This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft File: HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json) Hash identifier: wKInHHNSCjnPcee/Io6rPQvOPL0Xv5/uBWTok3vHnFk= Subject key identifier: 78:E4:31:E4:53:BB:49:38:3B:D3:74:57:AD:2C:BB:41:1C:63:57:E2 Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61 Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761 Certificate serial: 019B3C7F10EE4EF846ADEDDA37830F99F319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft Manifest number: 0FEA Signing time: Sat 20 Dec 2025 16:01:58 +0000 Manifest this update: Sat 20 Dec 2025 16:01:58 +0000 Manifest next update: Sun 21 Dec 2025 16:01:58 +0000 Files and hashes: 1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: 5UwRsS/IxDhuUEotJHDlWjyr4B4rNOAzt/Og6YcAQPk=) 2: QTjz4VGR-GTFrRo0tluoiHJIBec.roa (hash: cV6m/fRf828h8WvDtj1b9iihpVzZghXy5TyXPUcK2IY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:10:ee:4e:f8:46:ad:ed:da:37:83:0f:99:f3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761 Validity Not Before: Dec 20 16:01:58 2025 GMT Not After : Dec 21 16:01:58 2025 GMT Subject: CN=78e431e453bb49383bd37457ad2cbb411c6357e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d1:1a:8d:ee:ea:66:03:b8:e6:93:59:b5:b1: 69:d6:e2:8b:38:f0:06:0c:ef:7f:65:68:d4:5d:a4: bf:dc:ba:b0:86:fe:52:1b:16:e1:08:3b:9d:d1:cf: 7c:92:03:6b:39:2c:b3:62:7d:71:e6:9d:1b:97:e5: 80:4a:a5:06:ef:e0:cf:9c:cc:6e:e2:7f:49:e4:43: e0:c7:03:2c:bc:fa:a5:35:9e:d3:ca:21:cd:42:cf: d4:02:fa:54:f9:a5:30:aa:1d:63:13:08:15:85:28: 0b:3a:f0:e8:6d:dc:f0:7e:1e:de:f9:ff:2a:a6:5d: 21:95:ca:6b:f0:c7:56:bf:ee:64:59:fe:1a:07:ea: b2:c5:f0:e8:f6:de:dc:e6:c4:8d:6e:06:53:26:8d: c7:88:b2:2d:26:13:c2:c9:5e:25:87:0b:27:20:6c: 0f:e9:e3:13:d0:dc:70:09:14:91:f8:70:0b:01:ed: 28:d2:56:de:7c:dc:03:4a:08:b5:58:9c:45:db:64: 2c:25:ba:87:b5:d9:54:d7:0d:bb:6e:a0:4a:1b:1c: 0c:4f:81:83:46:52:4f:b3:5e:0c:94:73:e7:0f:94: 7f:71:b1:09:ee:db:99:b7:14:df:f7:62:eb:7a:2a: 63:ee:f2:84:60:87:17:09:5c:4b:ee:50:cb:99:8b: 79:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E4:31:E4:53:BB:49:38:3B:D3:74:57:AD:2C:BB:41:1C:63:57:E2 X509v3 Authority Key Identifier: keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:cb:56:c5:40:d7:63:f5:7a:12:8e:0a:de:1c:18:71:8b:88: c4:57:8e:5e:93:fb:01:56:98:cd:0a:0b:62:91:3e:3d:b4:01: 8b:1b:e3:38:93:cb:a4:75:f5:88:fb:54:08:53:90:ce:9f:97: 19:6b:19:82:fe:a7:b3:c3:7a:c8:af:af:a2:a5:87:82:4a:fe: 37:73:fe:7c:54:b3:ba:8e:3c:10:a3:31:48:be:a7:be:88:a4: 6e:46:f3:4a:4c:32:83:6a:ff:fb:91:22:4a:12:34:0f:b1:7b: 30:a8:96:1b:a9:93:74:15:0d:aa:85:48:c6:69:64:90:0d:9a: 46:6e:60:d4:67:63:b7:a0:68:d7:b3:f4:05:9a:37:0f:f0:ee: 13:93:c1:52:1f:30:00:55:4f:fa:7f:00:71:3b:33:6c:63:0f: 8a:21:d3:b8:a0:5b:bd:bf:cd:62:ff:72:4e:a0:6f:56:01:78: 36:ec:85:dc:54:f8:7c:c4:fe:1f:ed:2a:c4:32:5b:bb:7c:3c: e6:a0:64:e1:7f:68:b5:49:98:3e:1a:a4:35:6f:b9:33:d7:2c: d4:ff:18:8f:57:f8:09:ef:37:df:03:f5:64:f9:95:7a:d2:fa: 01:3c:99:7c:e0:27:60:f1:80:66:85:e3:0e:14:4e:01:81:e2: c9:f8:73:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fxDuTvhGre3aN4MPmfMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMTIwZDdlNDljOWYzYmYzMTNkOTY1MzFhZGZhN2VhYWU4 MDU3NjEwHhcNMjUxMjIwMTYwMTU4WhcNMjUxMjIxMTYwMTU4WjAzMTEwLwYDVQQD Eyg3OGU0MzFlNDUzYmI0OTM4M2JkMzc0NTdhZDJjYmI0MTFjNjM1N2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9Eaje7qZgO45pNZtbFp1uKLOPAG DO9/ZWjUXaS/3Lqwhv5SGxbhCDud0c98kgNrOSyzYn1x5p0bl+WASqUG7+DPnMxu 4n9J5EPgxwMsvPqlNZ7TyiHNQs/UAvpU+aUwqh1jEwgVhSgLOvDobdzwfh7e+f8q pl0hlcpr8MdWv+5kWf4aB+qyxfDo9t7c5sSNbgZTJo3HiLItJhPCyV4lhwsnIGwP 6eMT0NxwCRSR+HALAe0o0lbefNwDSgi1WJxF22QsJbqHtdlU1w27bqBKGxwMT4GD RlJPs14MlHPnD5R/cbEJ7tuZtxTf92Lreipj7vKEYIcXCVxL7lDLmYt58QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjkMeRTu0k4O9N0V60su0EcY1fiMB8GA1UdIwQY MBaAFB8SDX5JyfO/MT2WUxrfp+qugFdhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHhJTmZrbko4Nzh4UFpaVEd0LW42cTZBVjJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hYzVmZjktZTE5ZS00YWQwLThjNWEt YjI3Mjc3ODkwOWQ5LzEvSHhJTmZrbko4Nzh4UFpaVEd0LW42cTZBVjJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9hYzVmZjktZTE5ZS00YWQwLThjNWEtYjI3Mjc3ODkwOWQ5 LzEvSHhJTmZrbko4Nzh4UFpaVEd0LW42cTZBVjJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMtWxUDX Y/V6Eo4K3hwYcYuIxFeOXpP7AVaYzQoLYpE+PbQBixvjOJPLpHX1iPtUCFOQzp+X GWsZgv6ns8N6yK+voqWHgkr+N3P+fFSzuo48EKMxSL6nvoikbkbzSkwyg2r/+5Ei ShI0D7F7MKiWG6mTdBUNqoVIxmlkkA2aRm5g1Gdjt6Bo17P0BZo3D/DuE5PBUh8w AFVP+n8AcTszbGMPiiHTuKBbvb/NYv9yTqBvVgF4NuyF3FT4fMT+H+0qxDJbu3w8 5qBk4X9otUmYPhqkNW+5M9cs1P8Yj1f4Ce833wP1ZPmVetL6ATyZfOAnYPGAZoXj DhROAYHiyfhzMg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:38:55 2025 by rpki-client