This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: TUKGd7Jh1VlXZSiV5pQdtwNsb9j1msScaICmW4iu06o= Subject key identifier: 99:0B:49:83:1F:40:23:80:D7:92:4D:73:F9:20:C4:5E:69:92:52:2E Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019B3DC7A588CCE2CBCE76FDD7EFD9D964B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 1792 Signing time: Sat 20 Dec 2025 22:00:52 +0000 Manifest this update: Sat 20 Dec 2025 22:00:52 +0000 Manifest next update: Sun 21 Dec 2025 22:00:52 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: t/um6zXbBoJaN2K01aNKRNhXvQbx2SIRh3RPxumBJcc=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:a5:88:cc:e2:cb:ce:76:fd:d7:ef:d9:d9:64:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Dec 20 22:00:52 2025 GMT Not After : Dec 21 22:00:52 2025 GMT Subject: CN=990b49831f402380d7924d73f920c45e6992522e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:a7:41:ff:c2:86:44:a9:cf:14:4f:6d:f0: 66:c1:5a:50:75:95:25:7b:99:d1:c5:e8:04:eb:64: 76:64:85:84:bf:a4:14:6f:39:ff:59:bc:0b:d3:01: 4b:e3:83:9e:1f:9e:6f:66:3a:ff:7f:4d:19:f4:f0: 47:8a:eb:db:0c:2a:38:87:53:65:5b:fe:94:c0:f8: b2:36:2b:9a:7f:f8:71:4f:af:37:86:b0:be:8a:b0: 98:63:e1:db:8f:e6:30:af:88:d0:2d:fb:64:8b:ae: 0f:a6:e2:8c:68:33:ff:c6:7f:2f:85:26:21:bd:c9: bd:e5:3d:ae:3d:3b:ca:8c:ce:dd:90:a5:aa:5e:0c: 92:a2:5d:ea:32:b2:71:e2:20:5a:4f:83:84:69:fc: 8c:54:fa:b4:f7:a5:4e:a3:e4:b6:60:65:a1:b4:71: 89:30:4f:fb:81:0a:c3:e9:a1:eb:d9:87:be:ae:c3: 07:92:b7:62:7e:15:9d:af:dd:fc:4d:22:1d:22:24: aa:ce:38:e3:c7:81:d2:17:96:0f:45:13:47:1f:74: d7:0c:54:58:4a:8e:1a:1a:42:b6:af:ba:ce:41:5c: 29:64:70:01:2a:2d:b3:b0:e5:33:b6:bc:92:b5:98: da:2b:92:df:4d:11:f6:16:9d:01:3d:73:92:e1:d9: 2e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0B:49:83:1F:40:23:80:D7:92:4D:73:F9:20:C4:5E:69:92:52:2E X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:43:a6:8f:5d:24:ba:29:e3:c4:1e:96:80:00:2f:d8:cf:d7: 30:ae:6e:10:92:e3:a0:46:37:e1:fc:ea:67:66:8c:2c:e2:0f: e8:5b:43:42:ed:e9:04:4e:b5:88:8c:78:ed:28:29:20:14:3c: d0:d6:b1:17:e2:4f:ee:a4:88:a2:06:25:52:b9:05:15:08:36: ba:69:05:dc:81:6f:80:32:6e:b4:de:67:20:cc:b4:60:1f:0d: 71:c8:65:36:39:f7:58:aa:95:e8:58:b6:ec:48:ef:8f:11:ae: 79:44:b9:24:53:38:01:53:12:4d:48:26:d3:4f:4d:90:75:bd: df:b4:92:57:a6:3a:f9:b8:35:e2:be:93:45:a6:98:35:3d:9a: 28:ef:3d:ce:5f:26:ae:29:1e:52:cb:a7:55:09:20:ee:73:92: 75:07:ad:5b:b9:57:a6:22:a3:01:1b:70:02:70:09:f6:e0:8e: e2:2e:74:92:34:7e:f7:f1:8d:02:6c:72:70:2a:72:cb:79:37: ff:a4:c4:23:53:7d:13:9f:91:f6:b2:23:c9:c5:19:d0:85:02: ac:f9:c2:83:76:e2:95:2e:3c:a8:1a:88:65:87:32:48:86:8d: c1:ee:c3:71:7b:81:99:4f:1c:4f:2a:eb:7b:e7:2f:28:7e:88: 10:d3:2b:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x6WIzOLLznb91+/Z2WS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUxMjIwMjIwMDUyWhcNMjUxMjIxMjIwMDUyWjAzMTEwLwYDVQQD Eyg5OTBiNDk4MzFmNDAyMzgwZDc5MjRkNzNmOTIwYzQ1ZTY5OTI1MjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAynQf/ChkSpzxRPbfBmwVpQdZUl e5nRxegE62R2ZIWEv6QUbzn/WbwL0wFL44OeH55vZjr/f00Z9PBHiuvbDCo4h1Nl W/6UwPiyNiuaf/hxT683hrC+irCYY+Hbj+Ywr4jQLftki64PpuKMaDP/xn8vhSYh vcm95T2uPTvKjM7dkKWqXgySol3qMrJx4iBaT4OEafyMVPq096VOo+S2YGWhtHGJ ME/7gQrD6aHr2Ye+rsMHkrdifhWdr938TSIdIiSqzjjjx4HSF5YPRRNHH3TXDFRY So4aGkK2r7rOQVwpZHABKi2zsOUztryStZjaK5LfTRH2Fp0BPXOS4dkuhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkLSYMfQCOA15JNc/kgxF5pklIuMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEOmj10k uinjxB6WgAAv2M/XMK5uEJLjoEY34fzqZ2aMLOIP6FtDQu3pBE61iIx47SgpIBQ8 0NaxF+JP7qSIogYlUrkFFQg2umkF3IFvgDJutN5nIMy0YB8NcchlNjn3WKqV6Fi2 7EjvjxGueUS5JFM4AVMSTUgm009NkHW937SSV6Y6+bg14r6TRaaYNT2aKO89zl8m rikeUsunVQkg7nOSdQetW7lXpiKjARtwAnAJ9uCO4i50kjR+9/GNAmxycCpyy3k3 /6TEI1N9E5+R9rIjycUZ0IUCrPnCg3bilS48qBqIZYcySIaNwe7DcXuBmU8cTyrr e+cvKH6IENMrQA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:41:49 2025 by rpki-client