This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json) Hash identifier: Wuasx+hM/PKMV46+0WePoMyCfUivZBovg2Mgf7+XFnI= Subject key identifier: B3:24:6B:A2:5D:BA:3B:92:6B:73:DF:30:EE:64:F4:61:51:B5:CE:34 Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae Certificate serial: 019AF0BF9A97BBCCCDE37E8D2C7A06CA9DF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft Manifest number: 13E6 Signing time: Fri 05 Dec 2025 23:01:19 +0000 Manifest this update: Fri 05 Dec 2025 23:01:19 +0000 Manifest next update: Sat 06 Dec 2025 23:01:19 +0000 Files and hashes: 1: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: PXaPTVadZa3vHkQgyQQZZR9znqskUO4z9OcFHDxseRc=) 2: UYoraKeZIaoa2wVuoomivtXbxRQ.roa (hash: 64MFcCCoNK8y5TAb4sImtBVWhOrUKow/FlcIn/ABu34=) 3: bce9mz0b3BUGOMHAJWY8rMCRxek.roa (hash: IEeWzdb92Rel/sak0WfNMG3iDCwAJHBVrKmaRSr9eNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9a:97:bb:cc:cd:e3:7e:8d:2c:7a:06:ca:9d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae Validity Not Before: Dec 5 23:01:19 2025 GMT Not After : Dec 6 23:01:19 2025 GMT Subject: CN=b3246ba25dba3b926b73df30ee64f46151b5ce34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:61:c8:00:e7:2f:10:23:fb:f9:b7:80:b3:93: 40:ce:73:be:aa:47:3a:f3:ad:4b:2f:d0:6f:c6:ef: 7c:13:51:66:fb:a6:f9:b4:0d:ff:32:83:89:7e:0a: f9:e8:57:cb:96:4e:65:96:c5:ef:dc:6f:07:67:8a: 16:6d:41:2f:74:2a:3b:42:31:38:1f:e6:0d:69:96: 1c:ad:4f:05:e8:81:6e:2a:18:4e:b2:a1:b1:21:13: ba:ad:36:70:a3:41:14:01:da:63:fe:0d:4e:31:90: 60:77:9e:40:58:5c:16:ab:c1:be:82:c1:6e:07:e0: 97:56:7b:a5:20:fe:3f:9a:19:5e:e4:6d:fe:9c:36: f4:fa:cd:ad:b1:d5:10:0b:7f:86:71:75:14:d9:15: a8:02:a5:15:e6:0a:ac:f2:8a:32:74:3c:6b:b4:8f: 59:f5:b5:ae:fa:72:0f:83:eb:a1:1f:58:78:71:0b: a3:bc:6f:8c:f8:80:ab:72:8c:5c:9b:81:10:88:80: aa:5c:a7:7f:aa:b0:b3:21:f1:4b:f5:0a:85:3e:05: 05:eb:62:e7:2a:c3:1a:4f:4d:55:e8:5d:8d:18:62: c4:5c:87:5b:da:a6:f2:8e:ed:36:16:ba:ee:a9:c9: 3e:76:9e:7e:34:c7:1a:47:b0:16:6c:fc:72:1b:22: 1a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:24:6B:A2:5D:BA:3B:92:6B:73:DF:30:EE:64:F4:61:51:B5:CE:34 X509v3 Authority Key Identifier: keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5b:d5:bf:53:bd:a9:c1:68:ef:b6:54:4e:c3:2f:56:41:2e: 10:06:12:75:98:03:dc:33:4d:c8:d3:92:5c:44:46:b9:2c:db: ca:f5:e9:4c:71:f7:c7:64:bc:83:95:cf:90:81:86:3f:8f:a8: a7:02:d7:3b:75:31:3e:f8:43:54:50:de:7b:5c:42:ae:8f:8f: 35:8c:64:3b:d9:2a:85:d8:e0:bf:fc:37:f9:6e:82:fe:40:f0: 57:fc:00:de:db:30:5e:47:72:27:b7:c1:e4:f2:ad:16:58:51: 45:05:16:6c:e0:f6:9d:eb:43:86:b6:39:63:d9:ed:6b:be:28: b5:d1:57:8a:26:72:26:ac:47:21:b2:4a:c5:03:86:13:a5:2b: 21:bb:cc:49:07:27:fc:62:71:95:9d:48:ac:f1:ee:8a:f0:90: 9d:2c:f6:14:95:38:0b:41:6e:9b:e7:b5:b3:de:86:a9:fd:32: 6e:0f:45:2c:4c:62:e6:04:fa:aa:56:d7:bf:1c:07:1a:cb:73: 25:da:a3:ca:d8:6d:6f:ca:5a:d0:5f:d0:74:e5:dd:d8:36:e6: 35:81:e3:60:a0:a9:76:d7:fc:bc:21:a5:45:a1:3b:b4:eb:dc: 46:0d:89:a5:43:d8:9a:d8:6c:39:e1:15:71:9f:a1:81:cf:e8: bc:cf:87:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5qXu8zN436NLHoGyp32MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNGMzMjA4NmUxZTk4NDUwNTY5MWIwMWY1OTg1ZGY3YTM2 YjI0YWUwHhcNMjUxMjA1MjMwMTE5WhcNMjUxMjA2MjMwMTE5WjAzMTEwLwYDVQQD EyhiMzI0NmJhMjVkYmEzYjkyNmI3M2RmMzBlZTY0ZjQ2MTUxYjVjZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GHIAOcvECP7+beAs5NAznO+qkc6 861LL9Bvxu98E1Fm+6b5tA3/MoOJfgr56FfLlk5llsXv3G8HZ4oWbUEvdCo7QjE4 H+YNaZYcrU8F6IFuKhhOsqGxIRO6rTZwo0EUAdpj/g1OMZBgd55AWFwWq8G+gsFu B+CXVnulIP4/mhle5G3+nDb0+s2tsdUQC3+GcXUU2RWoAqUV5gqs8ooydDxrtI9Z 9bWu+nIPg+uhH1h4cQujvG+M+ICrcoxcm4EQiICqXKd/qrCzIfFL9QqFPgUF62Ln KsMaT01V6F2NGGLEXIdb2qbyju02Frruqck+dp5+NMcaR7AWbPxyGyIaQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMka6JdujuSa3PfMO5k9GFRtc40MB8GA1UdIwQY MBaAFB5MMghuHphFBWkbAfWYXfejaySuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYt OThjZTE0NmYxODI0LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYtOThjZTE0NmYxODI0 LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFvVv1O9 qcFo77ZUTsMvVkEuEAYSdZgD3DNNyNOSXERGuSzbyvXpTHH3x2S8g5XPkIGGP4+o pwLXO3UxPvhDVFDee1xCro+PNYxkO9kqhdjgv/w3+W6C/kDwV/wA3tswXkdyJ7fB 5PKtFlhRRQUWbOD2netDhrY5Y9nta74otdFXiiZyJqxHIbJKxQOGE6UrIbvMSQcn /GJxlZ1IrPHuivCQnSz2FJU4C0Fum+e1s96Gqf0ybg9FLExi5gT6qlbXvxwHGstz Jdqjythtb8pa0F/QdOXd2DbmNYHjYKCpdtf8vCGlRaE7tOvcRg2JpUPYmthsOeEV cZ+hgc/ovM+Hlw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:12 2025 by rpki-client