This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft File: hkEGVA8wqdzfjvm-cv_vi9inLlw.mft (raw, json) Hash identifier: TStsZoC91eStYNr9ubChd9AikDDPRofshGsVAbCo1N8= Subject key identifier: 80:09:21:29:7F:AC:84:66:06:AE:93:49:DB:B1:5E:5B:91:09:45:3A Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C Certificate issuer: /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c Certificate serial: 019B45B7EE78375FD4C466B68C695F2DE562 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 11:00:40 +0000 Manifest this update: Mon 22 Dec 2025 11:00:40 +0000 Manifest next update: Tue 23 Dec 2025 11:00:40 +0000 Files and hashes: 1: XPrFj5zrogqrQA0ZGMw9Cj_3tIM.roa (hash: y5bDj30kHbVlnej3Qo9ZyWbBqUGtip3DeFT5c1pzf8I=) 2: hkEGVA8wqdzfjvm-cv_vi9inLlw.crl (hash: NsVNSe8bxfAXEF1Acs4CaPbfRzE6qxwpCnbxjtqY/Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b7:ee:78:37:5f:d4:c4:66:b6:8c:69:5f:2d:e5:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c Validity Not Before: Dec 22 11:00:40 2025 GMT Not After : Dec 23 11:00:40 2025 GMT Subject: CN=800921297fac846606ae9349dbb15e5b9109453a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:5e:40:80:f8:20:9b:ad:b1:e0:4c:a8:b7: c1:48:c9:0b:00:f2:31:c8:f7:a1:1c:1b:9e:66:2d: 36:55:b0:15:b4:0d:de:bf:40:7a:31:c5:46:f7:5b: 57:32:b4:7a:af:94:3d:d3:cc:b2:55:0f:b4:7d:99: 50:d0:31:c5:8d:cf:79:7d:f0:1a:15:79:0b:da:40: 52:de:e6:03:a2:be:da:d3:99:37:2e:79:08:08:e9: 89:83:60:ab:f3:c3:31:94:c5:e1:1a:7f:bd:f4:22: b6:21:1c:eb:f4:d2:6a:93:5b:46:9e:45:a1:a6:e5: bf:a3:74:f6:27:5d:7e:f9:66:bf:45:17:64:d8:4f: 05:3d:ea:49:61:ea:f0:db:cb:a1:00:30:52:38:86: 1f:15:35:0f:3a:96:97:85:18:ac:b9:6a:a5:91:4c: 24:1c:91:f4:87:86:f6:c4:6c:8e:a6:87:62:90:73: 80:9d:58:7e:ed:31:44:bd:2b:4d:e1:51:c1:24:de: 02:a5:18:e1:02:e9:52:5f:ad:15:da:0b:41:68:45: 47:f0:7f:63:20:e7:65:16:4c:76:10:2b:ce:1d:1e: 03:63:3a:90:b7:4e:82:76:69:90:37:c0:7a:2b:d3: fa:12:ba:ee:27:f8:4f:98:c5:f6:87:27:c6:3b:3c: 3f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:09:21:29:7F:AC:84:66:06:AE:93:49:DB:B1:5E:5B:91:09:45:3A X509v3 Authority Key Identifier: keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:60:e5:a4:b2:e7:d0:79:2e:e8:bd:6d:92:e8:fd:6f:01:a2: ec:f7:2c:62:9b:ca:29:4d:b2:90:ff:65:02:cc:63:01:11:2d: 7c:3a:9a:64:27:ef:d2:a2:82:af:17:a2:db:e6:ad:ac:95:cf: 07:dc:8b:58:6f:20:d0:58:d2:a2:04:97:00:b8:69:61:b6:1c: ba:bf:48:ae:00:cf:e2:cb:bf:86:f4:08:f3:39:f7:cd:61:82: 10:6f:fb:d4:36:80:55:c1:8f:9e:45:dc:10:b6:44:41:56:c0: 8e:49:22:c0:87:a4:62:49:3e:93:e7:7d:c2:27:4d:cb:57:e8: 26:17:8b:b0:e2:33:80:14:79:00:76:6a:9c:0e:69:6d:c1:d3: 2e:2d:12:78:3d:84:6f:4d:b2:4f:ec:5f:25:bf:dc:2e:92:35: 98:7d:52:cc:72:c6:14:67:d6:74:69:89:2d:54:9e:2f:2a:f1: bf:cb:2a:01:84:67:c1:8d:99:04:b4:5f:0a:67:d0:c1:dc:46: fe:16:33:a8:94:19:4b:31:a0:b0:3b:69:e9:ed:ca:5d:41:c9: a5:68:77:af:38:55:c1:27:81:cc:7c:51:94:0d:18:08:98:f6: f0:22:d3:c5:2a:2f:f3:0b:56:2b:69:40:be:24:df:8a:b8:1a: 77:cb:23:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFt+54N1/UxGa2jGlfLeViMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NDEwNjU0MGYzMGE5ZGNkZjhlZjliZTcyZmZlZjhiZDhh NzJlNWMwHhcNMjUxMjIyMTEwMDQwWhcNMjUxMjIzMTEwMDQwWjAzMTEwLwYDVQQD Eyg4MDA5MjEyOTdmYWM4NDY2MDZhZTkzNDlkYmIxNWU1YjkxMDk0NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosFeQID4IJutseBMqLfBSMkLAPIx yPehHBueZi02VbAVtA3ev0B6McVG91tXMrR6r5Q908yyVQ+0fZlQ0DHFjc95ffAa FXkL2kBS3uYDor7a05k3LnkICOmJg2Cr88MxlMXhGn+99CK2IRzr9NJqk1tGnkWh puW/o3T2J11++Wa/RRdk2E8FPepJYerw28uhADBSOIYfFTUPOpaXhRisuWqlkUwk HJH0h4b2xGyOpodikHOAnVh+7TFEvStN4VHBJN4CpRjhAulSX60V2gtBaEVH8H9j IOdlFkx2ECvOHR4DYzqQt06CdmmQN8B6K9P6ErruJ/hPmMX2hyfGOzw/0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAJISl/rIRmBq6TSduxXluRCUU6MB8GA1UdIwQY MBaAFIZBBlQPMKnc3475vnL/74vYpy5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wYmU3ZjItNjM4ZC00ZjQ1LWI2OTct M2IzMThlNDcyNzZkLzEvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wYmU3ZjItNjM4ZC00ZjQ1LWI2OTctM2IzMThlNDcyNzZk LzEvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWDlpLLn 0Hku6L1tkuj9bwGi7PcsYpvKKU2ykP9lAsxjAREtfDqaZCfv0qKCrxei2+atrJXP B9yLWG8g0FjSogSXALhpYbYcur9IrgDP4su/hvQI8zn3zWGCEG/71DaAVcGPnkXc ELZEQVbAjkkiwIekYkk+k+d9widNy1foJheLsOIzgBR5AHZqnA5pbcHTLi0SeD2E b02yT+xfJb/cLpI1mH1SzHLGFGfWdGmJLVSeLyrxv8sqAYRnwY2ZBLRfCmfQwdxG /hYzqJQZSzGgsDtp6e3KXUHJpWh3rzhVwSeBzHxRlA0YCJj28CLTxSov8wtWK2lA viTfirgad8sj7w== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:13 2025 by rpki-client