This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json) Hash identifier: UdzIteB43ll/DxOTf4+N2OX2MGErYFrJXh4qAb4+8ds= Subject key identifier: 51:7B:D5:9D:71:B5:3B:65:67:C7:85:15:8D:4E:DA:DB:59:DE:8A:80 Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2 Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2 Certificate serial: 019B3BD97D489AC2FDE47939ADBAEBF45D49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 13:01:07 +0000 Manifest this update: Sat 20 Dec 2025 13:01:07 +0000 Manifest next update: Sun 21 Dec 2025 13:01:07 +0000 Files and hashes: 1: fY3YUzeQR4J5mSVlYztPydyoN5Q.roa (hash: mNZawaVbKUAZ9lV1chbhqIOQeYk5Gz7JPB6mT6lLW4o=) 2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: fZN/0QagA11V29VbhVEmxgRqiCseJZHwYyBNl4wH6Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:7d:48:9a:c2:fd:e4:79:39:ad:ba:eb:f4:5d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2 Validity Not Before: Dec 20 13:01:07 2025 GMT Not After : Dec 21 13:01:07 2025 GMT Subject: CN=517bd59d71b53b6567c785158d4edadb59de8a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cd:f3:07:2e:4a:14:8e:bc:dc:38:78:29:f7: d6:7a:f2:25:f6:f1:5d:01:a2:95:db:b0:4a:21:d1: e4:f1:6d:dc:8a:56:56:8d:91:b0:95:61:50:d3:59: 19:f9:38:9a:53:c5:47:b4:5f:34:7c:83:e6:86:4e: a9:d2:ee:c7:b6:54:9f:6d:81:b0:8e:06:db:b1:4c: 03:70:e3:f7:f8:9e:f2:11:0e:7c:f2:69:72:24:fb: 33:be:5b:74:3d:af:e0:2f:4c:82:aa:d1:87:3f:ed: 3b:d1:37:8e:9b:79:60:c4:2c:ca:66:67:29:72:75: 72:cd:e4:93:4a:35:ab:b9:24:50:4d:b9:ce:3b:b2: 4a:cb:9b:4d:cb:f3:36:e9:f8:b8:66:4e:ec:94:bc: 35:1b:36:95:2f:17:cc:b8:c8:a1:10:dc:84:65:f3: e4:3a:4d:e2:5d:a2:04:9a:7a:1d:69:ef:eb:da:9e: dd:8e:62:31:31:b6:d8:1a:1b:52:52:b1:bc:73:ef: 16:81:1f:b3:2f:9b:f5:d7:0b:fb:e5:c7:82:4b:75: e3:36:11:73:bc:12:3a:7b:6e:76:68:a9:45:29:4d: 98:5d:48:75:d1:1f:7a:80:fc:a2:9f:70:58:9a:a8: 24:e8:db:41:ca:51:92:c0:b3:9e:4b:ff:1c:65:86: 00:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7B:D5:9D:71:B5:3B:65:67:C7:85:15:8D:4E:DA:DB:59:DE:8A:80 X509v3 Authority Key Identifier: keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:44:aa:ca:d0:f8:ec:36:58:a3:62:e4:a8:81:d2:c8:30:fa: 12:25:4e:e4:80:b0:7e:f2:8e:53:c6:2e:fa:8a:f2:d4:ab:51: 7b:0b:35:ad:94:f2:d7:58:2f:1e:08:f2:15:c3:e7:82:d3:d7: 80:9a:f3:31:47:68:2e:84:25:d3:49:53:7a:99:d5:e9:c9:45: 82:0a:76:b1:31:d8:7e:5a:a8:8d:b7:e9:d1:91:b7:78:0f:a9: 09:c4:74:fb:84:ae:d7:22:e7:67:c1:2f:85:9a:11:31:9c:7b: 4a:e9:e1:bb:97:5a:8c:c9:67:eb:72:da:33:89:e3:68:8c:22: 5c:39:70:62:0c:e9:44:c9:9f:57:83:ee:d9:bb:55:bd:6d:59: 49:22:ac:f5:0d:65:1b:7b:32:35:63:b1:fe:f0:8d:77:08:f1: f8:65:27:af:37:94:51:dc:63:da:5c:ac:2f:1c:e5:82:0f:7b: 4c:7d:b9:d6:38:18:2c:33:ab:64:27:0f:fc:a7:2d:eb:11:01: 55:de:5e:3e:18:71:e7:37:97:8c:3f:98:9f:d4:7c:49:8e:12: ad:76:ee:1e:fb:83:3e:26:64:c5:ce:00:39:54:d1:a2:3b:57: 7c:b0:03:73:8a:73:5b:1e:b7:27:cc:42:8a:81:73:8c:ed:dc: 5e:73:19:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72X1ImsL95Hk5rbrr9F1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MWM2N2JkYjZkOGMyMzBmY2RiNDI3YTlmNzFiODAxMzU4 NzJmYzIwHhcNMjUxMjIwMTMwMTA3WhcNMjUxMjIxMTMwMTA3WjAzMTEwLwYDVQQD Eyg1MTdiZDU5ZDcxYjUzYjY1NjdjNzg1MTU4ZDRlZGFkYjU5ZGU4YTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc3zBy5KFI683Dh4KffWevIl9vFd AaKV27BKIdHk8W3cilZWjZGwlWFQ01kZ+TiaU8VHtF80fIPmhk6p0u7HtlSfbYGw jgbbsUwDcOP3+J7yEQ588mlyJPszvlt0Pa/gL0yCqtGHP+070TeOm3lgxCzKZmcp cnVyzeSTSjWruSRQTbnOO7JKy5tNy/M26fi4Zk7slLw1GzaVLxfMuMihENyEZfPk Ok3iXaIEmnodae/r2p7djmIxMbbYGhtSUrG8c+8WgR+zL5v11wv75ceCS3XjNhFz vBI6e252aKlFKU2YXUh10R96gPyin3BYmqgk6NtBylGSwLOeS/8cZYYAgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFF71Z1xtTtlZ8eFFY1O2ttZ3oqAMB8GA1UdIwQY MBaAFIYcZ7222MIw/NtCep9xuAE1hy/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC84YTExNWItMzg1OS00NzU5LTg1YWUt ZmI4NTNjNjUzMzRhLzEvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC84YTExNWItMzg1OS00NzU5LTg1YWUtZmI4NTNjNjUzMzRh LzEvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIESqytD4 7DZYo2LkqIHSyDD6EiVO5ICwfvKOU8Yu+ory1KtRews1rZTy11gvHgjyFcPngtPX gJrzMUdoLoQl00lTepnV6clFggp2sTHYflqojbfp0ZG3eA+pCcR0+4Su1yLnZ8Ev hZoRMZx7Sunhu5dajMln63LaM4njaIwiXDlwYgzpRMmfV4Pu2btVvW1ZSSKs9Q1l G3syNWOx/vCNdwjx+GUnrzeUUdxj2lysLxzlgg97TH251jgYLDOrZCcP/Kct6xEB Vd5ePhhx5zeXjD+Yn9R8SY4SrXbuHvuDPiZkxc4AOVTRojtXfLADc4pzWx63J8xC ioFzjO3cXnMZEg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:33 2025 by rpki-client