This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json) Hash identifier: ZlJChuJWnYP3ZHDprP5xg4zKlLyINP4Rchqt2RejjgM= Subject key identifier: D0:36:7A:6A:B3:E1:99:D7:B7:EA:EF:57:76:B7:53:4D:69:BC:6A:B2 Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0 Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0 Certificate serial: 019AF3529F7FA6193F3247E683460855A2A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft Manifest number: 0F27 Signing time: Sat 06 Dec 2025 11:01:09 +0000 Manifest this update: Sat 06 Dec 2025 11:01:09 +0000 Manifest next update: Sun 07 Dec 2025 11:01:09 +0000 Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: G1F4tcdhh2Lc9yJ56imfAOLQgcx0yYZTBp+/ndnWRPM=) 2: aRJc7_o9XgAW9PPEgC1zuufULQk.roa (hash: aNwMxPIgMebl0KXeBZmaqOEDWlNAdOizWVRuMjJ0OEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:9f:7f:a6:19:3f:32:47:e6:83:46:08:55:a2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0 Validity Not Before: Dec 6 11:01:09 2025 GMT Not After : Dec 7 11:01:09 2025 GMT Subject: CN=d0367a6ab3e199d7b7eaef5776b7534d69bc6ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3a:db:e1:88:e6:d0:45:3b:c1:d0:b1:8e:f5: 74:ab:9d:2f:88:45:01:ad:27:0c:40:fe:04:e9:16: bf:cf:37:75:c9:97:62:97:8d:c6:57:40:7f:34:9a: 2f:85:77:e5:a5:d7:69:54:83:79:bd:d1:9c:02:da: fe:e4:6c:69:29:d7:13:f9:85:49:e2:68:57:09:46: 6a:ba:fa:e5:c6:7a:c9:f7:a2:a1:32:2a:69:e1:fd: 2f:ea:ec:3a:37:e7:37:1d:35:91:ac:60:61:34:86: cd:10:59:fd:c1:f1:ec:f6:06:74:d0:2a:ba:c6:9e: 68:19:99:f0:bb:a3:b8:b9:9d:d7:42:77:45:73:5b: 9e:fa:82:ff:3f:bd:26:5a:de:7f:46:5a:19:22:3f: 13:f2:e6:3d:e2:44:c9:4c:5f:88:ca:3c:10:a3:33: 71:83:8f:6d:62:a7:d9:97:a1:ec:9b:ee:0e:e6:eb: 72:ee:99:5b:c5:11:18:41:25:e2:b0:72:55:ad:94: 2e:3c:23:9f:c2:9d:46:8d:d4:1b:e4:b3:4a:ab:62: b5:33:c3:6f:f6:48:f6:8a:e0:53:94:8e:96:09:14: 73:13:c7:f2:89:af:e8:fc:28:94:49:66:4c:fc:aa: 34:84:d8:da:d1:cb:83:b7:40:d3:12:b5:67:35:e7: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:36:7A:6A:B3:E1:99:D7:B7:EA:EF:57:76:B7:53:4D:69:BC:6A:B2 X509v3 Authority Key Identifier: keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:92:b8:d4:d4:77:c9:7a:ca:0e:5f:24:02:5d:fb:29:6f:fb: e7:8b:17:35:64:24:3a:82:aa:7c:e0:3c:05:9c:b2:74:2d:8d: 0f:f6:b6:d2:3c:49:13:07:08:ef:d8:94:d3:78:82:a2:11:59: 8b:43:0e:a9:65:54:fb:d1:a9:57:75:2f:86:26:5f:12:f5:07: c6:49:93:29:83:9f:7d:7d:2d:65:0e:7d:c8:c9:52:5c:5c:fa: ba:e4:75:32:0e:41:33:08:68:1c:09:a6:2a:08:cc:62:cb:00: f7:f6:bb:d8:d5:a9:de:d4:c5:d4:e7:d2:3c:bf:c4:77:97:39: 4a:6e:d8:2a:3c:b8:4b:7d:50:9c:56:84:0c:e0:de:ad:49:ea: 8a:83:9b:9a:fc:07:3b:82:df:ec:67:4d:a4:09:ff:fa:e4:ef: a9:e2:75:32:0f:47:89:e4:9a:a3:fb:79:b8:0a:64:b9:43:db: e0:27:38:b6:97:19:e2:f8:06:74:0f:f0:e0:2e:f9:2b:a1:5c: 33:62:83:a8:ae:02:d2:3d:e7:4d:f7:04:e7:b9:f0:61:53:67: 4a:c5:a9:04:04:54:4a:86:da:6d:b9:4f:f5:d6:24:02:c7:e8: c2:71:21:ee:d4:3b:86:3a:8e:76:e2:4b:06:fc:99:b6:ca:6f: 2d:f4:9c:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUp9/phk/Mkfmg0YIVaKoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYjkzYjgzYmFmYWQ3YmZkOTRmNjc2YzAyMWJhYWI1MTg3 MDA3ZjAwHhcNMjUxMjA2MTEwMTA5WhcNMjUxMjA3MTEwMTA5WjAzMTEwLwYDVQQD EyhkMDM2N2E2YWIzZTE5OWQ3YjdlYWVmNTc3NmI3NTM0ZDY5YmM2YWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jrb4Yjm0EU7wdCxjvV0q50viEUB rScMQP4E6Ra/zzd1yZdil43GV0B/NJovhXflpddpVIN5vdGcAtr+5GxpKdcT+YVJ 4mhXCUZquvrlxnrJ96KhMipp4f0v6uw6N+c3HTWRrGBhNIbNEFn9wfHs9gZ00Cq6 xp5oGZnwu6O4uZ3XQndFc1ue+oL/P70mWt5/RloZIj8T8uY94kTJTF+IyjwQozNx g49tYqfZl6Hsm+4O5uty7plbxREYQSXisHJVrZQuPCOfwp1GjdQb5LNKq2K1M8Nv 9kj2iuBTlI6WCRRzE8fyia/o/CiUSWZM/Ko0hNja0cuDt0DTErVnNeeHkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNA2emqz4ZnXt+rvV3a3U01pvGqyMB8GA1UdIwQY MBaAFB25O4O6+te/2U9nbAIbqrUYcAfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTMwMDktOGYyZS00MjBjLTliZGYt YmU3NDkwODE4NmYwLzEvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTMwMDktOGYyZS00MjBjLTliZGYtYmU3NDkwODE4NmYw LzEvSGJrN2c3cjYxN19aVDJkc0FodXF0Umh3Ql9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5K41NR3 yXrKDl8kAl37KW/754sXNWQkOoKqfOA8BZyydC2ND/a20jxJEwcI79iU03iCohFZ i0MOqWVU+9GpV3UvhiZfEvUHxkmTKYOffX0tZQ59yMlSXFz6uuR1Mg5BMwhoHAmm KgjMYssA9/a72NWp3tTF1OfSPL/Ed5c5Sm7YKjy4S31QnFaEDODerUnqioObmvwH O4Lf7GdNpAn/+uTvqeJ1Mg9HieSao/t5uApkuUPb4Cc4tpcZ4vgGdA/w4C75K6Fc M2KDqK4C0j3nTfcE57nwYVNnSsWpBARUSobabblP9dYkAsfownEh7tQ7hjqOduJL BvyZtspvLfScIg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:20 2025 by rpki-client