This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft File: HzkK-DPX1CaQQsJJvPSWSFcglbY.mft (raw, json) Hash identifier: J1GiDnGBwrOmj5MTOulyjrDu833CeuJhHTIL1FXR/GQ= Subject key identifier: 28:B5:77:84:A2:5A:21:15:56:DB:38:E6:9C:8C:24:94:D9:E4:CD:28 Authority key identifier: 1F:39:0A:F8:33:D7:D4:26:90:42:C2:49:BC:F4:96:48:57:20:95:B6 Certificate issuer: /CN=1f390af833d7d4269042c249bcf49648572095b6 Certificate serial: 019AF50BBE04D4130145182A54FD33D6C761 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft Manifest number: 1202 Signing time: Sat 06 Dec 2025 19:02:58 +0000 Manifest this update: Sat 06 Dec 2025 19:02:58 +0000 Manifest next update: Sun 07 Dec 2025 19:02:58 +0000 Files and hashes: 1: HzkK-DPX1CaQQsJJvPSWSFcglbY.crl (hash: F9B6MEwbYuxXSnmB2IRvVzSFO7XS1nVO1tR18DJDLZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:be:04:d4:13:01:45:18:2a:54:fd:33:d6:c7:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f390af833d7d4269042c249bcf49648572095b6 Validity Not Before: Dec 6 19:02:58 2025 GMT Not After : Dec 7 19:02:58 2025 GMT Subject: CN=28b57784a25a211556db38e69c8c2494d9e4cd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:c2:09:b2:8f:e1:08:20:16:21:a3:4d:60: d6:63:54:a6:e7:80:35:9f:97:6b:52:6d:42:a3:04: 82:56:62:d6:12:a6:3f:ca:84:1a:70:70:d1:b4:69: 5f:e9:3e:04:f8:02:33:57:37:a8:83:ac:6a:60:4e: 86:d6:b8:41:55:7f:8a:62:31:52:81:cb:d1:2f:4d: 5e:79:b7:70:28:cf:db:8c:7f:67:d9:be:d1:31:8c: 02:2f:08:b8:c9:04:81:ac:c6:b3:43:b2:46:40:8a: 18:bf:13:c3:dd:f5:f5:cb:4c:3d:eb:ec:9d:24:93: a2:71:51:f2:6f:6d:6b:0c:95:ae:fa:26:85:5f:50: 87:f8:6f:c2:2c:f8:a3:96:09:52:59:8a:26:6b:f1: 1f:c4:03:83:17:5d:bc:05:1c:40:b3:0f:3d:c1:78: 4b:23:f7:bf:2d:52:40:d7:1f:18:90:9b:59:57:65: ad:bc:21:63:28:ee:1b:8d:82:9c:29:83:ac:fe:54: 35:4c:ff:ce:d1:b1:fb:39:56:83:eb:c6:09:1c:e5: 3c:8e:dd:f5:d0:a7:cb:80:05:7a:0b:39:2d:8f:1c: 7f:71:f8:39:c5:45:4e:dc:80:ad:7d:81:6a:e2:c1: fd:e2:43:59:fd:86:91:db:e8:7e:e0:1a:70:9e:1e: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B5:77:84:A2:5A:21:15:56:DB:38:E6:9C:8C:24:94:D9:E4:CD:28 X509v3 Authority Key Identifier: keyid:1F:39:0A:F8:33:D7:D4:26:90:42:C2:49:BC:F4:96:48:57:20:95:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:74:14:67:80:b3:cb:7c:4d:96:18:b1:69:7c:06:14:7f:fd: 1a:02:b3:49:8d:67:28:32:98:96:b1:0a:8e:53:bd:16:75:f2: 9b:9f:92:df:59:3d:4f:42:e1:ab:8a:5e:c2:5b:ea:e8:1b:b9: 25:87:92:28:da:7a:d4:19:29:fc:5c:39:c3:cd:6a:cc:a2:95: fc:2c:03:97:97:bc:46:2c:53:bb:6d:90:33:fb:1f:1a:41:d8: 06:3e:c3:97:0b:0d:47:c2:08:8d:2e:ce:93:97:33:8b:a7:c3: ad:b1:30:e3:ae:8c:7b:66:e8:8d:98:3f:c7:51:16:a7:b6:1b: ea:56:a5:11:80:f9:fe:34:9d:54:65:13:e1:c8:13:dc:ef:d9: 70:51:ae:e3:2b:be:c6:99:bf:c2:84:35:9c:87:ad:b5:cb:38: 31:2f:34:9e:48:e6:d1:48:e9:de:7b:42:b3:43:4c:fd:5e:8c: bf:23:fe:80:0e:e5:4a:f6:e7:56:bd:80:4e:80:f1:3e:f8:5f: 78:f2:6e:1a:57:e8:dd:92:e0:50:36:70:8a:17:d4:e5:31:3d: 6a:04:4f:7f:5b:b5:a4:9a:16:f3:20:ea:23:bb:87:d2:a0:53: 9f:77:66:37:ee:56:b5:f2:e4:3e:d9:5b:36:6c:6c:d2:2d:1d: ba:7a:6d:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C74E1BMBRRgqVP0z1sdhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMzkwYWY4MzNkN2Q0MjY5MDQyYzI0OWJjZjQ5NjQ4NTcy MDk1YjYwHhcNMjUxMjA2MTkwMjU4WhcNMjUxMjA3MTkwMjU4WjAzMTEwLwYDVQQD EygyOGI1Nzc4NGEyNWEyMTE1NTZkYjM4ZTY5YzhjMjQ5NGQ5ZTRjZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVPCCbKP4QggFiGjTWDWY1Sm54A1 n5drUm1CowSCVmLWEqY/yoQacHDRtGlf6T4E+AIzVzeog6xqYE6G1rhBVX+KYjFS gcvRL01eebdwKM/bjH9n2b7RMYwCLwi4yQSBrMazQ7JGQIoYvxPD3fX1y0w96+yd JJOicVHyb21rDJWu+iaFX1CH+G/CLPijlglSWYoma/EfxAODF128BRxAsw89wXhL I/e/LVJA1x8YkJtZV2WtvCFjKO4bjYKcKYOs/lQ1TP/O0bH7OVaD68YJHOU8jt31 0KfLgAV6Czktjxx/cfg5xUVO3ICtfYFq4sH94kNZ/YaR2+h+4Bpwnh4o3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCi1d4SiWiEVVts45pyMJJTZ5M0oMB8GA1UdIwQY MBaAFB85Cvgz19QmkELCSbz0lkhXIJW2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHprSy1EUFgxQ2FRUXNKSnZQU1dTRmNnbGJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iYTMwNDgtNjIyNC00YTk3LWJhMzEt ZDc1ODM3MmNmOGYwLzEvSHprSy1EUFgxQ2FRUXNKSnZQU1dTRmNnbGJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9iYTMwNDgtNjIyNC00YTk3LWJhMzEtZDc1ODM3MmNmOGYw LzEvSHprSy1EUFgxQ2FRUXNKSnZQU1dTRmNnbGJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXQUZ4Cz y3xNlhixaXwGFH/9GgKzSY1nKDKYlrEKjlO9FnXym5+S31k9T0Lhq4pewlvq6Bu5 JYeSKNp61Bkp/Fw5w81qzKKV/CwDl5e8RixTu22QM/sfGkHYBj7DlwsNR8IIjS7O k5czi6fDrbEw466Me2bojZg/x1EWp7Yb6lalEYD5/jSdVGUT4cgT3O/ZcFGu4yu+ xpm/woQ1nIettcs4MS80nkjm0Ujp3ntCs0NM/V6MvyP+gA7lSvbnVr2AToDxPvhf ePJuGlfo3ZLgUDZwihfU5TE9agRPf1u1pJoW8yDqI7uH0qBTn3dmN+5WtfLkPtlb Nmxs0i0dunptGw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:22 2025 by rpki-client