This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft File: HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json) Hash identifier: 9WKShRBWfnOemwgQYlDqG4Wfwz0j7XJ+BYEyHHC0ue0= Subject key identifier: 7B:A5:B8:9C:FD:65:56:C8:94:3E:AC:26:60:7C:9A:D4:B9:D2:DC:89 Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33 Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33 Certificate serial: 019B213DA80A1E3480513EF837CEB2DF52CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft Manifest number: 14BE Signing time: Mon 15 Dec 2025 09:00:47 +0000 Manifest this update: Mon 15 Dec 2025 09:00:47 +0000 Manifest next update: Tue 16 Dec 2025 09:00:47 +0000 Files and hashes: 1: 8NRfsUTuURGgy6LvURHgXAUYZ-g.roa (hash: 1qJKisnCOTNkYdR9Qi95p8WJ2QZapPEQJWApMHtlHz0=) 2: DYgC_wXxnEgJuH-cACU484oZ2pE.roa (hash: jFVNUxIOqtUEhIDn4xuUsDyMe5nXxi2iJIXpfO1w0VM=) 3: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: w9NNZp6ygV8FWYgGS8Lv8Wnx85NJLumgO5uPxbGJ/5c=) 4: oU9vngXlBh9qS58cidJgmaut8mI.roa (hash: 81xEhNpA4axjgpY7GYYzc5dvarYHwCL8rkYCGoLgAKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:3d:a8:0a:1e:34:80:51:3e:f8:37:ce:b2:df:52:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33 Validity Not Before: Dec 15 09:00:47 2025 GMT Not After : Dec 16 09:00:47 2025 GMT Subject: CN=7ba5b89cfd6556c8943eac26607c9ad4b9d2dc89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1a:8e:22:20:a0:13:07:51:98:3c:28:e2:96: 6c:95:0f:b4:0f:38:40:18:5a:5e:4f:e1:32:83:af: 8f:93:9f:a1:1f:9d:ae:b9:8b:df:d9:d1:40:a6:d4: b9:6a:df:7f:0e:d2:65:e6:06:02:75:75:ff:4f:e7: 7e:8d:e9:7e:da:8e:d4:5d:c6:32:04:34:16:80:35: 92:26:23:49:81:63:ee:e0:46:db:1f:57:d6:26:b9: 1a:06:a5:c1:1a:dd:f0:e1:b8:9e:8f:0a:cf:7d:89: 95:0b:8a:03:3e:76:78:54:93:72:6b:ed:e8:31:62: af:6e:a7:d3:e5:8a:15:e8:0d:e4:82:22:31:73:71: d3:16:14:bb:f1:ec:8d:2b:20:d6:9b:8e:df:69:d7: 14:03:04:ea:08:63:d6:09:c6:0c:47:10:64:e3:6d: d5:ba:c1:a8:43:62:8b:9f:30:b5:ad:0d:4a:63:51: ff:0e:37:1a:60:60:35:e7:0f:84:c2:51:8a:e6:9a: 95:24:a1:02:d2:f5:e1:db:0c:89:f2:b7:4b:f7:0d: 1b:09:0d:9e:90:f8:99:9c:c8:b8:fb:a9:b2:09:7a: 81:2f:19:74:c1:c5:d5:88:79:92:9c:d4:2e:b4:34: b1:a9:c4:34:e3:5d:16:c9:1e:1c:c7:24:79:1f:ab: aa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A5:B8:9C:FD:65:56:C8:94:3E:AC:26:60:7C:9A:D4:B9:D2:DC:89 X509v3 Authority Key Identifier: keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c1:54:b3:98:a8:c0:a7:39:a7:86:09:7a:77:ca:4f:06:d2: e9:bf:0e:83:6a:8c:d4:a2:d3:34:8f:c7:e4:a9:94:4a:91:c4: 7d:15:be:53:4e:23:bf:12:1a:74:8a:9d:b3:30:19:52:f0:fd: db:6a:b3:a5:00:a2:b7:c7:b7:94:d6:4d:20:14:8d:40:f2:4d: 59:11:0a:8a:7a:25:27:73:e8:36:5e:d5:ff:4f:48:93:e1:5f: f4:64:2c:c5:2a:ae:11:55:bf:0a:b4:ee:11:b1:7e:35:29:67: 97:9d:ae:15:1f:44:41:69:92:5b:44:7a:87:f7:bb:fc:98:be: 25:45:63:42:51:3a:03:46:29:73:20:89:1f:52:de:ca:ca:0f: ad:a5:59:65:ae:10:58:e7:01:db:4f:5d:84:59:70:63:06:09: 55:5f:70:c3:71:e0:40:4b:00:bd:80:a4:a6:a4:f2:bf:3f:3a: cd:70:63:8a:64:9b:76:e0:68:71:f0:02:99:01:7e:38:d2:95: 7d:64:37:a0:fd:bb:b5:a4:89:cc:58:b9:ac:b5:35:3b:3f:a7: 3c:58:d3:1f:8a:b4:bb:61:72:4f:a2:64:e5:fa:97:12:e7:81: 2d:7b:5e:0f:03:ba:24:3f:c1:a5:32:6e:79:7b:ad:34:6d:48: 43:ca:2b:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshPagKHjSAUT74N86y31LOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzY2YjA1OGMwOTY3NTNhMzRhZDYyNWQ1MzI3NWNkMmRi YTViMzMwHhcNMjUxMjE1MDkwMDQ3WhcNMjUxMjE2MDkwMDQ3WjAzMTEwLwYDVQQD Eyg3YmE1Yjg5Y2ZkNjU1NmM4OTQzZWFjMjY2MDdjOWFkNGI5ZDJkYzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhqOIiCgEwdRmDwo4pZslQ+0DzhA GFpeT+Eyg6+Pk5+hH52uuYvf2dFAptS5at9/DtJl5gYCdXX/T+d+jel+2o7UXcYy BDQWgDWSJiNJgWPu4EbbH1fWJrkaBqXBGt3w4biejwrPfYmVC4oDPnZ4VJNya+3o MWKvbqfT5YoV6A3kgiIxc3HTFhS78eyNKyDWm47fadcUAwTqCGPWCcYMRxBk423V usGoQ2KLnzC1rQ1KY1H/DjcaYGA15w+EwlGK5pqVJKEC0vXh2wyJ8rdL9w0bCQ2e kPiZnMi4+6myCXqBLxl0wcXViHmSnNQutDSxqcQ0410WyR4cxyR5H6uqDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuluJz9ZVbIlD6sJmB8mtS50tyJMB8GA1UdIwQY MBaAFBx2awWMCWdTo0rWJdUydc0tulszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hYjgzZGMtYzBlNy00ZWMzLWFmNzIt ODE5MTdkZmZkY2Q3LzEvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hYjgzZGMtYzBlNy00ZWMzLWFmNzItODE5MTdkZmZkY2Q3 LzEvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8FUs5io wKc5p4YJenfKTwbS6b8Og2qM1KLTNI/H5KmUSpHEfRW+U04jvxIadIqdszAZUvD9 22qzpQCit8e3lNZNIBSNQPJNWREKinolJ3PoNl7V/09Ik+Ff9GQsxSquEVW/CrTu EbF+NSlnl52uFR9EQWmSW0R6h/e7/Ji+JUVjQlE6A0YpcyCJH1LeysoPraVZZa4Q WOcB209dhFlwYwYJVV9ww3HgQEsAvYCkpqTyvz86zXBjimSbduBocfACmQF+ONKV fWQ3oP27taSJzFi5rLU1Oz+nPFjTH4q0u2FyT6Jk5fqXEueBLXteDwO6JD/BpTJu eXutNG1IQ8orUg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:15:56 2025 by rpki-client