This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft File: HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft (raw, json) Hash identifier: Q/sstReTdswvkOauTCpWyfb/2UmLzT/AV9WC4XMQbRk= Subject key identifier: 1D:BE:E1:E0:FA:4B:34:C0:68:C7:61:79:A2:44:E4:50:3A:5E:10:5F Authority key identifier: 1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E Certificate issuer: /CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e Certificate serial: 019B34C500330E55AA806CDCD1937C9218E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft Manifest number: 07FE Signing time: Fri 19 Dec 2025 04:01:24 +0000 Manifest this update: Fri 19 Dec 2025 04:01:24 +0000 Manifest next update: Sat 20 Dec 2025 04:01:24 +0000 Files and hashes: 1: HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl (hash: Ap+shzGcILezxF/IKVYeyNHk3X4BXD4HaFGgYjoTTxA=) 2: bIBmhUC2WLWBXyi5VaCHLFuHkDs.roa (hash: F54YraMKL44U0jhJwgmaruTpnrxsP2uQrqeXw7OujLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:00:33:0e:55:aa:80:6c:dc:d1:93:7c:92:18:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e Validity Not Before: Dec 19 04:01:24 2025 GMT Not After : Dec 20 04:01:24 2025 GMT Subject: CN=1dbee1e0fa4b34c068c76179a244e4503a5e105f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:07:fa:c4:9c:12:83:6b:5e:f2:79:ba:4c: 04:42:49:16:15:fb:c8:fb:83:bb:42:27:bc:0a:af: b1:3a:98:b3:77:d7:f6:d3:3f:ba:7a:c6:58:64:82: d0:c8:94:4e:37:0b:c1:39:d7:f9:ff:8a:db:86:af: 57:6b:05:6a:14:89:8f:1b:63:f3:f7:c0:26:35:17: 45:6d:b9:0d:a1:40:10:f3:b6:d8:41:82:88:f0:d3: fe:50:75:b6:6d:03:23:74:c6:6d:3c:b2:0e:88:9e: d4:8c:b1:1a:11:92:83:2f:b2:3a:8c:70:e5:71:9e: 17:1b:f0:ca:dc:b2:e2:94:03:04:3b:dd:5a:2c:33: cf:3d:e9:2a:84:90:47:6b:b7:40:0b:4c:72:b8:2c: 63:62:a5:cd:ef:f8:2a:31:cc:ce:05:e4:23:0d:6f: 9d:5a:61:74:62:ee:1c:8c:16:85:4d:64:ef:d6:76: cd:03:c5:75:ad:22:5d:d1:e5:ab:83:85:f3:a9:9a: 75:cb:da:72:f9:26:87:de:35:8b:e8:d9:a8:52:db: ff:88:f7:c5:39:bb:53:00:46:27:cb:69:1f:90:8d: 7d:23:82:04:19:20:82:74:c8:8a:58:d6:7c:f4:37: 10:3e:fa:67:0d:80:11:24:02:28:52:9d:59:6e:ee: ed:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BE:E1:E0:FA:4B:34:C0:68:C7:61:79:A2:44:E4:50:3A:5E:10:5F X509v3 Authority Key Identifier: keyid:1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:fc:e9:1b:70:43:19:aa:7d:65:fd:1f:31:b8:f2:d7:ab:a1: 91:4a:3f:ef:91:03:bd:35:08:d2:26:de:ad:ff:df:e2:89:fa: 3b:cb:48:3a:61:ea:d8:fb:b7:88:f0:66:d0:0a:dd:66:d9:e9: 9c:71:31:fc:ea:fb:f1:32:28:be:ed:0b:17:d5:c7:da:51:14: ba:55:94:23:3e:6e:48:ef:f2:02:0e:01:0d:02:b7:e9:aa:af: 8d:52:ee:03:45:f2:02:34:0a:5e:85:1f:e6:6e:44:f2:6f:93: c9:b4:27:05:71:b5:38:6c:d4:f5:6b:a7:47:38:c3:10:6a:c8: 4d:7b:5b:1a:b4:fd:10:23:70:b3:2b:9c:25:98:65:5a:ff:97: 6b:bf:58:e8:20:32:f3:8f:7a:3c:13:a1:ec:95:df:83:8d:1e: 07:05:3b:10:18:e2:70:60:da:38:e1:9a:0e:bc:da:c2:60:74: f0:f7:05:b1:a6:ca:58:0c:2a:d4:cf:a7:2c:da:83:fb:da:27: e3:06:d5:2a:23:dc:89:98:ae:b4:e8:03:2a:77:ac:80:9d:b8: 58:69:e2:f8:97:63:b5:f0:2b:a7:6c:8c:4e:7b:64:fa:be:ea: a4:cb:67:a9:02:bc:f8:b4:da:41:06:a1:7c:ad:cf:ad:c3:1a: 5a:c6:74:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xQAzDlWqgGzc0ZN8khjpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNjNhNDdlY2JmY2ZhYTlmNmNmZWNlMjYxNGM3MGU4YjVh ZGI4M2UwHhcNMjUxMjE5MDQwMTI0WhcNMjUxMjIwMDQwMTI0WjAzMTEwLwYDVQQD EygxZGJlZTFlMGZhNGIzNGMwNjhjNzYxNzlhMjQ0ZTQ1MDNhNWUxMDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1YH+sScEoNrXvJ5ukwEQkkWFfvI +4O7Qie8Cq+xOpizd9f20z+6esZYZILQyJRONwvBOdf5/4rbhq9XawVqFImPG2Pz 98AmNRdFbbkNoUAQ87bYQYKI8NP+UHW2bQMjdMZtPLIOiJ7UjLEaEZKDL7I6jHDl cZ4XG/DK3LLilAMEO91aLDPPPekqhJBHa7dAC0xyuCxjYqXN7/gqMczOBeQjDW+d WmF0Yu4cjBaFTWTv1nbNA8V1rSJd0eWrg4XzqZp1y9py+SaH3jWL6NmoUtv/iPfF ObtTAEYny2kfkI19I4IEGSCCdMiKWNZ89DcQPvpnDYARJAIoUp1Zbu7tQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2+4eD6SzTAaMdheaJE5FA6XhBfMB8GA1UdIwQY MBaAFB5jpH7L/Pqp9s/s4mFMcOi1rbg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG1Pa2ZzdjgtcW4yei16aVlVeHc2TFd0dUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YTk2YmUtZmJlYi00NTgwLThiYWEt MzU1YjVjZDVkOTcxLzEvSG1Pa2ZzdjgtcW4yei16aVlVeHc2TFd0dUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy80YTk2YmUtZmJlYi00NTgwLThiYWEtMzU1YjVjZDVkOTcx LzEvSG1Pa2ZzdjgtcW4yei16aVlVeHc2TFd0dUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPzpG3BD Gap9Zf0fMbjy16uhkUo/75EDvTUI0iberf/f4on6O8tIOmHq2Pu3iPBm0ArdZtnp nHEx/Or78TIovu0LF9XH2lEUulWUIz5uSO/yAg4BDQK36aqvjVLuA0XyAjQKXoUf 5m5E8m+TybQnBXG1OGzU9WunRzjDEGrITXtbGrT9ECNwsyucJZhlWv+Xa79Y6CAy 8496PBOh7JXfg40eBwU7EBjicGDaOOGaDrzawmB08PcFsabKWAwq1M+nLNqD+9on 4wbVKiPciZiutOgDKnesgJ24WGni+JdjtfArp2yMTntk+r7qpMtnqQK8+LTaQQah fK3PrcMaWsZ0WQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:22:34 2025 by rpki-client