This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json) Hash identifier: 9TWvYRZotz0ZXeyiYm9y1Zj9ZW4ej1merdS2pOwRcVc= Subject key identifier: 4B:8D:CA:2F:6A:BE:39:5B:42:FB:F1:08:02:A5:8A:70:CF:5F:80:FB Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Certificate serial: 019B3DC7C278D6CDA78271CCE3A75AD643A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft Manifest number: 149D Signing time: Sat 20 Dec 2025 22:01:00 +0000 Manifest this update: Sat 20 Dec 2025 22:01:00 +0000 Manifest next update: Sun 21 Dec 2025 22:01:00 +0000 Files and hashes: 1: 08evUpXsyAPB9m1i5yjV5oz1esw.roa (hash: vQX+ikiXTHSqymHxaB/XvD/QqJEhDTJRgfstS4d4Uvw=) 2: 1-fD0_gyy16CbQhND5Cq9_D_TVJM.roa (hash: 1YUT/oHeu46DAHuJD9uNps9J96AG+60Vn+GnT3asOpo=) 3: 15KhGd4HmYbpuYXtzncXGULTUqY.roa (hash: iH3AMLCtT6vKx2SSnrUr9zrzWdEsbyifJgPpor+ZLYo=) 4: BhmCDxcE0gsUJ8n-5kUDWm_-44o.roa (hash: /tiZqBXubo3kuYkXe6qdVTzGxoqo7003YeEc2CAhCcU=) 5: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: xtXwq/T1ibz8qL1XUTmvDxM5tl6ecOuITyiWz3gPCm0=) 6: QxGFNF72x4BqsfaQ6jtAOQBOPno.roa (hash: 65riUzSqL2rM8j5Yrj0UOmDbiXGurF7dxCWBn61aeEc=) 7: T14YGVIyo0B0GMjaoAuVV86EHfQ.roa (hash: 64ZLK4f1zxb+Q2lGELGqmESC0E6Ee+2GtOPU4byIZ/8=) 8: YnMnO6Ox-cLnCOmPN8tx_DOoXrE.roa (hash: H/u4fv7xb+AglIzSXH/LHd19mSFb3s1BHiBbxYj4lFI=) 9: jxv2C5982Ccg_jEpftvAMhLewtw.roa (hash: ueLKoc7Uurshn1hvFPw53fM94VCiIuFDiqRrlZVXFno=) 10: kitPrlRKaPvvRZMjj30sn5SBic8.roa (hash: fAdfxW88rLA4/vorwxlP/gvwEwkcGlSH5cxUXmS7nf0=) 11: vhqfgZBGlkmJeOA75et_kaK8pwc.roa (hash: HXruhXdyCN/4KKZEyQ4qWiEgEF32HHhcblnNFIim6w8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:c2:78:d6:cd:a7:82:71:cc:e3:a7:5a:d6:43:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Validity Not Before: Dec 20 22:01:00 2025 GMT Not After : Dec 21 22:01:00 2025 GMT Subject: CN=4b8dca2f6abe395b42fbf10802a58a70cf5f80fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ee:53:6a:97:ae:15:92:11:c8:61:6f:ad:72: aa:f1:0f:ec:a8:c0:83:a5:85:53:f9:87:90:c6:29: f0:92:84:9f:aa:fa:0b:51:65:88:a0:31:38:a1:ae: 31:67:31:3c:2a:9d:25:5a:2c:fc:bf:9b:50:93:38: 62:54:ce:71:fd:d8:3b:11:c2:58:e6:3f:15:aa:8d: 89:e8:0e:5e:ae:57:30:e7:83:bd:d4:0d:4b:e3:a0: d4:2f:9d:6d:e6:8b:80:5f:29:8e:39:18:f6:74:9a: 92:dc:26:76:e6:12:bb:dd:13:8f:a3:39:19:ad:ed: 40:13:0f:82:c6:b2:5e:67:ea:52:d1:9b:2e:f3:94: 0c:b2:8e:66:e7:2e:d4:46:db:fa:e6:c4:a6:dd:35: fe:ba:cd:43:34:0f:db:9a:6e:55:5f:fd:89:46:fb: 28:eb:d6:f7:ed:50:3b:d0:fa:82:b3:57:37:95:72: 59:d3:7a:3b:ba:bf:b3:7c:42:7b:bd:40:5f:a1:cb: 03:5b:dd:b0:a8:13:90:f6:50:17:42:b3:fa:a4:ca: 3d:0f:cc:9b:de:cf:68:38:26:53:ce:1c:65:6c:77: 44:50:55:97:0c:1b:61:05:f1:3a:ba:3e:0c:f6:eb: f3:61:2f:08:3c:ea:68:94:fd:9e:9c:d1:2d:4b:81: 13:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8D:CA:2F:6A:BE:39:5B:42:FB:F1:08:02:A5:8A:70:CF:5F:80:FB X509v3 Authority Key Identifier: keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:34:96:dd:82:63:f8:19:08:c2:24:38:d6:ee:fb:69:51:78: d3:fd:da:c0:c7:ee:23:18:b8:24:5a:3c:3a:ad:ec:e9:58:45: 22:fe:e4:ad:9a:7b:75:5b:44:43:c0:f0:03:21:cb:85:88:0c: 0c:f2:12:c7:51:95:c4:a7:59:4d:8b:c9:4c:12:61:27:4a:42: 73:55:ad:bd:ad:0a:da:1e:9e:c3:63:8c:d1:b2:c6:69:22:6d: 62:56:e5:62:6b:65:d0:99:ab:12:6a:53:77:e1:c0:37:04:e6: de:55:f7:15:a0:9c:ec:1e:d9:c7:7a:c6:79:e9:fa:d7:e4:1d: e0:2c:ef:1f:3f:03:e0:f5:72:0e:2f:b4:86:17:ab:ae:8f:16: 5c:6c:be:e7:ac:67:0c:e6:10:d5:1c:1a:d1:ff:7f:97:7f:30: 5a:89:7a:0a:74:50:fd:c2:4f:31:45:b5:e2:1a:d6:43:c2:ca: 01:72:8c:45:f5:6c:95:b5:75:34:a9:91:e2:ce:b0:5e:eb:61: 6f:08:d4:d4:bc:c4:42:77:48:5e:21:7a:2d:1e:0a:58:bd:e2: a4:8b:46:e6:5f:af:5e:80:fe:3f:c7:26:0e:a9:ee:13:12:4e: 44:ab:c3:f2:98:01:ac:2f:00:59:78:0c:c8:98:b0:35:e0:01: c1:14:b1:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x8J41s2ngnHM46da1kOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi ZmVjOWMwHhcNMjUxMjIwMjIwMTAwWhcNMjUxMjIxMjIwMTAwWjAzMTEwLwYDVQQD Eyg0YjhkY2EyZjZhYmUzOTViNDJmYmYxMDgwMmE1OGE3MGNmNWY4MGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO5TapeuFZIRyGFvrXKq8Q/sqMCD pYVT+YeQxinwkoSfqvoLUWWIoDE4oa4xZzE8Kp0lWiz8v5tQkzhiVM5x/dg7EcJY 5j8Vqo2J6A5erlcw54O91A1L46DUL51t5ouAXymOORj2dJqS3CZ25hK73ROPozkZ re1AEw+CxrJeZ+pS0Zsu85QMso5m5y7URtv65sSm3TX+us1DNA/bmm5VX/2JRvso 69b37VA70PqCs1c3lXJZ03o7ur+zfEJ7vUBfocsDW92wqBOQ9lAXQrP6pMo9D8yb 3s9oOCZTzhxlbHdEUFWXDBthBfE6uj4M9uvzYS8IPOpolP2enNEtS4ETCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuNyi9qvjlbQvvxCAKlinDPX4D7MB8GA1UdIwQY MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt OWNhOThmNDk1MGNmLzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDSW3YJj +BkIwiQ41u77aVF40/3awMfuIxi4JFo8Oq3s6VhFIv7krZp7dVtEQ8DwAyHLhYgM DPISx1GVxKdZTYvJTBJhJ0pCc1Wtva0K2h6ew2OM0bLGaSJtYlblYmtl0JmrEmpT d+HANwTm3lX3FaCc7B7Zx3rGeen61+Qd4CzvHz8D4PVyDi+0hherro8WXGy+56xn DOYQ1Rwa0f9/l38wWol6CnRQ/cJPMUW14hrWQ8LKAXKMRfVslbV1NKmR4s6wXuth bwjU1LzEQndIXiF6LR4KWL3ipItG5l+vXoD+P8cmDqnuExJORKvD8pgBrC8AWXgM yJiwNeABwRSxng== -----END CERTIFICATE-----Generated at Sun Dec 21 05:02:14 2025 by rpki-client