This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft File: HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json) Hash identifier: KPPZ2iSf8zkbCkubdaHQsE4X76ODBuwH27NNvYYv57w= Subject key identifier: E8:74:E1:E1:C2:31:DD:1F:B0:8E:19:9F:C3:A4:AF:59:D6:B7:CA:49 Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63 Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063 Certificate serial: 019B25F5E36625C2525592161759D3E52E6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft Manifest number: 0EFF Signing time: Tue 16 Dec 2025 07:00:30 +0000 Manifest this update: Tue 16 Dec 2025 07:00:30 +0000 Manifest next update: Wed 17 Dec 2025 07:00:30 +0000 Files and hashes: 1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: D2EYIaQGleNkLKhjDSyWsUu6xYltwBTCl1ibYUzUb2U=) 2: qBbXPlomssD9zrP_xFljqdR0LbI.roa (hash: Gow+NF8w68xqHQfvdIHVUtAvsOi+ZzLSZN8/SeU/9ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f5:e3:66:25:c2:52:55:92:16:17:59:d3:e5:2e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063 Validity Not Before: Dec 16 07:00:30 2025 GMT Not After : Dec 17 07:00:30 2025 GMT Subject: CN=e874e1e1c231dd1fb08e199fc3a4af59d6b7ca49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:2f:7f:52:74:9a:d0:7b:de:19:0b:0b:db: 6e:7e:0e:35:c8:34:8a:75:18:fb:bd:49:d9:d9:87: 38:54:ed:d4:00:86:f6:17:0b:dc:81:19:ed:c4:11: 7b:45:14:46:be:83:d2:39:4a:2c:77:f6:1b:f8:cf: f2:bb:9f:4f:67:a5:3a:a5:48:ea:a2:81:f8:9f:ed: cd:40:3f:35:fc:93:0f:95:b5:d3:5f:f2:e1:ff:d9: 07:b3:fe:3e:c4:3c:14:b7:3f:fa:35:1d:f2:a2:67: a8:a7:0f:5b:14:dd:8d:af:71:e3:4a:5f:c8:17:5c: e5:e2:c3:a7:9a:94:a2:cb:e1:0a:f9:65:2b:db:d8: 45:0a:3c:75:b6:94:98:e1:4b:78:90:a2:d8:df:c9: 4e:27:66:42:7e:ae:8a:c0:77:09:2d:d4:8f:b8:d7: e0:88:15:5e:b9:2f:89:97:f0:43:c2:d5:53:86:f9: ee:09:d9:fd:bd:fc:a2:38:62:3d:4d:5a:ce:99:0d: a5:a3:62:3a:e9:60:b4:b0:84:ab:d7:1a:bd:4f:1b: 38:a0:e3:c1:d6:14:d7:e1:e0:69:13:43:d1:66:4c: 76:9b:44:f7:b9:54:0a:d4:69:c1:53:77:35:4d:f0: 45:9d:9b:e1:a7:c9:93:bc:f1:44:0d:51:66:48:42: 29:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:74:E1:E1:C2:31:DD:1F:B0:8E:19:9F:C3:A4:AF:59:D6:B7:CA:49 X509v3 Authority Key Identifier: keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:69:41:53:4e:c2:7d:2b:88:a0:2b:02:58:ea:7b:e3:eb:b8: 47:63:d5:ee:4c:99:c5:1a:ee:fc:a5:c9:2a:9d:44:81:70:0f: fa:71:08:b4:f7:60:4c:2d:05:cc:6e:d3:f8:51:d4:80:67:3c: 2e:92:f2:b4:2b:ea:ac:68:03:da:96:b2:38:a6:9e:db:10:08: 11:6d:ce:24:b2:67:8a:d0:49:5d:d7:00:1a:5e:9e:5d:23:c4: 4b:e6:d2:92:ba:ad:06:22:57:57:86:b9:64:8d:a2:d0:8e:6f: 7f:d3:3d:de:24:3e:16:c8:a8:d2:70:cf:89:e0:91:d1:25:bb: 1a:63:16:ba:40:75:3c:30:e9:5c:09:e9:06:68:9c:65:f2:6f: a7:13:1a:cc:3e:54:fb:af:8b:fb:ac:27:65:ea:2a:9f:05:7e: 71:f5:23:8f:31:a0:35:40:97:ac:ef:7d:f4:e9:0e:32:02:4c: 01:9c:03:ae:86:24:35:98:91:34:52:50:1f:a2:5a:49:05:f4: 9d:4a:42:f6:91:bc:02:7f:d3:95:b8:73:16:d8:f7:05:f9:bf: cb:44:f1:b5:18:6c:3f:45:84:37:03:08:69:aa:32:5b:96:6b: 44:5c:fe:a0:59:e7:59:e3:2e:09:70:41:6e:d8:f7:bf:96:b4: 8a:58:09:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9eNmJcJSVZIWF1nT5S5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMTI5M2NiYmUyZjY5MjU0MGQzY2M1YTZlODIzNjYwNDk0 YzQwNjMwHhcNMjUxMjE2MDcwMDMwWhcNMjUxMjE3MDcwMDMwWjAzMTEwLwYDVQQD EyhlODc0ZTFlMWMyMzFkZDFmYjA4ZTE5OWZjM2E0YWY1OWQ2YjdjYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp28vf1J0mtB73hkLC9tufg41yDSK dRj7vUnZ2Yc4VO3UAIb2FwvcgRntxBF7RRRGvoPSOUosd/Yb+M/yu59PZ6U6pUjq ooH4n+3NQD81/JMPlbXTX/Lh/9kHs/4+xDwUtz/6NR3yomeopw9bFN2Nr3HjSl/I F1zl4sOnmpSiy+EK+WUr29hFCjx1tpSY4Ut4kKLY38lOJ2ZCfq6KwHcJLdSPuNfg iBVeuS+Jl/BDwtVThvnuCdn9vfyiOGI9TVrOmQ2lo2I66WC0sISr1xq9Txs4oOPB 1hTX4eBpE0PRZkx2m0T3uVQK1GnBU3c1TfBFnZvhp8mTvPFEDVFmSEIpIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOh04eHCMd0fsI4Zn8Okr1nWt8pJMB8GA1UdIwQY MBaAFB8Sk8u+L2klQNPMWm6CNmBJTEBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQt MjY5NzE1OTlhNTU0LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQtMjY5NzE1OTlhNTU0 LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGlBU07C fSuIoCsCWOp74+u4R2PV7kyZxRru/KXJKp1EgXAP+nEItPdgTC0FzG7T+FHUgGc8 LpLytCvqrGgD2payOKae2xAIEW3OJLJnitBJXdcAGl6eXSPES+bSkrqtBiJXV4a5 ZI2i0I5vf9M93iQ+Fsio0nDPieCR0SW7GmMWukB1PDDpXAnpBmicZfJvpxMazD5U +6+L+6wnZeoqnwV+cfUjjzGgNUCXrO999OkOMgJMAZwDroYkNZiRNFJQH6JaSQX0 nUpC9pG8An/TlbhzFtj3Bfm/y0TxtRhsP0WENwMIaaoyW5ZrRFz+oFnnWeMuCXBB btj3v5a0ilgJoQ== -----END CERTIFICATE-----Generated at Tue Dec 16 17:44:04 2025 by rpki-client