This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft File: HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json) Hash identifier: LIC19UmKghFxaVliS7Wkc0BgqzdNb0CkRVvuiYGv1AM= Subject key identifier: 65:36:44:E3:11:2B:B8:BA:09:D0:E8:F6:5C:7B:0F:53:27:88:A2:D1 Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A Certificate issuer: /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a Certificate serial: 019AF31C62138011267A74D6B66D4AADE888 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft Manifest number: 055E Signing time: Sat 06 Dec 2025 10:01:54 +0000 Manifest this update: Sat 06 Dec 2025 10:01:54 +0000 Manifest next update: Sun 07 Dec 2025 10:01:54 +0000 Files and hashes: 1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: Jkt+/tUDS33JUvffH3lqty71oJbhpiHl/AW9SfK7WFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:62:13:80:11:26:7a:74:d6:b6:6d:4a:ad:e8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a Validity Not Before: Dec 6 10:01:54 2025 GMT Not After : Dec 7 10:01:54 2025 GMT Subject: CN=653644e3112bb8ba09d0e8f65c7b0f532788a2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b5:16:1a:58:14:c0:3a:aa:2f:63:55:f9:c3: b6:e6:b9:60:47:a3:5b:4a:bc:c7:0a:6d:f4:b6:99: 2c:e2:16:1c:47:d8:1b:20:f6:d3:3f:ec:d6:3b:32: cd:e5:c9:eb:d0:fe:64:7f:eb:fe:fa:68:e6:76:2f: 1e:48:80:a2:9f:c7:9f:4a:1c:b4:25:14:a5:b9:a8: fb:98:46:d8:f7:09:92:9e:3d:23:fb:7a:cb:bd:a8: 78:06:9f:06:74:2b:7a:b5:53:ca:f5:ea:6c:17:a8: d7:83:0d:b7:53:9f:e5:22:f9:c3:92:20:86:1e:25: 14:2a:8a:a2:83:c7:d4:40:8a:e1:d8:10:93:d1:a1: 6f:83:d3:9f:c1:11:2e:4d:9c:a4:71:7b:4c:29:a8: ac:67:8b:c1:b0:d5:3f:3c:56:7d:1f:4f:86:a4:76: e0:ea:2f:66:84:25:b4:8d:1f:90:42:7f:56:68:91: 39:fd:aa:a3:0b:c3:07:51:a5:57:20:00:65:08:d2: e4:08:11:48:f6:bf:6b:8e:92:c0:0e:5c:58:ee:de: 35:ef:2a:8b:d4:e3:df:ad:f2:2f:e1:e2:33:92:87: 9e:e8:15:cd:a9:50:63:21:41:49:3d:34:4d:b8:ec: 90:97:bd:23:bc:4f:4c:ab:e9:13:77:64:b3:fb:5a: d9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:36:44:E3:11:2B:B8:BA:09:D0:E8:F6:5C:7B:0F:53:27:88:A2:D1 X509v3 Authority Key Identifier: keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:50:19:e0:eb:44:e4:de:19:3f:75:7a:b2:95:75:b6:d2:a5: 80:8f:70:f8:a3:b8:1a:b5:27:ad:68:7a:a2:98:82:bb:75:cd: ed:19:60:b0:bb:f2:4e:a8:2a:47:15:05:24:66:94:6c:50:9b: b8:ea:13:80:3a:92:4a:de:51:df:64:f6:59:07:0a:4e:5f:ff: 5d:2b:e1:7b:2f:ed:14:33:5b:22:6a:f8:f5:0b:b4:dc:95:7d: ed:be:e1:32:ee:80:32:b4:75:cf:60:30:e4:27:c1:87:6c:4b: e3:74:c6:e1:5f:f7:fa:aa:92:49:2e:c4:dc:ff:5c:0f:1b:d7: 12:f0:cf:7c:eb:f2:e9:ba:88:63:cc:cb:2e:0c:75:25:e1:14: d3:04:1f:3e:73:fb:95:fc:1c:a0:64:38:dc:8e:a5:d0:6f:54: 5f:01:f5:24:91:d5:7c:ad:59:e8:74:23:18:21:19:c9:ad:b4: 4e:7e:e5:cf:5c:97:16:6f:a6:ea:89:33:b4:99:86:fa:08:c4: fd:0a:1c:5e:42:58:1f:b4:e8:7e:55:98:19:7b:f0:d7:95:46: 2e:46:ae:f8:ae:b8:a2:ee:73:96:49:48:91:22:fb:31:a2:f0: 82:cb:39:57:88:99:42:30:7d:39:24:43:c8:27:31:73:00:e9: 9c:38:fa:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGITgBEmenTWtm1KreiIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMWI0MWM5MjczZDVlNzYwNWRhMDAyY2Q2YzQwYmQ3MmU1 YWY0MWEwHhcNMjUxMjA2MTAwMTU0WhcNMjUxMjA3MTAwMTU0WjAzMTEwLwYDVQQD Eyg2NTM2NDRlMzExMmJiOGJhMDlkMGU4ZjY1YzdiMGY1MzI3ODhhMmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobUWGlgUwDqqL2NV+cO25rlgR6Nb SrzHCm30tpks4hYcR9gbIPbTP+zWOzLN5cnr0P5kf+v++mjmdi8eSICin8efShy0 JRSluaj7mEbY9wmSnj0j+3rLvah4Bp8GdCt6tVPK9epsF6jXgw23U5/lIvnDkiCG HiUUKoqig8fUQIrh2BCT0aFvg9OfwREuTZykcXtMKaisZ4vBsNU/PFZ9H0+GpHbg 6i9mhCW0jR+QQn9WaJE5/aqjC8MHUaVXIABlCNLkCBFI9r9rjpLADlxY7t417yqL 1OPfrfIv4eIzkoee6BXNqVBjIUFJPTRNuOyQl70jvE9Mq+kTd2Sz+1rZQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGU2ROMRK7i6CdDo9lx7D1MniKLRMB8GA1UdIwQY MBaAFB8bQcknPV52BdoALNbEC9cuWvQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHh0QnlTYzlYbllGMmdBczFzUUwxeTVhOUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iYzI3MjktM2EzMC00Yjk4LThjNDgt NTgxYTdmOTAyMzVhLzEvSHh0QnlTYzlYbllGMmdBczFzUUwxeTVhOUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iYzI3MjktM2EzMC00Yjk4LThjNDgtNTgxYTdmOTAyMzVh LzEvSHh0QnlTYzlYbllGMmdBczFzUUwxeTVhOUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFAZ4OtE 5N4ZP3V6spV1ttKlgI9w+KO4GrUnrWh6opiCu3XN7RlgsLvyTqgqRxUFJGaUbFCb uOoTgDqSSt5R32T2WQcKTl//XSvhey/tFDNbImr49Qu03JV97b7hMu6AMrR1z2Aw 5CfBh2xL43TG4V/3+qqSSS7E3P9cDxvXEvDPfOvy6bqIY8zLLgx1JeEU0wQfPnP7 lfwcoGQ43I6l0G9UXwH1JJHVfK1Z6HQjGCEZya20Tn7lz1yXFm+m6okztJmG+gjE /QocXkJYH7ToflWYGXvw15VGLkau+K64ou5zlklIkSL7MaLwgss5V4iZQjB9OSRD yCcxcwDpnDj61g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:34 2025 by rpki-client