This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json) Hash identifier: aWAfDwK4rz1rCzDutycSP4akpw2gXXExxOMs9D7uQdk= Subject key identifier: 30:A6:B4:23:51:14:65:2D:68:77:E6:03:C9:16:C1:35:E8:EA:FC:85 Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13 Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013 Certificate serial: 019B2B8B3034D790BE368847A064C41237E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft Manifest number: 0444 Signing time: Wed 17 Dec 2025 09:01:40 +0000 Manifest this update: Wed 17 Dec 2025 09:01:40 +0000 Manifest next update: Thu 18 Dec 2025 09:01:40 +0000 Files and hashes: 1: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: fsk78RzJeD4fDSkiGYwu+SC2W3zX97m1vgFxYeojWcs=) 2: PFjB0suzwepgpRQg4ijZdi1aKI8.roa (hash: YjFJJun3pz3vvGFXjSMeL596davTUmL7ryORKEoBTmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:30:34:d7:90:be:36:88:47:a0:64:c4:12:37:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013 Validity Not Before: Dec 17 09:01:40 2025 GMT Not After : Dec 18 09:01:40 2025 GMT Subject: CN=30a6b4235114652d6877e603c916c135e8eafc85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:fc:e6:30:8d:69:b0:18:7a:40:4a:6d:81: 19:e0:51:55:a9:d9:38:c8:74:12:3e:ef:57:c7:f4: a8:08:b6:3a:0d:65:c1:a2:a8:e5:c2:ed:45:ab:79: 1a:c8:4b:00:83:54:67:27:c0:6a:da:b4:bc:8c:05: dc:65:e9:a7:f2:6c:01:2a:04:97:39:54:5a:55:60: 3b:bf:09:03:47:31:25:8f:25:7e:f5:53:cd:ba:87: 68:bc:d0:6f:63:93:40:0d:2e:57:6d:3c:24:57:ef: 47:70:d7:e3:81:0c:68:7f:61:d0:ac:36:fa:e9:a3: e7:bc:e8:f4:b3:3c:d4:75:a2:93:05:02:e9:a1:85: c6:eb:1d:4b:16:6b:d9:bc:ff:c2:a3:b5:38:70:eb: bf:a3:14:43:72:a6:87:aa:a3:cc:38:b5:39:e9:ee: bd:6a:55:da:85:42:50:ea:a5:98:51:d9:74:09:66: 41:5d:80:b9:09:77:0f:b2:21:5b:95:32:d0:98:16: 84:27:53:eb:9f:c3:c4:60:07:df:d8:8f:c5:50:29: 88:ce:44:d7:2a:c3:95:44:5c:a3:31:4b:1c:78:cc: ad:82:ad:1b:36:a9:ea:f2:fc:19:dd:5a:00:29:26: bd:4a:9f:25:26:54:7f:1c:da:5f:c2:76:97:58:f7: 89:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A6:B4:23:51:14:65:2D:68:77:E6:03:C9:16:C1:35:E8:EA:FC:85 X509v3 Authority Key Identifier: keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:bc:3b:96:c6:46:00:5e:59:c6:9f:10:1a:a1:cb:86:f3:9f: 23:de:90:82:8a:79:27:ba:f7:34:c5:ae:bd:58:f6:5c:e3:5c: 94:68:3f:a3:3c:19:50:c3:22:66:11:67:23:9a:bf:87:50:ca: fb:d4:c8:93:6e:49:64:2e:91:2e:88:31:31:19:dc:9c:f5:0a: 6e:fd:aa:b4:59:ba:de:d2:ae:7a:5c:37:57:24:ce:1b:3f:90: 0a:2e:01:94:b5:35:67:cd:f7:f5:01:d6:c1:42:75:68:41:92: a1:41:64:c3:88:e4:11:c6:32:5d:59:1c:d0:7a:5e:99:c7:d3: 54:91:32:4b:0a:1c:95:07:80:21:d6:fd:fa:6d:b4:1c:cd:b2: d5:5e:f4:2e:f2:d1:58:68:7d:34:f0:ba:fd:ed:38:dd:0b:42: a3:ed:c3:f7:93:58:2f:a0:41:b8:82:33:c5:45:66:d8:24:a8: d3:6f:44:36:a0:33:3d:1b:98:1c:75:a1:00:bf:10:ba:30:fe: 2f:ce:45:c3:2f:74:d9:ad:99:74:7d:27:14:3a:46:cd:4b:5c: 4e:16:8b:1e:a2:0d:0b:0a:b1:e5:f1:57:ba:77:ee:7c:07:8c: 36:35:66:5f:42:57:16:2b:01:38:01:ec:3f:78:9c:ae:03:c4: 18:7e:2c:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrizA015C+NohHoGTEEjfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlODI4ZGU3MWRkZDc4MDQ1NzMxMjhkMjZlZTQ1YzAzOTAx YzgwMTMwHhcNMjUxMjE3MDkwMTQwWhcNMjUxMjE4MDkwMTQwWjAzMTEwLwYDVQQD EygzMGE2YjQyMzUxMTQ2NTJkNjg3N2U2MDNjOTE2YzEzNWU4ZWFmYzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1X85jCNabAYekBKbYEZ4FFVqdk4 yHQSPu9Xx/SoCLY6DWXBoqjlwu1Fq3kayEsAg1RnJ8Bq2rS8jAXcZemn8mwBKgSX OVRaVWA7vwkDRzEljyV+9VPNuodovNBvY5NADS5XbTwkV+9HcNfjgQxof2HQrDb6 6aPnvOj0szzUdaKTBQLpoYXG6x1LFmvZvP/Co7U4cOu/oxRDcqaHqqPMOLU56e69 alXahUJQ6qWYUdl0CWZBXYC5CXcPsiFblTLQmBaEJ1Prn8PEYAff2I/FUCmIzkTX KsOVRFyjMUsceMytgq0bNqnq8vwZ3VoAKSa9Sp8lJlR/HNpfwnaXWPeJJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCmtCNRFGUtaHfmA8kWwTXo6vyFMB8GA1UdIwQY MBaAFB6Cjecd3XgEVzEo0m7kXAOQHIATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2Mjct NzBjOGM3MGUzMmIwLzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2MjctNzBjOGM3MGUzMmIw LzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7w7lsZG AF5Zxp8QGqHLhvOfI96Qgop5J7r3NMWuvVj2XONclGg/ozwZUMMiZhFnI5q/h1DK +9TIk25JZC6RLogxMRncnPUKbv2qtFm63tKuelw3VyTOGz+QCi4BlLU1Z8339QHW wUJ1aEGSoUFkw4jkEcYyXVkc0HpemcfTVJEySwoclQeAIdb9+m20HM2y1V70LvLR WGh9NPC6/e043QtCo+3D95NYL6BBuIIzxUVm2CSo029ENqAzPRuYHHWhAL8QujD+ L85Fwy902a2ZdH0nFDpGzUtcThaLHqINCwqx5fFXunfufAeMNjVmX0JXFisBOAHs P3icrgPEGH4sYw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:47:49 2025 by rpki-client