This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft File: hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json) Hash identifier: HiOhH0ZzWBqvHdPYBP5H7qXh1vWINlwrcktunJn1hAQ= Subject key identifier: 0E:A9:56:3F:B6:51:D2:17:EA:E0:55:BA:D1:4D:AA:01:2F:A7:D0:33 Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25 Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225 Certificate serial: 019B4581E56819B57DC8BA23B0D6707BA9A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft Manifest number: 1725 Signing time: Mon 22 Dec 2025 10:01:39 +0000 Manifest this update: Mon 22 Dec 2025 10:01:39 +0000 Manifest next update: Tue 23 Dec 2025 10:01:39 +0000 Files and hashes: 1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: Yse0t38T6kRLKhJ774oJnXdFRbjbkLppUSxs5FqOhIQ=) 2: kclE4AGa3IQ3ANoqx8hNmFyyOPc.roa (hash: era/rLdikRzOubIlTwlZQUllh2OgF4bxbh9GfJNQo5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:e5:68:19:b5:7d:c8:ba:23:b0:d6:70:7b:a9:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225 Validity Not Before: Dec 22 10:01:39 2025 GMT Not After : Dec 23 10:01:39 2025 GMT Subject: CN=0ea9563fb651d217eae055bad14daa012fa7d033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5d:ca:78:39:e2:04:39:b4:82:52:a6:2c:fa: 16:ce:2b:23:2f:8d:d2:b7:9f:83:7d:02:de:a2:02: 81:ca:f9:67:14:4d:43:55:45:f1:89:2b:ee:9e:b8: 1f:97:26:d7:a8:59:93:8d:17:b5:12:b3:57:42:20: 5d:55:19:4a:4b:4f:2b:4c:82:89:c0:a0:24:e2:e4: 16:1a:97:24:02:47:2f:17:f6:8e:fc:d4:c2:1e:03: cd:4c:3f:62:90:18:36:12:3f:7c:b2:c7:5e:95:2b: 9e:64:ee:da:c2:3b:6d:80:7e:10:d4:da:1f:4e:d2: 60:a4:59:80:36:03:7e:ec:24:43:76:5d:4e:9c:0b: d7:97:32:fd:da:22:f1:99:c8:f4:54:8a:d7:af:88: 48:3e:47:9c:04:21:2f:9f:3e:32:48:50:47:37:01: 40:43:bd:a2:23:07:f0:7a:fb:1a:0d:19:2b:ee:f1: 08:2f:25:2d:5c:99:91:dd:fe:78:0e:ae:6d:d0:73: 60:e7:13:be:90:84:7a:a6:5d:3c:b3:ef:04:3a:13: 49:d9:6e:77:0a:7d:77:01:2f:d5:5d:1d:85:83:20: bd:f3:c5:4c:35:b4:45:2b:79:ff:13:95:86:f5:e7: 93:7d:a5:b7:bf:eb:35:98:94:f7:bc:b2:82:7a:5d: 51:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A9:56:3F:B6:51:D2:17:EA:E0:55:BA:D1:4D:AA:01:2F:A7:D0:33 X509v3 Authority Key Identifier: keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:93:aa:53:fb:49:71:2b:74:a9:27:bf:21:b0:a1:1d:df:f3: 12:89:f8:ba:8b:53:ce:1d:7c:9a:e5:e5:7e:d6:5d:ac:d0:61: de:c7:c9:3a:6b:84:01:c1:ca:dd:9c:9d:2e:52:f7:79:55:f3: 6f:cf:dc:c8:da:b7:d0:6d:fa:2e:a5:cd:70:4f:39:06:f6:d1: 20:c5:df:5e:8a:4a:e9:6c:97:cf:38:0a:f8:5f:31:09:50:3e: a9:d0:25:99:e6:ea:26:db:31:ca:0e:c7:31:d5:47:26:1f:35: 01:0b:e9:fb:f5:ec:d4:9e:77:ae:3e:5e:ed:c2:17:9a:41:55: c4:ae:ab:bc:cc:f4:fe:23:38:bf:96:7b:af:fb:24:86:e6:91: f2:bb:d7:c6:e3:fb:e2:a8:74:b9:1a:b8:54:15:dc:f5:74:c7: 5c:8f:92:bf:ae:b5:ce:5b:96:fc:ae:fa:24:1d:49:22:69:af: 9b:58:6d:e3:da:21:70:6e:d4:45:c1:fa:40:fc:25:92:26:1b: 99:08:e3:04:74:51:a4:e3:ca:26:ce:3f:c9:3b:f0:c0:d7:f5: e2:c4:87:20:62:3a:d3:62:47:e2:7e:18:3b:94:55:3c:44:ef: e4:bb:d8:80:f3:cb:61:de:86:fa:e0:ab:8b:9c:c9:55:f0:12: 09:9d:10:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgeVoGbV9yLojsNZwe6mjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NzhiNzZjNjljOTkxNTI5NGZkYzM5MTM1ZTIwZGFjNzM3 NjIyMjUwHhcNMjUxMjIyMTAwMTM5WhcNMjUxMjIzMTAwMTM5WjAzMTEwLwYDVQQD EygwZWE5NTYzZmI2NTFkMjE3ZWFlMDU1YmFkMTRkYWEwMTJmYTdkMDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV3KeDniBDm0glKmLPoWzisjL43S t5+DfQLeogKByvlnFE1DVUXxiSvunrgflybXqFmTjRe1ErNXQiBdVRlKS08rTIKJ wKAk4uQWGpckAkcvF/aO/NTCHgPNTD9ikBg2Ej98ssdelSueZO7awjttgH4Q1Nof TtJgpFmANgN+7CRDdl1OnAvXlzL92iLxmcj0VIrXr4hIPkecBCEvnz4ySFBHNwFA Q72iIwfwevsaDRkr7vEILyUtXJmR3f54Dq5t0HNg5xO+kIR6pl08s+8EOhNJ2W53 Cn13AS/VXR2FgyC988VMNbRFK3n/E5WG9eeTfaW3v+s1mJT3vLKCel1RpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6pVj+2UdIX6uBVutFNqgEvp9AzMB8GA1UdIwQY MBaAFIR4t2xpyZFSlP3DkTXiDaxzdiIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yODk2MDYtOWY1Yi00ZDM0LWFhY2Yt MmZkNjUwY2VmZDIxLzEvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8yODk2MDYtOWY1Yi00ZDM0LWFhY2YtMmZkNjUwY2VmZDIx LzEvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpOqU/tJ cSt0qSe/IbChHd/zEon4uotTzh18muXlftZdrNBh3sfJOmuEAcHK3ZydLlL3eVXz b8/cyNq30G36LqXNcE85BvbRIMXfXopK6WyXzzgK+F8xCVA+qdAlmebqJtsxyg7H MdVHJh81AQvp+/Xs1J53rj5e7cIXmkFVxK6rvMz0/iM4v5Z7r/skhuaR8rvXxuP7 4qh0uRq4VBXc9XTHXI+Sv661zluW/K76JB1JImmvm1ht49ohcG7URcH6QPwlkiYb mQjjBHRRpOPKJs4/yTvwwNf14sSHIGI602JH4n4YO5RVPETv5LvYgPPLYd6G+uCr i5zJVfASCZ0QTg== -----END CERTIFICATE-----Generated at Mon Dec 22 12:12:52 2025 by rpki-client