This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json)
Hash identifier: o87z7pupU1x59OEBEXC98xAd7QxYjI5duf0lqEjX4xk=
Subject key identifier: FB:39:18:0E:AB:3E:AB:81:AE:B2:C6:B8:F0:9B:5A:6F:47:B8:7C:34
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 019B307996DA16F47B894FF8EAD7B90FEFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
Manifest number: 17A9
Signing time: Thu 18 Dec 2025 08:00:33 +0000
Manifest this update: Thu 18 Dec 2025 08:00:33 +0000
Manifest next update: Fri 19 Dec 2025 08:00:33 +0000
Files and hashes: 1: 1-TiCaqN63y014VBjU4cN2TUy_V8.roa (hash: R9/uJWNYkuWkn9362/6eXHCOuC8x3gv8eszIJhtU6eQ=)
2: 2ZYVCHlVP79fGQDnUrmsC7N7n-A.roa (hash: K2aFrZIoX9SmdcEF5JzKuoA3IcG5HQKJ3ewD9wnPQMA=)
3: 3UFn9ZKL5xnyw3p3E5ZPlAB21Ko.roa (hash: 6Pd7GRQDu0g4GEPlaJKLxZv9PduNId/exEPYyekEroo=)
4: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (hash: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=)
5: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: GtnwdB+lv3iWJiAUeoMN/QmP1Y/B98n477v2aJ3CvmE=)
6: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (hash: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=)
7: K-bptzEyfSxe5brLutYZPui7KJo.roa (hash: RaMo3W1jAz/KokfzelPm6eQVRrUb/HW8AUWUJAZdGqY=)
8: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (hash: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=)
9: XkV_BzJ-10BB1M0sgp5kpjzCQ_0.roa (hash: 4EePChQLAU75id7JSNxKuA3gIb+9FFNSZgknDwLIyC0=)
10: iv3qLKysxVV4ZL5RT241TdjAl14.roa (hash: r9qUMWgU+MUkMxe2hq37VcclKhs/bYytS6pmpmAT6kU=)
11: jhzB3ouu7eGFu6kVywcyzMtWs14.roa (hash: 7ZiZaqq6we6E8f2G4rGHZ2hDk0lAG3K7IdZ3KOrq/pc=)
12: o0vYiu7t9-Gf_p4my_hwACs12xM.roa (hash: ScfmqOpze90tdsEAKGtRqRtW3EkE/Acyl9MG35VvTP4=)
13: rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa (hash: 2H+IeYUnWlwSyufBzTPesu0/NN+MSp0WuweXrOO7518=)
14: vW6DP49xFYD9QamGuDpSrklSowc.roa (hash: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=)
15: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (hash: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=)
16: zg3nFQ0Sg8cWpJOYqLKRP35LJU8.roa (hash: 2J2iLBS4crA0QUVX97KQglPfQbj/gfi5p+BnPc66cJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:30:79:96:da:16:f4:7b:89:4f:f8:ea:d7:b9:0f:ef:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Dec 18 08:00:33 2025 GMT
Not After : Dec 19 08:00:33 2025 GMT
Subject: CN=fb39180eab3eab81aeb2c6b8f09b5a6f47b87c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:49:6d:0e:04:8c:01:f3:b4:97:60:1c:1c:
5c:9b:46:85:06:7b:62:24:18:95:bd:18:7e:64:b4:
b0:e4:3c:b3:36:19:98:55:12:ea:64:75:c2:fe:7d:
95:f3:c2:db:1f:2e:2d:96:38:0a:be:31:41:b3:6e:
b4:0b:71:49:46:31:03:60:23:92:2d:e9:31:21:0c:
09:80:3e:c5:64:f5:6b:23:e0:c6:f5:6e:f0:e0:84:
c9:01:eb:b2:22:76:2c:de:54:a9:e4:fb:e1:f1:ac:
fc:d5:f8:32:76:bb:e6:8d:36:77:2d:61:0b:b5:f0:
7e:6b:8b:a3:57:35:b3:d3:b9:9e:79:79:d1:a4:09:
0b:ac:2a:24:b5:35:63:c2:8a:9d:6e:12:a0:6e:e7:
b4:e0:05:d4:d2:01:db:1d:15:f4:e7:ea:58:8d:05:
c3:e3:ab:79:b3:71:32:f2:ae:b5:d5:1f:bd:21:48:
28:06:68:a0:ac:02:e0:b6:13:21:3f:e5:97:74:3f:
bc:f3:6b:d4:75:ea:ca:70:99:25:57:9b:43:b4:8d:
de:80:d9:1d:a9:63:38:ff:ce:e0:51:43:62:f7:7c:
ca:da:26:08:bc:d6:98:dc:c4:f1:93:1a:9b:4f:84:
62:76:90:8c:22:ae:57:c3:cf:df:14:27:50:a6:99:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:39:18:0E:AB:3E:AB:81:AE:B2:C6:B8:F0:9B:5A:6F:47:B8:7C:34
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9a:04:78:7f:c3:e6:da:5e:55:e3:d0:9a:04:66:09:d1:8f:
a7:93:74:94:b0:52:d9:ee:2d:5b:df:c0:8e:4d:05:7a:c5:e6:
54:16:29:72:3d:43:f6:82:77:da:a3:19:71:b1:b6:03:b5:b8:
a1:03:f4:e6:03:05:ac:c7:f1:27:03:df:f2:c9:80:53:99:5d:
f1:64:a9:ae:c6:a8:4c:7f:38:54:6b:f5:54:08:14:05:6e:ce:
d8:9f:ad:e7:9e:1d:d0:02:b5:14:5c:c5:3f:b6:d1:91:1e:43:
9c:17:bb:1e:44:e4:0d:b7:f1:d2:6d:94:e2:53:49:20:ba:f9:
cb:a0:88:61:fe:be:34:c6:9f:9b:e4:3b:68:62:01:d8:0c:cd:
ac:5c:c6:e0:2e:7c:e0:44:f9:39:a3:cc:60:07:93:4b:9d:53:
01:2e:d4:42:06:fe:54:ba:2c:0d:84:c4:13:3c:01:0f:69:4a:
46:1c:10:ea:72:4b:92:15:6d:8e:5e:4d:73:f8:29:bf:45:53:
c3:d2:cf:8f:1a:d5:a6:e1:6c:b9:0c:b6:95:06:07:17:23:fa:
13:3c:09:0b:cd:83:b5:c9:e9:76:22:62:5f:90:35:cd:c3:27:
3a:04:b0:1c:fb:3d:0b:01:c6:e8:4d:d6:1d:20:e0:f9:5a:45:
b8:fd:21:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 15:23:36 2025 by rpki-client