This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json) Hash identifier: TjgUIQREfIRzLbwByVekkQFz1BeuPO6DGcWFC/Fq/TA= Subject key identifier: C2:05:65:F9:6C:5D:2E:52:10:76:01:91:8D:55:F1:3A:E8:11:4D:3A Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0 Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0 Certificate serial: 019B446E90C647F1C72FAEEF67F7ACDFEB73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft Manifest number: 0F51 Signing time: Mon 22 Dec 2025 05:00:55 +0000 Manifest this update: Mon 22 Dec 2025 05:00:55 +0000 Manifest next update: Tue 23 Dec 2025 05:00:55 +0000 Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: 0E2r7Kz4V4vXtx00eJY/tAsyxsr6wwtAg5DRwZMVVUk=) 2: aRJc7_o9XgAW9PPEgC1zuufULQk.roa (hash: aNwMxPIgMebl0KXeBZmaqOEDWlNAdOizWVRuMjJ0OEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:90:c6:47:f1:c7:2f:ae:ef:67:f7:ac:df:eb:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0 Validity Not Before: Dec 22 05:00:55 2025 GMT Not After : Dec 23 05:00:55 2025 GMT Subject: CN=c20565f96c5d2e52107601918d55f13ae8114d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1b:0c:7d:7f:69:70:05:d7:2a:de:ec:1c:fe: aa:fd:e9:1e:e8:e6:7f:4a:85:38:2d:60:d5:fb:ec: 2b:dc:36:a5:b5:53:e8:c3:c2:de:14:f2:fb:67:be: ce:a3:d8:c3:04:57:2f:28:4b:23:1e:b7:df:ab:18: a0:a8:b5:be:7f:dc:ba:93:63:fe:af:c4:98:cb:46: 9e:a7:11:1a:33:7d:0a:e4:5d:40:a7:c6:04:3a:07: 6e:e9:90:49:dd:a5:28:5d:fd:7d:3d:cc:64:98:17: fd:e2:2b:28:bb:e1:44:0e:8c:cc:65:53:2f:33:54: d8:5d:ca:ce:37:20:53:7b:9b:d2:d8:c2:e6:aa:c2: 36:82:fe:d2:ca:8d:67:cd:6a:b5:a5:a8:6e:56:a2: 21:f9:33:47:5b:e2:49:15:9c:55:d3:db:22:90:da: cf:2d:0b:bd:17:b9:af:bc:47:29:3b:29:be:f2:5a: e2:cb:81:80:98:3f:f3:3c:e3:b9:c6:e9:ef:9a:cc: 16:64:11:82:c6:95:18:fc:71:6b:99:64:b4:c4:d6: 1a:2f:28:39:5f:db:54:c5:e0:73:20:40:26:31:68: 75:ce:7d:c0:5b:dc:9f:3b:da:11:99:3d:82:61:1a: 19:aa:b3:4d:f0:21:4d:43:bb:0d:89:c6:26:4f:a9: 75:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:05:65:F9:6C:5D:2E:52:10:76:01:91:8D:55:F1:3A:E8:11:4D:3A X509v3 Authority Key Identifier: keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a6:a6:6b:2b:a5:8d:8b:17:8c:0f:6e:1e:94:0b:cb:e6:7a: c9:0e:d3:c5:1e:8a:85:96:a0:56:30:30:96:c9:c9:fc:99:20: dc:ff:93:49:60:44:18:ba:3a:62:41:95:d1:79:be:20:d2:91: 26:81:1d:ba:b0:b9:e3:4a:17:9f:86:13:ba:9c:2b:25:e0:2c: 27:f7:0c:c3:7c:27:86:d3:39:96:fd:ab:5a:99:6f:d9:65:ef: 0e:7a:35:c5:b7:c1:a7:5c:6c:9f:39:91:8f:1a:0b:42:44:fc: 3f:ec:44:ed:8b:20:bb:d0:7b:74:c4:fa:22:c5:66:18:49:25: 65:24:46:73:c4:ff:67:7a:eb:24:cf:fb:f6:4f:4c:af:0d:ac: d8:30:d4:98:11:5a:f9:f9:5b:b9:dd:6e:de:62:99:0b:10:5b: 39:9b:3a:62:77:ed:4b:8e:a4:89:1d:08:fb:b8:01:b3:d5:c6: 9d:a0:cc:51:00:77:49:9d:17:ef:70:13:1d:55:40:1d:dd:94: 73:ad:b2:1a:a5:07:f6:47:e3:80:ca:ab:53:93:e7:6f:f4:68: 41:5b:88:de:3a:ed:43:67:b4:b6:e3:dd:48:61:6a:ab:3e:69: bf:99:0c:c2:1f:10:cb:57:26:8d:01:ed:0a:1b:d5:db:83:75: dd:6e:e0:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbpDGR/HHL67vZ/es3+tzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYjkzYjgzYmFmYWQ3YmZkOTRmNjc2YzAyMWJhYWI1MTg3 MDA3ZjAwHhcNMjUxMjIyMDUwMDU1WhcNMjUxMjIzMDUwMDU1WjAzMTEwLwYDVQQD EyhjMjA1NjVmOTZjNWQyZTUyMTA3NjAxOTE4ZDU1ZjEzYWU4MTE0ZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BsMfX9pcAXXKt7sHP6q/eke6OZ/ SoU4LWDV++wr3DaltVPow8LeFPL7Z77Oo9jDBFcvKEsjHrffqxigqLW+f9y6k2P+ r8SYy0aepxEaM30K5F1Ap8YEOgdu6ZBJ3aUoXf19PcxkmBf94isou+FEDozMZVMv M1TYXcrONyBTe5vS2MLmqsI2gv7Syo1nzWq1pahuVqIh+TNHW+JJFZxV09sikNrP LQu9F7mvvEcpOym+8lriy4GAmD/zPOO5xunvmswWZBGCxpUY/HFrmWS0xNYaLyg5 X9tUxeBzIEAmMWh1zn3AW9yfO9oRmT2CYRoZqrNN8CFNQ7sNicYmT6l14wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIFZflsXS5SEHYBkY1V8TroEU06MB8GA1UdIwQY MBaAFB25O4O6+te/2U9nbAIbqrUYcAfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTMwMDktOGYyZS00MjBjLTliZGYt YmU3NDkwODE4NmYwLzEvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTMwMDktOGYyZS00MjBjLTliZGYtYmU3NDkwODE4NmYw LzEvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKamayul jYsXjA9uHpQLy+Z6yQ7TxR6KhZagVjAwlsnJ/Jkg3P+TSWBEGLo6YkGV0Xm+INKR JoEdurC540oXn4YTupwrJeAsJ/cMw3wnhtM5lv2rWplv2WXvDno1xbfBp1xsnzmR jxoLQkT8P+xE7Ysgu9B7dMT6IsVmGEklZSRGc8T/Z3rrJM/79k9Mrw2s2DDUmBFa +flbud1u3mKZCxBbOZs6YnftS46kiR0I+7gBs9XGnaDMUQB3SZ0X73ATHVVAHd2U c62yGqUH9kfjgMqrU5Pnb/RoQVuI3jrtQ2e0tuPdSGFqqz5pv5kMwh8Qy1cmjQHt ChvV24N13W7gHg== -----END CERTIFICATE-----Generated at Mon Dec 22 10:05:47 2025 by rpki-client