This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft File: hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft (raw, json) Hash identifier: vRVT5G2nifrqU4ugx807NHXWLb9ZqIlazP2HPQbjotM= Subject key identifier: DE:93:66:B8:1F:01:45:7F:3E:A9:97:16:52:CF:47:58:D1:72:4A:F7 Authority key identifier: 84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5 Certificate issuer: /CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5 Certificate serial: 019B4A398F953DA8399C68F3C6A6D1C824BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft Manifest number: 136A Signing time: Tue 23 Dec 2025 08:00:44 +0000 Manifest this update: Tue 23 Dec 2025 08:00:44 +0000 Manifest next update: Wed 24 Dec 2025 08:00:44 +0000 Files and hashes: 1: hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl (hash: Z+FYn8zYZFlEowRY+zImtLKlgmR5Qs3w/bNb7HWEknU=) 2: pNHLiZosFPLwAP2_39dVXVedoA8.roa (hash: 21Dk8gbrcOnUWwtpjgoXFZDgkCZkwg2MK05wmg5NEPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:8f:95:3d:a8:39:9c:68:f3:c6:a6:d1:c8:24:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5 Validity Not Before: Dec 23 08:00:44 2025 GMT Not After : Dec 24 08:00:44 2025 GMT Subject: CN=de9366b81f01457f3ea9971652cf4758d1724af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f8:80:4f:a5:06:cf:23:30:e3:be:c2:8e:6b: d9:ae:a7:53:f8:27:eb:7f:0d:9b:93:8a:72:dd:45: 69:c7:db:87:92:fc:0b:39:74:59:49:ef:27:3e:ef: f2:e5:5d:bc:13:aa:dc:ef:f4:eb:12:c3:9e:1f:93: 19:df:11:96:82:2d:c0:98:ac:64:ff:08:ba:b3:e5: 46:74:60:6b:0f:76:2c:d7:20:f7:d5:e4:c5:7c:f0: e5:f7:0f:1b:8e:39:58:20:38:0e:cb:59:15:b3:70: f3:34:70:0c:89:47:8b:02:fa:02:b7:05:9c:c0:60: 67:26:43:6b:9c:7f:15:c8:c7:02:bc:a6:66:f1:22: b1:2f:5f:32:b6:87:17:b0:42:aa:c4:55:36:5d:45: 6a:43:b5:62:34:cc:ba:52:27:00:c5:93:7d:c2:ce: ae:f0:ad:44:36:f8:2b:e9:23:df:3a:80:ed:70:0e: 6c:df:a4:f4:48:44:6f:00:74:66:e5:24:ab:23:55: 80:81:3b:f1:cf:79:b4:b2:a8:b2:45:51:38:65:7a: d0:d4:7b:b9:35:bf:b7:6b:a7:2f:3f:bc:18:ec:57: 4a:f0:e9:54:1e:e8:76:1f:11:b5:56:4a:71:f6:7b: 45:d6:1d:57:cd:95:35:51:c9:cb:62:55:b3:c0:8e: 1d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:93:66:B8:1F:01:45:7F:3E:A9:97:16:52:CF:47:58:D1:72:4A:F7 X509v3 Authority Key Identifier: keyid:84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:46:29:46:b2:9c:36:b7:7c:e2:d8:35:2b:c1:ff:5b:dc:c5: ad:97:a0:0b:d3:22:39:66:53:04:d3:1a:2b:67:05:cc:7b:c2: 80:3e:dc:06:57:df:21:fe:8d:fb:5e:f1:0a:5a:63:f4:31:66: 97:73:32:0e:11:0b:f2:46:9e:3c:e8:41:b2:6f:d2:70:d6:bc: 02:21:5a:ae:39:2a:32:28:a2:47:e3:ad:1d:80:5b:75:51:c5: 3e:e6:80:18:00:c5:eb:1d:9d:48:06:de:a9:71:88:88:04:77: 5f:bb:8b:6e:50:29:02:d3:69:0a:28:02:83:93:52:67:8b:a5: d6:05:15:19:30:ce:66:64:01:88:ec:a6:71:ee:77:03:03:c4: 86:e6:61:c9:7c:b4:11:02:21:60:a7:25:6c:ee:00:b9:ca:67: 2f:c8:1f:b4:1a:a4:43:d7:2f:bb:64:61:a1:cb:2c:26:3a:29: 67:24:55:0f:c5:71:75:20:72:0c:1a:cf:dc:36:a6:cc:43:d2: b2:45:ba:6c:7f:6e:67:a4:b8:9f:8a:a9:6b:4c:4c:c0:e6:79: c8:f6:fa:3b:2d:9d:c4:c3:54:35:3d:96:cf:a3:1b:69:d9:2d: 71:1c:45:90:be:e8:a6:57:f9:34:ca:8e:d2:0b:cd:3c:3f:10: ed:26:f9:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOY+VPag5nGjzxqbRyCS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0N2RjNzY1ZDFhMDM5ZTZmYmQ2YjhmYmI2NGQwN2Q1OGJm NTg0ZjUwHhcNMjUxMjIzMDgwMDQ0WhcNMjUxMjI0MDgwMDQ0WjAzMTEwLwYDVQQD EyhkZTkzNjZiODFmMDE0NTdmM2VhOTk3MTY1MmNmNDc1OGQxNzI0YWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPiAT6UGzyMw477CjmvZrqdT+Cfr fw2bk4py3UVpx9uHkvwLOXRZSe8nPu/y5V28E6rc7/TrEsOeH5MZ3xGWgi3AmKxk /wi6s+VGdGBrD3Ys1yD31eTFfPDl9w8bjjlYIDgOy1kVs3DzNHAMiUeLAvoCtwWc wGBnJkNrnH8VyMcCvKZm8SKxL18ytocXsEKqxFU2XUVqQ7ViNMy6UicAxZN9ws6u 8K1ENvgr6SPfOoDtcA5s36T0SERvAHRm5SSrI1WAgTvxz3m0sqiyRVE4ZXrQ1Hu5 Nb+3a6cvP7wY7FdK8OlUHuh2HxG1Vkpx9ntF1h1XzZU1UcnLYlWzwI4dPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6TZrgfAUV/PqmXFlLPR1jRckr3MB8GA1UdIwQY MBaAFIR9x2XRoDnm+9a4+7ZNB9WL9YT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEgzSFpkR2dPZWI3MXJqN3RrMEgxWXYxaFBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZTUwMzAtZGEyNC00YmJiLTliOTUt MDljZjdlNzJhMDMzLzEvaEgzSFpkR2dPZWI3MXJqN3RrMEgxWXYxaFBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83ZTUwMzAtZGEyNC00YmJiLTliOTUtMDljZjdlNzJhMDMz LzEvaEgzSFpkR2dPZWI3MXJqN3RrMEgxWXYxaFBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEYpRrKc Nrd84tg1K8H/W9zFrZegC9MiOWZTBNMaK2cFzHvCgD7cBlffIf6N+17xClpj9DFm l3MyDhEL8kaePOhBsm/ScNa8AiFarjkqMiiiR+OtHYBbdVHFPuaAGADF6x2dSAbe qXGIiAR3X7uLblApAtNpCigCg5NSZ4ul1gUVGTDOZmQBiOymce53AwPEhuZhyXy0 EQIhYKclbO4AucpnL8gftBqkQ9cvu2RhocssJjopZyRVD8VxdSByDBrP3DamzEPS skW6bH9uZ6S4n4qpa0xMwOZ5yPb6Oy2dxMNUNT2Wz6MbadktcRxFkL7oplf5NMqO 0gvNPD8Q7Sb5bw== -----END CERTIFICATE-----Generated at Tue Dec 23 12:51:54 2025 by rpki-client