This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft File: HHOn_DBLwC2AdEdtB121zc0tq94.mft (raw, json) Hash identifier: 9lS+Nb6YWs4ENfFeCjlIEBwZc0Rpf6kGsie9PRBu+Tw= Subject key identifier: DA:9E:CC:74:A2:76:D7:FE:25:C1:DD:60:1D:EB:7F:B1:66:8E:BB:CE Authority key identifier: 1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE Certificate issuer: /CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde Certificate serial: 019B65E86A58784813DC8E80C746C3820647 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 17:01:28 +0000 Manifest this update: Sun 28 Dec 2025 17:01:28 +0000 Manifest next update: Mon 29 Dec 2025 17:01:28 +0000 Files and hashes: 1: HHOn_DBLwC2AdEdtB121zc0tq94.crl (hash: eTgpuJEsp+rSiASb0ebs//HztE8wJL40oaFHiQ40gfo=) 2: rQAyAtXzJK9OUHUnzLQaQxxr-TQ.roa (hash: w5olPQMvIP8vMcrwMgipPdsnMo21DZm6sV/LFip8PYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e8:6a:58:78:48:13:dc:8e:80:c7:46:c3:82:06:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde Validity Not Before: Dec 28 17:01:28 2025 GMT Not After : Dec 29 17:01:28 2025 GMT Subject: CN=da9ecc74a276d7fe25c1dd601deb7fb1668ebbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:c0:9f:a9:38:be:6f:b9:01:b7:8c:e2:ab: 38:21:26:fb:01:45:db:a3:04:b6:f4:a3:a1:be:08: e6:32:3a:5d:4e:61:b7:33:cd:d0:f1:c2:44:bb:5d: 71:da:30:b9:34:48:69:ab:54:3c:11:ec:ca:50:4d: e0:bf:72:a7:92:35:dd:a8:9c:53:da:8f:d8:d8:c7: 38:db:e6:f9:d2:73:3d:3d:8e:80:eb:2c:f1:e1:9c: 08:76:47:88:77:05:01:e6:70:7d:f8:2e:d3:3e:c4: bc:4c:53:34:63:98:fa:dc:b9:15:2b:ef:b6:70:c4: b7:9a:ac:95:9d:7c:a6:a5:aa:f3:43:e9:6b:8c:1e: 21:26:90:cd:56:a6:76:01:b7:43:b6:db:73:c8:94: 28:f7:af:ed:34:d7:14:4c:3f:88:78:ec:c8:f7:df: 5e:34:38:77:c5:f5:b9:74:5f:17:38:5b:cb:19:7f: f7:92:11:d5:b9:1e:21:b5:be:b2:15:66:2e:f5:42: 1a:61:91:d2:71:3e:8e:3e:37:30:83:8b:73:0b:3a: 65:da:9a:a3:15:69:aa:e2:5e:27:14:25:2f:11:98: 9e:ca:aa:92:ee:dd:56:c4:69:f6:56:d1:90:31:6d: 94:ff:4e:53:11:13:0d:61:dd:26:bd:16:1e:5e:46: 06:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9E:CC:74:A2:76:D7:FE:25:C1:DD:60:1D:EB:7F:B1:66:8E:BB:CE X509v3 Authority Key Identifier: keyid:1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:7c:46:56:c9:f9:da:c1:66:7f:d8:8a:e0:41:d9:84:76:bd: 48:3a:bd:3e:02:34:dc:1f:f5:76:19:3e:bc:07:6d:03:23:e8: 27:62:90:dd:09:c8:ca:c2:87:a5:6b:56:8f:c3:c4:6d:fb:c2: 24:ca:37:33:9f:08:f5:8f:64:82:f3:12:cc:5d:b2:92:85:84: a5:d6:c6:62:c9:7b:36:ee:2e:07:58:e2:27:10:78:59:c4:b5: e3:b4:76:a5:75:42:ad:db:04:d3:92:2a:aa:c2:fd:37:ee:fb: 76:8a:9e:1d:4c:e1:f5:9b:b4:22:2f:29:45:5a:ac:53:73:8b: ca:8c:9a:6f:46:3d:e8:e7:2b:33:3a:58:5c:ad:20:48:fd:4b: c9:2e:5d:1b:63:9b:e2:a2:e1:51:3e:ea:6b:ea:9c:1f:2a:30: 20:89:3c:ca:44:4c:26:a3:8d:bd:b8:5a:33:42:e6:47:4a:96: 8d:d0:73:14:a1:46:c2:43:42:37:cd:01:24:c9:82:94:42:3b: 07:03:6e:14:46:7e:2a:c1:82:0e:bf:13:86:7e:35:64:29:59: bc:78:cc:0a:0e:b1:6d:ff:6e:21:fd:30:d5:34:8f:69:4a:3d: cc:52:a5:cd:d0:1f:f6:78:ff:68:d6:33:8d:fb:73:a1:04:42: c0:c4:13:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl6GpYeEgT3I6Ax0bDggZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzNhN2ZjMzA0YmMwMmQ4MDc0NDc2ZDA3NWRiNWNkY2Qy ZGFiZGUwHhcNMjUxMjI4MTcwMTI4WhcNMjUxMjI5MTcwMTI4WjAzMTEwLwYDVQQD EyhkYTllY2M3NGEyNzZkN2ZlMjVjMWRkNjAxZGViN2ZiMTY2OGViYmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoPAn6k4vm+5AbeM4qs4ISb7AUXb owS29KOhvgjmMjpdTmG3M83Q8cJEu11x2jC5NEhpq1Q8EezKUE3gv3KnkjXdqJxT 2o/Y2Mc42+b50nM9PY6A6yzx4ZwIdkeIdwUB5nB9+C7TPsS8TFM0Y5j63LkVK++2 cMS3mqyVnXymparzQ+lrjB4hJpDNVqZ2AbdDtttzyJQo96/tNNcUTD+IeOzI999e NDh3xfW5dF8XOFvLGX/3khHVuR4htb6yFWYu9UIaYZHScT6OPjcwg4tzCzpl2pqj FWmq4l4nFCUvEZieyqqS7t1WxGn2VtGQMW2U/05TERMNYd0mvRYeXkYGpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqezHSidtf+JcHdYB3rf7FmjrvOMB8GA1UdIwQY MBaAFBxzp/wwS8AtgHRHbQddtc3NLaveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhPbl9EQkx3QzJBZEVkdEIxMjF6YzB0cTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84MTBjNzItZDQxNi00YTE0LThhY2Et YThmYWVlYjdlZTUyLzEvSEhPbl9EQkx3QzJBZEVkdEIxMjF6YzB0cTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy84MTBjNzItZDQxNi00YTE0LThhY2EtYThmYWVlYjdlZTUy LzEvSEhPbl9EQkx3QzJBZEVkdEIxMjF6YzB0cTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3xGVsn5 2sFmf9iK4EHZhHa9SDq9PgI03B/1dhk+vAdtAyPoJ2KQ3QnIysKHpWtWj8PEbfvC JMo3M58I9Y9kgvMSzF2ykoWEpdbGYsl7Nu4uB1jiJxB4WcS147R2pXVCrdsE05Iq qsL9N+77doqeHUzh9Zu0Ii8pRVqsU3OLyoyab0Y96OcrMzpYXK0gSP1LyS5dG2Ob 4qLhUT7qa+qcHyowIIk8ykRMJqONvbhaM0LmR0qWjdBzFKFGwkNCN80BJMmClEI7 BwNuFEZ+KsGCDr8Thn41ZClZvHjMCg6xbf9uIf0w1TSPaUo9zFKlzdAf9nj/aNYz jftzoQRCwMQTZw== -----END CERTIFICATE-----Generated at Mon Dec 29 01:48:40 2025 by rpki-client