This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft File: HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json) Hash identifier: jRzOS/0tPO63cByQn62pOHx7stsxwIBkWIcKAR5Amtw= Subject key identifier: 7A:EC:F7:ED:51:54:5D:91:1B:8C:09:D1:99:53:1A:F9:27:90:BA:BF Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61 Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761 Certificate serial: 019AF12E0540E4395FCE2866C3EBC41BEBB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft Manifest number: 0FC3 Signing time: Sat 06 Dec 2025 01:01:56 +0000 Manifest this update: Sat 06 Dec 2025 01:01:56 +0000 Manifest next update: Sun 07 Dec 2025 01:01:56 +0000 Files and hashes: 1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: e8rwCSeknwbCFR97p8YxxKYcEpx8FfuT7YUZ+aTKG4A=) 2: QTjz4VGR-GTFrRo0tluoiHJIBec.roa (hash: cV6m/fRf828h8WvDtj1b9iihpVzZghXy5TyXPUcK2IY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:05:40:e4:39:5f:ce:28:66:c3:eb:c4:1b:eb:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761 Validity Not Before: Dec 6 01:01:56 2025 GMT Not After : Dec 7 01:01:56 2025 GMT Subject: CN=7aecf7ed51545d911b8c09d199531af92790babf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e5:48:d6:7d:01:59:56:96:69:f7:4e:ff:f6: 66:0d:5e:65:1f:3a:d3:e4:40:ed:b8:b2:cc:f6:f9: 93:22:3e:a7:7f:72:1e:bf:08:9d:ac:07:4d:bc:7c: ad:17:55:85:44:1f:7d:46:8f:c1:86:df:70:78:a2: 71:fb:12:88:ff:fc:42:08:cd:d5:34:c9:30:d5:1a: 7d:fd:d2:28:e1:20:1a:82:b7:1d:02:eb:a8:d2:5d: de:ed:e5:7e:d3:ca:ab:24:cf:f8:02:61:87:84:f8: 6e:6f:86:23:ca:fa:0a:06:06:ee:32:6d:20:ac:11: 82:88:76:2f:46:93:21:33:14:58:84:71:a5:7e:25: 17:b6:af:22:fe:4c:9d:e5:55:e3:2d:78:1f:c5:85: 07:db:96:c9:57:e2:9e:ab:62:ec:48:53:1b:59:34: cd:26:e2:55:48:7b:e5:8e:32:00:dd:0f:53:d2:38: d5:a5:1f:cf:d7:5c:44:3c:e1:26:ac:13:3a:c8:f3: 48:37:0a:e1:68:e3:a6:ef:f2:8c:4c:ae:88:48:77: 14:e7:8e:81:c4:63:31:c7:07:1d:09:f9:d2:36:5e: 23:df:c4:68:28:89:d6:8d:94:df:0a:36:31:cf:12: ac:d2:94:5e:6d:fa:91:be:db:6a:73:72:26:f9:30: ec:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EC:F7:ED:51:54:5D:91:1B:8C:09:D1:99:53:1A:F9:27:90:BA:BF X509v3 Authority Key Identifier: keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7f:0d:34:7d:99:ad:da:aa:79:2c:db:d2:c7:92:38:48:05: b3:18:78:c8:46:eb:02:22:d9:19:33:49:84:a2:fa:ba:0d:ff: 67:b1:d7:28:a5:b2:e8:76:29:ca:8e:0c:0d:4e:23:7c:36:db: 46:a2:9e:1e:83:01:5a:4f:c3:2d:c5:f0:11:b5:51:55:d4:21: 66:f6:cf:47:73:08:ce:50:73:11:70:c3:9e:a9:71:dd:91:4d: 85:f9:b7:fd:f6:c8:eb:3d:58:35:93:53:f8:e6:92:f2:c9:8b: 5d:61:60:80:73:5c:16:86:3f:52:b3:5d:09:d8:eb:0d:05:2e: 43:2d:47:7e:b9:a4:78:d6:06:be:48:d1:99:76:70:26:71:05: ff:0d:a3:de:2f:e7:59:69:cf:ea:89:83:d3:5a:30:6e:9f:0f: b9:8d:41:1d:14:4c:83:2c:30:6a:d5:11:f3:a3:e1:ce:ab:82: f0:ba:d2:7b:cf:c5:4b:85:d3:28:45:d5:0d:12:70:be:76:f4: 8c:43:57:b4:8c:be:3f:4c:82:17:dd:42:f0:32:af:de:3d:d0: 47:a5:27:4d:37:cd:11:83:4f:b0:6f:f3:4f:6f:ed:4f:86:eb: 77:67:be:ff:4a:09:ea:b4:33:41:34:07:c0:9a:92:0b:1a:98: c4:e4:26:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgVA5Dlfzihmw+vEG+u0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMTIwZDdlNDljOWYzYmYzMTNkOTY1MzFhZGZhN2VhYWU4 MDU3NjEwHhcNMjUxMjA2MDEwMTU2WhcNMjUxMjA3MDEwMTU2WjAzMTEwLwYDVQQD Eyg3YWVjZjdlZDUxNTQ1ZDkxMWI4YzA5ZDE5OTUzMWFmOTI3OTBiYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuVI1n0BWVaWafdO//ZmDV5lHzrT 5EDtuLLM9vmTIj6nf3IevwidrAdNvHytF1WFRB99Ro/Bht9weKJx+xKI//xCCM3V NMkw1Rp9/dIo4SAagrcdAuuo0l3e7eV+08qrJM/4AmGHhPhub4YjyvoKBgbuMm0g rBGCiHYvRpMhMxRYhHGlfiUXtq8i/kyd5VXjLXgfxYUH25bJV+Keq2LsSFMbWTTN JuJVSHvljjIA3Q9T0jjVpR/P11xEPOEmrBM6yPNINwrhaOOm7/KMTK6ISHcU546B xGMxxwcdCfnSNl4j38RoKInWjZTfCjYxzxKs0pRebfqRvttqc3Im+TDszwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrs9+1RVF2RG4wJ0ZlTGvknkLq/MB8GA1UdIwQY MBaAFB8SDX5JyfO/MT2WUxrfp+qugFdhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHhJTmZrbko4Nzh4UFpaVEd0LW42cTZBVjJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hYzVmZjktZTE5ZS00YWQwLThjNWEt YjI3Mjc3ODkwOWQ5LzEvSHhJTmZrbko4Nzh4UFpaVEd0LW42cTZBVjJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9hYzVmZjktZTE5ZS00YWQwLThjNWEtYjI3Mjc3ODkwOWQ5 LzEvSHhJTmZrbko4Nzh4UFpaVEd0LW42cTZBVjJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAin8NNH2Z rdqqeSzb0seSOEgFsxh4yEbrAiLZGTNJhKL6ug3/Z7HXKKWy6HYpyo4MDU4jfDbb RqKeHoMBWk/DLcXwEbVRVdQhZvbPR3MIzlBzEXDDnqlx3ZFNhfm3/fbI6z1YNZNT +OaS8smLXWFggHNcFoY/UrNdCdjrDQUuQy1HfrmkeNYGvkjRmXZwJnEF/w2j3i/n WWnP6omD01owbp8PuY1BHRRMgywwatUR86PhzquC8LrSe8/FS4XTKEXVDRJwvnb0 jENXtIy+P0yCF91C8DKv3j3QR6UnTTfNEYNPsG/zT2/tT4brd2e+/0oJ6rQzQTQH wJqSCxqYxOQmMA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:17 2025 by rpki-client