This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft File: Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json) Hash identifier: VN7m/o9EaK48lqov32QDaAmmgvb5x0ZcYCvGFSwv29g= Subject key identifier: 8D:69:99:F8:B3:F3:C9:AE:3E:98:8E:D5:30:C4:FE:C2:65:DD:2B:6F Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10 Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10 Certificate serial: 019B41A4AA9B8D711593422E9BBB4F9498C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft Manifest number: 0FD4 Signing time: Sun 21 Dec 2025 16:01:09 +0000 Manifest this update: Sun 21 Dec 2025 16:01:09 +0000 Manifest next update: Mon 22 Dec 2025 16:01:09 +0000 Files and hashes: 1: 1-veQxSzqgnwuwyzarzzUI6GU1Vo.roa (hash: bIWGmao73L88A9Mc0bEmGHNF/q2XxTrM/cwuMLwX1wg=) 2: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: Od+6kuUzrWzXG6Bj3tP/ghAVnZSOqv3XDgc9CSBC100=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:aa:9b:8d:71:15:93:42:2e:9b:bb:4f:94:98:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10 Validity Not Before: Dec 21 16:01:09 2025 GMT Not After : Dec 22 16:01:09 2025 GMT Subject: CN=8d6999f8b3f3c9ae3e988ed530c4fec265dd2b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:13:cb:11:f8:00:4d:bd:5f:c7:81:41:b0: cd:b4:f1:16:c4:89:34:c8:94:09:ee:e5:8d:ab:38: 51:66:ad:bb:91:56:70:3f:c3:4f:f8:1a:59:cb:9c: 16:d8:aa:3e:92:b9:b4:fc:2f:f9:b6:f6:20:dc:17: a0:8e:86:a8:8a:bd:8f:24:71:80:cc:84:12:bd:48: a3:a2:c9:fd:b0:9d:c2:df:34:f3:8b:be:e7:ba:25: ad:96:3d:e0:c5:12:95:05:36:13:fc:3d:99:cb:44: bd:3d:28:80:20:bf:97:4c:03:dc:84:37:58:10:06: f5:74:37:5e:42:6d:9d:6e:62:d9:05:e4:1c:c8:e6: 2c:28:d2:34:0b:cb:6a:d6:0d:f1:77:44:02:75:a6: 29:e5:3f:54:88:e8:82:22:64:05:4c:82:f9:77:45: f2:1c:16:a5:86:6d:4b:f9:2c:79:9d:e6:d4:a9:bc: b4:b2:d9:d8:69:e8:88:db:57:20:b8:29:04:d9:24: ed:c8:22:79:43:ba:c0:8a:39:f7:f4:00:1b:ad:4f: 8a:17:b3:6f:70:5f:34:6e:9a:99:f0:b0:e0:08:54: 81:d1:d3:2c:9f:56:e4:8d:06:58:19:3d:89:c2:5b: b9:62:96:0b:9d:8f:bb:6c:9a:d8:8c:7a:1a:5c:09: 3e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:69:99:F8:B3:F3:C9:AE:3E:98:8E:D5:30:C4:FE:C2:65:DD:2B:6F X509v3 Authority Key Identifier: keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5a:33:b4:4b:03:e8:c3:1e:6d:a8:2d:50:e8:32:0e:2d:f0: 35:d7:5a:8f:11:a8:e7:30:46:0e:f4:5a:25:84:46:40:d3:33: d0:72:77:81:3c:02:66:fa:48:d0:40:a5:6c:15:62:9f:86:73: 68:68:54:3f:07:a7:b9:c9:65:20:1e:de:d3:6e:fb:3e:71:d8: 50:8d:68:8d:d6:9e:fc:19:c8:6b:a7:d7:90:74:21:f3:5a:7c: ac:8c:93:f0:df:45:26:ea:54:44:ab:cf:cf:14:59:30:c7:c0: 2a:3e:da:1b:78:26:57:40:e2:a8:8d:6e:c8:1d:2f:ee:59:96: e3:b8:34:e9:f6:4c:d5:3b:1e:13:e6:8b:e9:0c:6b:4b:fa:4f: 27:d9:72:a7:c3:2f:81:71:26:a3:a7:bb:06:b5:4a:55:a4:9e: 8d:21:ce:f0:7b:15:a6:56:ff:03:bb:8a:e3:61:62:ec:3c:c6: bc:6b:a4:f3:ba:31:0b:b0:e7:37:08:dd:ad:22:ca:ce:0a:0b: e4:2e:e9:7c:c5:02:d5:ae:d1:5d:76:b5:f3:df:3c:8f:28:59: 79:03:8a:85:04:fd:9a:3b:f3:01:d4:16:2c:3a:f3:5d:91:a6: 52:ed:26:39:77:bb:f3:4c:d5:93:1b:c9:4f:c1:83:93:87:f4: 2a:e7:76:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpKqbjXEVk0Ium7tPlJjHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMWRlOTM2ZmYxNzg0Yjc4Mjk2YjhiYzRiNGIwMzgxYjI5 M2VkMTAwHhcNMjUxMjIxMTYwMTA5WhcNMjUxMjIyMTYwMTA5WjAzMTEwLwYDVQQD Eyg4ZDY5OTlmOGIzZjNjOWFlM2U5ODhlZDUzMGM0ZmVjMjY1ZGQyYjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8MTyxH4AE29X8eBQbDNtPEWxIk0 yJQJ7uWNqzhRZq27kVZwP8NP+BpZy5wW2Ko+krm0/C/5tvYg3Begjoaoir2PJHGA zIQSvUijosn9sJ3C3zTzi77nuiWtlj3gxRKVBTYT/D2Zy0S9PSiAIL+XTAPchDdY EAb1dDdeQm2dbmLZBeQcyOYsKNI0C8tq1g3xd0QCdaYp5T9UiOiCImQFTIL5d0Xy HBalhm1L+Sx5nebUqby0stnYaeiI21cguCkE2STtyCJ5Q7rAijn39AAbrU+KF7Nv cF80bpqZ8LDgCFSB0dMsn1bkjQZYGT2Jwlu5YpYLnY+7bJrYjHoaXAk+UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1pmfiz88muPpiO1TDE/sJl3StvMB8GA1UdIwQY MBaAFB8d6Tb/F4S3gpa4vEtLA4Gyk+0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHgzcE52OFhoTGVDbHJpOFMwc0RnYktUN1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80NDlhZTYtNTk0My00NmQwLWIwMGMt OTI3Yjg2MzU2ZmE3LzEvSHgzcE52OFhoTGVDbHJpOFMwc0RnYktUN1JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi80NDlhZTYtNTk0My00NmQwLWIwMGMtOTI3Yjg2MzU2ZmE3 LzEvSHgzcE52OFhoTGVDbHJpOFMwc0RnYktUN1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFoztEsD 6MMebagtUOgyDi3wNddajxGo5zBGDvRaJYRGQNMz0HJ3gTwCZvpI0EClbBVin4Zz aGhUPwenucllIB7e0277PnHYUI1ojdae/BnIa6fXkHQh81p8rIyT8N9FJupURKvP zxRZMMfAKj7aG3gmV0DiqI1uyB0v7lmW47g06fZM1TseE+aL6QxrS/pPJ9lyp8Mv gXEmo6e7BrVKVaSejSHO8HsVplb/A7uK42Fi7DzGvGuk87oxC7DnNwjdrSLKzgoL 5C7pfMUC1a7RXXa18988jyhZeQOKhQT9mjvzAdQWLDrzXZGmUu0mOXe780zVkxvJ T8GDk4f0Kud2Tw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:16 2025 by rpki-client