This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft File: Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft (raw, json) Hash identifier: /Ki093LsoL4RaPYhv1RNfp9odYDw3Dj22xG2XdwR3R4= Subject key identifier: F9:CC:75:22:95:E0:90:40:10:5E:58:CC:8D:CD:EF:DE:84:5C:5A:95 Authority key identifier: 1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3 Certificate issuer: /CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3 Certificate serial: 019AF19B731E08FAAFE9E1C5A54834234CA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft Manifest number: 0D8F Signing time: Sat 06 Dec 2025 03:01:27 +0000 Manifest this update: Sat 06 Dec 2025 03:01:27 +0000 Manifest next update: Sun 07 Dec 2025 03:01:27 +0000 Files and hashes: 1: Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl (hash: xdRMRc6rHyeRh8Jm6TQh6+K+lgn9MUOmLecuKpwxN9w=) 2: oaQkn5zr2sFy17og-aVMkuLXdds.roa (hash: VtZ3pTO5W1yzA+ps5HMSQhypm611YNtn0vckyLuCUAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:73:1e:08:fa:af:e9:e1:c5:a5:48:34:23:4c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3 Validity Not Before: Dec 6 03:01:27 2025 GMT Not After : Dec 7 03:01:27 2025 GMT Subject: CN=f9cc752295e09040105e58cc8dcdefde845c5a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:02:41:9c:10:78:8a:44:5d:ff:f8:39:bc: 42:73:34:05:9f:00:c3:15:4d:da:8b:8e:28:7c:1c: 19:28:21:4a:83:80:8c:54:8c:21:06:87:b8:ea:87: 41:ba:85:47:c8:24:aa:5c:8c:3d:b8:6b:b1:a2:12: b9:e6:4c:79:2e:e2:77:60:d3:9d:32:d2:28:e3:52: f9:38:77:c7:bb:b8:39:f9:a4:03:19:9c:9c:3e:e0: 06:de:a8:ba:20:97:06:4e:8e:3b:2e:9f:bb:60:7a: 29:3b:ba:2b:d4:b5:d9:82:26:74:ab:b5:1a:e9:70: 7a:14:4d:25:d5:ce:84:ae:c1:e8:46:47:7a:a3:58: 4d:7d:5c:9b:9d:a4:22:7c:9e:d3:19:53:b2:be:ae: 9b:8f:cd:02:cf:9b:48:6b:8e:ce:a6:06:f0:b4:03: 83:34:e3:68:f3:c8:93:ef:d0:b9:72:55:d1:47:dc: 70:2d:35:44:8e:cd:7b:a4:20:55:2a:da:61:3d:d9: 76:7c:97:1a:f5:12:8c:fd:14:96:d1:0f:7d:f2:98: b7:5a:45:f3:15:d0:77:53:56:de:d2:0c:df:03:23: 26:a1:8e:50:b6:b1:46:42:d4:66:76:6d:06:08:84: 2b:c7:92:2b:7a:32:b8:ec:83:d0:6b:c1:56:27:7b: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CC:75:22:95:E0:90:40:10:5E:58:CC:8D:CD:EF:DE:84:5C:5A:95 X509v3 Authority Key Identifier: keyid:1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:42:e0:88:c3:f1:9a:f5:66:4a:cf:2c:9a:d8:0d:7a:62:d7: 15:26:9a:19:6b:b9:fa:f4:e4:e0:3b:f1:bf:c6:9c:30:3f:99: 8f:b7:3c:db:f2:51:65:a3:f8:92:4b:e5:98:42:f0:d0:d3:e2: ce:b9:3d:77:42:6e:f4:3e:4e:ea:90:1a:f0:fc:8e:dd:e8:75: 64:e7:67:11:f5:ae:63:c9:1e:db:29:8c:00:ee:b0:49:e2:95: 4a:1a:6e:96:ba:e7:85:d2:b3:c1:df:53:b2:4c:2e:65:b9:06: 60:e4:f0:ec:c0:0b:cf:49:35:06:18:f4:44:ee:76:c0:8a:41: 6f:66:33:53:c3:28:d9:28:c9:57:9a:ad:09:4a:b0:b4:b0:88: 8e:29:5c:13:b4:ad:fb:e8:76:1d:3f:9c:57:4b:38:88:00:b3: a2:2e:d0:cb:80:c4:3f:43:47:1e:af:01:00:db:d5:24:a1:ca: 86:8c:2e:3f:d4:fd:31:51:7e:76:66:a2:5a:bc:46:6c:95:a4: 2a:6a:e5:5f:28:ae:17:bd:4e:b7:24:7d:b8:b9:1f:78:b8:c2: ad:15:20:17:15:5f:29:7c:29:78:3c:27:a4:f0:4c:78:5a:cd: 9d:c3:b6:9c:17:bf:9a:a6:85:a6:81:cd:6f:86:da:e6:88:f4: a8:2e:89:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3MeCPqv6eHFpUg0I0yhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNDdlMmJmMzk3NDcyMWVhZmJmYjhjMzFmYzUyNzMwMzlk NTA1ZjMwHhcNMjUxMjA2MDMwMTI3WhcNMjUxMjA3MDMwMTI3WjAzMTEwLwYDVQQD EyhmOWNjNzUyMjk1ZTA5MDQwMTA1ZTU4Y2M4ZGNkZWZkZTg0NWM1YTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7ICQZwQeIpEXf/4ObxCczQFnwDD FU3ai44ofBwZKCFKg4CMVIwhBoe46odBuoVHyCSqXIw9uGuxohK55kx5LuJ3YNOd MtIo41L5OHfHu7g5+aQDGZycPuAG3qi6IJcGTo47Lp+7YHopO7or1LXZgiZ0q7Ua 6XB6FE0l1c6ErsHoRkd6o1hNfVybnaQifJ7TGVOyvq6bj80Cz5tIa47OpgbwtAOD NONo88iT79C5clXRR9xwLTVEjs17pCBVKtphPdl2fJca9RKM/RSW0Q998pi3WkXz FdB3U1be0gzfAyMmoY5QtrFGQtRmdm0GCIQrx5IrejK47IPQa8FWJ3v1qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnMdSKV4JBAEF5YzI3N796EXFqVMB8GA1UdIwQY MBaAFB5H4r85dHIer7+4wx/FJzA51QXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZmExMDYtNmFmOC00MzEwLWI0ZDQt ZTM2OWQ2NjAyZTZmLzEvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9hZmExMDYtNmFmOC00MzEwLWI0ZDQtZTM2OWQ2NjAyZTZm LzEvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakLgiMPx mvVmSs8smtgNemLXFSaaGWu5+vTk4Dvxv8acMD+Zj7c82/JRZaP4kkvlmELw0NPi zrk9d0Ju9D5O6pAa8PyO3eh1ZOdnEfWuY8ke2ymMAO6wSeKVShpulrrnhdKzwd9T skwuZbkGYOTw7MALz0k1Bhj0RO52wIpBb2YzU8Mo2SjJV5qtCUqwtLCIjilcE7St ++h2HT+cV0s4iACzoi7Qy4DEP0NHHq8BANvVJKHKhowuP9T9MVF+dmaiWrxGbJWk KmrlXyiuF71OtyR9uLkfeLjCrRUgFxVfKXwpeDwnpPBMeFrNncO2nBe/mqaFpoHN b4ba5oj0qC6JDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:37 2025 by rpki-client