This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft File: hkEGVA8wqdzfjvm-cv_vi9inLlw.mft (raw, json) Hash identifier: HEbAUwqGUW1k3jXEjPB/GpRcXsLNNblEuKU6IUFUOQg= Subject key identifier: 18:E8:7B:CD:94:1B:05:58:FB:DE:2C:F7:10:06:53:2C:7E:E5:4E:C1 Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C Certificate issuer: /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c Certificate serial: 019AF689FE828A309B5456ABFA6A5B21F97D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft Manifest number: 1767 Signing time: Sun 07 Dec 2025 02:00:29 +0000 Manifest this update: Sun 07 Dec 2025 02:00:29 +0000 Manifest next update: Mon 08 Dec 2025 02:00:29 +0000 Files and hashes: 1: XPrFj5zrogqrQA0ZGMw9Cj_3tIM.roa (hash: y5bDj30kHbVlnej3Qo9ZyWbBqUGtip3DeFT5c1pzf8I=) 2: hkEGVA8wqdzfjvm-cv_vi9inLlw.crl (hash: x7mtAch8fKh+sy7iGBDPbcqevXrMmKNma9szHJm9VdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:89:fe:82:8a:30:9b:54:56:ab:fa:6a:5b:21:f9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c Validity Not Before: Dec 7 02:00:29 2025 GMT Not After : Dec 8 02:00:29 2025 GMT Subject: CN=18e87bcd941b0558fbde2cf71006532c7ee54ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f9:81:dd:fd:49:2f:a8:af:47:db:11:aa:9c: 2f:8b:3e:6a:ed:cf:7c:9a:06:eb:f3:59:d2:34:83: fd:79:08:b6:8c:e3:71:0e:39:f8:94:ba:36:d8:22: 9f:d4:b8:84:41:9c:f1:45:7d:8b:14:34:e1:2b:46: fd:23:93:82:ab:20:d3:54:bc:56:26:4c:c9:63:62: 6b:a4:22:0a:b1:03:df:55:9d:16:86:3e:f9:0c:63: 8a:1a:17:9c:f8:4d:04:e3:a7:db:c9:59:da:2e:65: 02:76:2b:aa:ea:44:ff:86:f3:97:5c:0f:21:35:fe: 93:d8:a7:6f:7a:aa:35:f7:91:94:c6:04:0b:b9:07: 4d:52:00:f0:41:49:7c:c9:77:a4:16:08:33:ca:f3: 4e:20:aa:72:62:54:2b:bc:31:6e:9e:97:68:9a:a9: fe:6c:77:ce:56:ec:73:47:92:7d:65:2a:25:b4:02: 20:5b:41:13:4d:89:0c:58:45:0b:a2:b3:f5:2e:d7: 4c:78:4e:07:99:9e:27:e0:56:8a:11:43:52:03:62: 92:56:02:47:6c:19:d9:37:da:4c:bc:01:74:01:44: 17:4d:33:78:a6:51:50:29:53:53:b2:80:15:90:d5: b6:e1:5a:51:fa:fa:ba:9a:d7:14:b9:56:d4:c4:6e: d4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E8:7B:CD:94:1B:05:58:FB:DE:2C:F7:10:06:53:2C:7E:E5:4E:C1 X509v3 Authority Key Identifier: keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:73:38:38:14:17:87:b8:f6:1d:78:c8:3b:0d:8e:dc:19:e1: f0:86:4f:51:d0:9d:b1:9d:87:a0:4b:f1:48:86:99:47:25:a4: 3d:58:f4:05:0b:ec:a0:b7:89:54:c6:04:d3:8d:a3:cb:b4:82: 5a:71:1b:ca:e8:be:59:7c:94:9a:11:03:8b:bf:be:3d:65:6d: 4f:06:0e:d4:9b:48:87:f0:bb:76:02:8c:8c:47:ab:3f:46:64: b7:6b:e8:90:db:59:71:3d:58:53:94:5a:43:f3:ff:1d:b5:5d: 4d:30:b4:31:98:3f:45:9a:b0:67:db:23:e5:bf:22:f9:d2:53: b9:27:a6:44:47:74:20:49:3d:35:cc:b9:09:8e:f2:ef:3c:e2: ed:4d:f4:d1:7e:00:ce:c2:e8:fe:4f:7f:f1:9c:86:e9:cd:5f: 90:bd:26:a7:0a:8e:80:97:0e:4a:fb:6e:3a:c2:a3:d8:71:06: ca:48:f9:c3:f2:4e:e4:5b:f2:05:9f:11:c9:2e:75:5d:e6:bb: 46:a8:d7:b8:65:0f:37:f6:1a:48:7c:ce:c3:d3:43:56:75:07: 21:7b:a9:ab:50:75:b9:ff:18:9d:3e:83:96:0b:22:93:92:56: 8a:ed:5e:14:db:13:fa:28:26:a4:e2:90:61:36:52:e2:db:21: 67:36:bb:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2if6CijCbVFar+mpbIfl9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NDEwNjU0MGYzMGE5ZGNkZjhlZjliZTcyZmZlZjhiZDhh NzJlNWMwHhcNMjUxMjA3MDIwMDI5WhcNMjUxMjA4MDIwMDI5WjAzMTEwLwYDVQQD EygxOGU4N2JjZDk0MWIwNTU4ZmJkZTJjZjcxMDA2NTMyYzdlZTU0ZWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPmB3f1JL6ivR9sRqpwviz5q7c98 mgbr81nSNIP9eQi2jONxDjn4lLo22CKf1LiEQZzxRX2LFDThK0b9I5OCqyDTVLxW JkzJY2JrpCIKsQPfVZ0Whj75DGOKGhec+E0E46fbyVnaLmUCdiuq6kT/hvOXXA8h Nf6T2Kdveqo195GUxgQLuQdNUgDwQUl8yXekFggzyvNOIKpyYlQrvDFunpdomqn+ bHfOVuxzR5J9ZSoltAIgW0ETTYkMWEULorP1LtdMeE4HmZ4n4FaKEUNSA2KSVgJH bBnZN9pMvAF0AUQXTTN4plFQKVNTsoAVkNW24VpR+vq6mtcUuVbUxG7UyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjoe82UGwVY+94s9xAGUyx+5U7BMB8GA1UdIwQY MBaAFIZBBlQPMKnc3475vnL/74vYpy5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wYmU3ZjItNjM4ZC00ZjQ1LWI2OTct M2IzMThlNDcyNzZkLzEvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wYmU3ZjItNjM4ZC00ZjQ1LWI2OTctM2IzMThlNDcyNzZk LzEvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonM4OBQX h7j2HXjIOw2O3Bnh8IZPUdCdsZ2HoEvxSIaZRyWkPVj0BQvsoLeJVMYE042jy7SC WnEbyui+WXyUmhEDi7++PWVtTwYO1JtIh/C7dgKMjEerP0Zkt2vokNtZcT1YU5Ra Q/P/HbVdTTC0MZg/RZqwZ9sj5b8i+dJTuSemREd0IEk9Ncy5CY7y7zzi7U300X4A zsLo/k9/8ZyG6c1fkL0mpwqOgJcOSvtuOsKj2HEGykj5w/JO5FvyBZ8RyS51Xea7 RqjXuGUPN/YaSHzOw9NDVnUHIXupq1B1uf8YnT6Dlgsik5JWiu1eFNsT+igmpOKQ YTZS4tshZza73w== -----END CERTIFICATE-----Generated at Sun Dec 7 08:30:51 2025 by rpki-client