This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft File: tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json) Hash identifier: DjmvXsdktuG3OvWShn98xXz6R5J02d7MwZypv/TG5zs= Subject key identifier: 79:3B:7C:BB:10:EB:5C:7F:8E:B4:25:B4:90:0C:C8:B0:FF:05:DC:F0 Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5 Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5 Certificate serial: 019B42802BC79353893D833B4D021F159DC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft Manifest number: 14B2 Signing time: Sun 21 Dec 2025 20:00:54 +0000 Manifest this update: Sun 21 Dec 2025 20:00:54 +0000 Manifest next update: Mon 22 Dec 2025 20:00:54 +0000 Files and hashes: 1: j1BO9Furs7_Q3tvlbetVSRlAckY.roa (hash: tdoQUM0H+jW+enIWtoFRlfboER49yX/MAZeA5JaKIMs=) 2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: MRsJKfjzDcfP4jXRaNi2++T95hlP8UhG7CUEOwIQrWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:2b:c7:93:53:89:3d:83:3b:4d:02:1f:15:9d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5 Validity Not Before: Dec 21 20:00:54 2025 GMT Not After : Dec 22 20:00:54 2025 GMT Subject: CN=793b7cbb10eb5c7f8eb425b4900cc8b0ff05dcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e3:f3:90:de:d2:ba:01:82:fa:21:82:e9:f1: ab:2a:d8:fa:7a:06:b0:10:57:bb:0a:f3:c8:aa:47: 5c:2a:89:dd:13:c1:ad:cf:ee:45:7b:22:70:61:6d: 07:b8:84:63:36:11:c2:aa:7c:62:2c:84:c4:e4:36: 18:95:2b:25:4d:d3:81:a8:fb:24:5e:b5:3f:c2:c3: 45:58:c3:66:f3:7d:ab:10:15:59:f9:52:e4:dd:c5: 34:93:b2:50:40:e2:f1:79:9c:66:55:f4:84:5b:5d: d0:e9:08:55:f6:4c:1a:a0:ea:fe:eb:54:02:ab:0f: f3:2d:47:92:f2:09:04:e7:be:1e:9d:27:e3:e1:c5: 79:86:8d:d1:f0:86:1d:f8:ad:ee:fe:d1:63:43:22: 8c:be:cd:0b:3b:73:fe:9f:ca:23:dc:68:73:8f:8d: b8:14:7c:70:38:1d:0e:49:38:9b:20:e3:61:fb:ef: 38:0b:f9:65:61:e7:9c:af:27:c5:f3:27:a1:61:81: 15:30:2c:a0:f7:09:1b:20:9f:23:e4:94:e9:83:66: dc:d1:8f:dd:42:5d:09:5d:ba:cb:6d:be:a2:ac:3d: 45:2c:3c:9b:d2:f0:60:c2:b7:13:a3:39:31:6c:dd: 9b:d3:a0:17:32:5d:77:df:71:02:ef:b4:cc:d6:88: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3B:7C:BB:10:EB:5C:7F:8E:B4:25:B4:90:0C:C8:B0:FF:05:DC:F0 X509v3 Authority Key Identifier: keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:70:a1:1d:4e:3b:fb:69:e5:00:9d:bd:21:35:d0:a7:b0:b0: ce:ef:93:d4:fd:80:91:17:0b:02:4b:5d:fd:4f:96:c7:89:83: 5f:d9:12:98:76:c9:5d:d0:d3:5b:19:ee:06:4d:9b:1a:a4:18: 10:2b:00:4d:e6:58:31:90:75:b8:62:dc:a6:56:da:48:d4:a8: 5e:79:a6:21:cb:7d:45:38:03:ec:8e:9e:60:3f:12:cb:65:75: 73:2c:a4:7e:3d:b1:2b:26:06:3d:a1:f8:5b:bc:7e:23:e4:7d: ea:36:87:18:49:d7:ad:39:20:be:cc:7d:6a:40:e8:d4:61:05: 8b:18:c2:6c:5c:0a:52:17:32:63:8b:d6:0f:d1:95:2d:d4:2e: f0:39:69:1c:9d:fe:43:00:aa:59:90:88:38:8c:96:cd:5b:e8: 3d:2a:38:8a:9c:05:aa:79:a6:6d:6b:57:f1:4a:d2:ba:74:cd: 84:76:0a:71:f0:b3:9b:7d:4e:ab:b2:fe:94:6e:f2:fa:19:2f: 6c:e0:c9:51:c6:1b:d8:2a:b6:cb:14:e4:26:7e:52:84:d9:b9: 9a:76:8d:38:77:5c:aa:7d:1c:5b:9b:0c:91:35:d2:43:40:b9: e2:96:4b:7d:11:99:05:7a:07:e7:85:3b:ff:01:6b:50:c5:77: 19:f3:06:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgCvHk1OJPYM7TQIfFZ3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NzE0YmZkOTgyZWQyOTdlNWM3M2VjZTc0ZDIyMmU1Mjc0 YzFmYjUwHhcNMjUxMjIxMjAwMDU0WhcNMjUxMjIyMjAwMDU0WjAzMTEwLwYDVQQD Eyg3OTNiN2NiYjEwZWI1YzdmOGViNDI1YjQ5MDBjYzhiMGZmMDVkY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+PzkN7SugGC+iGC6fGrKtj6egaw EFe7CvPIqkdcKondE8Gtz+5FeyJwYW0HuIRjNhHCqnxiLITE5DYYlSslTdOBqPsk XrU/wsNFWMNm832rEBVZ+VLk3cU0k7JQQOLxeZxmVfSEW13Q6QhV9kwaoOr+61QC qw/zLUeS8gkE574enSfj4cV5ho3R8IYd+K3u/tFjQyKMvs0LO3P+n8oj3Ghzj424 FHxwOB0OSTibIONh++84C/llYeecryfF8yehYYEVMCyg9wkbIJ8j5JTpg2bc0Y/d Ql0JXbrLbb6irD1FLDyb0vBgwrcTozkxbN2b06AXMl1333EC77TM1ohKCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHk7fLsQ61x/jrQltJAMyLD/BdzwMB8GA1UdIwQY MBaAFLRxS/2YLtKX5cc+znTSIuUnTB+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jZjc3MTgtMjc0ZC00MTJiLWI3NTUt NjJlYTFlN2U4ZmM2LzEvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jZjc3MTgtMjc0ZC00MTJiLWI3NTUtNjJlYTFlN2U4ZmM2 LzEvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHChHU47 +2nlAJ29ITXQp7Cwzu+T1P2AkRcLAktd/U+Wx4mDX9kSmHbJXdDTWxnuBk2bGqQY ECsATeZYMZB1uGLcplbaSNSoXnmmIct9RTgD7I6eYD8Sy2V1cyykfj2xKyYGPaH4 W7x+I+R96jaHGEnXrTkgvsx9akDo1GEFixjCbFwKUhcyY4vWD9GVLdQu8DlpHJ3+ QwCqWZCIOIyWzVvoPSo4ipwFqnmmbWtX8UrSunTNhHYKcfCzm31Oq7L+lG7y+hkv bODJUcYb2Cq2yxTkJn5ShNm5mnaNOHdcqn0cW5sMkTXSQ0C54pZLfRGZBXoH54U7 /wFrUMV3GfMGvQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:20:47 2025 by rpki-client