This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft File: HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json) Hash identifier: eFalk4Ax0q1Y5tsgnaUZ0GqUOO/ntlwRyvAy4Cb+0e4= Subject key identifier: 3A:8A:5A:6B:B0:53:52:17:E6:B0:33:7B:B5:EB:1D:94:DE:58:B6:D5 Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65 Certificate issuer: /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465 Certificate serial: 019B31C41C717835DB27659201468C44F5FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 14:01:34 +0000 Manifest this update: Thu 18 Dec 2025 14:01:34 +0000 Manifest next update: Fri 19 Dec 2025 14:01:34 +0000 Files and hashes: 1: 7wJbNCUcwtFlKnAHPgTuv8Sn0i4.roa (hash: Yg17vxRzYWiVt6fOmSwVpKWZGt89EQyeG3U2CWqSktI=) 2: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: 5D8GedT7wiRYmfaTCM7VD4Vpa2hEDTpC0ZrCT3UNyRE=) 3: I1sRKyvYdSWFdpxY3K3hgfpLh8c.roa (hash: EW9DVDBND5j7A8L4kBfb9CEdZ+sujph27uho+pUx/m0=) 4: IWHxNStdjrSROqwuZe7sT7LT4Nk.roa (hash: S/bzV1Gz+VxqpXjM3Pl83zzxF5vyuBSuFK0LxiEoibw=) 5: yFf2Zz0VjYagA0shVIplpiusWp4.roa (hash: Sonq+rZh7+zVQsS+x3AiHiTrq12H+Dw70vUAQVtyO0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c4:1c:71:78:35:db:27:65:92:01:46:8c:44:f5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465 Validity Not Before: Dec 18 14:01:34 2025 GMT Not After : Dec 19 14:01:34 2025 GMT Subject: CN=3a8a5a6bb0535217e6b0337bb5eb1d94de58b6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c2:49:5b:df:5d:9d:7c:6e:96:1e:73:76:e7: fa:23:cf:c3:2e:d7:9e:f7:7b:5a:37:c1:9a:b9:e9: 50:c9:bd:8b:87:fc:6f:f0:b5:e4:9b:88:48:ea:c0: b4:e8:fb:50:54:3d:8d:10:f1:2e:c8:c5:97:dd:74: 9b:48:c6:b6:5e:bf:36:1c:2d:e5:03:f8:4b:30:bf: 67:4e:44:66:87:2b:eb:09:eb:cb:13:18:06:7d:9a: f2:4a:e2:2b:ae:69:12:59:0b:6b:f0:79:9f:0d:1b: 1e:f9:e9:5a:45:3a:46:50:f9:a0:95:ac:ee:0b:8d: 40:a4:58:6f:ae:39:0b:af:a2:69:e9:0c:1e:1e:d8: c5:fd:35:d5:17:63:67:32:b7:bd:45:5d:e3:44:70: 28:48:fe:74:96:61:29:48:9c:53:e6:8b:7f:67:94: f0:99:09:ee:78:af:81:2d:39:5a:be:ed:a5:ee:66: 99:df:26:d9:3f:ee:79:18:cf:47:1d:e8:cd:97:8e: 04:63:8f:ab:0e:87:27:c7:aa:82:ca:55:85:26:47: 0e:06:5d:8e:31:cc:55:00:b5:93:9e:a9:8e:2e:52: 95:78:af:bc:b1:64:ca:f5:a8:83:40:ba:c0:7f:07: d5:d6:6e:70:57:38:30:31:16:09:00:0d:42:c2:32: b0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8A:5A:6B:B0:53:52:17:E6:B0:33:7B:B5:EB:1D:94:DE:58:B6:D5 X509v3 Authority Key Identifier: keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:94:99:18:3b:31:02:cf:0f:c7:86:9f:13:4b:da:be:f4:ec: 46:dc:19:34:d2:8b:b0:b4:fc:65:62:8a:90:f0:e0:dd:40:ad: a0:f6:89:ec:36:2b:2e:65:f4:b7:ce:81:f8:99:98:ed:09:08: 3b:6f:99:f5:60:92:68:a4:dc:41:fa:9e:23:e8:67:16:6f:7c: ba:3e:2f:ec:ed:8c:73:6e:4b:32:65:b6:90:04:7e:c7:c9:84: 21:77:41:0a:80:3d:85:97:dd:eb:97:58:0a:5a:28:b0:ec:46: ff:1d:97:74:51:f0:9a:cb:27:c2:f9:45:b6:88:0d:53:de:11: cb:27:17:54:8e:38:66:79:a3:cc:cd:d7:3c:68:7d:c9:44:9c: 20:9f:08:fc:41:a8:be:73:ab:3d:9d:c1:ad:ba:03:d2:cc:25: 23:2e:b1:cd:5e:6a:59:5d:13:d4:4b:cc:05:30:5a:9d:d2:05: 00:93:7f:6c:99:f7:09:e2:f6:76:15:97:d2:16:9f:4a:d3:e8: 88:78:45:3e:45:cd:20:33:ad:4b:73:de:88:69:87:87:36:17: 2e:bc:76:4e:7b:03:bf:ff:28:05:51:65:aa:38:6a:42:ae:21: 40:ed:8b:82:fb:fb:93:81:01:91:0a:c9:ff:21:65:af:01:2b: 6b:be:1e:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxxBxxeDXbJ2WSAUaMRPX+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNGEyMDIwYjgyZDAyOTRlOTBhMmQ2YjJjMGYyOGQxMTcz YjY0NjUwHhcNMjUxMjE4MTQwMTM0WhcNMjUxMjE5MTQwMTM0WjAzMTEwLwYDVQQD EygzYThhNWE2YmIwNTM1MjE3ZTZiMDMzN2JiNWViMWQ5NGRlNThiNmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48JJW99dnXxulh5zduf6I8/DLtee 93taN8GauelQyb2Lh/xv8LXkm4hI6sC06PtQVD2NEPEuyMWX3XSbSMa2Xr82HC3l A/hLML9nTkRmhyvrCevLExgGfZrySuIrrmkSWQtr8HmfDRse+elaRTpGUPmglazu C41ApFhvrjkLr6Jp6QweHtjF/TXVF2NnMre9RV3jRHAoSP50lmEpSJxT5ot/Z5Tw mQnueK+BLTlavu2l7maZ3ybZP+55GM9HHejNl44EY4+rDocnx6qCylWFJkcOBl2O McxVALWTnqmOLlKVeK+8sWTK9aiDQLrAfwfV1m5wVzgwMRYJAA1CwjKwswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqKWmuwU1IX5rAze7XrHZTeWLbVMB8GA1UdIwQY MBaAFB5KICC4LQKU6QotaywPKNEXO2RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80YzQ4YmItMzY2Yy00MWY1LTliMmQt NTMwNDQwYzRmYTI5LzEvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy80YzQ4YmItMzY2Yy00MWY1LTliMmQtNTMwNDQwYzRmYTI5 LzEvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZSZGDsx As8Px4afE0vavvTsRtwZNNKLsLT8ZWKKkPDg3UCtoPaJ7DYrLmX0t86B+JmY7QkI O2+Z9WCSaKTcQfqeI+hnFm98uj4v7O2Mc25LMmW2kAR+x8mEIXdBCoA9hZfd65dY CloosOxG/x2XdFHwmssnwvlFtogNU94RyycXVI44ZnmjzM3XPGh9yUScIJ8I/EGo vnOrPZ3BrboD0swlIy6xzV5qWV0T1EvMBTBandIFAJN/bJn3CeL2dhWX0hafStPo iHhFPkXNIDOtS3PeiGmHhzYXLrx2TnsDv/8oBVFlqjhqQq4hQO2Lgvv7k4EBkQrJ /yFlrwEra74epA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:04:35 2025 by rpki-client