This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: /etqsoKxOzEGX3S0r1vIQFOKaMm7YOYmwy8C6cBS23w= Subject key identifier: 39:D7:AD:24:9B:96:85:7C:B0:59:FE:27:6B:CC:35:B2:1E:50:B8:A1 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019B22BEAC78EED6059464B8DAFED64C56A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1793 Signing time: Mon 15 Dec 2025 16:01:19 +0000 Manifest this update: Mon 15 Dec 2025 16:01:19 +0000 Manifest next update: Tue 16 Dec 2025 16:01:19 +0000 Files and hashes: 1: 1-cqQGhXn60MgU2VUeNpjveMW2qk.roa (hash: feFbGoFtjwOyIRFeQAOSoVibJ96/Lb0iYRt2u/rBKMg=) 2: 38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa (hash: tMPubQJjYp/dcRFcviDk7lh4PnDXnz7NxUZ6aWZWDyw=) 3: 61vRkExsI62jJ48irmkSDqW7AqQ.roa (hash: JvZBuIGS2vn+dO3Q9/C07cjmDLxdJUfuxzakaBvC2Ms=) 4: B-leWKyHyUWQaTSAIdQFN-Zp9rw.roa (hash: zSJCyrn6RempGySvfu/Xbm5Mpb6WnVGqpUroJHwaWew=) 5: Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa (hash: 5Bu1yMZZneENHRnbSmQP3RKWM4Ya4gnEDHmeUdig1bo=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: lxkqV2eGvsBexEt1WIz+mOSznQsSA0oFwipswV3IT0c=) 7: KT_XRl68MXL3ukVnoMjZI1SdZ_Q.roa (hash: ug8+swCsKmFRIJydlY68K1ox72m3uNsfqqtSels/7I8=) 8: PLFnFsip4j-sETB8PPQgrmVAohU.roa (hash: h6NOUcP49OYU6YMMiK3QVB4r4u8oK/zQN8Ei+4fsxfc=) 9: UAEVVZJh_F--n89kLYAR_ZrMiAA.roa (hash: KwDeeF7UfAzk4CN3kaftHTo6xiyKPchWU5oi2GhJgUA=) 10: XgPwQOKsd9uJBigbEk6gk3WV4gw.roa (hash: MfMJHXV5sXbrxV0YBc5joH+vkuSR+zLfQaFUaN552Bw=) 11: Z9kOlfq-w01D8Ml4l6fqbORR_5E.roa (hash: gxikB87WE0XHMDAk0eS1AdtF8pmhQbJr0n4lM1hO40I=) 12: cUfpv5-AAffzxD9fcxzlAlyBCJ4.roa (hash: xpWzwpf+CMwbZhPneV1IeCxiayddwXs6mMP85+eMFG8=) 13: f7jihsbQZQOjudWmankbYdgvSd0.roa (hash: Kmr8nTMHln2GoQ9z1uNdCIRV8UiFMuI6zP59QLBGAfA=) 14: m8selLLRbKezlnaS1FUfG6Kw0Ns.roa (hash: gDn7HNTqTqOigQSPvIZJVIcZmeh/IZoOdyWyJdwiR84=) 15: oANVOGpGqSZNzfjjdghTPit9_38.roa (hash: VSfuOwX73gMez7dFTyLtUenlMRci41842EschwuvUEw=) 16: thBlz8VmOwFy7VP6rRGU4IAeOPM.roa (hash: j47jyGdIQHFDmGyLmCcj/vCJ4acjKFHJg9XXhEJ2n2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:ac:78:ee:d6:05:94:64:b8:da:fe:d6:4c:56:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Dec 15 16:01:19 2025 GMT Not After : Dec 16 16:01:19 2025 GMT Subject: CN=39d7ad249b96857cb059fe276bcc35b21e50b8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5c:6c:09:eb:df:9f:d0:0a:3c:52:8d:b6:c0: 9a:22:98:05:37:4b:d6:dd:21:b7:35:d8:93:37:4f: 7e:5f:16:c9:f1:be:65:5d:5f:54:0c:26:4f:fd:f7: de:67:f9:3f:c5:bd:b4:bd:21:ac:c9:50:d2:7d:24: b8:a0:bb:96:23:95:bd:45:37:50:d9:d7:04:34:a9: 5c:74:1c:2a:4b:36:90:ff:27:d7:a9:be:7a:7b:be: 1a:db:b3:75:ab:d7:3c:20:49:65:ef:4c:34:3e:bb: 85:2a:3e:d8:f5:14:f4:3f:a5:2d:f3:ee:4f:e3:4f: 72:43:a9:3e:af:20:6f:f9:e8:22:f1:32:07:e7:6c: 52:2d:81:34:e6:52:f0:52:88:d6:25:f7:dd:b2:3a: 84:7d:48:8d:84:66:bc:58:55:6d:31:7f:35:07:1c: 2c:97:fd:e2:3d:f8:bf:79:a8:e8:d9:da:66:32:c9: 36:59:55:8a:b0:a8:3f:7c:0a:c5:50:c6:77:9c:eb: c3:25:f8:26:a9:f3:8d:a0:6d:a7:07:d3:df:8d:33: 19:af:76:1b:a1:5e:72:c7:ee:f3:ee:07:ee:4f:c4: 7a:22:c4:ef:42:8c:59:e2:08:47:11:bb:b3:d8:07: 57:85:46:35:44:65:28:04:a1:69:57:7b:b8:bf:5e: 6e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D7:AD:24:9B:96:85:7C:B0:59:FE:27:6B:CC:35:B2:1E:50:B8:A1 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:85:b3:b9:e0:81:69:2a:6e:e4:d6:c3:5e:99:fc:08:7a:b8: 2f:d5:92:af:96:70:8f:65:42:49:5e:14:44:3f:37:75:71:8b: 74:3d:50:23:60:e1:59:22:06:65:73:b5:ec:b9:7c:ab:20:7c: 7e:5f:60:a4:b5:bc:a9:36:f6:36:e1:65:4a:81:dd:e4:dc:42: 50:c5:5f:23:5d:e3:3b:e8:fe:41:02:af:c1:9d:c6:42:64:3f: fe:c5:4b:d1:4c:4b:a3:6b:62:32:f9:c6:17:c2:23:e9:31:24: d2:25:57:8d:9a:a4:b4:66:93:e8:62:11:cd:a1:00:35:ed:a3: 91:8a:45:41:10:5c:2f:cf:be:fd:78:76:e2:b6:53:39:34:a7: 1a:95:44:d9:41:01:c0:19:90:75:20:1b:22:fc:a9:8e:92:1c: d4:78:c1:bb:4f:d2:b0:e9:65:68:e5:f8:e0:c2:c2:8f:ff:36: dc:42:ce:30:4c:8d:90:42:e6:7b:b8:80:96:53:96:e1:bc:e2: 1f:66:da:96:22:1b:1e:3f:bf:2c:f8:fa:9b:53:15:0b:53:2b: 28:ef:59:9d:41:3f:ed:99:80:3c:d6:39:6b:e9:32:4b:4e:34: 59:70:07:79:70:8e:cd:ff:53:20:fe:0f:27:9d:64:e5:8f:71: 5f:55:f3:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivqx47tYFlGS42v7WTFamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjUxMjE1MTYwMTE5WhcNMjUxMjE2MTYwMTE5WjAzMTEwLwYDVQQD EygzOWQ3YWQyNDliOTY4NTdjYjA1OWZlMjc2YmNjMzViMjFlNTBiOGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFxsCevfn9AKPFKNtsCaIpgFN0vW 3SG3NdiTN09+XxbJ8b5lXV9UDCZP/ffeZ/k/xb20vSGsyVDSfSS4oLuWI5W9RTdQ 2dcENKlcdBwqSzaQ/yfXqb56e74a27N1q9c8IEll70w0PruFKj7Y9RT0P6Ut8+5P 409yQ6k+ryBv+egi8TIH52xSLYE05lLwUojWJffdsjqEfUiNhGa8WFVtMX81Bxws l/3iPfi/eajo2dpmMsk2WVWKsKg/fArFUMZ3nOvDJfgmqfONoG2nB9PfjTMZr3Yb oV5yx+7z7gfuT8R6IsTvQoxZ4ghHEbuz2AdXhUY1RGUoBKFpV3u4v15uTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnXrSSbloV8sFn+J2vMNbIeULihMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4WzueCB aSpu5NbDXpn8CHq4L9WSr5Zwj2VCSV4URD83dXGLdD1QI2DhWSIGZXO17Ll8qyB8 fl9gpLW8qTb2NuFlSoHd5NxCUMVfI13jO+j+QQKvwZ3GQmQ//sVL0UxLo2tiMvnG F8Ij6TEk0iVXjZqktGaT6GIRzaEANe2jkYpFQRBcL8++/Xh24rZTOTSnGpVE2UEB wBmQdSAbIvypjpIc1HjBu0/SsOllaOX44MLCj/823ELOMEyNkELme7iAllOW4bzi H2baliIbHj+/LPj6m1MVC1MrKO9ZnUE/7ZmAPNY5a+kyS040WXAHeXCOzf9TIP4P J51k5Y9xX1XzXg== -----END CERTIFICATE-----Generated at Mon Dec 15 18:59:43 2025 by rpki-client