This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft File: hh3iAyQAiy0n65dJWszi67zch8c.mft (raw, json) Hash identifier: MMUjVdssO03jFW7+qJS962Qryk4iMp6vta09LQ2xDW8= Subject key identifier: 9A:5D:78:7F:29:0A:3B:3C:EE:1A:67:73:9E:14:1C:93:D5:01:2F:D4 Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7 Certificate issuer: /CN=861de20324008b2d27eb97495acce2ebbcdc87c7 Certificate serial: 019B5A1A72013756FF066D254D0D8C69F1FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 10:00:41 +0000 Manifest this update: Fri 26 Dec 2025 10:00:41 +0000 Manifest next update: Sat 27 Dec 2025 10:00:41 +0000 Files and hashes: 1: cdpye_KyS4EmcLPLYSZp6vr21yY.roa (hash: Zz0lFiDAwglkcbO2M8ukF/dTePvCgzsApZfE0jU6Bcs=) 2: hh3iAyQAiy0n65dJWszi67zch8c.crl (hash: FZLvWO14Z+7zW+quxB0Kn1HVA/fvyG7GUROpb8LstxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:72:01:37:56:ff:06:6d:25:4d:0d:8c:69:f1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7 Validity Not Before: Dec 26 10:00:41 2025 GMT Not After : Dec 27 10:00:41 2025 GMT Subject: CN=9a5d787f290a3b3cee1a67739e141c93d5012fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3a:81:b9:db:28:e7:7a:78:fa:26:e4:9f:7e: 52:55:3f:62:97:eb:b5:0b:30:49:e7:2b:2e:2e:30: 36:1c:3d:2c:9d:5d:39:d0:b4:cf:d9:ce:87:21:da: 80:6a:94:db:80:b2:8b:c2:1e:b1:69:cd:7d:76:c3: 06:1f:47:e4:1b:1c:5d:66:55:28:34:23:9e:3d:58: 21:fb:29:25:54:f9:c6:32:fd:72:fe:a2:99:55:34: 17:fb:58:50:58:75:25:bd:a3:67:bb:ee:24:46:49: f8:9a:ee:4c:6a:13:85:d1:d6:c9:ca:27:5c:b7:b3: 5c:0a:03:69:11:97:63:fd:ae:dc:b0:ef:4d:84:e1: a5:05:30:43:d4:74:a7:39:72:a7:e0:08:a3:d9:31: 69:c5:3a:28:95:73:5e:e8:50:d8:75:2a:53:c7:3f: 25:cc:25:87:58:ca:36:15:83:66:8a:02:29:06:03: b8:c3:0e:e0:d1:56:98:0f:f2:b0:04:87:b9:bd:30: f7:c7:86:ae:fa:70:ce:62:f9:33:65:13:f0:fe:4c: 44:e0:dc:a7:d0:d1:ed:05:4d:61:e7:b2:7a:b2:8f: b5:b8:18:7b:64:6c:24:ad:d4:1f:9f:ba:6d:fb:39: 74:7e:2a:ac:5d:f7:59:5e:fc:27:dc:93:18:b4:8f: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5D:78:7F:29:0A:3B:3C:EE:1A:67:73:9E:14:1C:93:D5:01:2F:D4 X509v3 Authority Key Identifier: keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9c:d7:33:4a:6a:b4:89:18:c3:0c:a8:31:71:f9:0f:d9:2f: 62:35:7e:65:a3:02:7d:cb:da:42:a6:fc:9f:70:ad:32:92:0b: 9f:86:3c:d6:d5:c6:d9:20:cd:93:f0:79:b3:ee:6d:c3:ab:23: 54:39:35:06:d4:7b:2b:ca:84:8c:04:69:6b:bc:02:81:75:dc: 5d:24:ec:80:ab:51:8c:d5:3b:b8:0c:d8:9a:ef:f5:d8:ec:22: 51:0a:b6:e3:eb:85:8f:88:e3:ef:02:22:44:11:4e:8b:e6:ba: 79:22:57:41:e9:0e:fc:f5:47:1a:56:c0:97:40:29:2c:8a:ad: 30:11:09:fc:bb:9d:35:4c:37:29:fe:5d:c2:18:4e:ea:72:22: 2a:d1:c0:27:eb:8f:5c:47:ec:46:bf:8f:3a:fe:28:df:0e:1d: 3b:ee:60:65:c9:57:88:fb:93:75:9f:2d:5f:10:b9:22:54:ff: 7f:af:c8:2b:5a:64:23:72:64:9b:07:c3:63:6b:d8:73:8c:87: 1e:ac:e0:4f:a7:15:6a:59:56:17:3f:6d:b4:9a:b5:1b:b0:36: f7:89:4d:ac:4d:af:e7:2e:38:57:5c:28:1b:1a:e1:e4:b0:a9: 3e:fe:fd:5c:63:19:e1:1e:37:aa:a4:6d:f3:d3:83:c4:d6:72: 21:4d:e3:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGnIBN1b/Bm0lTQ2MafH7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MWRlMjAzMjQwMDhiMmQyN2ViOTc0OTVhY2NlMmViYmNk Yzg3YzcwHhcNMjUxMjI2MTAwMDQxWhcNMjUxMjI3MTAwMDQxWjAzMTEwLwYDVQQD Eyg5YTVkNzg3ZjI5MGEzYjNjZWUxYTY3NzM5ZTE0MWM5M2Q1MDEyZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jqBudso53p4+ibkn35SVT9il+u1 CzBJ5ysuLjA2HD0snV050LTP2c6HIdqAapTbgLKLwh6xac19dsMGH0fkGxxdZlUo NCOePVgh+yklVPnGMv1y/qKZVTQX+1hQWHUlvaNnu+4kRkn4mu5MahOF0dbJyidc t7NcCgNpEZdj/a7csO9NhOGlBTBD1HSnOXKn4Aij2TFpxToolXNe6FDYdSpTxz8l zCWHWMo2FYNmigIpBgO4ww7g0VaYD/KwBIe5vTD3x4au+nDOYvkzZRPw/kxE4Nyn 0NHtBU1h57J6so+1uBh7ZGwkrdQfn7pt+zl0fiqsXfdZXvwn3JMYtI+ZiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpdeH8pCjs87hpnc54UHJPVAS/UMB8GA1UdIwQY MBaAFIYd4gMkAIstJ+uXSVrM4uu83IfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGgzaUF5UUFpeTBuNjVkSldzemk2N3pjaDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85M2FjZWMtYjFlZS00ZjMxLWFmNmUt MWU0NmFlODcyMWVmLzEvaGgzaUF5UUFpeTBuNjVkSldzemk2N3pjaDhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy85M2FjZWMtYjFlZS00ZjMxLWFmNmUtMWU0NmFlODcyMWVm LzEvaGgzaUF5UUFpeTBuNjVkSldzemk2N3pjaDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5zXM0pq tIkYwwyoMXH5D9kvYjV+ZaMCfcvaQqb8n3CtMpILn4Y81tXG2SDNk/B5s+5tw6sj VDk1BtR7K8qEjARpa7wCgXXcXSTsgKtRjNU7uAzYmu/12OwiUQq24+uFj4jj7wIi RBFOi+a6eSJXQekO/PVHGlbAl0ApLIqtMBEJ/LudNUw3Kf5dwhhO6nIiKtHAJ+uP XEfsRr+POv4o3w4dO+5gZclXiPuTdZ8tXxC5IlT/f6/IK1pkI3JkmwfDY2vYc4yH HqzgT6cVallWFz9ttJq1G7A294lNrE2v5y44V1woGxrh5LCpPv79XGMZ4R43qqRt 89ODxNZyIU3jyg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:26 2025 by rpki-client