This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json) Hash identifier: sfiENy8vE4SOtFsClF73uSNSOaCErw4AESZ0005m5Rs= Subject key identifier: A0:A0:D6:C7:8D:1A:71:A5:57:C0:05:C8:7C:3C:61:0E:6C:4C:BF:07 Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8 Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8 Certificate serial: 019B3F7F150DB60AE5696DE0EB3F8E9271CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft Manifest number: 161D Signing time: Sun 21 Dec 2025 06:00:51 +0000 Manifest this update: Sun 21 Dec 2025 06:00:51 +0000 Manifest next update: Mon 22 Dec 2025 06:00:51 +0000 Files and hashes: 1: PAjoOsQf0RmmoZA6UENFacJ4ClY.roa (hash: ZTPqKop0ZcVt0foxrf1KsXpnvWpYw7IeU4H32JK9XIU=) 2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: IVP6IwHgESZW2U60fp/bwgZEGAD+HDssm2+Akw8t49k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:15:0d:b6:0a:e5:69:6d:e0:eb:3f:8e:92:71:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8 Validity Not Before: Dec 21 06:00:51 2025 GMT Not After : Dec 22 06:00:51 2025 GMT Subject: CN=a0a0d6c78d1a71a557c005c87c3c610e6c4cbf07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:70:70:62:51:e9:1d:e5:80:de:1f:d6:43:a6: 6b:ef:b3:2f:d4:a2:55:21:5a:e0:29:2b:59:14:cf: 58:85:f1:5f:0f:a5:14:fc:4c:8c:e6:0b:19:1b:50: 36:08:a0:c9:f9:e9:78:f6:9f:1a:cf:a0:ab:f0:16: b4:22:6e:cc:7f:fc:d3:a3:51:56:4f:ca:6b:6f:ec: 49:61:9d:40:e4:54:c7:9d:a0:be:ad:28:3c:2f:4d: a3:74:50:d6:d0:07:9c:35:f6:e3:2f:e6:32:15:1d: 88:5f:d9:0a:21:de:c7:fd:d0:bf:75:ca:c0:2f:71: fb:a4:ef:97:84:73:b8:6c:aa:95:78:36:a1:2a:eb: d9:e7:af:e7:34:bf:69:83:fb:00:4b:26:cf:6a:18: 23:86:c6:cc:79:1f:aa:51:92:33:3c:99:ae:40:93: a7:b9:5a:5d:32:d4:65:8c:fb:ec:04:28:17:35:70: df:f1:27:14:3d:47:bb:6d:f6:22:c8:80:34:6f:78: 8c:01:59:6b:51:b3:d8:f6:4a:09:81:02:de:58:12: 15:6f:89:52:5d:85:fa:64:0b:f1:ac:a6:85:6b:3a: 58:58:89:42:73:dc:49:e3:23:5d:e1:ee:ab:17:42: 4b:58:93:69:15:36:3d:56:b1:6d:7b:49:d5:08:e2: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A0:D6:C7:8D:1A:71:A5:57:C0:05:C8:7C:3C:61:0E:6C:4C:BF:07 X509v3 Authority Key Identifier: keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:05:f6:17:4b:f8:2f:a8:0a:0a:33:8b:0f:dd:b4:67:c7:c3: a8:53:22:bb:60:3e:0e:33:31:0f:b1:29:5e:3e:a1:5d:a3:f1: 5b:8c:e8:ea:35:b0:43:ce:37:02:26:1f:7b:0e:ce:e8:03:07: 6c:3d:32:d0:16:52:82:8e:81:82:01:46:26:37:91:8a:70:ff: 87:f6:b3:aa:79:8b:ac:f9:3f:ea:6f:01:f0:98:dc:6d:0d:21: c0:d3:51:0a:9b:5d:13:fd:8b:f9:4f:c5:65:ef:5b:11:75:2b: ca:58:bc:cf:36:8b:dc:6f:b7:9b:38:ee:6e:68:f8:58:38:dc: 31:38:ad:ce:82:ce:15:9a:36:8b:59:04:00:13:e8:bc:bb:0c: 08:84:31:18:90:63:07:48:d0:99:86:06:3c:ea:53:dd:a7:72: 2a:b3:40:92:c1:d2:ca:3a:0a:9f:4d:13:81:07:49:98:9b:c6: 93:54:5f:e0:58:e7:ba:b2:3a:d9:31:be:a1:07:a6:2a:b2:fe: b8:0b:28:d4:2c:33:55:27:f6:5f:21:6e:81:97:81:54:77:c7: 2d:9e:11:3f:63:1b:c7:a6:5c:f7:b8:ae:10:7c:ea:7c:58:22: 16:cf:fc:0c:62:2c:58:6a:41:9d:fa:f7:e6:0d:fb:bf:7a:ab: bc:8d:20:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fxUNtgrlaW3g6z+OknHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0N2QxYmViZTRjMjNjNDIxN2I4NGY3ZmQ4MTkyYWIyNTU1 NDE1YTgwHhcNMjUxMjIxMDYwMDUxWhcNMjUxMjIyMDYwMDUxWjAzMTEwLwYDVQQD EyhhMGEwZDZjNzhkMWE3MWE1NTdjMDA1Yzg3YzNjNjEwZTZjNGNiZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nBwYlHpHeWA3h/WQ6Zr77Mv1KJV IVrgKStZFM9YhfFfD6UU/EyM5gsZG1A2CKDJ+el49p8az6Cr8Ba0Im7Mf/zTo1FW T8prb+xJYZ1A5FTHnaC+rSg8L02jdFDW0AecNfbjL+YyFR2IX9kKId7H/dC/dcrA L3H7pO+XhHO4bKqVeDahKuvZ56/nNL9pg/sASybPahgjhsbMeR+qUZIzPJmuQJOn uVpdMtRljPvsBCgXNXDf8ScUPUe7bfYiyIA0b3iMAVlrUbPY9koJgQLeWBIVb4lS XYX6ZAvxrKaFazpYWIlCc9xJ4yNd4e6rF0JLWJNpFTY9VrFte0nVCOLsrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCg1seNGnGlV8AFyHw8YQ5sTL8HMB8GA1UdIwQY MBaAFIR9G+vkwjxCF7hPf9gZKrJVVBWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mODFlYWItYmMzNi00MmE2LTgyMmEt Y2RiMWQzODU1NmJiLzEvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mODFlYWItYmMzNi00MmE2LTgyMmEtY2RiMWQzODU1NmJi LzEvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwX2F0v4 L6gKCjOLD920Z8fDqFMiu2A+DjMxD7EpXj6hXaPxW4zo6jWwQ843AiYfew7O6AMH bD0y0BZSgo6BggFGJjeRinD/h/azqnmLrPk/6m8B8JjcbQ0hwNNRCptdE/2L+U/F Ze9bEXUryli8zzaL3G+3mzjubmj4WDjcMTitzoLOFZo2i1kEABPovLsMCIQxGJBj B0jQmYYGPOpT3adyKrNAksHSyjoKn00TgQdJmJvGk1Rf4FjnurI62TG+oQemKrL+ uAso1CwzVSf2XyFugZeBVHfHLZ4RP2Mbx6Zc97iuEHzqfFgiFs/8DGIsWGpBnfr3 5g37v3qrvI0g/g== -----END CERTIFICATE-----Generated at Sun Dec 21 10:33:56 2025 by rpki-client