This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft File: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft (raw, json) Hash identifier: A2E319IXFgAm3I8Jd1FonybtRY9XdUyaAQ96x4ciCxY= Subject key identifier: 77:96:7E:A7:8A:B4:25:D7:D8:03:D9:08:F9:3F:5E:E6:10:CA:DA:6B Authority key identifier: 84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80 Certificate issuer: /CN=84106bfa023f17cf6d67eac9fdd2868a72f76680 Certificate serial: 019B49274B49D770E2CAB38A6A89FDE19A58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 03:01:10 +0000 Manifest this update: Tue 23 Dec 2025 03:01:10 +0000 Manifest next update: Wed 24 Dec 2025 03:01:10 +0000 Files and hashes: 1: BZnndlQQXrhtsi1w92QwnbcTVos.roa (hash: xdoIZn2kmQaThra2U5g+oAnP8t2eo6iub1zi69U/YhE=) 2: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl (hash: E1etRsv8nPEv2p+cuzTjDMKfJ26mJDCu99JayvbyXOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 03:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:4b:49:d7:70:e2:ca:b3:8a:6a:89:fd:e1:9a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84106bfa023f17cf6d67eac9fdd2868a72f76680 Validity Not Before: Dec 23 03:01:10 2025 GMT Not After : Dec 24 03:01:10 2025 GMT Subject: CN=77967ea78ab425d7d803d908f93f5ee610cada6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:77:53:4f:66:0e:4c:00:1b:06:b1:53:34:c8: 51:82:41:e3:e8:0a:e5:13:7f:80:cf:54:c8:bd:b8: a6:38:d3:72:53:c8:be:ed:ee:be:13:c4:09:a2:07: 39:86:7d:9b:29:8f:18:dc:ae:59:04:43:33:29:49: 41:9b:2b:d4:fa:9e:97:3f:3a:15:97:e5:ca:c4:2b: b8:13:e0:e1:7b:e1:3f:02:ab:04:90:34:e2:db:1d: a2:4c:42:0e:8b:9d:5e:a3:bd:8f:f3:3d:6d:e1:14: a1:cc:5c:74:0b:ff:c1:2b:8c:4d:bf:bb:8a:98:82: 6f:7d:71:85:ef:65:37:10:fc:3d:06:cb:ff:90:83: 69:d9:04:cb:61:0d:b9:b9:89:81:63:60:82:fb:f3: 1d:96:cf:22:48:77:4b:5a:f8:84:2a:da:27:06:c6: 8b:91:11:e7:2e:f1:bf:80:44:a0:d8:90:65:05:e9: f4:3f:76:05:5a:4b:b4:5a:98:ff:30:36:af:19:44: f0:c0:b4:00:09:a3:34:a3:f0:a8:d4:31:df:47:87: 8c:e0:34:84:f3:29:06:f1:c3:79:b0:1e:e5:78:4e: 90:bd:a0:f5:e5:26:a9:17:03:d0:24:a2:4f:e7:b2: ca:de:57:e0:a9:ff:fd:2d:6e:c9:35:8b:a2:3c:d8: c4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:96:7E:A7:8A:B4:25:D7:D8:03:D9:08:F9:3F:5E:E6:10:CA:DA:6B X509v3 Authority Key Identifier: keyid:84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:22:03:05:68:09:0c:18:28:71:eb:d1:bb:46:7c:83:18:4c: 73:dc:2f:ea:e6:cb:a8:ce:70:e1:fa:65:a3:8a:63:ad:0b:67: c5:2b:5f:8d:37:1d:74:a9:3b:a4:4c:d6:78:f0:c8:e9:8f:1f: 86:98:60:3b:c9:b8:b5:12:e1:5c:77:9b:b5:81:57:4f:f7:21: 11:bd:b3:9e:fb:7f:21:3a:6d:4b:77:70:fe:66:ff:d9:f9:11: 20:80:83:cb:4b:d0:82:23:61:81:74:9b:20:28:1b:97:a9:e9: 13:cd:15:3d:54:50:4e:c1:2b:7a:8d:34:4f:76:15:cf:8a:77: 4d:eb:a4:14:4d:f0:3c:4e:ab:2f:76:e8:62:f4:66:60:db:aa: 3a:32:d1:96:3a:4a:4c:fb:99:c1:ea:b6:46:30:87:70:76:a3: 66:38:ce:25:2b:4e:47:45:14:c4:26:58:8f:0f:42:5e:a9:7f: cb:b6:77:ec:18:de:67:0b:e1:9a:b4:02:44:3a:97:f1:ee:b1: 3c:60:da:9a:af:54:a5:df:be:e6:cc:f4:7c:6e:b8:67:f7:13: 44:24:09:f5:f3:c7:fb:d6:2c:74:f8:39:66:1c:26:ca:05:d6: d1:ef:27:96:af:18:52:d3:11:b7:61:23:a7:fa:47:82:a1:70: 2f:a8:a5:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJ0tJ13DiyrOKaon94ZpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MTA2YmZhMDIzZjE3Y2Y2ZDY3ZWFjOWZkZDI4NjhhNzJm NzY2ODAwHhcNMjUxMjIzMDMwMTEwWhcNMjUxMjI0MDMwMTEwWjAzMTEwLwYDVQQD Eyg3Nzk2N2VhNzhhYjQyNWQ3ZDgwM2Q5MDhmOTNmNWVlNjEwY2FkYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXdTT2YOTAAbBrFTNMhRgkHj6Arl E3+Az1TIvbimONNyU8i+7e6+E8QJogc5hn2bKY8Y3K5ZBEMzKUlBmyvU+p6XPzoV l+XKxCu4E+Dhe+E/AqsEkDTi2x2iTEIOi51eo72P8z1t4RShzFx0C//BK4xNv7uK mIJvfXGF72U3EPw9Bsv/kINp2QTLYQ25uYmBY2CC+/Mdls8iSHdLWviEKtonBsaL kRHnLvG/gESg2JBlBen0P3YFWku0Wpj/MDavGUTwwLQACaM0o/Co1DHfR4eM4DSE 8ykG8cN5sB7leE6QvaD15SapFwPQJKJP57LK3lfgqf/9LW7JNYuiPNjE/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeWfqeKtCXX2APZCPk/XuYQytprMB8GA1UdIwQY MBaAFIQQa/oCPxfPbWfqyf3Shopy92aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZWIyOTMtOGU3Ni00NzBmLTg1NWYt YjYyNmQ1NzQ2ZDEzLzEvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83ZWIyOTMtOGU3Ni00NzBmLTg1NWYtYjYyNmQ1NzQ2ZDEz LzEvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSIDBWgJ DBgocevRu0Z8gxhMc9wv6ubLqM5w4fplo4pjrQtnxStfjTcddKk7pEzWePDI6Y8f hphgO8m4tRLhXHebtYFXT/chEb2znvt/ITptS3dw/mb/2fkRIICDy0vQgiNhgXSb ICgbl6npE80VPVRQTsEreo00T3YVz4p3TeukFE3wPE6rL3boYvRmYNuqOjLRljpK TPuZweq2RjCHcHajZjjOJStOR0UUxCZYjw9CXql/y7Z37BjeZwvhmrQCRDqX8e6x PGDamq9Upd++5sz0fG64Z/cTRCQJ9fPH+9YsdPg5ZhwmygXW0e8nlq8YUtMRt2Ej p/pHgqFwL6ilDw== -----END CERTIFICATE-----Generated at Tue Dec 23 12:42:09 2025 by rpki-client