This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json) Hash identifier: xGYrblKm0rBeJYjqAPoYfNQZZifX7ymoPITzNWuGM2Y= Subject key identifier: 0D:58:67:68:91:64:59:9B:53:53:46:A7:30:54:E0:B6:E7:AC:18:A1 Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8 Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8 Certificate serial: 019B5A886A5341AE03145C7DAD63A1D4B989 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft Manifest number: 162B Signing time: Fri 26 Dec 2025 12:00:48 +0000 Manifest this update: Fri 26 Dec 2025 12:00:48 +0000 Manifest next update: Sat 27 Dec 2025 12:00:48 +0000 Files and hashes: 1: PAjoOsQf0RmmoZA6UENFacJ4ClY.roa (hash: ZTPqKop0ZcVt0foxrf1KsXpnvWpYw7IeU4H32JK9XIU=) 2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: VhXWa6fhZAnh8b0Eo67Tmg21mU30+Bo7z5gKEChLNyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:6a:53:41:ae:03:14:5c:7d:ad:63:a1:d4:b9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8 Validity Not Before: Dec 26 12:00:48 2025 GMT Not After : Dec 27 12:00:48 2025 GMT Subject: CN=0d5867689164599b535346a73054e0b6e7ac18a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:44:34:11:81:b7:31:5b:27:ba:96:c7:61: ce:c5:21:e4:5b:5a:b0:a0:90:41:79:52:72:2b:84: 83:7d:5a:4e:82:f4:3c:34:26:3d:ec:7e:c5:27:5a: 84:bc:5f:cf:8f:16:68:25:4d:68:bd:3a:b1:4d:82: 56:87:e5:c3:c1:17:f9:75:c3:44:15:cc:74:e3:c8: 19:47:e0:4f:65:b2:19:a9:18:15:85:74:14:df:a8: da:12:2a:b6:47:c3:e6:b6:ec:ad:66:24:46:f0:91: a5:b1:b1:c7:1c:08:15:c3:61:35:40:fd:bc:64:98: 49:69:22:15:1c:57:10:58:27:ae:94:f8:22:9a:17: e3:70:da:5e:1c:96:e7:79:d2:61:9b:43:3b:86:ae: 0b:92:31:b5:9b:f0:4e:66:4a:7e:8f:2a:09:41:d3: c8:1f:7b:a4:73:2a:70:b3:17:77:a3:bf:b5:7f:27: 76:2d:3e:aa:9c:f6:7f:af:83:b0:e6:d7:df:36:43: 28:66:b3:51:f8:31:20:e5:9a:03:5b:ed:75:fe:93: 3f:c1:11:38:2d:68:b0:28:cf:5d:50:49:f5:96:2d: ea:a8:8d:b5:76:38:c0:f5:b9:c3:7c:3d:5a:93:a7: c5:15:0b:a8:81:ba:7d:73:16:a6:e2:02:c2:68:de: 30:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:58:67:68:91:64:59:9B:53:53:46:A7:30:54:E0:B6:E7:AC:18:A1 X509v3 Authority Key Identifier: keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:66:ec:04:dd:60:f2:c0:82:d4:7c:cc:d6:12:68:a1:55:51: 16:c4:de:85:a5:6f:aa:90:f6:16:a0:f1:07:1b:53:1f:92:df: cf:be:4c:96:a6:a2:19:a1:20:18:d8:47:72:99:fe:05:34:b1: 55:9d:d9:fb:8c:3a:87:4b:f9:51:b4:50:91:78:0c:5e:72:6d: f7:b8:3c:79:1b:0e:65:30:bd:76:16:d6:9a:29:44:d1:08:d0: 1b:1b:ca:e3:41:b7:b2:3f:dc:17:dd:55:7d:36:c1:5d:07:14: b6:df:63:d3:67:74:e4:e4:4f:cb:4c:f3:a2:df:2d:71:d9:e3: 12:9e:9a:50:24:6d:96:36:8d:08:b3:9a:ae:e0:34:3e:b7:f3: 94:62:7b:ba:d7:99:40:51:01:19:27:2a:be:b8:8e:56:fd:6e: 3a:c2:1e:29:37:4b:09:eb:58:22:8f:d6:7d:83:24:2f:ac:2b: 69:cd:0c:d0:b8:c6:4e:8e:a4:f9:60:75:76:f7:22:ab:19:5a: 8e:d4:71:a8:44:4e:1d:a8:0c:80:71:ef:af:13:4d:9e:56:4e: bf:6c:e1:c6:15:91:c2:6c:1c:56:5e:6e:3b:dd:94:a8:67:ae: 90:d7:5d:22:db:64:0d:72:a9:6a:06:42:49:e5:eb:64:85:93: 96:78:d8:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiGpTQa4DFFx9rWOh1LmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0N2QxYmViZTRjMjNjNDIxN2I4NGY3ZmQ4MTkyYWIyNTU1 NDE1YTgwHhcNMjUxMjI2MTIwMDQ4WhcNMjUxMjI3MTIwMDQ4WjAzMTEwLwYDVQQD EygwZDU4Njc2ODkxNjQ1OTliNTM1MzQ2YTczMDU0ZTBiNmU3YWMxOGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7NENBGBtzFbJ7qWx2HOxSHkW1qw oJBBeVJyK4SDfVpOgvQ8NCY97H7FJ1qEvF/PjxZoJU1ovTqxTYJWh+XDwRf5dcNE Fcx048gZR+BPZbIZqRgVhXQU36jaEiq2R8PmtuytZiRG8JGlsbHHHAgVw2E1QP28 ZJhJaSIVHFcQWCeulPgimhfjcNpeHJbnedJhm0M7hq4LkjG1m/BOZkp+jyoJQdPI H3ukcypwsxd3o7+1fyd2LT6qnPZ/r4Ow5tffNkMoZrNR+DEg5ZoDW+11/pM/wRE4 LWiwKM9dUEn1li3qqI21djjA9bnDfD1ak6fFFQuogbp9cxam4gLCaN4wxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1YZ2iRZFmbU1NGpzBU4LbnrBihMB8GA1UdIwQY MBaAFIR9G+vkwjxCF7hPf9gZKrJVVBWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mODFlYWItYmMzNi00MmE2LTgyMmEt Y2RiMWQzODU1NmJiLzEvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mODFlYWItYmMzNi00MmE2LTgyMmEtY2RiMWQzODU1NmJi LzEvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWbsBN1g 8sCC1HzM1hJooVVRFsTehaVvqpD2FqDxBxtTH5Lfz75MlqaiGaEgGNhHcpn+BTSx VZ3Z+4w6h0v5UbRQkXgMXnJt97g8eRsOZTC9dhbWmilE0QjQGxvK40G3sj/cF91V fTbBXQcUtt9j02d05ORPy0zzot8tcdnjEp6aUCRtljaNCLOaruA0PrfzlGJ7uteZ QFEBGScqvriOVv1uOsIeKTdLCetYIo/WfYMkL6wrac0M0LjGTo6k+WB1dvciqxla jtRxqEROHagMgHHvrxNNnlZOv2zhxhWRwmwcVl5uO92UqGeukNddIttkDXKpagZC SeXrZIWTlnjYPQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:50 2025 by rpki-client