This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft File: hkEGVA8wqdzfjvm-cv_vi9inLlw.mft (raw, json) Hash identifier: hLONrBXXEvKMDLLZyOtxufUqTwE1GhcpSm14y5g6xxs= Subject key identifier: AD:7D:33:2A:DF:73:4B:3B:30:CC:40:3D:0C:71:02:CA:EF:34:A2:17 Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C Certificate issuer: /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c Certificate serial: 019B5CE4D162C89548E5003A74F52D765EEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft Manifest number: 179C Signing time: Fri 26 Dec 2025 23:00:58 +0000 Manifest this update: Fri 26 Dec 2025 23:00:58 +0000 Manifest next update: Sat 27 Dec 2025 23:00:58 +0000 Files and hashes: 1: XPrFj5zrogqrQA0ZGMw9Cj_3tIM.roa (hash: y5bDj30kHbVlnej3Qo9ZyWbBqUGtip3DeFT5c1pzf8I=) 2: hkEGVA8wqdzfjvm-cv_vi9inLlw.crl (hash: 4uFH6WAHx9JuoYQPH5Ye26rQ4E54eysDBb6dLZJjUdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:d1:62:c8:95:48:e5:00:3a:74:f5:2d:76:5e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c Validity Not Before: Dec 26 23:00:58 2025 GMT Not After : Dec 27 23:00:58 2025 GMT Subject: CN=ad7d332adf734b3b30cc403d0c7102caef34a217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:46:b4:ca:0f:9d:39:ab:2d:7b:8a:4a:6b: 45:c2:96:38:16:25:fb:24:f2:84:48:0c:32:9a:6b: 9b:c4:7d:4d:8d:3c:e9:ba:6d:e0:34:67:3b:1f:06: f5:e8:db:3a:68:76:a5:a6:81:04:55:db:8f:fe:0b: 72:cb:25:64:9e:c6:02:ca:cb:73:f7:86:ba:99:9f: 5c:48:e5:9a:79:94:16:56:fd:4a:69:7f:34:6c:e5: 88:77:12:fa:ea:97:5e:55:73:78:4f:95:7d:8a:90: 78:5f:bb:e8:a5:40:34:6d:1c:12:50:8e:c8:53:6f: 3f:36:4a:e1:f3:14:d3:7e:1f:88:5e:03:59:b1:d8: 57:9c:85:73:65:a5:ee:f7:67:d8:7a:1a:3c:5f:75: a9:57:49:de:8f:19:10:f4:6b:ff:12:86:81:9e:bf: a9:50:93:3f:a6:24:5b:20:6c:4e:c3:ee:80:c7:9d: e2:6e:07:e1:f0:68:95:da:91:52:b9:e3:f3:b4:9b: 31:ac:74:17:74:cd:75:25:23:7c:96:72:7a:f5:ac: b2:e0:46:42:99:a2:cb:68:20:a0:06:39:1d:26:39: 4d:db:4a:0b:7c:66:e8:14:c0:8f:8e:fa:b1:1b:a2: bf:7a:ba:2e:89:dc:58:75:15:47:55:e4:2a:f1:34: bd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7D:33:2A:DF:73:4B:3B:30:CC:40:3D:0C:71:02:CA:EF:34:A2:17 X509v3 Authority Key Identifier: keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:47:7e:ad:da:62:bc:fa:bb:dd:c4:55:9f:b6:d2:0c:59:16: 6e:7c:95:5c:18:04:e2:aa:5f:49:e1:4a:9c:d3:22:e7:19:29: c6:cb:06:81:69:1b:80:c3:46:ea:a4:20:72:ef:e1:50:c9:ca: 03:a7:f1:06:ab:bc:59:bc:96:7b:d7:1e:f0:d9:27:7f:74:9f: bd:02:c2:09:69:1c:a3:39:91:36:a7:ff:3a:3b:61:de:0b:cb: b4:ab:87:97:db:a4:25:7f:da:d8:7e:78:a2:d5:bf:78:5c:9b: 0d:32:99:2a:c7:ee:27:5f:b5:67:a3:a3:ab:b6:05:08:d6:72: 3b:aa:15:b1:9c:8c:f2:06:e1:8c:f2:2e:ac:0f:63:f1:1d:93: 70:b7:42:ac:6c:f0:6b:7c:99:98:1f:96:77:f0:62:45:b0:60: 4d:eb:ad:fe:c2:da:d7:5a:01:87:91:b0:69:08:c0:29:cd:ef: a1:13:29:6a:0d:06:57:df:e3:e4:a0:8f:09:75:31:9c:7a:d2: a8:9b:9d:a9:e0:b2:64:8a:e0:e9:1a:50:35:90:5b:24:69:3d: c0:62:36:23:61:ef:80:5e:57:86:b5:ea:ae:ca:ae:5c:57:37: ab:16:8c:e8:1b:69:81:21:69:d6:e8:b0:e7:af:0f:65:87:62: 73:6a:e9:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5NFiyJVI5QA6dPUtdl7uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NDEwNjU0MGYzMGE5ZGNkZjhlZjliZTcyZmZlZjhiZDhh NzJlNWMwHhcNMjUxMjI2MjMwMDU4WhcNMjUxMjI3MjMwMDU4WjAzMTEwLwYDVQQD EyhhZDdkMzMyYWRmNzM0YjNiMzBjYzQwM2QwYzcxMDJjYWVmMzRhMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEdGtMoPnTmrLXuKSmtFwpY4FiX7 JPKESAwymmubxH1NjTzpum3gNGc7Hwb16Ns6aHalpoEEVduP/gtyyyVknsYCystz 94a6mZ9cSOWaeZQWVv1KaX80bOWIdxL66pdeVXN4T5V9ipB4X7vopUA0bRwSUI7I U28/Nkrh8xTTfh+IXgNZsdhXnIVzZaXu92fYeho8X3WpV0nejxkQ9Gv/EoaBnr+p UJM/piRbIGxOw+6Ax53ibgfh8GiV2pFSuePztJsxrHQXdM11JSN8lnJ69ayy4EZC maLLaCCgBjkdJjlN20oLfGboFMCPjvqxG6K/erouidxYdRVHVeQq8TS9YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK19Myrfc0s7MMxAPQxxAsrvNKIXMB8GA1UdIwQY MBaAFIZBBlQPMKnc3475vnL/74vYpy5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wYmU3ZjItNjM4ZC00ZjQ1LWI2OTct M2IzMThlNDcyNzZkLzEvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wYmU3ZjItNjM4ZC00ZjQ1LWI2OTctM2IzMThlNDcyNzZk LzEvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREd+rdpi vPq73cRVn7bSDFkWbnyVXBgE4qpfSeFKnNMi5xkpxssGgWkbgMNG6qQgcu/hUMnK A6fxBqu8WbyWe9ce8Nknf3SfvQLCCWkcozmRNqf/Ojth3gvLtKuHl9ukJX/a2H54 otW/eFybDTKZKsfuJ1+1Z6Ojq7YFCNZyO6oVsZyM8gbhjPIurA9j8R2TcLdCrGzw a3yZmB+Wd/BiRbBgTeut/sLa11oBh5GwaQjAKc3voRMpag0GV9/j5KCPCXUxnHrS qJudqeCyZIrg6RpQNZBbJGk9wGI2I2HvgF5XhrXqrsquXFc3qxaM6BtpgSFp1uiw 568PZYdic2rpUg== -----END CERTIFICATE-----Generated at Sat Dec 27 06:17:38 2025 by rpki-client