This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft File: HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft (raw, json) Hash identifier: GzHETFI6Z4QnSLql2TxcECgnI0NHQQ/B0wZ+b6qv2UE= Subject key identifier: 65:92:99:0C:8E:06:D0:5D:16:DA:F8:60:D3:38:D5:DD:CA:B3:48:EB Authority key identifier: 1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8 Certificate issuer: /CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8 Certificate serial: 019AF31CE2E3E9E259DD9CE26C105FA09060 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft Manifest number: 0618 Signing time: Sat 06 Dec 2025 10:02:27 +0000 Manifest this update: Sat 06 Dec 2025 10:02:27 +0000 Manifest next update: Sun 07 Dec 2025 10:02:27 +0000 Files and hashes: 1: 6KBWfvurH0ryN0klNLmOfIfXS50.roa (hash: bQYxwK8PunB8us4iL4+kd3a48QuBW1TD23kpBG66hec=) 2: HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl (hash: O3IDGKBRYfNG61q2+/Wvvqeb4P6opQlOJLhtesDGBqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e2:e3:e9:e2:59:dd:9c:e2:6c:10:5f:a0:90:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8 Validity Not Before: Dec 6 10:02:27 2025 GMT Not After : Dec 7 10:02:27 2025 GMT Subject: CN=6592990c8e06d05d16daf860d338d5ddcab348eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:a7:8b:9b:45:60:dc:d8:0f:40:50:cb:84: ba:b6:a1:4c:58:05:73:a3:22:5c:4f:db:5a:97:4c: 15:ac:2a:a2:f5:73:25:7e:c3:5c:54:2f:91:67:2d: 02:19:3c:04:1a:5c:28:63:5b:e1:45:2a:98:bd:12: e2:3b:d4:3a:2d:29:50:17:a3:39:c5:73:6c:6e:a9: fd:7a:8a:c2:a4:32:14:33:45:9e:c3:a7:36:78:e0: df:d5:83:20:9c:05:ba:55:a0:67:f6:d8:dd:85:2a: 88:6f:16:20:e9:a2:14:ff:de:d9:2a:da:2d:dd:c4: 69:af:81:9e:5e:c8:a4:ce:9c:f0:23:ef:f0:83:a5: ab:39:98:ad:53:4f:fe:65:c8:c8:75:d6:23:10:69: d3:d8:65:03:28:e5:84:5f:1e:4a:c6:52:51:79:22: 8e:00:a7:f6:18:08:5b:32:d8:c0:2c:f4:d1:3e:b7: 97:4e:be:22:12:4e:3a:03:33:61:c2:0e:2c:09:99: 55:d7:92:66:4f:ab:83:2a:20:84:58:d6:dc:af:66: 0e:8e:78:77:5c:53:cd:ec:8c:6c:51:18:6b:94:76: d0:26:4e:19:5b:eb:7d:18:c2:e2:56:d2:4e:02:36: e4:8c:4d:04:c7:c9:3c:a8:3b:1d:fb:5b:2d:fc:ee: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:92:99:0C:8E:06:D0:5D:16:DA:F8:60:D3:38:D5:DD:CA:B3:48:EB X509v3 Authority Key Identifier: keyid:1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:4b:3a:e7:c9:5e:db:6a:0d:2d:5d:f1:68:c1:0c:27:d6:c8: 89:40:00:58:27:4c:ca:87:a9:35:8a:37:d8:01:46:52:59:d8: d1:4d:17:da:c8:28:50:71:66:d6:45:69:9c:ad:83:87:0b:7b: dc:2e:cf:f8:15:c2:c1:e3:91:f8:4e:ad:3c:92:e5:fe:70:5e: 8d:54:64:29:1a:7a:ce:8e:92:a4:d6:2d:da:ca:ca:b3:79:3d: 15:df:bf:66:2c:7f:77:82:de:92:39:73:2c:0e:19:1e:f1:9d: 66:46:ac:76:23:8e:d1:aa:48:8f:78:d6:c7:2c:a7:e9:e4:03: 9a:ff:c2:90:53:6d:46:3b:01:42:65:b1:9f:0e:54:16:a3:b8: 2b:f1:a2:16:05:4c:52:31:bf:95:88:35:cf:6b:41:9f:cd:ac: 68:03:26:16:c4:b6:0e:3f:0a:97:dc:c0:d3:16:1c:7f:e0:58: 11:a3:90:75:9f:ed:fb:80:e4:9a:cb:81:47:24:d7:fe:4f:54: 81:4a:a0:5d:ae:ea:e4:b0:9d:c9:64:1b:b2:65:22:1e:d2:46: 5e:05:ca:b7:ba:2e:71:9c:04:e7:3a:f0:d6:80:5c:d5:55:20: b6:b3:f8:1c:43:ca:4c:69:67:8e:06:57:e6:67:c3:17:93:cf: b4:99:fd:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOLj6eJZ3ZzibBBfoJBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMTI0NzhiMWNhNGNiYTAzMDk5MWJkOGNiNDRkOWYyNGY1 OWMwYjgwHhcNMjUxMjA2MTAwMjI3WhcNMjUxMjA3MTAwMjI3WjAzMTEwLwYDVQQD Eyg2NTkyOTkwYzhlMDZkMDVkMTZkYWY4NjBkMzM4ZDVkZGNhYjM0OGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXqni5tFYNzYD0BQy4S6tqFMWAVz oyJcT9tal0wVrCqi9XMlfsNcVC+RZy0CGTwEGlwoY1vhRSqYvRLiO9Q6LSlQF6M5 xXNsbqn9eorCpDIUM0Wew6c2eODf1YMgnAW6VaBn9tjdhSqIbxYg6aIU/97ZKtot 3cRpr4GeXsikzpzwI+/wg6WrOZitU0/+ZcjIddYjEGnT2GUDKOWEXx5KxlJReSKO AKf2GAhbMtjALPTRPreXTr4iEk46AzNhwg4sCZlV15JmT6uDKiCEWNbcr2YOjnh3 XFPN7IxsURhrlHbQJk4ZW+t9GMLiVtJOAjbkjE0Ex8k8qDsd+1st/O7daQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWSmQyOBtBdFtr4YNM41d3Ks0jrMB8GA1UdIwQY MBaAFB8SR4scpMugMJkb2MtE2fJPWcC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYt MDlmMTUyNGE1MjQ2LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYtMDlmMTUyNGE1MjQ2 LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0s658le 22oNLV3xaMEMJ9bIiUAAWCdMyoepNYo32AFGUlnY0U0X2sgoUHFm1kVpnK2Dhwt7 3C7P+BXCweOR+E6tPJLl/nBejVRkKRp6zo6SpNYt2srKs3k9Fd+/Zix/d4Lekjlz LA4ZHvGdZkasdiOO0apIj3jWxyyn6eQDmv/CkFNtRjsBQmWxnw5UFqO4K/GiFgVM UjG/lYg1z2tBn82saAMmFsS2Dj8Kl9zA0xYcf+BYEaOQdZ/t+4DkmsuBRyTX/k9U gUqgXa7q5LCdyWQbsmUiHtJGXgXKt7oucZwE5zrw1oBc1VUgtrP4HEPKTGlnjgZX 5mfDF5PPtJn9Mg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:00:14 2025 by rpki-client