This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json) Hash identifier: TO3SkaGVTEvVSyPy6q9yNGnwiNTrrWjevQPpDgHP3G8= Subject key identifier: CE:A4:8C:40:13:64:42:53:53:E6:19:FC:96:D3:BD:15:62:AF:18:72 Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56 Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156 Certificate serial: 019B56072B59650D435AFB65073787CA65EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft Manifest number: 0362 Signing time: Thu 25 Dec 2025 15:01:08 +0000 Manifest this update: Thu 25 Dec 2025 15:01:08 +0000 Manifest next update: Fri 26 Dec 2025 15:01:08 +0000 Files and hashes: 1: E-uqinJu4BsX4hD4fJ27XeSRRfM.roa (hash: TEk3E/eVLOZFNokaZvtcliN6SvQ4jr1qswSoyGLZrLI=) 2: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: aPJsYzpGkHHUMV67mgJVgVNCgxHyj6uB1J6REhYx6LA=) 3: jSWGRDdKL-HTUETX8py0S4BUPnw.roa (hash: duy/YDBoOJtBJ6yTq6z5J9MLnvFlUwnH0+KkHirH4Ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:07:2b:59:65:0d:43:5a:fb:65:07:37:87:ca:65:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156 Validity Not Before: Dec 25 15:01:08 2025 GMT Not After : Dec 26 15:01:08 2025 GMT Subject: CN=cea48c401364425353e619fc96d3bd1562af1872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:20:60:9d:fc:8a:6b:86:d7:23:9e:ef:81:80: 5c:eb:7d:3c:73:b7:c8:4a:8b:06:9e:14:6e:3c:79: 12:b1:d2:90:9a:5a:83:01:0f:a9:0a:48:e4:ef:92: 26:93:63:b2:84:74:a3:ad:65:2b:e0:18:7c:7e:ae: bd:fd:01:10:29:4d:32:85:13:8c:d9:3b:2b:42:58: b1:c0:68:98:a4:5b:ec:99:81:47:b0:42:55:20:82: 8f:ca:30:8c:7e:0e:f6:56:07:ac:2f:c2:54:14:8e: 66:d9:29:40:2f:ef:ff:03:cc:20:a6:a7:6e:65:2e: 54:c5:6d:32:3c:c8:08:47:40:87:5d:8e:44:3f:35: 3c:10:75:07:b2:37:f6:67:ed:c9:1f:24:26:ca:d7: 36:93:79:cd:e7:96:57:6f:e4:38:c0:52:1a:32:de: 4d:13:f3:b4:3e:21:70:fc:09:51:92:51:21:34:f4: 8b:31:fe:c0:c2:eb:b7:00:ab:65:06:36:46:f8:da: 91:f4:51:58:f9:45:5c:8f:6f:bb:ca:fe:32:16:d6: 8c:c5:37:3a:6e:44:37:80:60:0b:47:1f:9f:c4:6b: 6a:41:1d:b8:a0:26:bb:15:17:dc:25:03:af:dc:05: 86:19:ff:ea:7f:e1:22:b4:2e:9b:ea:e3:c5:d1:85: 0a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A4:8C:40:13:64:42:53:53:E6:19:FC:96:D3:BD:15:62:AF:18:72 X509v3 Authority Key Identifier: keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ae:de:dd:67:29:b1:b7:1b:a8:97:41:0a:2f:a4:2b:e2:a2: 56:bc:a9:f3:05:19:3d:9c:b3:c2:58:c1:e8:3d:49:14:22:45: 73:cb:46:a0:42:2f:af:ca:51:a4:20:ed:40:96:02:74:d1:6a: c8:c1:1c:f3:dd:d4:e3:df:0f:43:77:fd:2d:ee:95:d3:8a:09: b1:16:6a:3a:04:23:e2:c9:3b:e2:4b:8e:bd:b5:45:5f:b2:6a: 16:ab:17:12:f9:b0:a4:e5:8a:89:78:f8:ae:76:9a:01:8f:08: fe:49:e5:ca:93:42:83:1e:77:6f:02:18:31:a8:24:5a:54:f3: d8:fb:36:8f:a9:ac:37:4c:d0:b7:4d:cf:90:69:64:85:a8:2f: 50:65:af:a7:5a:fb:41:52:10:e8:39:12:89:1a:fe:14:07:b0: db:41:7d:89:b1:9f:28:71:de:d4:f8:f7:a8:ff:d0:6c:0d:80: fc:35:40:74:6a:b2:74:56:f1:4a:0c:a0:45:7d:34:04:20:86: 9e:fa:26:28:08:95:39:4f:12:f8:58:7b:61:62:27:2a:82:4a: ed:a4:12:37:00:73:f3:0e:59:91:ba:27:4f:8c:97:7e:44:a7: e6:fa:6d:fd:ae:8a:8e:7c:bd:01:e6:85:19:34:7c:ae:02:57: 2c:2b:da:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBytZZQ1DWvtlBzeHymXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGRmMTEyOGY3ZDQyYzY4ODQ4NjNiNWYyNzNmM2ViYTY1 OTYxNTYwHhcNMjUxMjI1MTUwMTA4WhcNMjUxMjI2MTUwMTA4WjAzMTEwLwYDVQQD EyhjZWE0OGM0MDEzNjQ0MjUzNTNlNjE5ZmM5NmQzYmQxNTYyYWYxODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCBgnfyKa4bXI57vgYBc6308c7fI SosGnhRuPHkSsdKQmlqDAQ+pCkjk75Imk2OyhHSjrWUr4Bh8fq69/QEQKU0yhROM 2TsrQlixwGiYpFvsmYFHsEJVIIKPyjCMfg72VgesL8JUFI5m2SlAL+//A8wgpqdu ZS5UxW0yPMgIR0CHXY5EPzU8EHUHsjf2Z+3JHyQmytc2k3nN55ZXb+Q4wFIaMt5N E/O0PiFw/AlRklEhNPSLMf7Awuu3AKtlBjZG+NqR9FFY+UVcj2+7yv4yFtaMxTc6 bkQ3gGALRx+fxGtqQR24oCa7FRfcJQOv3AWGGf/qf+EitC6b6uPF0YUKzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6kjEATZEJTU+YZ/JbTvRVirxhyMB8GA1UdIwQY MBaAFIZN8RKPfULGiEhjtfJz8+umWWFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2Ut ODBkN2ZhNWRmYmI0LzEvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2UtODBkN2ZhNWRmYmI0 LzEvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHK7e3Wcp sbcbqJdBCi+kK+KiVryp8wUZPZyzwljB6D1JFCJFc8tGoEIvr8pRpCDtQJYCdNFq yMEc893U498PQ3f9Le6V04oJsRZqOgQj4sk74kuOvbVFX7JqFqsXEvmwpOWKiXj4 rnaaAY8I/knlypNCgx53bwIYMagkWlTz2Ps2j6msN0zQt03PkGlkhagvUGWvp1r7 QVIQ6DkSiRr+FAew20F9ibGfKHHe1Pj3qP/QbA2A/DVAdGqydFbxSgygRX00BCCG nvomKAiVOU8S+Fh7YWInKoJK7aQSNwBz8w5ZkbonT4yXfkSn5vpt/a6Kjny9AeaF GTR8rgJXLCva7w== -----END CERTIFICATE-----Generated at Thu Dec 25 18:03:01 2025 by rpki-client