This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft File: HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json) Hash identifier: ZNSRk0yp1n6lYsZcwRU8KImAJ+YcNYRHrljrhxUv3Wc= Subject key identifier: B4:07:DB:89:76:60:26:15:F8:1C:F4:60:19:1C:1B:FD:B4:8A:26:6E Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63 Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063 Certificate serial: 019B2F9E272948FC3BB2CE3035C1E8A70A80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft Manifest number: 0F04 Signing time: Thu 18 Dec 2025 04:00:52 +0000 Manifest this update: Thu 18 Dec 2025 04:00:52 +0000 Manifest next update: Fri 19 Dec 2025 04:00:52 +0000 Files and hashes: 1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: 0XdseBfWkkz3neYKY1xkzphY/6qAt+CQciJ/U1ZHJ+o=) 2: qBbXPlomssD9zrP_xFljqdR0LbI.roa (hash: Gow+NF8w68xqHQfvdIHVUtAvsOi+ZzLSZN8/SeU/9ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:27:29:48:fc:3b:b2:ce:30:35:c1:e8:a7:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063 Validity Not Before: Dec 18 04:00:52 2025 GMT Not After : Dec 19 04:00:52 2025 GMT Subject: CN=b407db8976602615f81cf460191c1bfdb48a266e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bc:7c:70:05:b5:fa:c2:bc:b9:fd:7f:9e:28: bc:34:b8:26:72:43:0a:38:6b:68:32:ec:5d:8f:7c: 8b:d1:a0:94:89:a0:e8:a4:db:7e:f5:00:10:47:e7: 5a:be:af:7b:3d:1e:03:5e:1e:20:cc:5b:65:8d:32: a6:ab:20:53:f5:59:a7:90:44:c1:5e:6f:ab:9a:ac: df:06:40:bc:38:29:93:51:c3:d5:04:77:28:07:83: 45:cc:0c:76:8f:3a:71:80:26:a6:8a:6a:25:d8:f2: 69:43:e4:8f:93:6d:0c:33:80:21:fc:99:11:6a:da: a7:44:a4:dc:5f:fa:6f:70:d9:10:c7:05:17:e5:89: 20:8a:6f:9d:cf:5e:84:f8:2c:b7:8e:ba:67:57:ed: d8:3c:1d:19:86:e9:f6:c9:9b:31:04:55:3a:6a:11: 14:dd:83:17:ab:9c:91:b9:bb:85:50:d0:70:9b:20: ff:ec:6b:ff:2d:37:ab:b4:e3:20:e0:f3:d0:31:e2: 12:a3:5e:ee:cd:a1:00:8c:2e:72:3d:98:c9:53:45: 0a:b7:29:c5:04:de:6c:79:c9:f2:bb:b8:0a:40:7a: d0:c4:e5:61:81:57:dd:d8:b3:dc:dc:be:d4:44:3f: 3b:21:74:1f:8e:26:62:64:5a:f4:88:8f:59:50:e7: 08:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:07:DB:89:76:60:26:15:F8:1C:F4:60:19:1C:1B:FD:B4:8A:26:6E X509v3 Authority Key Identifier: keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f9:2a:4c:e4:36:11:5f:75:17:45:fb:a9:6f:25:49:00:56: 36:d6:96:51:aa:43:9b:e0:fa:0a:e7:68:78:5e:3f:2f:13:64: 5e:c5:79:58:d6:72:c9:57:7e:48:0d:f3:b8:8b:a2:64:48:88: 58:d8:0f:97:4f:99:b7:0a:0d:6d:30:1b:69:af:5e:e2:34:31: 28:01:30:d2:6f:da:d9:b4:2e:be:a7:57:66:e8:f5:1b:f0:cf: 21:47:77:28:50:fd:f0:9f:64:f0:0e:e9:93:81:1e:36:00:1b: 04:2c:cc:0d:0e:2c:79:f0:63:8c:31:51:b0:66:07:aa:63:21: b8:e2:7f:44:67:d5:df:e6:03:93:64:7a:5a:d3:8a:fb:8c:ee: b0:4b:95:3c:55:19:39:b0:b8:31:19:14:b7:22:56:0c:be:f7: 38:f2:db:55:fc:43:25:32:21:fa:34:06:06:8f:7d:2c:4c:f3: 21:02:a1:0b:dd:e2:4a:91:50:48:e0:da:95:77:13:08:3c:ad: 61:56:33:ad:c4:8d:1c:5e:08:b8:60:ab:e7:5d:35:4d:64:1b: f5:ce:67:7e:7c:db:82:93:e5:05:42:b3:13:3c:4f:28:03:7c: 94:1b:1e:9f:71:9e:6a:13:b8:b8:f7:6c:09:c3:7d:ea:53:fb: 18:98:fb:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnicpSPw7ss4wNcHopwqAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMTI5M2NiYmUyZjY5MjU0MGQzY2M1YTZlODIzNjYwNDk0 YzQwNjMwHhcNMjUxMjE4MDQwMDUyWhcNMjUxMjE5MDQwMDUyWjAzMTEwLwYDVQQD EyhiNDA3ZGI4OTc2NjAyNjE1ZjgxY2Y0NjAxOTFjMWJmZGI0OGEyNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37x8cAW1+sK8uf1/nii8NLgmckMK OGtoMuxdj3yL0aCUiaDopNt+9QAQR+davq97PR4DXh4gzFtljTKmqyBT9VmnkETB Xm+rmqzfBkC8OCmTUcPVBHcoB4NFzAx2jzpxgCamimol2PJpQ+SPk20MM4Ah/JkR atqnRKTcX/pvcNkQxwUX5Ykgim+dz16E+Cy3jrpnV+3YPB0Zhun2yZsxBFU6ahEU 3YMXq5yRubuFUNBwmyD/7Gv/LTertOMg4PPQMeISo17uzaEAjC5yPZjJU0UKtynF BN5secnyu7gKQHrQxOVhgVfd2LPc3L7URD87IXQfjiZiZFr0iI9ZUOcI6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQH24l2YCYV+Bz0YBkcG/20iiZuMB8GA1UdIwQY MBaAFB8Sk8u+L2klQNPMWm6CNmBJTEBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQt MjY5NzE1OTlhNTU0LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQtMjY5NzE1OTlhNTU0 LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfkqTOQ2 EV91F0X7qW8lSQBWNtaWUapDm+D6CudoeF4/LxNkXsV5WNZyyVd+SA3zuIuiZEiI WNgPl0+ZtwoNbTAbaa9e4jQxKAEw0m/a2bQuvqdXZuj1G/DPIUd3KFD98J9k8A7p k4EeNgAbBCzMDQ4sefBjjDFRsGYHqmMhuOJ/RGfV3+YDk2R6WtOK+4zusEuVPFUZ ObC4MRkUtyJWDL73OPLbVfxDJTIh+jQGBo99LEzzIQKhC93iSpFQSODalXcTCDyt YVYzrcSNHF4IuGCr5101TWQb9c5nfnzbgpPlBUKzEzxPKAN8lBsen3GeahO4uPds CcN96lP7GJj7aA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:05:55 2025 by rpki-client