This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json) Hash identifier: uHmU/V+9PZ0wEPr7rYYR3mjQxOUWIqXtFc5kh6iM8J8= Subject key identifier: AE:CE:3B:E5:3A:96:18:2D:B4:36:82:67:0B:02:55:19:DF:12:7F:3D Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5 Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5 Certificate serial: 019B69574650CD1A8DB24D03EF493558AEEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft Manifest number: 068E Signing time: Mon 29 Dec 2025 09:01:25 +0000 Manifest this update: Mon 29 Dec 2025 09:01:25 +0000 Manifest next update: Tue 30 Dec 2025 09:01:25 +0000 Files and hashes: 1: KG6jzdyZvsoXu639b6uxjJ94LA0.roa (hash: zuHbXITXPWpIjm5UWYo1gnuNJcxQg0P5glow8hcHCUc=) 2: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: EJKtSy8F2ukHJqaDgjnO3eKQLPo3NS+WTwgDxBMgsqI=) 3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:57:46:50:cd:1a:8d:b2:4d:03:ef:49:35:58:ae:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5 Validity Not Before: Dec 29 09:01:25 2025 GMT Not After : Dec 30 09:01:25 2025 GMT Subject: CN=aece3be53a96182db43682670b025519df127f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:13:64:78:1e:41:44:70:da:fc:fb:f2:23: 4d:10:9b:0b:dd:3d:c3:53:c2:2e:a2:df:4e:bc:0b: 72:f8:f2:ac:41:79:1e:15:bd:bc:2c:25:86:73:62: e5:e7:b0:34:40:90:da:ff:d3:90:d4:dd:a4:dc:dd: cd:87:23:43:aa:c1:8d:53:99:ec:6f:b6:61:d7:bc: 97:75:74:7d:a9:c5:46:2a:2f:f5:f2:08:8d:ee:5f: 90:dd:94:f4:dd:67:37:f0:c7:0f:95:f2:f8:4f:0c: 88:0e:d8:0e:a8:5e:1c:e0:52:06:0d:46:a8:e5:a8: df:84:06:8f:d5:c0:97:1d:c3:42:1a:38:cc:16:ec: 32:65:ff:3f:df:24:f9:d4:18:ef:11:c9:41:65:dd: 6a:fa:eb:6e:cb:ba:e4:4f:3e:c6:6d:02:85:4a:14: 77:1b:73:82:1a:8b:7e:57:3e:94:5a:e7:a7:32:54: ad:6e:64:b0:75:a4:81:da:33:a1:13:32:c2:17:4f: 41:55:2d:ec:db:3e:86:f0:3a:34:f9:41:87:7f:7c: 42:49:f8:99:9b:64:ca:d6:20:2e:5b:f2:c3:69:0b: 89:ad:25:03:20:c6:ca:6e:fa:d0:b1:18:1d:4f:a5: 6c:6b:97:69:00:f5:83:e0:22:10:31:45:6a:70:4d: 0b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CE:3B:E5:3A:96:18:2D:B4:36:82:67:0B:02:55:19:DF:12:7F:3D X509v3 Authority Key Identifier: keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:0f:24:7b:8d:68:43:af:d0:b6:7a:59:fa:e3:5c:8f:a2:40: 1d:db:e0:6e:8c:fb:68:e8:1d:c0:32:27:df:4b:67:33:50:39: 4e:de:d4:b1:0d:22:0c:ca:1d:1f:7f:89:00:b7:a3:c2:fb:90: 9d:30:25:7a:79:93:e8:1a:9e:6c:3b:53:a3:b2:73:44:49:31: cd:28:eb:e3:5f:54:19:4f:35:c9:30:a6:12:60:9b:77:93:a6: 58:d7:86:e0:0f:45:b7:1e:a8:4c:c2:98:d7:61:5a:1a:d1:26: 02:c5:ab:9b:eb:59:90:d2:48:0a:4d:99:42:f9:41:bd:71:7a: 18:a6:8b:37:41:34:c4:d2:95:05:ee:f1:ba:a4:2a:2c:66:19: 0e:b4:12:c6:20:df:61:56:df:74:b8:a0:91:03:31:0e:d1:58: f6:1b:57:03:ac:86:b1:7e:07:08:7b:ab:80:4a:8a:06:cd:1f: db:60:36:ce:3a:9d:b0:58:6f:d4:cb:e3:6b:e1:45:69:bd:d3: f9:22:93:19:8c:3f:21:21:56:59:23:90:8a:e7:73:dc:4a:d9: f9:67:47:56:3e:88:8f:66:7b:f3:e9:cf:4d:9a:3f:ad:40:0f: 1a:c4:7c:60:ea:6b:a9:7f:3b:97:e1:d9:09:66:83:51:15:de: fd:09:ce:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpV0ZQzRqNsk0D70k1WK7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1Yjg3MWQ2OTM5NTYxMDQ2NTc3OTMyM2I5MWIzNGU2OWJm Y2Y1YjUwHhcNMjUxMjI5MDkwMTI1WhcNMjUxMjMwMDkwMTI1WjAzMTEwLwYDVQQD EyhhZWNlM2JlNTNhOTYxODJkYjQzNjgyNjcwYjAyNTUxOWRmMTI3ZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzcTZHgeQURw2vz78iNNEJsL3T3D U8Iuot9OvAty+PKsQXkeFb28LCWGc2Ll57A0QJDa/9OQ1N2k3N3NhyNDqsGNU5ns b7Zh17yXdXR9qcVGKi/18giN7l+Q3ZT03Wc38McPlfL4TwyIDtgOqF4c4FIGDUao 5ajfhAaP1cCXHcNCGjjMFuwyZf8/3yT51BjvEclBZd1q+utuy7rkTz7GbQKFShR3 G3OCGot+Vz6UWuenMlStbmSwdaSB2jOhEzLCF09BVS3s2z6G8Do0+UGHf3xCSfiZ m2TK1iAuW/LDaQuJrSUDIMbKbvrQsRgdT6Vsa5dpAPWD4CIQMUVqcE0LsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7OO+U6lhgttDaCZwsCVRnfEn89MB8GA1UdIwQY MBaAFIW4cdaTlWEEZXeTI7kbNOab/PW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAt MjZhMGI4ZGVmMGMzLzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAtMjZhMGI4ZGVmMGMz LzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxQ8ke41o Q6/QtnpZ+uNcj6JAHdvgboz7aOgdwDIn30tnM1A5Tt7UsQ0iDModH3+JALejwvuQ nTAlenmT6BqebDtTo7JzREkxzSjr419UGU81yTCmEmCbd5OmWNeG4A9Ftx6oTMKY 12FaGtEmAsWrm+tZkNJICk2ZQvlBvXF6GKaLN0E0xNKVBe7xuqQqLGYZDrQSxiDf YVbfdLigkQMxDtFY9htXA6yGsX4HCHurgEqKBs0f22A2zjqdsFhv1Mvja+FFab3T +SKTGYw/ISFWWSOQiudz3ErZ+WdHVj6Ij2Z78+nPTZo/rUAPGsR8YOprqX87l+HZ CWaDURXe/QnOrw== -----END CERTIFICATE-----Generated at Mon Dec 29 14:55:45 2025 by rpki-client