This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft File: hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json) Hash identifier: +8kOJHq9ZCCcS/U53LPY/edjzp47gY4lI4z0Wjk8nn0= Subject key identifier: 6F:E6:EF:46:29:CD:A3:4D:83:23:ED:B3:93:59:56:53:02:80:BC:19 Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25 Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225 Certificate serial: 019B5ABFA725895EC2A52125813D9A5027F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft Manifest number: 1730 Signing time: Fri 26 Dec 2025 13:01:08 +0000 Manifest this update: Fri 26 Dec 2025 13:01:08 +0000 Manifest next update: Sat 27 Dec 2025 13:01:08 +0000 Files and hashes: 1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: tZxVQI6X/MvhnUcGegjdSycwaDSw/g2n7RaMmTPRU2w=) 2: kclE4AGa3IQ3ANoqx8hNmFyyOPc.roa (hash: era/rLdikRzOubIlTwlZQUllh2OgF4bxbh9GfJNQo5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:a7:25:89:5e:c2:a5:21:25:81:3d:9a:50:27:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225 Validity Not Before: Dec 26 13:01:08 2025 GMT Not After : Dec 27 13:01:08 2025 GMT Subject: CN=6fe6ef4629cda34d8323edb3935956530280bc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:37:e2:3a:d7:5d:3e:20:38:b6:43:da:a7: ef:fd:31:ea:e2:10:a1:f8:88:47:06:4c:ac:a5:47: b6:95:5e:99:a5:ed:10:cd:6b:6c:ea:28:29:b8:96: 33:85:8d:64:18:50:47:56:26:9b:1a:30:32:d1:69: e6:da:90:13:2b:2c:b0:95:eb:f0:5f:a7:54:0d:a0: 8d:d5:21:88:9c:06:b2:7c:54:fb:a6:e6:78:5c:c4: 98:72:86:ee:ab:c2:92:8d:37:3a:12:e8:09:ee:3c: 89:7d:ab:61:23:d0:29:e5:1b:63:7c:bc:e7:52:2e: 80:d2:b9:d0:16:7d:e2:57:1b:05:2a:d2:2b:60:87: c8:74:57:90:a0:b4:c6:00:23:a5:64:e5:e2:a2:46: 13:60:e3:fc:c6:65:8d:23:fe:37:04:b3:3a:c1:25: 60:f7:d0:65:c1:52:0e:d3:8d:ae:f8:9c:f0:00:47: 38:23:b3:e4:48:58:3d:24:9b:82:dd:f2:c9:b3:0a: 69:59:bc:1e:91:30:cd:77:09:e5:dc:4c:71:08:ef: a3:a3:ed:3f:a2:2e:90:a3:ca:a3:78:f7:15:90:ec: e4:ac:be:13:b9:42:74:f6:c1:f9:cf:79:13:2c:e4: c9:cd:eb:9d:7f:0c:6b:0b:2a:f4:57:98:a8:44:96: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E6:EF:46:29:CD:A3:4D:83:23:ED:B3:93:59:56:53:02:80:BC:19 X509v3 Authority Key Identifier: keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:09:6e:e1:15:d0:d2:41:b6:a9:1d:3b:4f:11:d5:0d:2a:ab: 51:cc:89:8d:e8:37:f8:e4:80:31:23:13:2f:52:ce:f2:7d:b4: e4:af:3a:eb:94:6c:c6:db:2f:59:c3:af:8c:09:89:0d:cc:6b: 0d:3a:de:7d:4b:58:15:4c:55:1d:67:d6:0f:93:3e:df:5f:46: e0:bd:93:0b:d1:a2:ea:9f:56:8f:48:7b:45:3a:4b:39:62:d9: 0b:51:61:87:5a:57:f2:c9:32:57:c4:db:d0:6f:47:52:dd:b3: f9:75:8a:89:ef:d0:be:86:e4:29:c3:75:6a:a1:1a:bc:5b:a1: 14:97:fb:e4:82:3b:10:03:06:ac:17:8e:be:ff:f2:4d:bb:14: c6:aa:e6:26:8f:d9:1f:c8:7d:9f:c9:3d:c6:9c:ec:7d:ed:71: 6c:75:2d:07:6e:4f:a2:f9:28:88:7f:c4:fc:9a:6b:1e:2b:09: 3e:6b:3a:af:88:32:a0:1d:ba:e6:1e:47:12:20:b4:4e:cd:ea: 84:f0:f4:a2:a6:37:0b:44:82:f4:48:d4:a5:f7:ff:b2:37:7a: 5d:28:95:14:ad:17:6c:6a:e8:66:b4:f1:54:05:15:81:3c:e1: f5:1f:92:30:e9:b8:f9:bd:08:38:96:72:01:64:de:84:af:c9: 6e:1a:51:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav6cliV7CpSElgT2aUCf3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NzhiNzZjNjljOTkxNTI5NGZkYzM5MTM1ZTIwZGFjNzM3 NjIyMjUwHhcNMjUxMjI2MTMwMTA4WhcNMjUxMjI3MTMwMTA4WjAzMTEwLwYDVQQD Eyg2ZmU2ZWY0NjI5Y2RhMzRkODMyM2VkYjM5MzU5NTY1MzAyODBiYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXU34jrXXT4gOLZD2qfv/THq4hCh +IhHBkyspUe2lV6Zpe0QzWts6igpuJYzhY1kGFBHViabGjAy0Wnm2pATKyywlevw X6dUDaCN1SGInAayfFT7puZ4XMSYcobuq8KSjTc6EugJ7jyJfathI9Ap5RtjfLzn Ui6A0rnQFn3iVxsFKtIrYIfIdFeQoLTGACOlZOXiokYTYOP8xmWNI/43BLM6wSVg 99BlwVIO042u+JzwAEc4I7PkSFg9JJuC3fLJswppWbwekTDNdwnl3ExxCO+jo+0/ oi6Qo8qjePcVkOzkrL4TuUJ09sH5z3kTLOTJzeudfwxrCyr0V5ioRJaqRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/m70YpzaNNgyPts5NZVlMCgLwZMB8GA1UdIwQY MBaAFIR4t2xpyZFSlP3DkTXiDaxzdiIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yODk2MDYtOWY1Yi00ZDM0LWFhY2Yt MmZkNjUwY2VmZDIxLzEvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8yODk2MDYtOWY1Yi00ZDM0LWFhY2YtMmZkNjUwY2VmZDIx LzEvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwlu4RXQ 0kG2qR07TxHVDSqrUcyJjeg3+OSAMSMTL1LO8n205K8665RsxtsvWcOvjAmJDcxr DTrefUtYFUxVHWfWD5M+319G4L2TC9Gi6p9Wj0h7RTpLOWLZC1Fhh1pX8skyV8Tb 0G9HUt2z+XWKie/QvobkKcN1aqEavFuhFJf75II7EAMGrBeOvv/yTbsUxqrmJo/Z H8h9n8k9xpzsfe1xbHUtB25PovkoiH/E/JprHisJPms6r4gyoB265h5HEiC0Ts3q hPD0oqY3C0SC9EjUpff/sjd6XSiVFK0XbGroZrTxVAUVgTzh9R+SMOm4+b0IOJZy AWTehK/JbhpRtg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:53 2025 by rpki-client