This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json) Hash identifier: htZMCZxW+F8+1L89CHLRwQVseRnTx1XyjXwpEW2mqfM= Subject key identifier: 6D:95:04:03:93:45:A5:E9:FC:E5:E1:51:E9:E5:80:B2:1B:25:4C:78 Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5 Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5 Certificate serial: 019B59E4481E427D9263997BC1DD4B9873DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft Manifest number: 0686 Signing time: Fri 26 Dec 2025 09:01:31 +0000 Manifest this update: Fri 26 Dec 2025 09:01:31 +0000 Manifest next update: Sat 27 Dec 2025 09:01:31 +0000 Files and hashes: 1: KG6jzdyZvsoXu639b6uxjJ94LA0.roa (hash: zuHbXITXPWpIjm5UWYo1gnuNJcxQg0P5glow8hcHCUc=) 2: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: 674WhhK/OZKPM8ep8BIeFxs0ygdpIAg5kDHvBA2acp4=) 3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:48:1e:42:7d:92:63:99:7b:c1:dd:4b:98:73:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5 Validity Not Before: Dec 26 09:01:31 2025 GMT Not After : Dec 27 09:01:31 2025 GMT Subject: CN=6d9504039345a5e9fce5e151e9e580b21b254c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bd:70:b6:59:0d:10:85:68:a8:82:4f:ce:51: 8c:ab:63:bb:c6:d2:44:9f:2a:8c:49:01:73:36:0f: ce:fb:17:71:7f:92:a1:61:8e:ef:a2:4f:fb:99:95: 5e:b1:33:37:01:52:c0:99:06:ab:29:ce:12:28:e1: 64:d0:fe:2d:26:19:31:6e:f5:b9:8b:75:b7:a2:22: 15:ac:b5:82:67:f3:e2:bb:9b:60:c6:b3:23:86:05: a7:fb:6d:fb:ea:31:15:8c:89:b3:1c:93:8b:38:04: 16:ae:ca:bb:56:ec:35:6c:35:12:15:fc:5d:18:e3: 19:03:65:61:a2:ed:28:85:90:40:61:00:44:f7:08: c0:fa:e4:1b:5f:10:f4:a2:c8:d7:3a:c7:2b:82:2b: 61:9c:43:ef:87:5c:14:0b:55:12:47:7b:18:42:5e: 88:c7:8c:b1:be:9e:74:f6:69:cb:fe:6c:4f:ad:84: 91:c1:eb:5d:12:ab:36:c7:cd:62:cc:92:a0:b2:f9: 29:0b:15:e6:02:af:e0:5a:95:25:ff:eb:37:e8:84: f5:83:9e:47:07:30:5a:de:91:d9:42:db:d2:8c:25: 57:bf:e6:69:86:2d:f4:fa:bd:e8:49:5a:49:90:9e: 9c:aa:c2:cd:22:50:c7:e7:25:52:be:1f:d1:63:c6: 1f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:95:04:03:93:45:A5:E9:FC:E5:E1:51:E9:E5:80:B2:1B:25:4C:78 X509v3 Authority Key Identifier: keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:0f:30:4b:33:2c:f0:dc:d1:d0:e7:dc:c1:aa:95:3d:e8:50: 70:16:b3:f1:a0:76:38:66:6d:94:57:a8:95:d2:54:ec:1d:05: 40:88:0b:a1:58:5a:4e:1a:d9:a4:db:37:61:9c:38:76:24:0c: 9c:a3:51:d6:b6:ab:06:ad:66:8d:13:c9:da:76:b3:33:44:bf: 23:14:c9:3f:2e:ce:8d:6f:78:9b:29:de:0e:7f:4b:37:33:d0: 53:a1:4a:b2:b5:71:e7:59:ed:89:d9:f1:51:d8:5d:a6:86:73: a2:26:e9:68:58:2a:a9:f3:f0:d9:98:ef:08:d2:b7:07:c5:40: 4d:74:e9:fa:70:fe:3a:1f:18:ea:88:0c:b7:b1:43:fb:54:69: 48:5e:58:29:d5:a6:cd:b1:5a:2d:48:34:53:a2:e7:fa:b1:ba: e8:a5:da:8d:71:60:ec:7c:52:d6:7a:3e:6a:97:06:8b:de:5f: be:fa:17:8a:9a:de:c6:36:8c:e9:7d:c9:00:c9:d8:f7:71:68: 0e:63:f5:dd:75:db:78:f0:73:fb:ee:4d:c6:1b:e8:e5:7f:e4: 45:c5:47:07:59:f7:d0:99:cd:c2:c9:92:1d:5e:e5:60:ae:05: 4c:7f:90:67:89:81:f1:13:9f:9f:5e:40:cf:8d:c6:c0:61:1c: a3:29:de:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5EgeQn2SY5l7wd1LmHPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1Yjg3MWQ2OTM5NTYxMDQ2NTc3OTMyM2I5MWIzNGU2OWJm Y2Y1YjUwHhcNMjUxMjI2MDkwMTMxWhcNMjUxMjI3MDkwMTMxWjAzMTEwLwYDVQQD Eyg2ZDk1MDQwMzkzNDVhNWU5ZmNlNWUxNTFlOWU1ODBiMjFiMjU0Yzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy71wtlkNEIVoqIJPzlGMq2O7xtJE nyqMSQFzNg/O+xdxf5KhYY7vok/7mZVesTM3AVLAmQarKc4SKOFk0P4tJhkxbvW5 i3W3oiIVrLWCZ/Piu5tgxrMjhgWn+2376jEVjImzHJOLOAQWrsq7Vuw1bDUSFfxd GOMZA2Vhou0ohZBAYQBE9wjA+uQbXxD0osjXOscrgithnEPvh1wUC1USR3sYQl6I x4yxvp509mnL/mxPrYSRwetdEqs2x81izJKgsvkpCxXmAq/gWpUl/+s36IT1g55H BzBa3pHZQtvSjCVXv+Zphi30+r3oSVpJkJ6cqsLNIlDH5yVSvh/RY8YfrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2VBAOTRaXp/OXhUenlgLIbJUx4MB8GA1UdIwQY MBaAFIW4cdaTlWEEZXeTI7kbNOab/PW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAt MjZhMGI4ZGVmMGMzLzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAtMjZhMGI4ZGVmMGMz LzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQ8wSzMs 8NzR0OfcwaqVPehQcBaz8aB2OGZtlFeoldJU7B0FQIgLoVhaThrZpNs3YZw4diQM nKNR1rarBq1mjRPJ2nazM0S/IxTJPy7OjW94myneDn9LNzPQU6FKsrVx51ntidnx UdhdpoZzoibpaFgqqfPw2ZjvCNK3B8VATXTp+nD+Oh8Y6ogMt7FD+1RpSF5YKdWm zbFaLUg0U6Ln+rG66KXajXFg7HxS1no+apcGi95fvvoXiprexjaM6X3JAMnY93Fo DmP13XXbePBz++5Nxhvo5X/kRcVHB1n30JnNwsmSHV7lYK4FTH+QZ4mB8ROfn15A z43GwGEcoynesA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:34 2025 by rpki-client