This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft File: HH3TyBbYWWCARyBUNICV7SuFUeU.mft (raw, json) Hash identifier: nfWtnP9C6Bg2fAapUgeSG2JVINP3uocSwQafjYeht8I= Subject key identifier: F2:A4:42:14:84:2D:B2:3F:A7:24:F8:DC:2D:EA:00:A5:A1:12:9F:3A Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5 Certificate issuer: /CN=1c7dd3c816d8596080472054348095ed2b8551e5 Certificate serial: 019B3CB540D5587F54E2F4A0C12BC4F28683 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft Manifest number: 14FB Signing time: Sat 20 Dec 2025 17:01:10 +0000 Manifest this update: Sat 20 Dec 2025 17:01:10 +0000 Manifest next update: Sun 21 Dec 2025 17:01:10 +0000 Files and hashes: 1: HH3TyBbYWWCARyBUNICV7SuFUeU.crl (hash: GQQFe9Bq6itg8TrrDP06BCjtre9GMPqvEn44xRYuzI8=) 2: lUApR8rVpWyDLR1GadE8v1PzIFI.roa (hash: SjTc2RPVxxZZujKF5tyIKpHPh6Uad/TapUg1uEd/j6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:40:d5:58:7f:54:e2:f4:a0:c1:2b:c4:f2:86:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5 Validity Not Before: Dec 20 17:01:10 2025 GMT Not After : Dec 21 17:01:10 2025 GMT Subject: CN=f2a44214842db23fa724f8dc2dea00a5a1129f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:41:d0:a6:4c:33:de:ae:b5:97:df:ec:32: 86:d0:f6:1f:3d:fb:2c:2c:37:1c:eb:c3:89:32:f2: f9:8b:40:9d:0a:e7:d0:76:03:8b:1e:e9:e5:34:60: 86:2f:99:93:f2:bf:27:c0:46:0a:67:7b:bb:2a:ec: 0c:76:3b:58:42:a9:7a:2f:4f:de:12:d5:6d:b8:88: b3:ca:9e:6a:2b:ac:25:5b:d6:f1:68:94:14:d8:e4: fc:1a:ad:a7:d5:f1:74:59:5a:03:d1:96:fd:db:80: 36:19:f2:5a:18:9a:b6:d0:89:4e:2f:c7:d5:3a:e3: d1:3e:eb:27:e0:18:ec:50:fa:50:27:77:f4:d5:51: bb:48:55:ed:01:a0:6e:13:fb:b0:50:85:81:08:35: ef:ba:87:ff:c8:71:fb:48:a3:92:a2:c4:8a:d5:ee: 5e:48:71:6f:92:1e:75:d3:d8:f0:0e:53:72:3b:ed: 04:3c:4d:b6:28:05:36:ff:ad:99:51:93:0d:1a:23: 37:2f:f1:86:1e:f0:99:65:cc:d1:c1:ed:9d:18:aa: 0f:2b:5e:6c:16:04:6d:41:5b:bb:b1:45:27:51:0a: 48:e1:8e:1d:65:80:4f:b7:f3:5b:45:80:78:a9:3f: 7c:6d:fd:da:56:0f:21:f9:00:38:c5:ee:1f:10:08: c9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A4:42:14:84:2D:B2:3F:A7:24:F8:DC:2D:EA:00:A5:A1:12:9F:3A X509v3 Authority Key Identifier: keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:fe:c0:01:b8:0f:67:f3:33:89:e3:82:eb:27:09:aa:f7:8d: 10:42:6e:66:3f:3d:c9:cc:57:0a:1a:ab:d4:b3:2e:f6:1e:58: 52:c2:4b:91:a6:ba:c5:7c:77:ff:87:11:a9:6b:18:60:cf:ca: ab:0d:0f:32:ac:80:68:71:cf:a8:c9:7d:86:63:d1:af:5a:62: 3f:f2:cd:de:c5:b6:84:a1:a8:29:be:d9:05:fd:df:a8:26:5e: 7a:fc:d2:ea:3d:2a:cb:06:8d:46:6e:a1:60:a0:84:35:fc:49: 24:0f:03:fa:4c:4e:7e:13:32:1e:62:23:c2:48:36:9a:e8:99: 98:bb:20:96:ea:52:78:1d:91:e6:9a:e0:7a:df:58:07:03:a5: 84:f6:5a:d6:0e:cf:7b:3f:8e:47:4e:0e:0c:6a:c3:fc:86:08: d7:d1:6d:cb:d0:6a:74:4b:74:44:c1:fe:e8:0c:39:ba:bf:ed: ae:cd:99:86:b5:73:e2:47:fe:ff:36:2e:07:5d:bf:2c:27:48: e7:aa:de:55:9e:85:e1:00:74:77:93:72:07:f2:44:41:6c:d0: 09:a9:32:ba:73:5b:bd:2d:1f:57:05:df:73:10:03:a7:d0:f7: 4c:0f:92:02:1b:88:bb:7b:1a:73:f9:ec:86:ce:3a:22:33:52: 0b:8d:b3:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tUDVWH9U4vSgwSvE8oaDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2RkM2M4MTZkODU5NjA4MDQ3MjA1NDM0ODA5NWVkMmI4 NTUxZTUwHhcNMjUxMjIwMTcwMTEwWhcNMjUxMjIxMTcwMTEwWjAzMTEwLwYDVQQD EyhmMmE0NDIxNDg0MmRiMjNmYTcyNGY4ZGMyZGVhMDBhNWExMTI5ZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyblB0KZMM96utZff7DKG0PYfPfss LDcc68OJMvL5i0CdCufQdgOLHunlNGCGL5mT8r8nwEYKZ3u7KuwMdjtYQql6L0/e EtVtuIizyp5qK6wlW9bxaJQU2OT8Gq2n1fF0WVoD0Zb924A2GfJaGJq20IlOL8fV OuPRPusn4BjsUPpQJ3f01VG7SFXtAaBuE/uwUIWBCDXvuof/yHH7SKOSosSK1e5e SHFvkh5109jwDlNyO+0EPE22KAU2/62ZUZMNGiM3L/GGHvCZZczRwe2dGKoPK15s FgRtQVu7sUUnUQpI4Y4dZYBPt/NbRYB4qT98bf3aVg8h+QA4xe4fEAjJhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKkQhSELbI/pyT43C3qAKWhEp86MB8GA1UdIwQY MBaAFBx908gW2FlggEcgVDSAle0rhVHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYWFiMzYtODg4Ni00MjA2LTllNzkt Y2MyY2Q3ZDMxYTI2LzEvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9iYWFiMzYtODg4Ni00MjA2LTllNzktY2MyY2Q3ZDMxYTI2 LzEvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/7AAbgP Z/MzieOC6ycJqveNEEJuZj89ycxXChqr1LMu9h5YUsJLkaa6xXx3/4cRqWsYYM/K qw0PMqyAaHHPqMl9hmPRr1piP/LN3sW2hKGoKb7ZBf3fqCZeevzS6j0qywaNRm6h YKCENfxJJA8D+kxOfhMyHmIjwkg2muiZmLsglupSeB2R5prget9YBwOlhPZa1g7P ez+OR04ODGrD/IYI19Fty9BqdEt0RMH+6Aw5ur/trs2ZhrVz4kf+/zYuB12/LCdI 56reVZ6F4QB0d5NyB/JEQWzQCakyunNbvS0fVwXfcxADp9D3TA+SAhuIu3sac/ns hs46IjNSC42zVA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:07:54 2025 by rpki-client