This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json) Hash identifier: mCHjJXGVzJUdu+koUT+rG2zv8y7KQ/93hR4VHCSzmK8= Subject key identifier: 66:FE:18:4B:61:71:BF:32:16:D5:AF:3C:93:50:AF:BE:F6:A6:A5:1F Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae Certificate serial: 019B41DB956ABAB24FC5580A78557536FEDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft Manifest number: 1410 Signing time: Sun 21 Dec 2025 17:01:08 +0000 Manifest this update: Sun 21 Dec 2025 17:01:08 +0000 Manifest next update: Mon 22 Dec 2025 17:01:08 +0000 Files and hashes: 1: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: ud1GAzl/pQiVEDzln9bFB5MrBFhait4dL3VSDlqHHUY=) 2: UYoraKeZIaoa2wVuoomivtXbxRQ.roa (hash: 64MFcCCoNK8y5TAb4sImtBVWhOrUKow/FlcIn/ABu34=) 3: bce9mz0b3BUGOMHAJWY8rMCRxek.roa (hash: IEeWzdb92Rel/sak0WfNMG3iDCwAJHBVrKmaRSr9eNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:95:6a:ba:b2:4f:c5:58:0a:78:55:75:36:fe:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae Validity Not Before: Dec 21 17:01:08 2025 GMT Not After : Dec 22 17:01:08 2025 GMT Subject: CN=66fe184b6171bf3216d5af3c9350afbef6a6a51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:46:c3:4f:1d:0a:b1:7f:c8:98:9c:28:e5: 7c:e9:2f:8e:2d:50:ba:f1:72:75:d5:cf:c0:ea:68: 66:99:07:de:1c:a5:f1:34:60:fd:cb:4d:92:73:24: 6b:9e:71:29:85:b9:73:10:73:b1:46:1e:e8:9f:65: 2b:6a:b3:11:8b:dd:73:93:b0:93:b4:42:a0:34:87: 16:3e:a6:a0:7a:b9:2a:7a:db:1b:da:84:3a:7c:34: 38:ac:9b:4f:2f:d3:c2:db:76:9e:62:4d:85:8b:ca: 14:f6:61:91:4c:bb:34:4e:f3:33:19:92:87:d6:b4: a0:5c:50:c9:83:ad:cb:b4:11:c8:e5:26:92:bc:a1: 80:50:db:df:5f:4a:66:ac:bb:91:29:4f:7e:ac:12: 90:2c:37:aa:06:a9:aa:0a:31:10:6c:83:49:46:a8: 48:71:62:f2:6f:0c:3a:c9:4f:90:99:dc:ae:93:59: 99:bc:7c:d7:db:ed:1d:88:12:58:ce:ee:79:21:56: ca:fd:6e:27:30:68:3f:52:ca:80:f3:33:dd:2d:67: 4e:6c:60:76:d4:f3:93:00:56:3a:26:bc:f2:58:41: 01:21:3e:7b:9b:e4:a7:99:7e:44:61:75:e0:30:bf: f5:d8:b7:3d:84:d2:28:70:70:b2:b1:a6:d3:13:ea: 04:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FE:18:4B:61:71:BF:32:16:D5:AF:3C:93:50:AF:BE:F6:A6:A5:1F X509v3 Authority Key Identifier: keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:48:d0:42:43:ff:7a:12:f9:37:e9:d5:52:2c:7b:d3:bb:9a: 32:ab:2e:c6:45:0a:d5:d3:80:ba:e1:a1:d4:9e:11:b7:fa:f0: 6a:8d:d7:8f:73:5f:a0:51:4e:0b:fc:7d:9c:75:fb:6e:50:f7: ad:8d:92:14:18:68:d4:43:6a:2f:91:59:3b:42:88:23:5f:97: 6d:59:f8:74:5e:d5:28:c0:88:0e:22:e6:45:83:c0:ef:c3:23: df:c2:d4:c6:a5:8f:41:cd:e2:43:62:68:f0:fa:36:f8:47:d1: 31:68:90:f1:cf:08:7b:64:3c:9f:8f:a6:46:28:e9:24:f3:3b: 21:9d:3f:53:82:96:fb:42:ad:de:3e:e4:c0:9e:b7:55:a0:45: 03:22:2f:28:b9:4d:ec:91:08:88:27:77:35:a2:95:30:33:6c: c1:66:dc:1b:fc:eb:f3:63:b8:a0:e8:42:fa:fe:5f:5f:e1:0e: ab:35:02:83:92:d6:12:5c:d4:91:e9:fc:b4:d8:16:49:78:ad: 19:f1:82:3f:6b:4d:18:e7:ff:3f:83:4f:54:0c:78:0a:df:99: f2:8e:37:dc:68:3a:ca:1f:ef:24:12:86:8a:44:32:6f:81:08: ea:46:be:d8:c0:46:10:ee:51:24:13:e5:86:75:a3:f6:a1:32: cd:b8:6f:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB25VqurJPxVgKeFV1Nv7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNGMzMjA4NmUxZTk4NDUwNTY5MWIwMWY1OTg1ZGY3YTM2 YjI0YWUwHhcNMjUxMjIxMTcwMTA4WhcNMjUxMjIyMTcwMTA4WjAzMTEwLwYDVQQD Eyg2NmZlMTg0YjYxNzFiZjMyMTZkNWFmM2M5MzUwYWZiZWY2YTZhNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZFGw08dCrF/yJicKOV86S+OLVC6 8XJ11c/A6mhmmQfeHKXxNGD9y02ScyRrnnEphblzEHOxRh7on2UrarMRi91zk7CT tEKgNIcWPqagerkqetsb2oQ6fDQ4rJtPL9PC23aeYk2Fi8oU9mGRTLs0TvMzGZKH 1rSgXFDJg63LtBHI5SaSvKGAUNvfX0pmrLuRKU9+rBKQLDeqBqmqCjEQbINJRqhI cWLybww6yU+Qmdyuk1mZvHzX2+0diBJYzu55IVbK/W4nMGg/UsqA8zPdLWdObGB2 1POTAFY6JrzyWEEBIT57m+SnmX5EYXXgML/12Lc9hNIocHCysabTE+oExwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGb+GEthcb8yFtWvPJNQr772pqUfMB8GA1UdIwQY MBaAFB5MMghuHphFBWkbAfWYXfejaySuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYt OThjZTE0NmYxODI0LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYtOThjZTE0NmYxODI0 LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUjQQkP/ ehL5N+nVUix707uaMqsuxkUK1dOAuuGh1J4Rt/rwao3Xj3NfoFFOC/x9nHX7blD3 rY2SFBho1ENqL5FZO0KII1+XbVn4dF7VKMCIDiLmRYPA78Mj38LUxqWPQc3iQ2Jo 8Po2+EfRMWiQ8c8Ie2Q8n4+mRijpJPM7IZ0/U4KW+0Kt3j7kwJ63VaBFAyIvKLlN 7JEIiCd3NaKVMDNswWbcG/zr82O4oOhC+v5fX+EOqzUCg5LWElzUken8tNgWSXit GfGCP2tNGOf/P4NPVAx4Ct+Z8o433Gg6yh/vJBKGikQyb4EI6ka+2MBGEO5RJBPl hnWj9qEyzbhvLQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:05:25 2025 by rpki-client