This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft File: tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json) Hash identifier: PHIG8HLZiRELgvQO5wtD5gOFD+ZGIaFN1U14RiQNj6M= Subject key identifier: F9:3D:3F:8E:E2:68:E2:CF:C7:1D:72:EA:5A:33:29:DC:B6:CA:B4:00 Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5 Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5 Certificate serial: 019B38D84660906BD1E85DEB1E3937C9E3F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft Manifest number: 14AD Signing time: Fri 19 Dec 2025 23:00:56 +0000 Manifest this update: Fri 19 Dec 2025 23:00:56 +0000 Manifest next update: Sat 20 Dec 2025 23:00:56 +0000 Files and hashes: 1: j1BO9Furs7_Q3tvlbetVSRlAckY.roa (hash: tdoQUM0H+jW+enIWtoFRlfboER49yX/MAZeA5JaKIMs=) 2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: oX8YVCrub8oSogkMQTDa5pZAKkJgIGV/HRelmOXj+K4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:46:60:90:6b:d1:e8:5d:eb:1e:39:37:c9:e3:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5 Validity Not Before: Dec 19 23:00:56 2025 GMT Not After : Dec 20 23:00:56 2025 GMT Subject: CN=f93d3f8ee268e2cfc71d72ea5a3329dcb6cab400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:17:87:e3:55:17:27:2c:fd:62:e6:ec:4b: e6:8f:72:0b:e8:9f:02:92:bc:f0:aa:2c:a8:02:19: 3c:f0:d9:5b:98:80:bc:42:50:b6:97:9b:5b:d1:6b: 70:ed:3d:22:80:e5:98:73:1b:aa:56:72:10:83:0f: 1c:8b:ae:ed:4b:1b:59:92:c4:22:e5:09:2d:93:18: 26:3a:24:b2:6a:c9:85:b4:d4:54:2a:27:8c:dc:e6: 5f:d2:a3:89:ac:2d:ab:03:c0:c2:81:4b:71:ea:7f: 7c:0a:5e:4c:25:ff:19:88:b2:b7:5d:91:d7:5b:14: 8d:4f:d4:85:48:64:fd:cc:0a:c1:ac:7d:c3:44:b2: 5a:69:6b:cc:5b:26:54:27:0d:b3:50:9b:ce:59:f9: be:69:51:b6:c0:c3:a9:a8:6f:95:c5:86:e1:91:5e: b1:98:41:8a:2d:0d:c6:0c:f4:cf:87:e5:98:d3:ae: c8:08:a0:c0:cf:e2:54:0b:43:f9:c7:f8:99:82:3f: ab:1b:72:bd:00:9d:56:26:20:37:b8:98:41:0c:bb: 8d:af:4e:1d:bb:c3:fe:01:9f:45:a4:84:b6:c8:04: 8d:6c:83:16:9c:90:67:43:ad:ab:db:90:9a:f3:95: bb:88:89:8e:36:43:d6:33:5b:2d:92:e4:86:7f:8f: 4d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3D:3F:8E:E2:68:E2:CF:C7:1D:72:EA:5A:33:29:DC:B6:CA:B4:00 X509v3 Authority Key Identifier: keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:8d:ac:b3:d1:9c:b2:47:be:1e:c0:d0:be:e5:f3:f2:d0:1d: 36:87:66:82:16:93:d4:dc:7f:e9:c0:4d:5f:d0:69:11:ca:e4: f0:a1:57:26:d7:f5:af:ec:d3:28:c1:45:ee:c0:46:13:60:33: a8:fa:1b:47:c3:96:c2:54:11:38:5f:24:41:e4:2d:00:42:8a: 8f:b5:e2:f1:2d:1c:34:76:9f:c8:6e:b5:9e:7c:22:17:8f:be: ad:ee:ec:fa:0c:5d:af:6d:b3:d3:25:5c:22:2d:06:fb:44:c4: 9e:0d:f1:88:56:dc:31:be:b2:71:bf:ba:48:b4:ec:ca:67:90: 37:0f:aa:7d:91:96:99:a2:d6:15:5a:7d:2c:90:8c:1d:be:4f: 2d:d4:86:e3:04:b2:38:c7:8e:2c:fe:a9:b2:9e:65:01:5c:04: 5e:06:da:29:52:25:05:b3:9c:9d:3f:f9:cc:46:5f:4b:6c:24: be:64:6b:da:4a:49:6d:47:f1:df:19:d0:83:d1:8a:bf:eb:d9: e6:bf:e2:12:7c:1d:d5:19:02:f5:53:a7:32:85:0e:26:a0:18: 6c:66:a3:21:ae:57:80:f7:68:f6:35:d5:67:86:be:ed:ab:c5: e0:05:f7:35:10:74:5d:f6:23:d9:30:7d:86:09:66:95:0c:c7: b9:2e:c8:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42EZgkGvR6F3rHjk3yePyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NzE0YmZkOTgyZWQyOTdlNWM3M2VjZTc0ZDIyMmU1Mjc0 YzFmYjUwHhcNMjUxMjE5MjMwMDU2WhcNMjUxMjIwMjMwMDU2WjAzMTEwLwYDVQQD EyhmOTNkM2Y4ZWUyNjhlMmNmYzcxZDcyZWE1YTMzMjlkY2I2Y2FiNDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4sXh+NVFycs/WLm7Evmj3IL6J8C krzwqiyoAhk88NlbmIC8QlC2l5tb0Wtw7T0igOWYcxuqVnIQgw8ci67tSxtZksQi 5QktkxgmOiSyasmFtNRUKieM3OZf0qOJrC2rA8DCgUtx6n98Cl5MJf8ZiLK3XZHX WxSNT9SFSGT9zArBrH3DRLJaaWvMWyZUJw2zUJvOWfm+aVG2wMOpqG+VxYbhkV6x mEGKLQ3GDPTPh+WY067ICKDAz+JUC0P5x/iZgj+rG3K9AJ1WJiA3uJhBDLuNr04d u8P+AZ9FpIS2yASNbIMWnJBnQ62r25Ca85W7iImONkPWM1stkuSGf49NSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPk9P47iaOLPxx1y6lozKdy2yrQAMB8GA1UdIwQY MBaAFLRxS/2YLtKX5cc+znTSIuUnTB+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jZjc3MTgtMjc0ZC00MTJiLWI3NTUt NjJlYTFlN2U4ZmM2LzEvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jZjc3MTgtMjc0ZC00MTJiLWI3NTUtNjJlYTFlN2U4ZmM2 LzEvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlI2ss9Gc ske+HsDQvuXz8tAdNodmghaT1Nx/6cBNX9BpEcrk8KFXJtf1r+zTKMFF7sBGE2Az qPobR8OWwlQROF8kQeQtAEKKj7Xi8S0cNHafyG61nnwiF4++re7s+gxdr22z0yVc Ii0G+0TEng3xiFbcMb6ycb+6SLTsymeQNw+qfZGWmaLWFVp9LJCMHb5PLdSG4wSy OMeOLP6psp5lAVwEXgbaKVIlBbOcnT/5zEZfS2wkvmRr2kpJbUfx3xnQg9GKv+vZ 5r/iEnwd1RkC9VOnMoUOJqAYbGajIa5XgPdo9jXVZ4a+7avF4AX3NRB0XfYj2TB9 hglmlQzHuS7IaQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:21:25 2025 by rpki-client