This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json) Hash identifier: aS5+5jOLDqq3sglsDjxw40nl6jggJrAYo4xHJX3YdnM= Subject key identifier: E8:4F:B3:2A:D3:C0:A5:D8:EF:1F:12:74:D1:53:3B:2E:9C:18:CA:9C Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13 Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013 Certificate serial: 019AF19B0CFD5AA29E467F1434A09C96601D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft Manifest number: 0426 Signing time: Sat 06 Dec 2025 03:01:01 +0000 Manifest this update: Sat 06 Dec 2025 03:01:01 +0000 Manifest next update: Sun 07 Dec 2025 03:01:01 +0000 Files and hashes: 1: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: 2zgRlckWRABgD1TisObDJPMeIHfg0Dd4s0MUjP/d1lc=) 2: PFjB0suzwepgpRQg4ijZdi1aKI8.roa (hash: YjFJJun3pz3vvGFXjSMeL596davTUmL7ryORKEoBTmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0c:fd:5a:a2:9e:46:7f:14:34:a0:9c:96:60:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013 Validity Not Before: Dec 6 03:01:01 2025 GMT Not After : Dec 7 03:01:01 2025 GMT Subject: CN=e84fb32ad3c0a5d8ef1f1274d1533b2e9c18ca9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b1:2c:df:54:4e:7c:f2:f3:0d:3b:90:78:c3: a9:69:16:64:6c:09:55:07:2a:6f:5e:6c:10:47:10: 3f:76:a2:27:78:55:5e:26:d4:cd:3b:4b:6c:f4:a4: 76:e2:c2:3e:e9:1f:52:9e:3b:35:7a:8d:0f:90:b2: 39:39:7f:d5:a5:e4:80:41:f3:72:31:ae:93:14:a6: 4c:54:3d:e2:b6:83:7d:2f:8e:fe:c0:bd:11:74:ac: 7a:6e:ea:63:a6:2f:35:11:73:ca:d0:3b:da:cd:6c: c5:61:77:c1:bc:0c:aa:eb:d7:bb:73:f1:a5:5f:43: 7f:d3:de:49:e1:f5:7a:62:f5:99:55:d5:a7:85:65: 21:1c:a4:75:6e:4c:e6:bc:48:92:0c:48:a5:8f:7c: d8:01:33:22:13:df:ab:4a:be:d6:23:21:0a:73:9b: ae:e0:d5:2b:c7:dc:f9:f2:2a:99:97:d9:7e:ba:46: 96:25:27:2b:5a:f9:85:0c:03:cc:ed:f1:71:d9:1f: 78:56:da:a7:13:f4:30:bb:e7:f9:b1:86:c7:f9:e4: ed:b4:9e:0f:12:9a:0b:33:6f:a2:4f:85:62:76:95: f3:59:32:d5:55:3c:8a:c7:cb:73:fb:80:d5:17:67: e0:75:75:47:37:f0:1a:c5:4b:fc:08:cf:55:5e:18: f7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4F:B3:2A:D3:C0:A5:D8:EF:1F:12:74:D1:53:3B:2E:9C:18:CA:9C X509v3 Authority Key Identifier: keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:14:96:c2:ef:8c:44:50:09:49:16:35:ea:a2:2f:1e:31:29: bf:ea:62:32:45:9e:91:96:cd:c4:7c:07:22:6b:b4:01:96:19: 86:e7:4a:36:d9:67:18:89:f7:38:ed:be:fb:fc:c1:dd:88:8c: 8d:38:f7:45:65:66:6e:af:6a:a7:20:cf:f1:71:2e:f0:c0:ee: a3:7e:9e:66:6a:c5:78:be:c4:6e:6e:5e:15:f7:56:eb:aa:63: 47:be:5e:22:2c:d3:92:b1:8c:db:2b:e2:52:23:9f:b8:a8:68: 1b:30:aa:b9:1b:bd:03:29:21:54:7d:59:90:59:d5:87:5f:e4: 87:a0:7a:ab:8d:b5:fd:34:9b:73:9b:65:cf:10:ea:77:29:e4: 79:0c:fb:c9:7f:5d:23:1b:93:ee:46:b3:96:9f:21:b8:31:c1: f8:da:7a:81:9b:ae:5f:b9:8a:13:b6:b6:59:66:55:41:7e:3e: c4:03:46:74:96:d0:70:e0:29:ea:d5:c5:e2:45:7e:2a:4f:0d: 14:46:19:11:c5:f0:02:21:9c:47:f1:c3:9e:62:05:bc:c8:27: 4e:9b:fe:4e:b3:16:c9:96:69:76:d2:10:f1:c9:eb:19:c3:8e: 72:ae:9b:eb:02:f8:06:ee:58:e6:65:45:b3:dd:27:54:e7:4d: 41:26:1d:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwz9WqKeRn8UNKCclmAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlODI4ZGU3MWRkZDc4MDQ1NzMxMjhkMjZlZTQ1YzAzOTAx YzgwMTMwHhcNMjUxMjA2MDMwMTAxWhcNMjUxMjA3MDMwMTAxWjAzMTEwLwYDVQQD EyhlODRmYjMyYWQzYzBhNWQ4ZWYxZjEyNzRkMTUzM2IyZTljMThjYTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rEs31ROfPLzDTuQeMOpaRZkbAlV BypvXmwQRxA/dqIneFVeJtTNO0ts9KR24sI+6R9Snjs1eo0PkLI5OX/VpeSAQfNy Ma6TFKZMVD3itoN9L47+wL0RdKx6bupjpi81EXPK0DvazWzFYXfBvAyq69e7c/Gl X0N/095J4fV6YvWZVdWnhWUhHKR1bkzmvEiSDEilj3zYATMiE9+rSr7WIyEKc5uu 4NUrx9z58iqZl9l+ukaWJScrWvmFDAPM7fFx2R94VtqnE/Qwu+f5sYbH+eTttJ4P EpoLM2+iT4VidpXzWTLVVTyKx8tz+4DVF2fgdXVHN/AaxUv8CM9VXhj3swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhPsyrTwKXY7x8SdNFTOy6cGMqcMB8GA1UdIwQY MBaAFB6Cjecd3XgEVzEo0m7kXAOQHIATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2Mjct NzBjOGM3MGUzMmIwLzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2MjctNzBjOGM3MGUzMmIw LzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhSWwu+M RFAJSRY16qIvHjEpv+piMkWekZbNxHwHImu0AZYZhudKNtlnGIn3OO2++/zB3YiM jTj3RWVmbq9qpyDP8XEu8MDuo36eZmrFeL7Ebm5eFfdW66pjR75eIizTkrGM2yvi UiOfuKhoGzCquRu9AykhVH1ZkFnVh1/kh6B6q421/TSbc5tlzxDqdynkeQz7yX9d IxuT7kazlp8huDHB+Np6gZuuX7mKE7a2WWZVQX4+xANGdJbQcOAp6tXF4kV+Kk8N FEYZEcXwAiGcR/HDnmIFvMgnTpv+TrMWyZZpdtIQ8cnrGcOOcq6b6wL4Bu5Y5mVF s90nVOdNQSYd1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:49 2025 by rpki-client