This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json) Hash identifier: VoL/RIHYry+Fva7iBiX+oomCIEM4EWB3fCl9W96TUwU= Subject key identifier: 39:F8:01:89:7A:55:83:F4:63:39:37:31:F1:A9:CC:4A:7F:C3:A8:9C Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0 Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0 Certificate serial: 019B74B59BED9CE81303E241BA1B26856207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft Manifest number: 0F6A Signing time: Wed 31 Dec 2025 14:00:17 +0000 Manifest this update: Wed 31 Dec 2025 14:00:17 +0000 Manifest next update: Thu 01 Jan 2026 14:00:17 +0000 Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: GGFrOydWWJJ6GGIVn1WcdBUYSY2JzTjfAceNoNjmegQ=) 2: aRJc7_o9XgAW9PPEgC1zuufULQk.roa (hash: aNwMxPIgMebl0KXeBZmaqOEDWlNAdOizWVRuMjJ0OEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:b5:9b:ed:9c:e8:13:03:e2:41:ba:1b:26:85:62:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0 Validity Not Before: Dec 31 14:00:17 2025 GMT Not After : Jan 1 14:00:17 2026 GMT Subject: CN=39f801897a5583f463393731f1a9cc4a7fc3a89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:53:4e:42:83:09:4e:9a:72:41:1a:68:db:0f: ab:99:f7:ed:10:d1:64:86:f8:1b:cf:9f:9f:4c:0c: c2:0b:c1:43:7b:97:4c:2f:49:7a:49:14:20:de:d3: 7f:c9:28:c8:15:39:44:e6:ff:ae:16:d4:13:05:32: ea:b5:d0:cf:ca:cd:9a:b2:70:2f:aa:d5:5c:f2:be: 17:72:ee:ae:03:7d:ea:03:82:45:d5:4b:e0:dd:9c: 88:19:c1:d2:1f:0f:24:91:45:45:9a:c3:07:7b:28: e9:e0:a6:1c:c3:27:c3:d3:13:19:6b:f3:7e:d0:39: d6:ce:bb:7b:7f:8f:db:bf:0f:8b:63:5b:45:49:53: 5e:bd:c9:6d:62:80:17:7f:79:1c:61:42:32:d3:79: 4a:0c:e8:51:1c:60:4f:05:43:66:00:22:78:ff:22: 8c:1c:ad:bc:a1:7d:0a:c5:b1:f7:76:92:e7:d3:56: 6e:1e:2d:b4:d9:11:4f:99:23:b6:90:19:94:d1:5c: ad:11:06:fe:53:69:40:ab:1c:97:8c:c1:2c:63:0a: b9:2a:e2:68:a7:c4:dd:a5:20:05:56:76:70:10:9a: 6e:b2:17:20:f5:31:a7:41:0c:13:87:e3:4d:71:1f: 21:d4:00:2f:31:0e:8f:29:ee:b7:c3:eb:5f:97:e1: 53:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F8:01:89:7A:55:83:F4:63:39:37:31:F1:A9:CC:4A:7F:C3:A8:9C X509v3 Authority Key Identifier: keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:14:d3:24:3d:1c:e9:0c:4a:74:8d:b2:58:b4:92:e6:85:77: e8:1d:a4:68:52:5c:5a:e7:fa:46:88:6d:34:ae:71:83:94:11: 20:75:25:d7:ae:12:94:4f:d6:c4:85:89:c8:17:74:a4:5c:1b: 10:7f:4b:f2:63:35:14:db:7a:55:a4:37:2f:e6:c9:d5:3b:f0: dc:17:2a:85:74:31:71:77:df:94:27:33:7e:fd:de:6a:90:0c: b0:e2:ce:52:ff:45:8d:d7:f1:06:eb:6a:66:42:40:d3:36:76: 72:01:ef:98:f2:75:5e:a5:db:79:dd:5e:fd:5a:7c:53:dd:ea: d2:bd:ec:e8:43:80:26:7d:fb:5b:0b:2e:af:40:dc:67:62:3d: eb:d2:60:48:4d:e2:22:bd:14:fc:9f:e7:11:03:50:2d:c2:cb: 95:e7:ca:b1:37:9e:e7:77:86:d2:39:b1:1b:65:fb:4e:fc:31: 07:9e:d9:19:9b:c4:28:96:6a:e6:c0:81:af:61:54:ac:d4:62: 5b:e2:65:5b:b7:2e:26:5e:86:73:96:18:7e:67:79:c8:8c:e8: a4:4e:52:92:0e:48:c8:b4:38:29:ee:5d:94:5a:07:a8:f4:cb: 90:50:95:e8:63:23:b9:21:c7:50:17:34:2b:66:aa:67:89:b2: 70:35:76:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0tZvtnOgTA+JBuhsmhWIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYjkzYjgzYmFmYWQ3YmZkOTRmNjc2YzAyMWJhYWI1MTg3 MDA3ZjAwHhcNMjUxMjMxMTQwMDE3WhcNMjYwMTAxMTQwMDE3WjAzMTEwLwYDVQQD EygzOWY4MDE4OTdhNTU4M2Y0NjMzOTM3MzFmMWE5Y2M0YTdmYzNhODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFNOQoMJTppyQRpo2w+rmfftENFk hvgbz5+fTAzCC8FDe5dML0l6SRQg3tN/ySjIFTlE5v+uFtQTBTLqtdDPys2asnAv qtVc8r4Xcu6uA33qA4JF1Uvg3ZyIGcHSHw8kkUVFmsMHeyjp4KYcwyfD0xMZa/N+ 0DnWzrt7f4/bvw+LY1tFSVNevcltYoAXf3kcYUIy03lKDOhRHGBPBUNmACJ4/yKM HK28oX0KxbH3dpLn01ZuHi202RFPmSO2kBmU0VytEQb+U2lAqxyXjMEsYwq5KuJo p8TdpSAFVnZwEJpushcg9TGnQQwTh+NNcR8h1AAvMQ6PKe63w+tfl+FTmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDn4AYl6VYP0Yzk3MfGpzEp/w6icMB8GA1UdIwQY MBaAFB25O4O6+te/2U9nbAIbqrUYcAfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTMwMDktOGYyZS00MjBjLTliZGYt YmU3NDkwODE4NmYwLzEvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTMwMDktOGYyZS00MjBjLTliZGYtYmU3NDkwODE4NmYw LzEvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexTTJD0c 6QxKdI2yWLSS5oV36B2kaFJcWuf6RohtNK5xg5QRIHUl164SlE/WxIWJyBd0pFwb EH9L8mM1FNt6VaQ3L+bJ1Tvw3BcqhXQxcXfflCczfv3eapAMsOLOUv9FjdfxButq ZkJA0zZ2cgHvmPJ1XqXbed1e/Vp8U93q0r3s6EOAJn37Wwsur0DcZ2I969JgSE3i Ir0U/J/nEQNQLcLLlefKsTee53eG0jmxG2X7TvwxB57ZGZvEKJZq5sCBr2FUrNRi W+JlW7cuJl6Gc5YYfmd5yIzopE5Skg5IyLQ4Ke5dlFoHqPTLkFCV6GMjuSHHUBc0 K2aqZ4mycDV2mQ== -----END CERTIFICATE-----Generated at Wed Dec 31 21:07:42 2025 by rpki-client