This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json) Hash identifier: jLeX1ojmI4MrQMC1mM+hh24avxKNM449wjQ6hkU4DRY= Subject key identifier: 1C:D3:A9:79:22:F7:5E:2C:05:E5:C0:C3:C1:30:F8:A6:A0:02:9D:6E Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe Certificate serial: 019B2E8B4211E7451381D31BAF6A831A7109 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 23:00:36 +0000 Manifest this update: Wed 17 Dec 2025 23:00:36 +0000 Manifest next update: Thu 18 Dec 2025 23:00:36 +0000 Files and hashes: 1: E0KbPb4RfPbI9ii_1fNlFCQuDLw.roa (hash: be5+koswrVopdsotzqVNJfSpffEio3grzLc2KrNQKj8=) 2: ExjSEeEAZl6w67KQQzB9tboEijs.roa (hash: kHRGvr6/I9lpmyPu60rCwXrYtjs7atLNb5bTbjbxNMY=) 3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: KMEjdTNtChfRQ/zYRAYpEts3b6cHDIdoUESCIkRuQxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:42:11:e7:45:13:81:d3:1b:af:6a:83:1a:71:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe Validity Not Before: Dec 17 23:00:36 2025 GMT Not After : Dec 18 23:00:36 2025 GMT Subject: CN=1cd3a97922f75e2c05e5c0c3c130f8a6a0029d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e0:93:d1:3c:be:85:37:8a:a7:e4:b4:96:1c: 01:ba:25:f3:1c:ba:ad:3f:18:a4:4f:0d:0e:b3:49: 2f:96:7b:50:b7:d4:27:67:42:26:46:26:da:3f:70: 8a:d6:ac:84:e7:8a:07:32:65:d5:a5:2e:d1:9a:b1: 84:d4:df:37:98:f6:7a:68:bb:f7:14:b7:d4:c8:69: 72:9b:c8:03:82:99:9c:97:13:25:2c:8b:2e:55:f2: b0:08:93:80:6f:c5:7d:0e:d4:67:65:2b:7c:db:64: b8:c3:c0:a7:ca:65:f5:bc:bc:ac:aa:07:02:34:20: f5:c8:07:ee:a1:03:7b:8e:0b:12:99:0d:1b:4f:24: 78:ce:21:00:e0:60:5c:ba:f2:ce:7f:de:b3:e0:a3: 61:34:42:7f:43:fb:60:37:51:7d:01:38:f5:af:9b: 0d:58:05:02:23:c2:0c:7c:9e:ef:6a:85:ba:52:bc: 43:cc:ee:61:83:8c:1c:63:32:e0:9f:38:b9:90:de: 0b:2a:9f:41:4b:9f:fb:8b:9f:c2:82:b3:4b:89:61: 39:3c:4e:ac:6f:e7:1e:a4:fc:29:84:e9:22:f4:a1: 29:3d:22:3d:3f:3a:3f:d6:cb:c6:2c:e2:53:bf:4f: a3:28:36:bc:a8:b4:25:14:b3:b5:5c:26:8b:0f:e1: 5f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D3:A9:79:22:F7:5E:2C:05:E5:C0:C3:C1:30:F8:A6:A0:02:9D:6E X509v3 Authority Key Identifier: keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3e:15:d0:79:9b:7d:25:0d:ce:ec:61:cf:47:aa:1f:a1:4b: b7:34:93:6d:5f:35:ed:b4:24:9b:a3:85:f3:ea:b4:b1:72:17: d3:22:7f:46:8c:d1:a2:08:89:46:b3:91:16:49:3d:7f:bf:9b: 2c:2c:91:8e:6b:78:7c:48:b7:97:56:f8:c0:fa:39:3c:64:20: 82:c1:03:31:62:d1:7f:3a:e9:86:95:61:56:f1:8e:21:9e:6b: a2:60:65:58:38:1a:48:c9:93:35:1c:95:c2:1a:2c:e1:52:54: 20:8b:0b:d3:00:0b:d4:86:32:1e:29:d7:6a:c1:5b:57:7a:a5: 5a:7b:f9:02:25:bf:12:a9:77:b9:a5:f6:3b:4a:9e:19:dc:20: 6d:b7:ee:0c:5b:82:8c:22:b3:39:73:67:5f:93:72:4c:1f:47: a3:74:d1:3b:a8:02:56:f5:68:9d:ca:63:2b:84:d5:9b:19:b3: 59:5d:e4:3c:1a:f7:b3:17:b1:45:7c:ff:60:78:85:71:e7:c1: 13:43:46:d2:45:4c:02:29:ae:77:7b:eb:c0:85:69:01:22:fb: c4:ee:e6:18:8b:1e:09:83:8c:19:24:5e:b8:97:71:4d:1c:ca: 82:0a:c1:af:3a:df:87:2a:0d:af:83:9e:3f:51:79:8e:6c:07: a5:9b:68:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui0IR50UTgdMbr2qDGnEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YjkxOWEzZmViMGVjOTY2Mjk5ZmYwZmFlOGRlZmNiNDE1 ZTIyZmUwHhcNMjUxMjE3MjMwMDM2WhcNMjUxMjE4MjMwMDM2WjAzMTEwLwYDVQQD EygxY2QzYTk3OTIyZjc1ZTJjMDVlNWMwYzNjMTMwZjhhNmEwMDI5ZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+CT0Ty+hTeKp+S0lhwBuiXzHLqt PxikTw0Os0kvlntQt9QnZ0ImRibaP3CK1qyE54oHMmXVpS7RmrGE1N83mPZ6aLv3 FLfUyGlym8gDgpmclxMlLIsuVfKwCJOAb8V9DtRnZSt822S4w8CnymX1vLysqgcC NCD1yAfuoQN7jgsSmQ0bTyR4ziEA4GBcuvLOf96z4KNhNEJ/Q/tgN1F9ATj1r5sN WAUCI8IMfJ7vaoW6UrxDzO5hg4wcYzLgnzi5kN4LKp9BS5/7i5/CgrNLiWE5PE6s b+cepPwphOki9KEpPSI9Pzo/1svGLOJTv0+jKDa8qLQlFLO1XCaLD+FflQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzTqXki914sBeXAw8Ew+KagAp1uMB8GA1UdIwQY MBaAFIW5GaP+sOyWYpn/D66N78tBXiL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ZTBmNWEtYzZlNy00M2U4LWJiMjEt NDdkYzA4ZDdlM2JhLzEvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81ZTBmNWEtYzZlNy00M2U4LWJiMjEtNDdkYzA4ZDdlM2Jh LzEvaGJrWm9fNnc3SlppbWY4UHJvM3Z5MEZlSXY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUj4V0Hmb fSUNzuxhz0eqH6FLtzSTbV817bQkm6OF8+q0sXIX0yJ/RozRogiJRrORFkk9f7+b LCyRjmt4fEi3l1b4wPo5PGQggsEDMWLRfzrphpVhVvGOIZ5romBlWDgaSMmTNRyV whos4VJUIIsL0wAL1IYyHinXasFbV3qlWnv5AiW/Eql3uaX2O0qeGdwgbbfuDFuC jCKzOXNnX5NyTB9Ho3TRO6gCVvVoncpjK4TVmxmzWV3kPBr3sxexRXz/YHiFcefB E0NG0kVMAimud3vrwIVpASL7xO7mGIseCYOMGSReuJdxTRzKggrBrzrfhyoNr4Oe P1F5jmwHpZtoRQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:43 2025 by rpki-client