This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json) Hash identifier: eN+VaJ2sv9tyDc7bsT0OLCyAvnJll8sGWW2GJS9Ulyc= Subject key identifier: C5:AD:C8:36:5D:AC:15:BB:A5:5B:99:5B:EE:D6:C9:6F:34:9F:B4:B9 Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5 Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5 Certificate serial: 019B4E4D4509411C6E1A52D25C7915A778E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft Manifest number: 0680 Signing time: Wed 24 Dec 2025 03:00:45 +0000 Manifest this update: Wed 24 Dec 2025 03:00:45 +0000 Manifest next update: Thu 25 Dec 2025 03:00:45 +0000 Files and hashes: 1: KG6jzdyZvsoXu639b6uxjJ94LA0.roa (hash: zuHbXITXPWpIjm5UWYo1gnuNJcxQg0P5glow8hcHCUc=) 2: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: 5LWyzJQx0BgOoqWloz0B/7uJW/j8X0udBUmopAuJYE8=) 3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:45:09:41:1c:6e:1a:52:d2:5c:79:15:a7:78:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5 Validity Not Before: Dec 24 03:00:45 2025 GMT Not After : Dec 25 03:00:45 2025 GMT Subject: CN=c5adc8365dac15bba55b995beed6c96f349fb4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b7:e5:07:d2:59:15:ac:d5:59:86:52:d5:72: 9b:39:c8:a5:1f:18:b3:12:0b:05:b2:b1:0f:b1:9d: 8e:e0:34:1e:ec:1c:7e:7c:a8:2f:aa:e9:67:94:97: 70:d4:6f:79:24:63:6b:43:81:ba:dc:7f:c7:5f:c6: 26:04:90:56:67:d3:c6:2e:f6:50:37:9c:a5:27:c3: 43:d5:2b:4d:f0:e0:b6:31:3a:05:fd:26:d9:33:f3: 95:31:1c:d8:fa:4c:7c:fc:d1:a8:d6:b5:ca:f8:21: 20:36:3f:6f:9e:a2:60:c9:5a:15:e4:77:d2:4e:e2: 0d:87:b4:1a:0a:29:74:62:53:b0:ac:4b:ee:eb:74: 66:6a:69:f0:fa:fb:40:0d:9a:24:ce:28:8e:09:a3: 2f:72:14:a7:fb:63:97:82:e9:c6:48:ea:a4:8a:1d: c7:35:fd:83:20:6d:fa:7b:71:7b:e0:d3:33:cc:75: 48:c5:43:88:34:a7:17:66:66:6e:77:43:39:ae:8a: 43:33:11:40:49:3b:46:9c:17:f9:a3:72:a2:91:37: b2:24:a5:c1:29:30:44:ae:d4:e5:5f:4c:7a:d0:15: ed:c4:95:34:4f:13:fc:5e:4f:da:74:19:9c:95:58: 3a:5a:7d:10:a5:52:aa:b5:22:b9:c2:6c:0e:f9:1b: 51:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AD:C8:36:5D:AC:15:BB:A5:5B:99:5B:EE:D6:C9:6F:34:9F:B4:B9 X509v3 Authority Key Identifier: keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:16:ec:c4:cc:ad:e1:e7:bb:f0:35:83:77:50:3c:9a:5a:30: 58:2e:7d:71:4b:d4:63:e7:cb:fa:6f:60:99:fa:7c:24:36:d5: 43:94:5e:76:82:7e:6e:12:88:ea:1e:3b:6c:d7:cb:77:0a:8e: 4c:ac:fc:95:24:94:7f:a2:5c:7a:40:b9:d5:22:2a:98:f1:18: 7e:36:38:b2:cd:d2:38:d8:88:e3:13:f0:f9:00:6c:50:59:55: f0:48:e3:f4:a5:1e:98:91:3c:79:ac:1d:3d:04:16:4b:99:c3: 64:21:d4:ce:2b:0b:13:61:39:37:dd:cb:5b:b8:d4:a4:17:55: 0d:0e:76:7d:11:ec:75:32:51:97:25:31:28:70:82:95:85:f4: 01:89:99:65:24:4e:c5:06:6f:88:9a:9f:3c:a3:1e:df:41:e8: 30:28:d1:6b:d0:0a:fe:20:de:65:4c:dc:26:ba:41:20:77:d2: f2:ab:c3:f3:28:71:cc:51:8a:c9:12:f9:08:c0:05:7f:12:ce: c9:1c:eb:be:8c:13:57:e4:6e:00:1a:0b:71:b1:61:04:fa:6c: 83:4b:77:ca:5b:19:c9:b1:75:11:bf:dc:db:b9:58:8d:54:f2: ee:72:02:ec:6c:c2:5c:43:62:1c:4e:09:b7:86:d4:ba:28:6d: 63:71:83:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTUUJQRxuGlLSXHkVp3jjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1Yjg3MWQ2OTM5NTYxMDQ2NTc3OTMyM2I5MWIzNGU2OWJm Y2Y1YjUwHhcNMjUxMjI0MDMwMDQ1WhcNMjUxMjI1MDMwMDQ1WjAzMTEwLwYDVQQD EyhjNWFkYzgzNjVkYWMxNWJiYTU1Yjk5NWJlZWQ2Yzk2ZjM0OWZiNGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rflB9JZFazVWYZS1XKbOcilHxiz EgsFsrEPsZ2O4DQe7Bx+fKgvqulnlJdw1G95JGNrQ4G63H/HX8YmBJBWZ9PGLvZQ N5ylJ8ND1StN8OC2MToF/SbZM/OVMRzY+kx8/NGo1rXK+CEgNj9vnqJgyVoV5HfS TuINh7QaCil0YlOwrEvu63Rmamnw+vtADZokziiOCaMvchSn+2OXgunGSOqkih3H Nf2DIG36e3F74NMzzHVIxUOINKcXZmZud0M5ropDMxFASTtGnBf5o3KikTeyJKXB KTBErtTlX0x60BXtxJU0TxP8Xk/adBmclVg6Wn0QpVKqtSK5wmwO+RtR9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWtyDZdrBW7pVuZW+7WyW80n7S5MB8GA1UdIwQY MBaAFIW4cdaTlWEEZXeTI7kbNOab/PW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAt MjZhMGI4ZGVmMGMzLzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAtMjZhMGI4ZGVmMGMz LzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRbsxMyt 4ee78DWDd1A8mlowWC59cUvUY+fL+m9gmfp8JDbVQ5RedoJ+bhKI6h47bNfLdwqO TKz8lSSUf6JcekC51SIqmPEYfjY4ss3SONiI4xPw+QBsUFlV8Ejj9KUemJE8eawd PQQWS5nDZCHUzisLE2E5N93LW7jUpBdVDQ52fRHsdTJRlyUxKHCClYX0AYmZZSRO xQZviJqfPKMe30HoMCjRa9AK/iDeZUzcJrpBIHfS8qvD8yhxzFGKyRL5CMAFfxLO yRzrvowTV+RuABoLcbFhBPpsg0t3ylsZybF1Eb/c27lYjVTy7nIC7GzCXENiHE4J t4bUuihtY3GDHg== -----END CERTIFICATE-----Generated at Wed Dec 24 12:55:08 2025 by rpki-client