This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft File: HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft (raw, json) Hash identifier: SEqmBdTLK/e4Esoc5g+aw5S46PTT7ODBMx69S3SvnFM= Subject key identifier: DC:C5:1C:05:B1:15:BA:2D:9A:4F:93:04:01:DB:D0:54:5C:80:BE:BE Authority key identifier: 1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8 Certificate issuer: /CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8 Certificate serial: 019B34C561B90551F3B3A15676FEA36E50D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft Manifest number: 063A Signing time: Fri 19 Dec 2025 04:01:49 +0000 Manifest this update: Fri 19 Dec 2025 04:01:49 +0000 Manifest next update: Sat 20 Dec 2025 04:01:49 +0000 Files and hashes: 1: 6KBWfvurH0ryN0klNLmOfIfXS50.roa (hash: bQYxwK8PunB8us4iL4+kd3a48QuBW1TD23kpBG66hec=) 2: HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl (hash: Imoo4SY0EEI3gmRRvayF1bJKGMcnyO6k6jISU60To9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:61:b9:05:51:f3:b3:a1:56:76:fe:a3:6e:50:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f12478b1ca4cba030991bd8cb44d9f24f59c0b8 Validity Not Before: Dec 19 04:01:49 2025 GMT Not After : Dec 20 04:01:49 2025 GMT Subject: CN=dcc51c05b115ba2d9a4f930401dbd0545c80bebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:1f:0d:22:4c:ac:60:37:17:c5:bc:d2:f5: 40:b1:24:ff:cf:ef:da:a6:7f:9c:39:54:bd:3d:7f: 7a:ae:36:3b:d3:fd:08:7a:80:be:00:91:08:bf:bc: 40:44:4e:f3:20:d7:66:72:d9:e8:6a:bf:99:a2:40: 65:d5:c0:7c:7f:e7:43:0d:27:dc:9d:dc:51:a2:3c: ea:e9:fc:6f:e3:e1:2d:12:a6:d8:29:82:dd:65:72: 60:64:53:d7:ff:2b:9e:80:ae:49:63:7e:95:60:5a: 88:9c:68:92:90:e4:54:29:2f:d5:51:76:c2:c5:86: 71:e4:5c:32:2c:34:fc:0f:d6:99:78:2f:0b:ce:38: e7:16:ac:d5:c3:89:74:d7:14:86:cb:13:e0:c4:03: d3:8e:a1:3e:ff:93:2c:59:81:96:8e:a8:86:38:00: 1f:ba:91:f0:ff:5b:9c:6f:30:17:bd:cd:bc:9d:ca: 4f:61:b2:a9:8f:2e:4e:a4:ce:41:c2:6c:18:4e:a5: 03:f4:98:56:11:51:2a:0a:17:19:04:12:29:38:92: 43:9e:4c:03:3a:a5:8a:25:b5:05:08:18:bf:e9:8f: fe:d1:64:cf:cb:ca:46:fd:fb:67:29:f3:9b:ec:c6: be:e2:2b:d2:77:13:4c:be:c1:f3:ce:24:e4:04:18: 50:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C5:1C:05:B1:15:BA:2D:9A:4F:93:04:01:DB:D0:54:5C:80:BE:BE X509v3 Authority Key Identifier: keyid:1F:12:47:8B:1C:A4:CB:A0:30:99:1B:D8:CB:44:D9:F2:4F:59:C0:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxJHixyky6AwmRvYy0TZ8k9ZwLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f623b6-a198-405c-8326-09f1524a5246/1/HxJHixyky6AwmRvYy0TZ8k9ZwLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:97:12:45:4d:78:ee:b3:c5:72:51:83:7b:c3:d1:a4:6e:80: 8a:24:cc:c6:dc:65:3b:f0:86:1f:08:e9:fe:7b:43:11:32:45: 61:64:e8:f0:a1:68:70:bf:12:2c:5c:a6:65:de:9d:47:3c:0f: 3f:0f:ee:3f:54:4a:eb:8e:a2:a1:57:de:9a:c6:c2:d9:2e:24: b6:3e:bb:08:f2:30:98:61:ad:67:6b:d7:db:12:6f:66:a1:5e: 73:e8:24:3d:cb:2f:e5:e0:ec:44:47:00:21:10:bc:70:b2:f7: 21:a9:e0:e0:0c:da:8e:ce:44:e3:f6:77:af:b4:5e:71:3e:b1: d4:5f:2e:f3:58:a4:02:7e:80:05:d8:84:e1:94:5e:99:4e:ed: f5:a5:41:85:56:bd:f9:be:e5:1e:f0:2c:14:37:76:d2:18:94: 9c:5e:1a:15:50:78:b6:8a:a3:9a:33:5b:25:33:49:22:4e:bf: f9:8f:bb:46:ce:e5:bf:dc:2f:e6:de:fb:89:5d:3a:a5:44:88: bc:c2:54:8a:78:2d:23:40:fa:11:5c:73:1e:c4:fc:e6:06:f5: b7:5b:97:01:74:07:34:35:fa:10:b4:7b:c1:a7:79:c0:31:54: 51:4e:59:0f:83:d4:c8:fd:be:89:d3:d3:c9:81:b1:0b:b4:dd: f3:fe:ca:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xWG5BVHzs6FWdv6jblDQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMTI0NzhiMWNhNGNiYTAzMDk5MWJkOGNiNDRkOWYyNGY1 OWMwYjgwHhcNMjUxMjE5MDQwMTQ5WhcNMjUxMjIwMDQwMTQ5WjAzMTEwLwYDVQQD EyhkY2M1MWMwNWIxMTViYTJkOWE0ZjkzMDQwMWRiZDA1NDVjODBiZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBsfDSJMrGA3F8W80vVAsST/z+/a pn+cOVS9PX96rjY70/0IeoC+AJEIv7xARE7zINdmctnoar+ZokBl1cB8f+dDDSfc ndxRojzq6fxv4+EtEqbYKYLdZXJgZFPX/yuegK5JY36VYFqInGiSkORUKS/VUXbC xYZx5FwyLDT8D9aZeC8LzjjnFqzVw4l01xSGyxPgxAPTjqE+/5MsWYGWjqiGOAAf upHw/1ucbzAXvc28ncpPYbKpjy5OpM5BwmwYTqUD9JhWEVEqChcZBBIpOJJDnkwD OqWKJbUFCBi/6Y/+0WTPy8pG/ftnKfOb7Ma+4ivSdxNMvsHzziTkBBhQuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzFHAWxFbotmk+TBAHb0FRcgL6+MB8GA1UdIwQY MBaAFB8SR4scpMugMJkb2MtE2fJPWcC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYt MDlmMTUyNGE1MjQ2LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mNjIzYjYtYTE5OC00MDVjLTgzMjYtMDlmMTUyNGE1MjQ2 LzEvSHhKSGl4eWt5NkF3bVJ2WXkwVFo4azlad0xnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpcSRU14 7rPFclGDe8PRpG6AiiTMxtxlO/CGHwjp/ntDETJFYWTo8KFocL8SLFymZd6dRzwP Pw/uP1RK646ioVfemsbC2S4ktj67CPIwmGGtZ2vX2xJvZqFec+gkPcsv5eDsREcA IRC8cLL3Iang4Azajs5E4/Z3r7RecT6x1F8u81ikAn6ABdiE4ZRemU7t9aVBhVa9 +b7lHvAsFDd20hiUnF4aFVB4toqjmjNbJTNJIk6/+Y+7Rs7lv9wv5t77iV06pUSI vMJUingtI0D6EVxzHsT85gb1t1uXAXQHNDX6ELR7wad5wDFUUU5ZD4PUyP2+idPT yYGxC7Td8/7KsQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:26:24 2025 by rpki-client