This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft File: HK8vo44dGk0OBmCb8pdugcUKrQo.mft (raw, json) Hash identifier: EdX+0SpQZoMDYHOatDyshcFWOAhAl3FlDpkIuzqZdog= Subject key identifier: 81:19:C1:5A:A2:69:DE:A9:88:BF:E0:CA:D4:B8:CC:3A:EF:0F:1F:3F Authority key identifier: 1C:AF:2F:A3:8E:1D:1A:4D:0E:06:60:9B:F2:97:6E:81:C5:0A:AD:0A Certificate issuer: /CN=1caf2fa38e1d1a4d0e06609bf2976e81c50aad0a Certificate serial: 019B2D0C8E1CF6E1D57C4779F82FB4FB7531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft Manifest number: 1435 Signing time: Wed 17 Dec 2025 16:02:35 +0000 Manifest this update: Wed 17 Dec 2025 16:02:35 +0000 Manifest next update: Thu 18 Dec 2025 16:02:35 +0000 Files and hashes: 1: HK8vo44dGk0OBmCb8pdugcUKrQo.crl (hash: SOJw1enlrjmOe2lQJdcs5NpH6xx8M365vQlGRjhD8s8=) 2: lmgzBptHHcGR1jAKHjpS47zLYEQ.roa (hash: t/2vEU4hMx7G3HXdySNq/pjezwcUhKsGwxxqSv/Bf/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:8e:1c:f6:e1:d5:7c:47:79:f8:2f:b4:fb:75:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1caf2fa38e1d1a4d0e06609bf2976e81c50aad0a Validity Not Before: Dec 17 16:02:35 2025 GMT Not After : Dec 18 16:02:35 2025 GMT Subject: CN=8119c15aa269dea988bfe0cad4b8cc3aef0f1f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b4:54:f9:9e:91:0a:c7:33:54:8c:41:cd:67: 57:7b:cb:48:46:9d:3a:a5:66:bc:bc:c3:7b:ac:5a: bd:a8:3b:a5:18:1d:c2:5b:76:3b:4b:17:09:24:e3: a6:dc:b9:d9:7c:81:a3:9d:87:bb:51:d5:d0:7e:bf: 8d:14:b4:70:91:27:ea:56:8d:9d:42:d8:5f:db:5b: ac:1d:67:d3:11:bb:41:3f:a8:32:b1:f4:52:8a:9e: 45:41:5d:16:ec:e4:71:08:76:83:e9:75:3c:10:11: 70:1e:4f:88:c5:93:e3:cd:db:24:59:5b:54:af:98: 01:2e:00:ce:67:d2:2e:29:ac:50:86:82:5b:45:3e: 86:c6:19:e9:8c:e2:f1:59:84:2a:59:41:94:d3:2f: ed:2b:0a:bb:08:dc:8b:43:91:78:3b:a0:00:d7:54: 9a:9b:05:3b:1c:bb:c1:83:f2:69:88:77:72:e7:64: 7a:18:00:b5:ae:84:40:29:97:15:c0:a9:31:65:ba: c8:d1:a5:43:17:90:84:b1:95:d2:dc:3c:e0:0c:db: 7a:87:8e:b1:3d:a0:83:24:f9:8a:65:fa:d0:57:55: 6c:9d:66:be:c0:1c:b9:79:da:76:cd:db:bc:25:50: 23:05:20:81:93:e3:23:07:a0:9b:6b:09:89:db:e6: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:19:C1:5A:A2:69:DE:A9:88:BF:E0:CA:D4:B8:CC:3A:EF:0F:1F:3F X509v3 Authority Key Identifier: keyid:1C:AF:2F:A3:8E:1D:1A:4D:0E:06:60:9B:F2:97:6E:81:C5:0A:AD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bd:85:7d:62:54:08:ae:00:e3:3c:6b:25:37:1c:a0:88:08: 68:60:00:b3:5b:ad:8f:2d:d2:a3:a5:68:86:cf:cd:d3:df:27: dd:cc:3c:88:7f:2d:3e:0d:77:b6:6f:ff:59:c7:cb:06:b0:ac: 5b:1c:29:8d:3c:8b:1b:3c:f2:a9:10:8e:90:ed:20:dc:da:fb: 00:6b:bc:4b:4a:84:6e:c5:e7:2f:ea:0c:ef:dd:d2:53:f8:37: 79:62:f7:1c:1d:b9:31:7b:5b:4e:f2:1f:38:16:70:92:3e:45: 93:d9:b5:34:d3:90:46:d4:ef:c5:b7:96:c6:1c:57:cc:a1:41: 21:f7:5b:89:49:75:2e:59:2b:e8:16:a2:c3:91:cf:dc:d4:db: 45:d5:54:1d:06:a6:57:de:bf:41:aa:b0:4d:0e:83:11:49:ad: 50:12:8e:1a:99:75:04:e9:6b:c2:f9:e7:50:11:c8:44:02:14: bc:f4:1b:8b:26:56:e0:29:bb:05:36:d7:38:05:34:b9:85:9a: 0b:76:b1:de:02:8a:86:8d:2c:b2:ba:d6:30:8a:14:3f:64:35: a1:f9:c1:fa:32:4c:9b:32:fe:41:aa:8e:63:e7:82:4a:6f:4e: de:64:b6:4a:ce:4f:60:fa:98:40:d4:eb:8b:15:99:57:53:59: 36:b8:cd:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDI4c9uHVfEd5+C+0+3UxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYWYyZmEzOGUxZDFhNGQwZTA2NjA5YmYyOTc2ZTgxYzUw YWFkMGEwHhcNMjUxMjE3MTYwMjM1WhcNMjUxMjE4MTYwMjM1WjAzMTEwLwYDVQQD Eyg4MTE5YzE1YWEyNjlkZWE5ODhiZmUwY2FkNGI4Y2MzYWVmMGYxZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bRU+Z6RCsczVIxBzWdXe8tIRp06 pWa8vMN7rFq9qDulGB3CW3Y7SxcJJOOm3LnZfIGjnYe7UdXQfr+NFLRwkSfqVo2d Qthf21usHWfTEbtBP6gysfRSip5FQV0W7ORxCHaD6XU8EBFwHk+IxZPjzdskWVtU r5gBLgDOZ9IuKaxQhoJbRT6GxhnpjOLxWYQqWUGU0y/tKwq7CNyLQ5F4O6AA11Sa mwU7HLvBg/JpiHdy52R6GAC1roRAKZcVwKkxZbrI0aVDF5CEsZXS3DzgDNt6h46x PaCDJPmKZfrQV1VsnWa+wBy5edp2zdu8JVAjBSCBk+MjB6CbawmJ2+bSIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEZwVqiad6piL/gytS4zDrvDx8/MB8GA1UdIwQY MBaAFByvL6OOHRpNDgZgm/KXboHFCq0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEs4dm80NGRHazBPQm1DYjhwZHVnY1VLclFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lYjdkZDQtZmM4Zi00OTM3LThkYjAt YTY2NWRiMjJlZjcyLzEvSEs4dm80NGRHazBPQm1DYjhwZHVnY1VLclFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9lYjdkZDQtZmM4Zi00OTM3LThkYjAtYTY2NWRiMjJlZjcy LzEvSEs4dm80NGRHazBPQm1DYjhwZHVnY1VLclFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH72FfWJU CK4A4zxrJTccoIgIaGAAs1utjy3So6Vohs/N098n3cw8iH8tPg13tm//WcfLBrCs WxwpjTyLGzzyqRCOkO0g3Nr7AGu8S0qEbsXnL+oM793SU/g3eWL3HB25MXtbTvIf OBZwkj5Fk9m1NNOQRtTvxbeWxhxXzKFBIfdbiUl1Llkr6Baiw5HP3NTbRdVUHQam V96/QaqwTQ6DEUmtUBKOGpl1BOlrwvnnUBHIRAIUvPQbiyZW4Cm7BTbXOAU0uYWa C3ax3gKKho0ssrrWMIoUP2Q1ofnB+jJMmzL+QaqOY+eCSm9O3mS2Ss5PYPqYQNTr ixWZV1NZNrjNJw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:34:54 2025 by rpki-client