12:d0:e1:e8:b8:13:1f:ae:ee:df:b6:c1: 7a:c4:52:07:4f:da:35:2a:22:c6:4e:19:3e:4b:32: 40:d9:29:3a:8c:bc:da:77:e5:c7:5f:d4:24:1f:12: 16:09:46:1d:54:03:42:a9:51:a9:03:6d:6e:8d:bd: 9d:b2:d0:7f:7b:7d:d8:7f:09:60:17:c0:29:76:25: d6:9d:bf:74:28:27:66:b7:57:58:08:6d:76:7e:e9: f6:b1:62:3e:7b:49:4b:08:5f:2b:dc:d0:96:0c:fe: f6:b2:3e:0e:27:6e:d2:5b:25:ae:53:7f:2f:68:aa: d6:9c:48:f1:e4:cf:b9:e0:a2:bc:f8:6c:f1:a3:4c: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:26:1D:CD:0E:E0:17:DE:5B:27:DF:E9:E0:C6:36:72:67:29:98:D7 X509v3 Authority Key Identifier: keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ed:58:3c:21:4c:2c:4b:27:99:07:35:b2:bd:94:b4:3b:0b: bc:85:71:f2:e0:56:cc:2a:5c:63:ff:82:86:79:86:b2:75:52: 77:2d:47:af:0e:57:b1:33:59:10:df:02:2c:70:53:43:0f:ca: 45:58:e0:8c:25:f5:62:15:21:7b:ca:52:50:ac:ba:93:6b:a6: 65:e6:52:ff:3a:3f:62:12:1c:c3:cb:45:60:ae:ca:94:b7:00: 6d:32:6a:46:fd:0e:ec:7e:a4:c4:90:b5:24:f8:71:6c:50:8e: b7:11:c1:0d:28:45:9b:ae:f2:50:e0:32:0e:fe:69:01:39:19: 77:05:08:50:36:d0:94:bf:35:b2:f7:76:cb:77:c6:a6:7a:95: e4:c5:40:92:01:71:5b:48:5a:25:29:a4:46:67:48:7c:be:e4: b3:7c:02:b3:0b:91:fc:f4:31:e4:c7:20:fa:ef:9d:2d:bc:cd: 55:b8:ee:b3:3e:7e:0b:ce:14:80:8f:c9:06:27:17:1e:6e:b7: 44:ad:a6:82:82:df:3d:c3:17:a1:e9:7e:5a:f2:3c:75:02:71: 37:08:42:45:99:11:e1:80:b9:40:16:2b:75:a1:46:93:6a:25: 60:cc:1f:c0:30:70:be:46:9b:32:a1:1d:a8:3c:22:4f:66:3b: 23:07:95:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzxzR26W4U/i6FyNd3zxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NDkyZjJhNjkxMDQzM2M1YmNkODI2OWM0NDBlOGMxYzc4 MDBkNmIwHhcNMjUxMjI1MDAwMTAzWhcNMjUxMjI2MDAwMTAzWjAzMTEwLwYDVQQD EyhjNzI2MWRjZDBlZTAxN2RlNWIyN2RmZTllMGM2MzY3MjY3Mjk5OGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb1qoQRgqQO3sG+fNK6wybKqrtdC dbEAe+IcCwblawASmlMdEQy15avbuZPfTy5i4L+oihrcAp4uQPrfx389Z/trdCsz R8KoTXX6jX3ToO7YeUnGM1PdtX9WAUklvCagjEMxVUa+qA22CIoeLBK/HITlOKHX FVze2mcS0OHouBMfru7ftsF6xFIHT9o1KiLGThk+SzJA2Sk6jLzad+XHX9QkHxIW CUYdVANCqVGpA21ujb2dstB/e33YfwlgF8ApdiXWnb90KCdmt1dYCG12fun2sWI+ e0lLCF8r3NCWDP72sj4OJ27SWyWuU38vaKrWnEjx5M+54KK8+Gzxo0yvpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcmHc0O4BfeWyff6eDGNnJnKZjXMB8GA1UdIwQY MBaAFIVJLyppEEM8W82CacRA6MHHgA1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFVrdktta1FRenhiellKcHhFRG93Y2VBRFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iMzgyMjgtMDg3NS00OTFjLTlkNGYt ZDZhOWEyODI4NGNmLzEvaFVrdktta1FRenhiellKcHhFRG93Y2VBRFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iMzgyMjgtMDg3NS00OTFjLTlkNGYtZDZhOWEyODI4NGNm LzEvaFVrdktta1FRenhiellKcHhFRG93Y2VBRFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+1YPCFM LEsnmQc1sr2UtDsLvIVx8uBWzCpcY/+ChnmGsnVSdy1Hrw5XsTNZEN8CLHBTQw/K RVjgjCX1YhUhe8pSUKy6k2umZeZS/zo/YhIcw8tFYK7KlLcAbTJqRv0O7H6kxJC1 JPhxbFCOtxHBDShFm67yUOAyDv5pATkZdwUIUDbQlL81svd2y3fGpnqV5MVAkgFx W0haJSmkRmdIfL7ks3wCswuR/PQx5Mcg+u+dLbzNVbjusz5+C84UgI/JBicXHm63 RK2mgoLfPcMXoel+WvI8dQJxNwhCRZkR4YC5QBYrdaFGk2olYMwfwDBwvkabMqEd qDwiT2Y7IweVlw== -----END CERTIFICATE-----Generated at Thu Dec 25 06:23:25 2025 by rpki-client