This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: nBTOCCIGoSvXh+VNXa5mAkK7BFS/4Rk2FBSNVbyIg20= Subject key identifier: 7D:10:A9:29:C8:62:82:23:B5:47:5A:7A:AC:0C:D6:B2:BD:D8:72:95 Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019B191659D5EFF00B6C2E60837B8E429F46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 177F Signing time: Sat 13 Dec 2025 19:00:53 +0000 Manifest this update: Sat 13 Dec 2025 19:00:53 +0000 Manifest next update: Sun 14 Dec 2025 19:00:53 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: IEajPuhdVp67ZmXeq0Ux8yZDJtiMXbu1bZV/g3OAfxA=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:59:d5:ef:f0:0b:6c:2e:60:83:7b:8e:42:9f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Dec 13 19:00:53 2025 GMT Not After : Dec 14 19:00:53 2025 GMT Subject: CN=7d10a929c8628223b5475a7aac0cd6b2bdd87295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:0d:30:18:1d:5c:e8:a0:ce:3a:b0:46:9a: f0:f2:06:33:18:a8:a2:b4:26:d2:3c:94:77:21:11: a5:7a:1e:1f:03:c2:e5:71:68:5d:79:d0:79:69:40: 94:04:11:cf:a2:ed:6e:dc:54:b2:dc:be:3d:85:4d: f1:03:0e:db:4b:a5:a3:a8:e0:d8:31:35:64:0a:b3: e5:fb:68:c5:08:61:f3:1a:24:b0:1f:79:cd:b7:83: e2:b6:e9:59:39:d3:21:aa:f8:73:be:33:06:95:b6: b9:29:41:d3:b9:29:52:b4:7c:cf:0a:6b:2c:32:b4: f0:5a:6b:30:a6:94:0b:4a:71:09:36:90:16:da:f5: b2:b0:c4:2d:50:2c:f2:b3:0e:49:0c:bd:88:3c:de: a5:e3:34:26:a6:f5:5f:a9:1f:b9:99:5e:70:7e:28: c4:ab:2e:8a:ae:b5:16:19:4b:d7:54:4a:a9:53:37: 77:62:ba:da:c4:1f:e0:6e:04:82:83:1f:b3:76:3b: 3d:a2:d0:21:bf:83:33:2a:8f:a0:07:e1:8d:b0:91: 6c:51:a7:59:29:85:0d:5b:ba:59:20:9f:16:36:c6: f8:80:02:4a:03:01:ff:e4:dc:7a:af:6d:6e:34:82: e8:97:4e:d8:36:33:bb:30:4b:6c:5f:6d:4d:87:34: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:10:A9:29:C8:62:82:23:B5:47:5A:7A:AC:0C:D6:B2:BD:D8:72:95 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c2:69:af:71:9e:ea:80:77:13:c7:e0:39:32:d2:85:c6:50: b5:9e:35:9f:db:39:58:af:4c:73:cb:10:0c:02:15:42:8a:60: 82:39:38:7d:cb:53:1f:c5:2d:86:f7:99:b0:51:0d:70:a2:0c: fe:b8:99:1c:f1:8b:e9:91:30:a3:6a:ac:db:15:09:f4:d8:e2: a3:30:31:d8:45:c9:a3:22:b6:c7:dc:24:f6:22:fb:d7:ac:4f: e6:62:81:5c:97:41:a7:5f:ef:4a:94:03:b2:a0:ab:4f:d4:b8: 65:c7:b8:e7:c8:ec:32:e7:f7:de:89:84:11:7a:82:37:18:7e: e6:28:4b:e9:68:ca:40:6b:e8:e1:24:b9:ac:f1:3b:c7:87:f2: 35:34:8b:17:7d:7c:99:04:34:60:e3:39:93:a9:38:32:2c:2a: 32:35:63:e8:6c:2a:67:4e:44:30:de:d5:2d:d9:16:87:31:6f: d0:16:c0:64:4c:ae:3e:6b:0d:ff:e1:44:b4:96:46:59:5d:30: 29:22:c2:fe:67:aa:ff:73:69:32:d8:f1:d5:65:b5:90:b7:ce: 50:69:52:ae:c6:6b:ef:f1:f7:11:03:47:82:72:8c:7f:30:bf: e5:53:a7:93:bb:32:90:a3:a2:0d:c3:f2:5e:10:32:42:be:d8: 86:97:89:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFlnV7/ALbC5gg3uOQp9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUxMjEzMTkwMDUzWhcNMjUxMjE0MTkwMDUzWjAzMTEwLwYDVQQD Eyg3ZDEwYTkyOWM4NjI4MjIzYjU0NzVhN2FhYzBjZDZiMmJkZDg3Mjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhMNMBgdXOigzjqwRprw8gYzGKii tCbSPJR3IRGleh4fA8LlcWhdedB5aUCUBBHPou1u3FSy3L49hU3xAw7bS6WjqODY MTVkCrPl+2jFCGHzGiSwH3nNt4PitulZOdMhqvhzvjMGlba5KUHTuSlStHzPCmss MrTwWmswppQLSnEJNpAW2vWysMQtUCzysw5JDL2IPN6l4zQmpvVfqR+5mV5wfijE qy6KrrUWGUvXVEqpUzd3YrraxB/gbgSCgx+zdjs9otAhv4MzKo+gB+GNsJFsUadZ KYUNW7pZIJ8WNsb4gAJKAwH/5Nx6r21uNILol07YNjO7MEtsX21NhzTOeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0QqSnIYoIjtUdaeqwM1rK92HKVMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8Jpr3Ge 6oB3E8fgOTLShcZQtZ41n9s5WK9Mc8sQDAIVQopggjk4fctTH8UthveZsFENcKIM /riZHPGL6ZEwo2qs2xUJ9NjiozAx2EXJoyK2x9wk9iL716xP5mKBXJdBp1/vSpQD sqCrT9S4Zce458jsMuf33omEEXqCNxh+5ihL6WjKQGvo4SS5rPE7x4fyNTSLF318 mQQ0YOM5k6k4MiwqMjVj6GwqZ05EMN7VLdkWhzFv0BbAZEyuPmsN/+FEtJZGWV0w KSLC/meq/3NpMtjx1WW1kLfOUGlSrsZr7/H3EQNHgnKMfzC/5VOnk7sykKOiDcPy XhAyQr7YhpeJSw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:49:21 2025 by rpki-client