This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json) Hash identifier: 3Kh0O1Mmn4e6v73Fhh2jOyXC/bbkUeRUBHDlvacFT2I= Subject key identifier: 10:97:A6:CB:05:FD:15:D2:DF:44:94:EE:FA:C5:86:6B:78:C6:0A:C5 Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Certificate serial: 019B59763D4712CCD26DAB74BAE5BEF6499E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft Manifest number: 85 Signing time: Fri 26 Dec 2025 07:01:19 +0000 Manifest this update: Fri 26 Dec 2025 07:01:19 +0000 Manifest next update: Sat 27 Dec 2025 07:01:19 +0000 Files and hashes: 1: VmO3UXEyesCK7xMSxb16ZIYzF9A.roa (hash: aPLCPS23hjqSkPvp6cN+PKiJ+R1FoeAcBOZnERoWNo8=) 2: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: gHf36Gni/J/LPVUPOiF9tqzHgcaqPUg4YJsJy5OAasM=) 3: tFKBgVopEDWycM_ICm7jh-VZF3M.roa (hash: LgvsB0E5FX1iC1patAeSP801Ruuw0DUNZ/4X/K37x9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:3d:47:12:cc:d2:6d:ab:74:ba:e5:be:f6:49:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Validity Not Before: Dec 26 07:01:19 2025 GMT Not After : Dec 27 07:01:19 2025 GMT Subject: CN=1097a6cb05fd15d2df4494eefac5866b78c60ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:3b:f5:05:0c:ff:c7:e7:c7:0f:61:f3:77: c1:42:43:e0:c0:ae:12:00:70:91:bd:61:b7:40:77: e0:5d:6f:5b:ca:05:cc:67:4a:66:f5:93:0c:bd:72: dc:34:fd:bd:bc:5a:c3:9e:e3:ab:96:4f:17:c6:85: f6:f9:e1:f4:66:4f:92:60:09:1c:ba:b3:1d:93:21: 3c:65:b3:ba:68:c3:3d:6e:11:22:b9:37:1a:7e:ff: a3:bc:52:79:64:af:48:02:d5:cf:ed:a4:78:68:42: b3:8b:ac:e3:1b:cb:41:c3:78:0a:97:70:d7:73:2d: 6a:44:2a:a0:00:9f:bc:9d:5b:a4:74:88:fb:04:a5: 5d:91:4d:74:16:06:95:89:eb:89:22:00:b6:ee:99: 91:68:6b:f1:de:f5:f2:72:a3:7f:69:00:df:b4:91: 18:86:88:d7:a1:0a:07:01:f8:4f:5a:3e:0b:6a:7f: bc:1e:4b:dc:d4:52:85:c1:f1:2c:9a:78:40:d4:c8: da:a0:55:77:70:7b:d3:74:22:68:42:d2:33:61:5d: b1:87:62:aa:0c:bd:dc:45:93:56:d7:24:de:6f:08: 24:55:cb:7a:37:a1:e5:1a:6d:f6:e3:f3:e4:3a:b1: ea:ed:07:e3:73:75:f9:4f:ad:c1:3a:2c:82:cf:12: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:97:A6:CB:05:FD:15:D2:DF:44:94:EE:FA:C5:86:6B:78:C6:0A:C5 X509v3 Authority Key Identifier: keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a8:4a:5b:84:7b:dc:72:86:5e:8d:f2:34:02:13:06:7f:cf: c4:96:8e:df:5e:bf:71:73:b8:74:7b:14:56:95:6c:64:31:11: 0f:6f:f3:a3:11:fa:cc:fa:b5:70:ed:6c:5c:92:99:89:d4:fe: d1:ce:13:24:1f:f6:43:6b:ab:56:8a:77:56:27:72:cf:61:1f: 6e:43:26:ee:31:98:66:81:22:3e:0b:a6:5f:43:43:61:dd:de: b4:7d:6f:5c:9a:58:0e:86:4b:d4:ab:4e:5c:fd:5a:c9:04:61: 2d:d3:20:8b:22:72:b2:d0:5f:1e:7e:7c:ec:0c:70:b6:85:14: 6c:50:0a:0a:8c:c9:2a:f5:fc:d0:7a:3b:83:e8:b6:3c:6f:36: a8:6b:cb:3b:d9:59:d2:26:8b:c9:88:11:0b:84:37:95:d8:d7: 78:2b:8f:77:ce:b8:98:bf:96:e1:57:8f:ce:d6:09:26:83:a9: 0a:36:7d:9d:57:e4:37:76:b3:23:3c:4b:1d:e6:b9:8f:5f:9e: fc:2b:8e:55:05:c4:08:bd:79:c5:29:7d:ac:bb:14:d4:79:0a: 4a:42:74:16:fa:c9:3f:ea:a1:eb:71:a5:15:3b:fb:33:db:7a: 33:6d:20:2c:3f:f8:f7:8b:d8:16:45:98:90:7d:b3:40:95:18: 8f:7d:35:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdj1HEszSbat0uuW+9kmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl NGYyYzYwHhcNMjUxMjI2MDcwMTE5WhcNMjUxMjI3MDcwMTE5WjAzMTEwLwYDVQQD EygxMDk3YTZjYjA1ZmQxNWQyZGY0NDk0ZWVmYWM1ODY2Yjc4YzYwYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuA79QUM/8fnxw9h83fBQkPgwK4S AHCRvWG3QHfgXW9bygXMZ0pm9ZMMvXLcNP29vFrDnuOrlk8XxoX2+eH0Zk+SYAkc urMdkyE8ZbO6aMM9bhEiuTcafv+jvFJ5ZK9IAtXP7aR4aEKzi6zjG8tBw3gKl3DX cy1qRCqgAJ+8nVukdIj7BKVdkU10FgaVieuJIgC27pmRaGvx3vXycqN/aQDftJEY hojXoQoHAfhPWj4Lan+8Hkvc1FKFwfEsmnhA1MjaoFV3cHvTdCJoQtIzYV2xh2Kq DL3cRZNW1yTebwgkVct6N6HlGm324/PkOrHq7Qfjc3X5T63BOiyCzxJzwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCXpssF/RXS30SU7vrFhmt4xgrFMB8GA1UdIwQY MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt NzRkOTFjZGJlMTk1LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1 LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqhKW4R7 3HKGXo3yNAITBn/PxJaO316/cXO4dHsUVpVsZDERD2/zoxH6zPq1cO1sXJKZidT+ 0c4TJB/2Q2urVop3Vidyz2EfbkMm7jGYZoEiPgumX0NDYd3etH1vXJpYDoZL1KtO XP1ayQRhLdMgiyJystBfHn587AxwtoUUbFAKCozJKvX80Ho7g+i2PG82qGvLO9lZ 0iaLyYgRC4Q3ldjXeCuPd864mL+W4VePztYJJoOpCjZ9nVfkN3azIzxLHea5j1+e /CuOVQXECL15xSl9rLsU1HkKSkJ0FvrJP+qh63GlFTv7M9t6M20gLD/494vYFkWY kH2zQJUYj3011w== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:15 2025 by rpki-client