This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft File: hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft (raw, json) Hash identifier: SdULW5+rMOqn3lwZdQjfUO7mbT9CEyBo+3wUBUO3cfw= Subject key identifier: 46:61:B4:EC:68:D8:8F:CB:37:39:82:5E:16:7E:63:9D:44:52:C9:1A Authority key identifier: 85:F8:70:11:9E:59:21:BF:12:49:5D:C9:02:DC:FE:3D:8D:4A:37:D8 Certificate issuer: /CN=85f870119e5921bf12495dc902dcfe3d8d4a37d8 Certificate serial: 019B503C29A076B1BAC5DCFB36837DE017BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft Manifest number: 033B Signing time: Wed 24 Dec 2025 12:01:18 +0000 Manifest this update: Wed 24 Dec 2025 12:01:18 +0000 Manifest next update: Thu 25 Dec 2025 12:01:18 +0000 Files and hashes: 1: cllA8kNp-t480y7IfyyWuiklziY.roa (hash: 5bq8pPC98WVuN+UCw7i3OOCXOObrhETW5cCP805rEU4=) 2: hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.crl (hash: DiNDc75XPU4UUTJ7m1vaIG7KCXD13/b3wIlxZANOE/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft rsync://rpki.ripe.net/repository/DEFAULT/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:29:a0:76:b1:ba:c5:dc:fb:36:83:7d:e0:17:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85f870119e5921bf12495dc902dcfe3d8d4a37d8 Validity Not Before: Dec 24 12:01:18 2025 GMT Not After : Dec 25 12:01:18 2025 GMT Subject: CN=4661b4ec68d88fcb3739825e167e639d4452c91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:c9:81:77:7f:40:5a:d0:71:e2:2a:09:96: b4:5d:ec:2a:32:39:17:3e:b0:9c:90:9d:27:26:07: 10:0e:09:43:85:31:3b:b8:3f:87:28:dc:65:1c:6e: 00:b1:0c:72:bd:3a:71:de:a1:fc:f9:90:56:5e:e3: 3b:d2:dc:80:9c:15:3e:24:49:80:2a:45:dd:2b:fc: f9:85:0f:c9:f5:a2:19:2d:7c:37:21:06:94:7c:40: c1:41:96:65:50:25:b5:69:37:b5:52:e9:f2:5b:c2: fa:92:eb:dc:e8:8c:fc:a7:e7:94:b5:7f:4c:45:cc: 60:39:d8:75:40:48:2f:13:07:7c:bb:97:d5:55:ac: f4:7c:82:1d:fe:3e:b3:a4:60:0c:6c:f8:4f:6a:47: 14:90:8c:6a:5b:b0:99:7e:07:97:16:94:09:8e:71: 58:76:c1:78:c6:1c:8a:b5:73:55:d1:29:c5:36:99: 52:3c:d8:a7:0c:99:b7:b1:b9:a3:a1:80:fa:3a:ef: 0b:e4:ed:b1:b4:3a:ea:cc:9d:b8:ca:b7:22:27:40: 1d:05:df:e3:2b:c5:a7:c3:55:2b:14:d3:b8:82:e8: 1e:3f:ea:ae:5f:3c:18:a6:ea:a1:09:3b:f7:91:a0: 56:a7:ef:a0:a7:61:1c:81:7c:3a:71:8d:10:1e:d0: 91:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:61:B4:EC:68:D8:8F:CB:37:39:82:5E:16:7E:63:9D:44:52:C9:1A X509v3 Authority Key Identifier: keyid:85:F8:70:11:9E:59:21:BF:12:49:5D:C9:02:DC:FE:3D:8D:4A:37:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9e:46:5e:43:cd:9f:69:a1:41:f9:2b:39:e6:b3:c4:79:27: f8:42:5a:0c:17:32:04:4b:26:99:e2:7a:df:33:29:c9:c9:a9: 28:b9:21:a9:51:10:c0:b2:8c:cc:ab:35:8d:02:d5:b8:b2:f6: ac:a0:66:11:39:4f:0f:c9:f7:ae:53:96:6f:8f:dc:d6:3d:1d: bd:58:82:9b:71:8c:32:ea:b0:ba:b1:5e:88:ae:b9:f1:a3:68: 11:ab:c0:c3:e7:86:51:f5:cc:da:4e:9a:1c:f3:34:81:b4:7d: fc:c7:ec:45:05:c4:cf:ad:ea:3f:23:b6:d2:de:f0:66:06:0f: db:de:ef:1c:df:07:fc:7e:42:70:db:41:92:42:34:23:ac:e3: 08:22:1c:fc:70:45:71:62:55:8f:e4:f9:34:f1:8a:d7:e1:6c: 78:3a:45:39:fb:d5:cb:f8:6b:7b:69:17:e7:8b:7b:86:70:72: 01:16:2b:78:05:ac:de:18:38:79:d1:5c:96:58:e3:66:1b:d3: 4e:01:7d:76:71:f0:96:cd:0e:6a:a0:95:70:46:8c:0c:b6:04: 8c:c7:37:8f:66:25:77:ba:32:65:4d:ab:d4:99:e3:75:93:f3: c1:6d:f5:4f:c4:9f:91:a0:35:c7:f6:ea:86:c4:2e:b2:7b:e4: f3:b8:c4:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPCmgdrG6xdz7NoN94Be7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1Zjg3MDExOWU1OTIxYmYxMjQ5NWRjOTAyZGNmZTNkOGQ0 YTM3ZDgwHhcNMjUxMjI0MTIwMTE4WhcNMjUxMjI1MTIwMTE4WjAzMTEwLwYDVQQD Eyg0NjYxYjRlYzY4ZDg4ZmNiMzczOTgyNWUxNjdlNjM5ZDQ0NTJjOTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCvJgXd/QFrQceIqCZa0XewqMjkX PrCckJ0nJgcQDglDhTE7uD+HKNxlHG4AsQxyvTpx3qH8+ZBWXuM70tyAnBU+JEmA KkXdK/z5hQ/J9aIZLXw3IQaUfEDBQZZlUCW1aTe1UunyW8L6kuvc6Iz8p+eUtX9M RcxgOdh1QEgvEwd8u5fVVaz0fIId/j6zpGAMbPhPakcUkIxqW7CZfgeXFpQJjnFY dsF4xhyKtXNV0SnFNplSPNinDJm3sbmjoYD6Ou8L5O2xtDrqzJ24yrciJ0AdBd/j K8Wnw1UrFNO4gugeP+quXzwYpuqhCTv3kaBWp++gp2EcgXw6cY0QHtCRyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZhtOxo2I/LNzmCXhZ+Y51EUskaMB8GA1UdIwQY MBaAFIX4cBGeWSG/EkldyQLc/j2NSjfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGZod0VaNVpJYjhTU1YzSkF0ei1QWTFLTjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iYjZmMzQtMzQ3Yi00YmFlLThmOTIt ZWE4NGE1MWViM2RjLzEvaGZod0VaNVpJYjhTU1YzSkF0ei1QWTFLTjlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iYjZmMzQtMzQ3Yi00YmFlLThmOTItZWE4NGE1MWViM2Rj LzEvaGZod0VaNVpJYjhTU1YzSkF0ei1QWTFLTjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC55GXkPN n2mhQfkrOeazxHkn+EJaDBcyBEsmmeJ63zMpycmpKLkhqVEQwLKMzKs1jQLVuLL2 rKBmETlPD8n3rlOWb4/c1j0dvViCm3GMMuqwurFeiK658aNoEavAw+eGUfXM2k6a HPM0gbR9/MfsRQXEz63qPyO20t7wZgYP297vHN8H/H5CcNtBkkI0I6zjCCIc/HBF cWJVj+T5NPGK1+FseDpFOfvVy/hre2kX54t7hnByARYreAWs3hg4edFclljjZhvT TgF9dnHwls0OaqCVcEaMDLYEjMc3j2Yld7oyZU2r1JnjdZPzwW31T8SfkaA1x/bq hsQusnvk87jE5w== -----END CERTIFICATE-----Generated at Wed Dec 24 18:27:08 2025 by rpki-client