This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json) Hash identifier: GDCbczK8UHVwacOGu50NwTU/kzerCsgrgXegXOy1O90= Subject key identifier: 7C:72:E2:11:0C:58:4C:38:3A:73:3F:5D:DF:FA:B9:58:46:3A:C7:BF Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97 Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97 Certificate serial: 019AF19AAAD81F4A8A78319617F67BBF01E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft Manifest number: 16DB Signing time: Sat 06 Dec 2025 03:00:36 +0000 Manifest this update: Sat 06 Dec 2025 03:00:36 +0000 Manifest next update: Sun 07 Dec 2025 03:00:36 +0000 Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: GemIbvZZggHdPnOUdPyAOKt0fEgqbXJRsn02blE2XP0=) 2: gzmNz0PYWdcLgL6_SHiIcrAToJE.roa (hash: Guzyh0bDeJqFnbpc68wrDXyHWPH3X5psfEh7CAeI44k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:aa:d8:1f:4a:8a:78:31:96:17:f6:7b:bf:01:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97 Validity Not Before: Dec 6 03:00:36 2025 GMT Not After : Dec 7 03:00:36 2025 GMT Subject: CN=7c72e2110c584c383a733f5ddffab958463ac7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:c0:79:b3:4a:17:e5:17:29:df:a2:52:19: bc:7d:3a:eb:f4:cf:1c:4e:a7:b4:b5:50:f4:15:bf: 92:4f:f6:c3:77:14:17:f9:1d:09:d0:4c:fd:90:fa: 05:d4:d7:40:16:75:d0:02:77:5d:10:02:5f:cb:7f: 4a:97:a3:31:f0:a1:f7:b6:47:7f:94:ae:0b:a1:ae: bb:02:94:f2:ed:3a:48:67:e8:3e:1b:09:b9:35:c8: 37:d9:6b:6a:94:65:32:61:0e:d1:35:43:ad:60:4a: 47:b2:dc:91:18:c1:78:76:7d:3f:36:69:86:f1:e1: 99:96:89:1b:4a:b6:e7:98:64:9a:34:a5:9b:47:b9: fc:6a:d0:61:61:58:e6:80:b5:76:13:ff:20:4b:18: e8:d3:2a:ae:30:5a:c0:68:dc:61:96:25:c8:5a:ae: 91:7c:36:ca:79:fd:59:a6:73:7d:ce:c4:3b:ca:a4: f4:8a:be:28:92:91:e3:59:da:93:c8:c6:9f:50:d1: 2f:20:5f:4e:e3:b6:08:83:6c:c0:f8:62:f7:b7:ca: 2d:51:8a:ea:99:4d:65:3f:3c:5a:bd:d3:70:a4:06: 85:39:15:8d:3e:fa:5d:8b:b7:28:20:de:68:19:2b: a6:51:07:e5:41:1e:d6:94:22:3b:6a:ce:05:7b:63: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:72:E2:11:0C:58:4C:38:3A:73:3F:5D:DF:FA:B9:58:46:3A:C7:BF X509v3 Authority Key Identifier: keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9b:31:c2:a9:60:01:19:5e:aa:ad:9d:bc:be:a4:3d:21:9c: ff:1f:09:c3:3c:7c:3e:34:28:84:c9:d6:46:74:79:ee:e1:0c: b8:5b:5b:2a:70:80:81:50:9a:52:16:97:69:69:f8:85:cf:7f: b5:4d:f6:61:a3:78:0a:ca:7b:66:5b:5d:85:4f:de:4a:8e:65: f8:55:f7:e8:ff:3a:7f:a9:2e:49:f7:2b:e0:3a:eb:12:7e:07: 19:2b:ab:0d:80:d0:3c:74:91:5e:c1:50:23:a0:1f:2f:75:d0: 96:5f:de:b9:a9:02:ec:99:81:6a:24:24:ef:6f:b5:56:23:cd: 56:59:4c:db:aa:06:b8:f3:55:db:be:f4:c2:ad:cb:ca:0b:96: 93:13:c9:b4:09:1b:ad:16:17:d9:74:71:b9:fa:5f:ac:4e:8c: 7a:7f:ec:af:ee:ff:9e:30:94:93:82:91:2e:f8:55:af:a2:b4: d3:ec:0e:54:78:ad:07:f4:71:f5:77:d7:7f:db:da:76:d9:79: 46:46:6e:57:ce:ed:c8:54:43:55:3b:e0:51:36:93:8c:43:77: 74:09:11:12:c9:63:ff:9a:f4:0b:ad:75:69:61:8a:e6:24:41: 41:01:a8:29:a7:88:71:c0:8f:51:84:ab:b2:6a:23:35:7b:60: c4:86:bf:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqrYH0qKeDGWF/Z7vwHmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNDVjYzY5YjRkMWVlMTUxYjUwMjc0NDJmYmJhOTQ0YzI3 NGRmOTcwHhcNMjUxMjA2MDMwMDM2WhcNMjUxMjA3MDMwMDM2WjAzMTEwLwYDVQQD Eyg3YzcyZTIxMTBjNTg0YzM4M2E3MzNmNWRkZmZhYjk1ODQ2M2FjN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMzAebNKF+UXKd+iUhm8fTrr9M8c Tqe0tVD0Fb+ST/bDdxQX+R0J0Ez9kPoF1NdAFnXQAnddEAJfy39Kl6Mx8KH3tkd/ lK4Loa67ApTy7TpIZ+g+Gwm5Ncg32WtqlGUyYQ7RNUOtYEpHstyRGMF4dn0/NmmG 8eGZlokbSrbnmGSaNKWbR7n8atBhYVjmgLV2E/8gSxjo0yquMFrAaNxhliXIWq6R fDbKef1ZpnN9zsQ7yqT0ir4okpHjWdqTyMafUNEvIF9O47YIg2zA+GL3t8otUYrq mU1lPzxavdNwpAaFORWNPvpdi7coIN5oGSumUQflQR7WlCI7as4Fe2N83wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxy4hEMWEw4OnM/Xd/6uVhGOse/MB8GA1UdIwQY MBaAFB5FzGm00e4VG1AnRC+7qUTCdN+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNDk1MjgtMmFhNC00YTdkLTk4NDUt YzI0NDNhYTU0N2UyLzEvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kNDk1MjgtMmFhNC00YTdkLTk4NDUtYzI0NDNhYTU0N2Uy LzEvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5sxwqlg ARleqq2dvL6kPSGc/x8Jwzx8PjQohMnWRnR57uEMuFtbKnCAgVCaUhaXaWn4hc9/ tU32YaN4Csp7ZltdhU/eSo5l+FX36P86f6kuSfcr4DrrEn4HGSurDYDQPHSRXsFQ I6AfL3XQll/euakC7JmBaiQk72+1ViPNVllM26oGuPNV2770wq3LyguWkxPJtAkb rRYX2XRxufpfrE6Men/sr+7/njCUk4KRLvhVr6K00+wOVHitB/Rx9XfXf9vadtl5 RkZuV87tyFRDVTvgUTaTjEN3dAkREslj/5r0C611aWGK5iRBQQGoKaeIccCPUYSr smojNXtgxIa/DA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:07 2025 by rpki-client