This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json) Hash identifier: na0m4/L6ThtQEs4lwUQu9l7sSvgU1bLa9u4dZCbGr7s= Subject key identifier: 26:A8:80:03:1D:3B:39:D4:1C:3C:CD:3C:3A:4B:23:E9:02:55:13:3A Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3 Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3 Certificate serial: 019B3721387DF5764DC3E703404F33FD30E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 15:01:22 +0000 Manifest this update: Fri 19 Dec 2025 15:01:22 +0000 Manifest next update: Sat 20 Dec 2025 15:01:22 +0000 Files and hashes: 1: S-FqJ5rHJScfH16THhv-Awb7K-Q.roa (hash: qZ4G5Ir5+2IF3qwAQCRLSDxYrzLLeDBCxC9VdbkE9zU=) 2: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: LEKsQanDdDOnt7AWLNaOLoZukreg72TxO5YB+bMYR90=) 3: ie3Ij3d9SbHwlFZKN1iAPlTDPF8.roa (hash: LDgmzuKBYv7wHEv9dhDlxCP+uQjNRE91nisvU0AfRTM=) 4: pWgX5JiF8p7IJPd1N7EyBTiovEk.roa (hash: b0ArhWGdNOXnp+wzwnp1QcD9Bn6HmXnGIfByPMG51fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:38:7d:f5:76:4d:c3:e7:03:40:4f:33:fd:30:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3 Validity Not Before: Dec 19 15:01:22 2025 GMT Not After : Dec 20 15:01:22 2025 GMT Subject: CN=26a880031d3b39d41c3ccd3c3a4b23e90255133a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f9:3a:12:07:d6:f9:0e:24:3c:39:d4:65:1e: 8c:75:78:6a:af:c2:c7:92:79:ac:9d:6e:a3:95:94: 37:95:96:b8:7e:88:81:1d:0b:3d:79:a3:a3:0a:d1: 7a:70:40:2a:01:c7:0e:2a:67:52:47:03:66:ee:9e: a0:53:2b:72:32:1a:8a:fe:81:eb:be:88:d4:4c:b7: 11:01:de:d5:c8:60:0d:73:f1:62:e4:38:8c:5f:8b: c4:bb:14:4c:62:7a:0d:b0:6c:b2:4d:6a:f6:f8:b4: bc:11:73:23:d3:05:48:4d:c5:62:e3:c8:e7:bb:bd: ba:8b:d2:91:4f:f1:64:ed:f3:e0:6a:14:8c:7d:3f: 63:d8:3a:be:c0:ed:f7:72:5a:5e:23:9a:80:04:bd: 6b:f7:5e:c2:83:9b:50:7c:93:58:67:f4:36:94:b0: de:b7:82:14:9d:09:33:07:55:48:fd:3f:be:1b:f7: 47:2a:26:82:ec:4a:65:69:40:1d:30:d2:19:a6:c3: 3a:3d:f3:c1:27:1c:5b:ac:ab:63:c0:77:1c:43:4d: 59:6d:44:b5:e1:99:c9:7c:b9:09:ea:46:ae:e2:6e: 4e:8b:54:e4:da:e1:62:c8:9e:fd:74:14:96:e7:cd: 1d:1a:b7:11:80:ab:fe:3a:09:b1:ce:04:e8:cb:1f: b5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A8:80:03:1D:3B:39:D4:1C:3C:CD:3C:3A:4B:23:E9:02:55:13:3A X509v3 Authority Key Identifier: keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c8:a6:2d:8e:cf:71:19:d9:a3:a3:eb:7a:d5:b6:f6:b4:1b: b1:17:45:c3:87:81:2f:6a:12:e7:7b:6a:ab:2e:39:f4:19:e8: f1:7f:60:35:0d:47:be:f0:e3:5d:d5:4d:b2:10:de:8d:54:69: 7a:f6:0f:d9:b0:45:32:93:d0:3f:a2:38:b2:fb:fa:85:9f:a7: a5:40:82:8f:be:be:7b:80:a3:be:84:31:2f:8e:be:bc:31:db: f9:08:35:ed:da:27:4d:fb:4c:db:20:b1:65:a4:06:de:83:9b: 8e:e0:ac:a3:66:5f:5e:4b:94:fb:c1:85:d4:66:ed:f3:37:a3: 5d:17:47:f2:68:36:66:70:c9:ef:ef:f8:94:c6:b1:33:fc:68: f9:44:34:46:4a:0b:3d:d8:7d:8e:bb:ce:ae:ea:7b:20:cf:b7: f2:f2:64:a6:ee:af:ff:8c:62:39:de:fa:f2:c4:77:c3:21:86: 96:15:98:86:08:5b:a9:64:d9:14:56:9a:47:76:d4:20:fc:6d: 49:a9:6f:bd:b3:ba:ba:ef:de:7d:9a:aa:9d:ab:ac:b6:a4:8b: 2e:2a:e0:9a:2c:69:a5:7f:38:64:7d:ae:6f:97:97:be:33:e3: bf:04:10:0f:49:e2:91:d2:26:ff:16:ad:7a:0d:95:39:91:fd: 5b:9f:dc:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3ITh99XZNw+cDQE8z/TDoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MTA3ZTNmZDliOTRiNGIzNmU2YThmMzcwZTg2NTBhN2Y1 N2U2YzMwHhcNMjUxMjE5MTUwMTIyWhcNMjUxMjIwMTUwMTIyWjAzMTEwLwYDVQQD EygyNmE4ODAwMzFkM2IzOWQ0MWMzY2NkM2MzYTRiMjNlOTAyNTUxMzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/k6EgfW+Q4kPDnUZR6MdXhqr8LH knmsnW6jlZQ3lZa4foiBHQs9eaOjCtF6cEAqAccOKmdSRwNm7p6gUytyMhqK/oHr vojUTLcRAd7VyGANc/Fi5DiMX4vEuxRMYnoNsGyyTWr2+LS8EXMj0wVITcVi48jn u726i9KRT/Fk7fPgahSMfT9j2Dq+wO33clpeI5qABL1r917Cg5tQfJNYZ/Q2lLDe t4IUnQkzB1VI/T++G/dHKiaC7EplaUAdMNIZpsM6PfPBJxxbrKtjwHccQ01ZbUS1 4ZnJfLkJ6kau4m5Oi1Tk2uFiyJ79dBSW580dGrcRgKv+OgmxzgToyx+1qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaogAMdOznUHDzNPDpLI+kCVRM6MB8GA1UdIwQY MBaAFIcQfj/ZuUtLNuao83DoZQp/V+bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTkzOTAtODA0OC00M2I5LTgyYjUt NzYxZGFiMzg5YjViLzEvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hNTkzOTAtODA0OC00M2I5LTgyYjUtNzYxZGFiMzg5YjVi LzEvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcimLY7P cRnZo6PretW29rQbsRdFw4eBL2oS53tqqy459Bno8X9gNQ1HvvDjXdVNshDejVRp evYP2bBFMpPQP6I4svv6hZ+npUCCj76+e4CjvoQxL46+vDHb+Qg17donTftM2yCx ZaQG3oObjuCso2ZfXkuU+8GF1Gbt8zejXRdH8mg2ZnDJ7+/4lMaxM/xo+UQ0RkoL Pdh9jrvOrup7IM+38vJkpu6v/4xiOd768sR3wyGGlhWYhghbqWTZFFaaR3bUIPxt SalvvbO6uu/efZqqnaustqSLLirgmixppX84ZH2ub5eXvjPjvwQQD0nikdIm/xat eg2VOZH9W5/cIw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:54:42 2025 by rpki-client