This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft File: hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft (raw, json) Hash identifier: LkP1BbZBwxqGH/sjraFUgJ7BY0H/Pq4GBmVSgwOba6g= Subject key identifier: B6:09:00:FC:3F:AA:CA:9A:C5:86:19:98:C9:1D:09:82:74:CD:34:1B Authority key identifier: 86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77 Certificate issuer: /CN=8618b054d20dfdc9c5493c52c86234774904be77 Certificate serial: 019B34C4FE4507254F2DE7320898FCEEE26A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 04:01:23 +0000 Manifest this update: Fri 19 Dec 2025 04:01:23 +0000 Manifest next update: Sat 20 Dec 2025 04:01:23 +0000 Files and hashes: 1: hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl (hash: 9tHjFI0WCDXPl6aCy2W2w+pC0RkFL31KF5j18xD+2QE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:fe:45:07:25:4f:2d:e7:32:08:98:fc:ee:e2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8618b054d20dfdc9c5493c52c86234774904be77 Validity Not Before: Dec 19 04:01:23 2025 GMT Not After : Dec 20 04:01:23 2025 GMT Subject: CN=b60900fc3faaca9ac5861998c91d098274cd341b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:5c:68:e7:2f:94:2a:50:44:e7:5e:a0:03: 85:f4:0f:dc:b7:37:c3:f3:5e:66:c0:01:bd:59:86: 7f:39:c1:de:64:a7:55:7f:7a:9b:f8:80:55:78:1b: f6:ab:95:3a:1c:9c:b1:5a:3a:e0:00:00:7f:5f:d5: 7f:ba:d2:f4:f5:0d:77:91:0e:84:cc:df:eb:52:65: 01:a9:55:e9:1e:a4:9d:85:5b:35:43:31:3d:43:65: 34:0e:f8:e4:42:92:aa:cc:48:8d:67:a9:43:b0:d2: f9:a0:98:be:cb:11:65:80:f6:37:c8:32:18:40:cf: 7a:04:13:15:0f:1c:99:c5:99:e5:d8:32:33:17:4a: f3:df:10:dc:25:f6:23:7f:da:c8:44:d3:4d:b0:10: 36:47:33:e1:f3:b1:cb:23:fe:06:a0:59:27:26:ec: 05:52:34:3e:92:04:af:3f:16:86:53:4f:45:bb:eb: df:f8:54:34:64:89:c7:a0:fd:69:c1:cb:f4:a1:cb: 93:1a:e7:8b:29:70:ca:54:ac:18:6d:dc:8d:f9:d8: 0c:e6:99:bc:a3:6d:1b:13:10:09:93:db:7c:c1:4e: dc:34:f8:10:f3:94:1f:fe:92:ed:18:a8:73:13:86: 17:f0:8f:bc:36:93:48:15:fa:8b:0d:a6:95:22:c0: d5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:09:00:FC:3F:AA:CA:9A:C5:86:19:98:C9:1D:09:82:74:CD:34:1B X509v3 Authority Key Identifier: keyid:86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:78:21:2f:d1:33:23:3d:cb:4a:58:2b:ba:4c:00:5c:c3:4e: f2:03:ac:41:59:64:da:38:3c:4c:99:a3:d9:94:28:05:5f:ff: b1:82:5b:0d:05:4e:01:11:49:7e:5f:f8:28:b2:ec:bf:1a:c0: 63:94:5b:2e:bf:d1:f7:bd:e2:e2:95:2b:e0:f8:ce:88:84:29: 03:ee:c8:2a:b0:a8:0b:ff:31:4e:89:b2:b5:c3:29:eb:15:24: e3:da:26:b0:39:f4:f1:15:b7:da:96:8f:f2:07:70:9a:7a:cf: cc:8b:53:68:1d:76:17:bf:1e:06:2d:7e:67:24:89:9a:a0:bb: 43:f8:37:04:dd:3b:06:0e:03:c7:5f:d9:e2:ec:dc:17:77:46: 3f:ec:ca:a9:65:77:82:5d:47:76:9f:a7:f9:84:b2:4d:23:cd: 96:7f:a5:f7:16:48:94:81:17:1a:37:8b:55:2d:04:4f:6f:78: 6f:66:e8:63:15:2c:1b:d7:7d:cc:fe:66:6b:5d:44:31:a0:25: 8f:cf:e0:ea:43:4f:3d:26:a4:60:b7:33:13:d5:9f:a1:c4:98: 82:c2:db:f3:59:bf:21:c7:e1:ce:94:05:ce:13:8d:2b:58:40: 60:f6:88:b8:fe:21:46:ad:47:46:24:34:df:37:6a:62:bc:2f: 9c:8f:ee:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xP5FByVPLecyCJj87uJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MThiMDU0ZDIwZGZkYzljNTQ5M2M1MmM4NjIzNDc3NDkw NGJlNzcwHhcNMjUxMjE5MDQwMTIzWhcNMjUxMjIwMDQwMTIzWjAzMTEwLwYDVQQD EyhiNjA5MDBmYzNmYWFjYTlhYzU4NjE5OThjOTFkMDk4Mjc0Y2QzNDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuhcaOcvlCpQROdeoAOF9A/ctzfD 815mwAG9WYZ/OcHeZKdVf3qb+IBVeBv2q5U6HJyxWjrgAAB/X9V/utL09Q13kQ6E zN/rUmUBqVXpHqSdhVs1QzE9Q2U0DvjkQpKqzEiNZ6lDsNL5oJi+yxFlgPY3yDIY QM96BBMVDxyZxZnl2DIzF0rz3xDcJfYjf9rIRNNNsBA2RzPh87HLI/4GoFknJuwF UjQ+kgSvPxaGU09Fu+vf+FQ0ZInHoP1pwcv0ocuTGueLKXDKVKwYbdyN+dgM5pm8 o20bExAJk9t8wU7cNPgQ85Qf/pLtGKhzE4YX8I+8NpNIFfqLDaaVIsDV6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYJAPw/qsqaxYYZmMkdCYJ0zTQbMB8GA1UdIwQY MBaAFIYYsFTSDf3JxUk8UshiNHdJBL53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhpd1ZOSU5fY25GU1R4U3lHSTBkMGtFdm5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mN2YxN2MtYzI3ZC00MDhmLTk5YzEt YzQ3MzZjYTVjMjVhLzEvaGhpd1ZOSU5fY25GU1R4U3lHSTBkMGtFdm5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9mN2YxN2MtYzI3ZC00MDhmLTk5YzEtYzQ3MzZjYTVjMjVh LzEvaGhpd1ZOSU5fY25GU1R4U3lHSTBkMGtFdm5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3ghL9Ez Iz3LSlgrukwAXMNO8gOsQVlk2jg8TJmj2ZQoBV//sYJbDQVOARFJfl/4KLLsvxrA Y5RbLr/R973i4pUr4PjOiIQpA+7IKrCoC/8xTomytcMp6xUk49omsDn08RW32paP 8gdwmnrPzItTaB12F78eBi1+ZySJmqC7Q/g3BN07Bg4Dx1/Z4uzcF3dGP+zKqWV3 gl1Hdp+n+YSyTSPNln+l9xZIlIEXGjeLVS0ET294b2boYxUsG9d9zP5ma11EMaAl j8/g6kNPPSakYLczE9WfocSYgsLb81m/IcfhzpQFzhONK1hAYPaIuP4hRq1HRiQ0 3zdqYrwvnI/uHA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:33:21 2025 by rpki-client