This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json) Hash identifier: jpQXrzVbar+R8c3TRgxoAzcEiEIAU3OutB0+jvTmXfM= Subject key identifier: AE:CD:99:10:90:D9:EE:4E:58:48:EF:5C:5A:4D:53:3C:93:A7:A2:3F Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Certificate serial: 019B3C7EA8E92AEDE236616C54376D7122E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft Manifest number: 76 Signing time: Sat 20 Dec 2025 16:01:32 +0000 Manifest this update: Sat 20 Dec 2025 16:01:32 +0000 Manifest next update: Sun 21 Dec 2025 16:01:32 +0000 Files and hashes: 1: VmO3UXEyesCK7xMSxb16ZIYzF9A.roa (hash: aPLCPS23hjqSkPvp6cN+PKiJ+R1FoeAcBOZnERoWNo8=) 2: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: sDv+2ZCr2R2of4Ur/8603OBhJVsjVL/zb8aborsX6Pg=) 3: tFKBgVopEDWycM_ICm7jh-VZF3M.roa (hash: LgvsB0E5FX1iC1patAeSP801Ruuw0DUNZ/4X/K37x9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:a8:e9:2a:ed:e2:36:61:6c:54:37:6d:71:22:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Validity Not Before: Dec 20 16:01:32 2025 GMT Not After : Dec 21 16:01:32 2025 GMT Subject: CN=aecd991090d9ee4e5848ef5c5a4d533c93a7a23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:f4:e6:43:f8:fd:74:d0:35:38:2c:65:95: 07:94:30:ee:62:a0:b3:b1:f7:db:7d:80:88:b4:31: d0:0b:0c:88:c0:d5:f5:8e:2f:d4:b4:25:48:9c:ef: ba:99:03:0f:28:6e:73:74:2c:80:ed:98:05:1a:c7: ca:52:ec:1b:15:ff:ce:13:d1:ac:40:0a:3c:0a:dd: c7:11:4b:be:82:83:83:d5:c1:62:f7:df:81:16:8c: 32:da:1f:b2:c6:63:8d:70:16:fa:e3:fe:43:4c:ed: 40:d4:77:7a:4a:b9:b9:5f:be:00:18:ca:d7:c9:e6: 3e:15:7c:8e:a7:33:59:e7:ea:c3:e8:2c:b1:5f:60: 8a:3b:4d:cd:2c:31:af:b3:0f:37:4a:80:b5:f2:96: c3:86:62:95:23:bf:e3:d5:e0:22:40:61:61:17:94: f8:e4:fa:77:48:10:03:1f:c7:a7:72:e1:81:0d:c4: a2:50:45:87:df:52:4c:4c:e0:1a:71:50:a1:31:71: 21:fd:61:c0:30:99:0b:aa:98:20:f2:47:81:5f:ca: fe:ac:c7:6b:07:94:be:86:ff:60:25:97:54:d2:ec: 17:0a:e9:4b:cc:37:1c:e5:86:5b:a6:6b:99:3e:e6: 9c:fa:11:c9:23:ba:fe:be:4d:22:48:49:ff:dd:db: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CD:99:10:90:D9:EE:4E:58:48:EF:5C:5A:4D:53:3C:93:A7:A2:3F X509v3 Authority Key Identifier: keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2c:cb:fb:63:60:d4:1a:ae:d1:05:af:f1:0c:56:63:ab:a1: e5:8c:f2:f7:9a:46:b3:1c:5e:dc:6f:62:79:59:07:54:cf:0e: f1:74:66:eb:63:36:d7:fe:4a:cf:e8:e2:01:99:1d:d5:a8:ed: ec:65:da:a4:4c:8b:19:17:e3:3b:0d:b1:86:8e:a6:dd:71:e6: 80:d2:bc:af:4b:e6:57:8e:1b:4a:c0:23:ae:82:2d:b4:4c:77: 97:ef:fc:e6:a1:90:36:ed:7b:15:5f:c0:fb:77:57:10:bf:2e: ed:a4:a7:cb:75:f5:72:f4:e4:da:c7:fd:25:23:10:18:4a:e3: c2:c3:f5:ca:9f:c0:ef:d1:0a:eb:d3:31:f5:28:90:2e:94:9b: 2d:78:02:fc:94:a4:50:0a:92:3f:29:06:1d:fb:3e:de:8d:f0: 11:7e:0b:69:e2:8c:37:02:1c:28:b2:73:03:ff:8f:ca:06:df: 3c:e5:96:e2:6b:03:ae:37:70:79:a6:f8:81:b3:52:4c:66:e4: 74:74:2f:d0:2c:7b:f4:f2:29:9a:f1:00:cc:f0:41:d0:a5:d8: ef:bb:43:26:8f:5e:ec:22:7a:c4:07:ed:d7:9e:dc:e5:50:02: 4f:6e:4e:cd:fa:71:97:fc:20:19:b6:79:78:0b:be:4b:9a:63: dc:97:66:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fqjpKu3iNmFsVDdtcSLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl NGYyYzYwHhcNMjUxMjIwMTYwMTMyWhcNMjUxMjIxMTYwMTMyWjAzMTEwLwYDVQQD EyhhZWNkOTkxMDkwZDllZTRlNTg0OGVmNWM1YTRkNTMzYzkzYTdhMjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq/05kP4/XTQNTgsZZUHlDDuYqCz sffbfYCItDHQCwyIwNX1ji/UtCVInO+6mQMPKG5zdCyA7ZgFGsfKUuwbFf/OE9Gs QAo8Ct3HEUu+goOD1cFi99+BFowy2h+yxmONcBb64/5DTO1A1Hd6Srm5X74AGMrX yeY+FXyOpzNZ5+rD6CyxX2CKO03NLDGvsw83SoC18pbDhmKVI7/j1eAiQGFhF5T4 5Pp3SBADH8encuGBDcSiUEWH31JMTOAacVChMXEh/WHAMJkLqpgg8keBX8r+rMdr B5S+hv9gJZdU0uwXCulLzDcc5YZbpmuZPuac+hHJI7r+vk0iSEn/3dunmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7NmRCQ2e5OWEjvXFpNUzyTp6I/MB8GA1UdIwQY MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt NzRkOTFjZGJlMTk1LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1 LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyzL+2Ng 1Bqu0QWv8QxWY6uh5Yzy95pGsxxe3G9ieVkHVM8O8XRm62M21/5Kz+jiAZkd1ajt 7GXapEyLGRfjOw2xho6m3XHmgNK8r0vmV44bSsAjroIttEx3l+/85qGQNu17FV/A +3dXEL8u7aSny3X1cvTk2sf9JSMQGErjwsP1yp/A79EK69Mx9SiQLpSbLXgC/JSk UAqSPykGHfs+3o3wEX4LaeKMNwIcKLJzA/+PygbfPOWW4msDrjdweab4gbNSTGbk dHQv0Cx79PIpmvEAzPBB0KXY77tDJo9e7CJ6xAft157c5VACT25Ozfpxl/wgGbZ5 eAu+S5pj3Jdmvg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:45:42 2025 by rpki-client