This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json) Hash identifier: XD/g7eCnkYMaupxksU3WBcE2Ugfjirs+VxGawDrzEXs= Subject key identifier: 0E:50:08:9A:CB:18:A0:B5:5E:E4:73:82:0F:4E:FA:9B:CD:F7:D7:18 Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56 Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156 Certificate serial: 019AF19B3506D15FF220A9A0C87F0278251C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft Manifest number: 032E Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: E-uqinJu4BsX4hD4fJ27XeSRRfM.roa (hash: TEk3E/eVLOZFNokaZvtcliN6SvQ4jr1qswSoyGLZrLI=) 2: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: 5hlOyhfgu5/1Qea/3iYgpK4+hUCau96y2pbNRk4U1uY=) 3: jSWGRDdKL-HTUETX8py0S4BUPnw.roa (hash: duy/YDBoOJtBJ6yTq6z5J9MLnvFlUwnH0+KkHirH4Ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:35:06:d1:5f:f2:20:a9:a0:c8:7f:02:78:25:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156 Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=0e50089acb18a0b55ee473820f4efa9bcdf7d718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:6d:25:75:fc:ce:02:eb:73:f1:7b:2f:a7: 57:41:ab:f5:cf:74:b0:03:40:1d:67:b9:c7:84:b5: 18:31:1e:4a:b9:92:7a:b4:41:23:b1:4f:88:5c:67: b2:6c:69:a4:ce:d3:37:46:39:a8:46:95:39:7b:a1: c9:63:ca:1d:ea:93:df:e4:4e:a5:24:c5:fe:05:3f: f1:a1:95:76:0f:19:0e:00:59:0c:1f:02:29:3f:d5: c7:2a:c8:99:ac:31:82:36:4b:c8:4e:bc:b9:3d:77: 75:5c:1e:27:a4:ca:13:44:13:2d:f2:4a:51:02:e1: 59:f3:4b:e0:f2:bb:b4:7c:49:0b:e0:a6:ec:0a:af: 70:aa:37:e0:ca:72:a0:e2:27:ba:e5:2a:cd:db:e1: b6:41:3b:4c:18:47:b3:ab:8a:e5:d0:38:07:25:5d: 21:31:cd:c9:d8:7d:fd:a8:9d:e7:80:52:b6:19:98: c8:e2:b2:b9:24:d2:ef:e3:48:69:c5:8d:4b:03:4f: 56:f0:e0:75:60:9b:bd:22:c5:a1:d1:6c:a7:bd:7c: 5a:46:53:c9:1d:68:d2:7c:1d:7d:c7:84:dd:b8:04: cc:e9:52:2a:8c:b3:01:14:d1:a0:d7:f2:f1:c8:47: 4c:8d:94:9f:e1:58:41:42:e7:69:d5:59:ed:f5:10: 4a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:50:08:9A:CB:18:A0:B5:5E:E4:73:82:0F:4E:FA:9B:CD:F7:D7:18 X509v3 Authority Key Identifier: keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:76:a5:3a:f1:4d:04:e7:ff:fd:fa:1a:49:5a:58:94:9b:65: 8d:54:f9:17:3b:16:0a:c5:07:e4:63:6c:cf:f4:00:85:bf:f4: d1:0f:aa:bd:f7:4b:54:82:e1:0c:08:f7:da:f5:9c:75:db:eb: d3:fd:95:77:e7:a1:46:dd:4c:b5:75:c7:4b:ca:38:91:ac:d4: 51:b9:0c:85:43:55:15:f5:69:12:d3:fe:20:51:ef:44:73:22: aa:15:0b:2d:6c:03:02:58:34:2c:cb:60:a2:0c:b0:0e:9a:ad: 5f:a3:5e:75:c2:8d:01:11:68:c0:12:95:f6:63:10:3c:f7:88: 56:35:ca:bc:98:95:35:f1:ed:4c:06:ba:d4:7e:c9:68:98:87: 6f:ec:ba:10:c8:38:60:22:26:b4:8e:8d:8d:51:13:71:df:0b: 2e:28:ce:eb:8d:fb:80:90:0d:65:a8:5e:0d:1e:f5:1e:85:fa: 7c:7a:0b:e3:dd:7f:88:44:2b:c1:cf:fb:8b:7a:fa:7a:ab:28: c4:3b:48:a7:f6:6d:a0:33:96:8b:fa:7c:2b:a2:4a:8b:44:92: 37:9e:04:b0:1c:5b:6f:7d:58:38:73:31:99:78:70:fc:c8:29: 4b:8e:d6:92:7e:6b:1b:10:fd:20:b8:eb:f3:fe:39:28:89:4c: 47:34:3d:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzUG0V/yIKmgyH8CeCUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGRmMTEyOGY3ZDQyYzY4ODQ4NjNiNWYyNzNmM2ViYTY1 OTYxNTYwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD EygwZTUwMDg5YWNiMThhMGI1NWVlNDczODIwZjRlZmE5YmNkZjdkNzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLptJXX8zgLrc/F7L6dXQav1z3Sw A0AdZ7nHhLUYMR5KuZJ6tEEjsU+IXGeybGmkztM3RjmoRpU5e6HJY8od6pPf5E6l JMX+BT/xoZV2DxkOAFkMHwIpP9XHKsiZrDGCNkvITry5PXd1XB4npMoTRBMt8kpR AuFZ80vg8ru0fEkL4KbsCq9wqjfgynKg4ie65SrN2+G2QTtMGEezq4rl0DgHJV0h Mc3J2H39qJ3ngFK2GZjI4rK5JNLv40hpxY1LA09W8OB1YJu9IsWh0WynvXxaRlPJ HWjSfB19x4TduATM6VIqjLMBFNGg1/LxyEdMjZSf4VhBQudp1Vnt9RBK4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5QCJrLGKC1XuRzgg9O+pvN99cYMB8GA1UdIwQY MBaAFIZN8RKPfULGiEhjtfJz8+umWWFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2Ut ODBkN2ZhNWRmYmI0LzEvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2UtODBkN2ZhNWRmYmI0 LzEvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3alOvFN BOf//foaSVpYlJtljVT5FzsWCsUH5GNsz/QAhb/00Q+qvfdLVILhDAj32vWcddvr 0/2Vd+ehRt1MtXXHS8o4kazUUbkMhUNVFfVpEtP+IFHvRHMiqhULLWwDAlg0LMtg ogywDpqtX6NedcKNARFowBKV9mMQPPeIVjXKvJiVNfHtTAa61H7JaJiHb+y6EMg4 YCImtI6NjVETcd8LLijO6437gJANZaheDR71HoX6fHoL491/iEQrwc/7i3r6eqso xDtIp/ZtoDOWi/p8K6JKi0SSN54EsBxbb31YOHMxmXhw/MgpS47Wkn5rGxD9ILjr 8/45KIlMRzQ9eQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:39:24 2025 by rpki-client