This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft File: HkogILgtApTpCi1rLA8o0Rc7ZGU.mft (raw, json) Hash identifier: m/WNfSRkGiT8Sexx4a74OYAWSLOIRHPzS8kp6mKl7Os= Subject key identifier: FF:88:D4:15:33:EB:E0:F6:76:D2:48:E9:8D:DA:3B:2A:04:9D:5B:42 Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65 Certificate issuer: /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465 Certificate serial: 019AF3F7D9A2DC9B596839F901BB57FE86B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 14:01:37 +0000 Manifest this update: Sat 06 Dec 2025 14:01:37 +0000 Manifest next update: Sun 07 Dec 2025 14:01:37 +0000 Files and hashes: 1: 7wJbNCUcwtFlKnAHPgTuv8Sn0i4.roa (hash: Yg17vxRzYWiVt6fOmSwVpKWZGt89EQyeG3U2CWqSktI=) 2: HkogILgtApTpCi1rLA8o0Rc7ZGU.crl (hash: B7bQzqTXfH75IgzG0Wy9wnXiQP8M7t2H4ygq50upc74=) 3: I1sRKyvYdSWFdpxY3K3hgfpLh8c.roa (hash: EW9DVDBND5j7A8L4kBfb9CEdZ+sujph27uho+pUx/m0=) 4: IWHxNStdjrSROqwuZe7sT7LT4Nk.roa (hash: S/bzV1Gz+VxqpXjM3Pl83zzxF5vyuBSuFK0LxiEoibw=) 5: yFf2Zz0VjYagA0shVIplpiusWp4.roa (hash: Sonq+rZh7+zVQsS+x3AiHiTrq12H+Dw70vUAQVtyO0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:d9:a2:dc:9b:59:68:39:f9:01:bb:57:fe:86:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465 Validity Not Before: Dec 6 14:01:37 2025 GMT Not After : Dec 7 14:01:37 2025 GMT Subject: CN=ff88d41533ebe0f676d248e98dda3b2a049d5b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:87:b8:42:cd:aa:f4:9d:33:11:93:9b:ea:f7: 9c:ad:15:cb:0d:19:95:cc:81:a4:fc:3a:bc:62:09: e5:1b:7b:23:02:94:b9:16:c6:d3:d6:2d:b8:43:8f: fd:8e:44:5a:6d:bf:e5:b0:68:21:af:4e:b0:bd:76: 18:b9:4b:49:e3:c0:3d:bb:36:9c:50:9f:94:f9:ac: 08:af:53:66:a5:4b:f6:eb:81:f5:9a:fa:1b:2d:14: 8d:c8:43:30:e9:94:58:94:d3:69:8a:d1:08:e3:d6: 04:95:6e:a2:7c:7c:9c:db:07:e1:b1:e3:e2:da:31: e8:2e:38:8d:cf:82:71:26:2c:12:00:4f:c3:92:69: 9f:21:76:9e:e3:79:d8:c4:e9:27:7c:1c:69:15:34: 4f:53:49:fd:e9:02:b3:de:f3:ed:83:2f:91:06:6a: 59:50:16:f2:84:98:46:06:f4:68:8b:1b:ef:59:e0: 97:f3:4c:c0:11:53:df:c0:98:2e:81:83:61:ed:4e: 93:97:07:86:96:6a:e4:f9:89:89:0c:3b:6b:5e:f6: 42:a5:be:85:b9:b6:51:1b:c0:6a:6e:36:ca:37:38: bc:85:c3:a8:da:d8:ee:90:62:ad:c2:62:34:c6:ef: f6:ac:5d:a7:83:c0:3d:8b:99:6a:7c:9e:6d:43:13: 37:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:88:D4:15:33:EB:E0:F6:76:D2:48:E9:8D:DA:3B:2A:04:9D:5B:42 X509v3 Authority Key Identifier: keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ae:4e:ae:50:aa:32:ae:70:a7:33:ff:51:c2:37:f9:c2:6f: 67:3a:7d:eb:ed:7f:49:72:be:0a:19:51:33:69:c0:be:da:49: 8e:ad:00:f3:1b:7f:fb:e4:85:f1:de:04:da:f3:b1:12:61:3e: 30:94:3e:f0:15:5c:db:f1:a2:a9:23:4c:3e:bd:c1:3d:ac:b0: bc:8c:63:1e:50:a9:e0:3d:1b:cd:9b:60:cb:83:58:ae:d8:f2: d7:74:ae:d5:f1:a0:4a:3d:40:b8:71:4e:4a:b2:d6:f7:6e:ae: 1e:50:8e:c7:1f:a5:a5:62:37:ad:24:8d:25:16:81:67:0d:f0: fc:6a:97:70:1a:d6:0f:32:78:b1:fe:b1:5d:99:c6:26:ac:58: 0d:c0:2e:6c:4a:54:f0:53:b8:21:20:3c:78:19:6b:65:d4:3e: 2a:55:a7:00:69:56:21:d3:80:cc:8e:de:d5:f5:8f:ba:6f:8e: f7:91:ad:ca:a7:4e:3a:10:0d:7d:df:b1:71:18:e0:d0:36:c6: 84:45:95:fc:81:55:6d:60:6b:86:85:01:7b:e3:71:3b:1b:25: e6:d9:ea:8d:9c:4f:bc:25:c6:44:1e:95:4f:5d:6f:23:02:67: dd:5e:a6:2a:94:08:ae:60:b8:9c:d7:1b:01:37:44:a3:47:de: 0e:24:c1:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99mi3JtZaDn5AbtX/oa5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNGEyMDIwYjgyZDAyOTRlOTBhMmQ2YjJjMGYyOGQxMTcz YjY0NjUwHhcNMjUxMjA2MTQwMTM3WhcNMjUxMjA3MTQwMTM3WjAzMTEwLwYDVQQD EyhmZjg4ZDQxNTMzZWJlMGY2NzZkMjQ4ZTk4ZGRhM2IyYTA0OWQ1YjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oe4Qs2q9J0zEZOb6vecrRXLDRmV zIGk/Dq8YgnlG3sjApS5FsbT1i24Q4/9jkRabb/lsGghr06wvXYYuUtJ48A9uzac UJ+U+awIr1NmpUv264H1mvobLRSNyEMw6ZRYlNNpitEI49YElW6ifHyc2wfhsePi 2jHoLjiNz4JxJiwSAE/DkmmfIXae43nYxOknfBxpFTRPU0n96QKz3vPtgy+RBmpZ UBbyhJhGBvRoixvvWeCX80zAEVPfwJgugYNh7U6TlweGlmrk+YmJDDtrXvZCpb6F ubZRG8BqbjbKNzi8hcOo2tjukGKtwmI0xu/2rF2ng8A9i5lqfJ5tQxM3AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+I1BUz6+D2dtJI6Y3aOyoEnVtCMB8GA1UdIwQY MBaAFB5KICC4LQKU6QotaywPKNEXO2RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80YzQ4YmItMzY2Yy00MWY1LTliMmQt NTMwNDQwYzRmYTI5LzEvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy80YzQ4YmItMzY2Yy00MWY1LTliMmQtNTMwNDQwYzRmYTI5 LzEvSGtvZ0lMZ3RBcFRwQ2kxckxBOG8wUmM3WkdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqa5OrlCq Mq5wpzP/UcI3+cJvZzp96+1/SXK+ChlRM2nAvtpJjq0A8xt/++SF8d4E2vOxEmE+ MJQ+8BVc2/GiqSNMPr3BPaywvIxjHlCp4D0bzZtgy4NYrtjy13Su1fGgSj1AuHFO SrLW926uHlCOxx+lpWI3rSSNJRaBZw3w/GqXcBrWDzJ4sf6xXZnGJqxYDcAubEpU 8FO4ISA8eBlrZdQ+KlWnAGlWIdOAzI7e1fWPum+O95GtyqdOOhANfd+xcRjg0DbG hEWV/IFVbWBrhoUBe+NxOxsl5tnqjZxPvCXGRB6VT11vIwJn3V6mKpQIrmC4nNcb ATdEo0feDiTB9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 16:58:12 2025 by rpki-client