This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json) Hash identifier: dVZotd5jg6SYDedB6ZlhlSSrFs0bFXZy7jBThVGoHwQ= Subject key identifier: 6C:8C:20:38:A9:39:C3:91:C6:3B:69:34:23:64:A8:4B:55:0D:A6:4B Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2 Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2 Certificate serial: 019B0F6E92589F9ABC84BAD35CF1E134F748 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft Manifest number: 1774 Signing time: Thu 11 Dec 2025 22:01:03 +0000 Manifest this update: Thu 11 Dec 2025 22:01:03 +0000 Manifest next update: Fri 12 Dec 2025 22:01:03 +0000 Files and hashes: 1: fY3YUzeQR4J5mSVlYztPydyoN5Q.roa (hash: mNZawaVbKUAZ9lV1chbhqIOQeYk5Gz7JPB6mT6lLW4o=) 2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: +pOWwWMtWpyKUrEJ8dRi68Kbva3Uq8Di65K7OOEl6J4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:92:58:9f:9a:bc:84:ba:d3:5c:f1:e1:34:f7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2 Validity Not Before: Dec 11 22:01:03 2025 GMT Not After : Dec 12 22:01:03 2025 GMT Subject: CN=6c8c2038a939c391c63b69342364a84b550da64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:9a:06:b3:0e:ff:2a:4b:b4:58:1e:9a:2c: f3:02:b1:f0:85:b9:55:72:a0:4e:63:0a:f8:b8:66: b9:45:62:bd:d3:9b:02:c5:ba:5c:87:31:b4:32:bf: 19:a1:0f:ec:bc:9d:b4:65:8e:cc:af:33:d4:4e:4c: 79:66:f2:23:25:4e:2f:bf:3e:c5:81:4d:13:cb:db: 7e:a2:35:7c:8d:38:6c:e1:96:ba:3b:ce:d5:14:47: 01:ae:ad:e7:24:df:73:98:75:c7:0f:59:12:43:02: 34:e3:f0:51:87:6c:6d:bd:c5:67:1c:54:d2:93:75: 1b:86:06:d5:43:14:8d:5e:dc:f0:46:cb:77:c2:7e: a9:d5:26:9f:41:22:4d:d3:b0:36:4f:dd:54:e8:b9: c3:d2:bf:29:d4:c0:25:a1:06:44:04:a1:76:44:79: 9e:bb:9d:69:3a:d8:d3:0d:03:64:93:ef:85:9a:a9: 00:5f:3e:cf:09:b4:2b:9a:61:a0:fc:4e:6f:21:f0: de:3d:82:02:56:de:18:a9:ef:4b:74:dd:71:e5:71: 03:f4:32:ce:4e:46:c4:bc:ee:33:4f:90:2d:d5:8f: d6:f9:9f:3b:e9:fd:3a:32:62:aa:3c:17:ea:13:66: e0:1d:45:64:3c:ef:73:85:8a:8b:d9:92:89:eb:e3: d1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8C:20:38:A9:39:C3:91:C6:3B:69:34:23:64:A8:4B:55:0D:A6:4B X509v3 Authority Key Identifier: keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3b:fe:77:72:ad:71:53:f5:7e:c0:cb:30:fd:b4:5c:94:05: 00:a1:10:67:b0:86:72:d6:88:7f:04:bf:c2:1a:d1:3c:92:d9: 34:64:a6:e0:ec:ca:50:a4:b8:4e:32:48:ce:6b:3f:a6:7e:c1: 0b:de:84:dc:5e:45:dd:bf:f0:01:30:a4:44:aa:1b:30:76:8d: 6e:37:55:19:b3:aa:3f:61:32:09:62:49:d5:3f:b8:1d:54:34: 29:a9:91:63:7f:95:5c:eb:18:b8:ec:fb:92:ac:aa:dc:59:8c: 0f:cb:a6:00:2d:43:aa:bb:58:a1:1c:5e:d3:51:7c:b5:42:7b: 6a:67:04:d0:70:37:89:4b:04:1f:e8:25:74:f2:33:c4:f9:6c: 34:6c:30:ad:b8:00:bd:05:9f:d7:37:d4:e6:10:7b:09:db:c5: 7f:82:55:60:37:d4:22:bb:10:95:0e:dd:87:f5:a3:20:14:64: fe:ac:b0:18:04:da:92:e0:9b:c9:06:ab:e0:5f:2f:59:a6:5f: de:43:2d:a8:4f:34:05:8f:e6:8f:83:b8:53:6f:43:d6:b2:a6: fa:bd:0c:10:18:69:fb:b2:7b:0b:c8:0a:72:22:cb:d7:8c:46: 48:5d:9c:72:a4:32:5b:43:19:9b:30:2f:74:2f:fb:74:02:82: 4e:0c:83:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbpJYn5q8hLrTXPHhNPdIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MWM2N2JkYjZkOGMyMzBmY2RiNDI3YTlmNzFiODAxMzU4 NzJmYzIwHhcNMjUxMjExMjIwMTAzWhcNMjUxMjEyMjIwMTAzWjAzMTEwLwYDVQQD Eyg2YzhjMjAzOGE5MzljMzkxYzYzYjY5MzQyMzY0YTg0YjU1MGRhNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAmaBrMO/ypLtFgemizzArHwhblV cqBOYwr4uGa5RWK905sCxbpchzG0Mr8ZoQ/svJ20ZY7MrzPUTkx5ZvIjJU4vvz7F gU0Ty9t+ojV8jThs4Za6O87VFEcBrq3nJN9zmHXHD1kSQwI04/BRh2xtvcVnHFTS k3UbhgbVQxSNXtzwRst3wn6p1SafQSJN07A2T91U6LnD0r8p1MAloQZEBKF2RHme u51pOtjTDQNkk++FmqkAXz7PCbQrmmGg/E5vIfDePYICVt4Yqe9LdN1x5XED9DLO TkbEvO4zT5At1Y/W+Z876f06MmKqPBfqE2bgHUVkPO9zhYqL2ZKJ6+PRfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyMIDipOcORxjtpNCNkqEtVDaZLMB8GA1UdIwQY MBaAFIYcZ7222MIw/NtCep9xuAE1hy/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC84YTExNWItMzg1OS00NzU5LTg1YWUt ZmI4NTNjNjUzMzRhLzEvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC84YTExNWItMzg1OS00NzU5LTg1YWUtZmI4NTNjNjUzMzRh LzEvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTv+d3Kt cVP1fsDLMP20XJQFAKEQZ7CGctaIfwS/whrRPJLZNGSm4OzKUKS4TjJIzms/pn7B C96E3F5F3b/wATCkRKobMHaNbjdVGbOqP2EyCWJJ1T+4HVQ0KamRY3+VXOsYuOz7 kqyq3FmMD8umAC1DqrtYoRxe01F8tUJ7amcE0HA3iUsEH+gldPIzxPlsNGwwrbgA vQWf1zfU5hB7CdvFf4JVYDfUIrsQlQ7dh/WjIBRk/qywGATakuCbyQar4F8vWaZf 3kMtqE80BY/mj4O4U29D1rKm+r0MEBhp+7J7C8gKciLL14xGSF2ccqQyW0MZmzAv dC/7dAKCTgyDOw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:23:31 2025 by rpki-client