This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json) Hash identifier: uxzch5kx0aTMrKJKwIl9mFl1m/PYnsksA+xjknzK504= Subject key identifier: 2F:7D:86:AF:61:DC:70:EB:B2:54:81:D1:D0:52:95:4F:37:84:7F:9F Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e Certificate serial: 019AF38923E9595C85233D274984B73DAB37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 12:00:42 +0000 Manifest this update: Sat 06 Dec 2025 12:00:42 +0000 Manifest next update: Sun 07 Dec 2025 12:00:42 +0000 Files and hashes: 1: 00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa (hash: aMgYbVg4QnX7hEPLeHEda/b4JrNnLv1+waEJzECfh2Q=) 2: UNDXrDbQNDGfw9Atw8J1Rhg9324.roa (hash: wsuYDSHLl9ueT9Z/8hPQn0p6GzwP0XVwWj6eE/OeB10=) 3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: dPnIDAsgi0hJdlr5RhMHOu/gsi76T9h+NALVXHdOFxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:23:e9:59:5c:85:23:3d:27:49:84:b7:3d:ab:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e Validity Not Before: Dec 6 12:00:42 2025 GMT Not After : Dec 7 12:00:42 2025 GMT Subject: CN=2f7d86af61dc70ebb25481d1d052954f37847f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1a:69:1d:ef:01:b4:17:45:68:13:22:77:1f: 8e:1d:7c:2f:ef:37:85:47:d9:1d:11:da:22:8a:e2: 4e:27:fa:de:73:05:a7:b5:e3:d9:84:49:90:be:af: 78:73:34:78:69:ae:cb:f3:f4:28:63:93:1f:0f:73: 7f:5b:26:b1:90:ad:1d:8e:74:a0:e3:99:8f:03:f2: cd:c0:71:b6:0f:e3:c5:fc:8c:1d:59:ca:84:ab:fa: 4c:e6:a0:a3:48:01:d4:89:b2:0c:40:27:b4:92:e0: 0e:4e:2d:44:0a:8d:a5:e0:17:0a:84:a0:13:08:e1: 2d:16:06:46:83:b8:a9:7f:38:62:3a:1f:6c:66:fd: db:ec:e4:28:42:00:c0:93:a2:79:95:d9:6a:33:33: b1:d5:16:a9:f6:2f:5a:15:11:c4:3b:7e:73:18:4f: 6d:c5:06:83:71:e1:85:3c:57:8e:d4:7d:3c:eb:54: f8:6a:dc:a9:c8:98:44:b5:4d:c8:ab:c1:fd:d5:5c: 0d:bd:a1:27:9b:26:fa:63:fa:7b:6b:a7:e8:2f:d0: b3:c5:c2:d5:3c:76:07:9d:bc:1b:2d:c2:81:3b:84: 74:4e:65:e7:89:dd:f3:11:dc:c6:27:af:d1:55:06: a5:5c:1d:27:06:b2:ca:89:a8:55:f2:df:14:a4:69: 42:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7D:86:AF:61:DC:70:EB:B2:54:81:D1:D0:52:95:4F:37:84:7F:9F X509v3 Authority Key Identifier: keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:fc:08:7f:01:27:3d:d0:4a:4e:b8:a7:c9:e8:4b:71:4b:86: 78:ad:20:b1:19:70:4e:44:8d:d2:38:67:e6:4c:75:00:52:97: 87:eb:26:da:5d:88:99:95:7c:59:c8:c4:c0:97:69:a5:3e:89: b7:e9:dc:da:e3:70:88:d0:93:a3:9f:d7:fe:04:90:80:ff:0a: a5:1f:fb:9f:74:2c:51:50:54:53:ba:cf:5f:17:67:1f:a7:e8: 29:ba:cd:a3:89:55:8c:93:7b:7c:be:61:97:a1:7e:24:3f:02: b1:f9:c1:d0:de:12:d6:88:40:4b:44:36:5c:85:38:f8:54:02: d2:74:48:70:b2:64:d7:80:45:e7:d5:1d:df:f2:ac:ea:75:fd: eb:01:f0:31:83:93:b0:1b:8a:ba:8c:ed:c2:27:d2:c1:2d:8e: 5c:98:7d:45:51:48:1f:47:27:1c:81:71:5a:66:f8:a8:c5:fd: 37:10:8a:6d:41:e6:53:dd:5f:78:1a:ac:3a:7b:09:9b:7d:44: 84:b7:aa:b4:03:1a:40:3f:86:13:69:6f:a3:30:09:e1:05:0f: 3f:11:c3:62:b9:6a:0f:59:5e:40:f4:95:fa:c8:27:3c:f6:9e: cb:19:9c:90:47:0b:80:42:07:5a:07:44:b5:f8:2a:a7:1c:01: 39:ba:bb:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSPpWVyFIz0nSYS3Pas3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGIwZTEzY2YyN2FmZjY2YmU3MzBiZWNlOThlMDRiMDBm ZGZiOWUwHhcNMjUxMjA2MTIwMDQyWhcNMjUxMjA3MTIwMDQyWjAzMTEwLwYDVQQD EygyZjdkODZhZjYxZGM3MGViYjI1NDgxZDFkMDUyOTU0ZjM3ODQ3ZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBppHe8BtBdFaBMidx+OHXwv7zeF R9kdEdoiiuJOJ/recwWntePZhEmQvq94czR4aa7L8/QoY5MfD3N/WyaxkK0djnSg 45mPA/LNwHG2D+PF/IwdWcqEq/pM5qCjSAHUibIMQCe0kuAOTi1ECo2l4BcKhKAT COEtFgZGg7ipfzhiOh9sZv3b7OQoQgDAk6J5ldlqMzOx1Rap9i9aFRHEO35zGE9t xQaDceGFPFeO1H0861T4atypyJhEtU3Iq8H91VwNvaEnmyb6Y/p7a6foL9CzxcLV PHYHnbwbLcKBO4R0TmXnid3zEdzGJ6/RVQalXB0nBrLKiahV8t8UpGlCkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC99hq9h3HDrslSB0dBSlU83hH+fMB8GA1UdIwQY MBaAFIZLDhPPJ6/2a+cwvs6Y4EsA/fueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYt ZmM0NGE4YWNlMzcwLzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYtZmM0NGE4YWNlMzcw LzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvwIfwEn PdBKTrinyehLcUuGeK0gsRlwTkSN0jhn5kx1AFKXh+sm2l2ImZV8WcjEwJdppT6J t+nc2uNwiNCTo5/X/gSQgP8KpR/7n3QsUVBUU7rPXxdnH6foKbrNo4lVjJN7fL5h l6F+JD8CsfnB0N4S1ohAS0Q2XIU4+FQC0nRIcLJk14BF59Ud3/Ks6nX96wHwMYOT sBuKuoztwifSwS2OXJh9RVFIH0cnHIFxWmb4qMX9NxCKbUHmU91feBqsOnsJm31E hLeqtAMaQD+GE2lvozAJ4QUPPxHDYrlqD1leQPSV+sgnPPaeyxmckEcLgEIHWgdE tfgqpxwBObq7uw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:31 2025 by rpki-client