This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft File: hhiHKrn6K6AssBpEzo64dkEoHBw.mft (raw, json) Hash identifier: qCXEeoelnSrEMFUp2zkLhblDiBB+EljzooP9BK7rWPE= Subject key identifier: D9:2B:CE:3B:A5:57:30:BF:A7:5C:0C:F0:F0:78:4B:82:0F:0F:CC:53 Authority key identifier: 86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C Certificate issuer: /CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c Certificate serial: 019AF3891F76486752F264AE1F950EA37CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft Manifest number: 0701 Signing time: Sat 06 Dec 2025 12:00:41 +0000 Manifest this update: Sat 06 Dec 2025 12:00:41 +0000 Manifest next update: Sun 07 Dec 2025 12:00:41 +0000 Files and hashes: 1: hhiHKrn6K6AssBpEzo64dkEoHBw.crl (hash: CRLygYsrmplGARWWApvdrryIRbgHIrgOMCUi/RsRBxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.crl rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:1f:76:48:67:52:f2:64:ae:1f:95:0e:a3:7c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c Validity Not Before: Dec 6 12:00:41 2025 GMT Not After : Dec 7 12:00:41 2025 GMT Subject: CN=d92bce3ba55730bfa75c0cf0f0784b820f0fcc53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ba:87:d2:c8:fd:cc:b8:81:2f:9f:8a:88:24: 47:01:35:82:d8:e1:04:b3:ca:ef:03:6a:e1:59:6a: 0a:a7:34:fb:c9:50:33:6a:00:15:2c:0a:84:2e:a8: f7:21:0a:b3:28:0a:cd:1c:ba:d0:68:ee:46:56:78: a3:56:a3:cc:74:63:a9:8b:16:d0:bf:bf:c0:37:b9: 19:4b:80:64:56:35:d2:ba:cc:13:ba:7b:25:e8:28: ce:69:ae:43:c1:65:2b:97:df:d9:62:8f:39:43:eb: ee:d4:23:64:d7:94:c9:24:59:7d:0a:96:de:3a:ae: 18:0b:36:ef:9b:aa:ef:9e:23:27:73:49:77:cf:b2: b0:01:0d:00:2e:f9:9f:7e:04:79:1d:ce:fa:cd:dd: fa:de:96:e5:06:8f:0f:09:fc:38:bd:78:c9:7c:f9: 09:ac:f7:48:38:ce:f7:05:3a:3e:8e:04:69:5e:fb: 4f:3a:66:66:20:65:af:ac:d1:86:85:5a:b7:2f:55: 1f:ae:6a:80:43:ae:2e:b6:ac:05:27:43:ab:73:ba: d2:c3:24:13:29:e8:23:50:02:7d:79:45:69:72:de: ff:48:fe:b4:98:1b:17:4e:dc:bf:ad:24:06:9a:89: b7:cd:a5:8c:8c:a0:89:26:d2:79:a5:c1:4a:b6:c1: 41:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2B:CE:3B:A5:57:30:BF:A7:5C:0C:F0:F0:78:4B:82:0F:0F:CC:53 X509v3 Authority Key Identifier: keyid:86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ea:dd:c1:6b:89:50:24:c2:a8:3a:96:1f:f0:c4:a1:c6:08: 45:ee:ba:42:8e:ef:cf:0d:81:50:8b:ba:d4:01:4b:7a:25:93: 11:f8:22:70:51:c6:00:fc:7c:d5:46:db:f6:3e:f6:70:bc:36: 83:1c:29:37:16:0b:23:93:72:02:ae:3b:d6:88:8a:4e:eb:e6: 76:c3:20:cd:eb:c1:6c:36:d3:e6:52:4e:95:d4:1b:f2:61:87: 77:c0:ea:70:f5:44:ab:4e:c8:e9:02:e7:b2:99:39:53:5c:45: 8b:9f:e0:b2:34:d4:a8:df:20:47:14:1e:10:ed:86:8e:56:1f: 0c:8f:41:21:5b:48:b1:d3:0b:b3:53:f5:d8:1b:08:b0:69:23: 29:6b:01:84:69:4d:52:58:99:88:8e:ee:d9:be:21:4a:e3:0a: 78:11:52:bc:d5:35:b8:36:c2:7f:06:7a:83:4d:e6:f3:c1:ae: ec:17:fd:f3:39:97:96:91:19:ce:c0:fa:d7:70:46:c6:fa:46: 99:48:4a:3a:69:09:d4:94:18:05:d6:cb:dd:3c:46:1c:be:08: 3a:77:83:38:99:cd:57:80:d1:00:8b:76:f9:81:79:b8:b2:fe: 53:f9:4e:be:90:61:7c:98:76:1d:e8:c9:41:2e:24:57:23:69: d2:b0:c8:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziR92SGdS8mSuH5UOo3zyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTg4NzJhYjlmYTJiYTAyY2IwMWE0NGNlOGViODc2NDEy ODFjMWMwHhcNMjUxMjA2MTIwMDQxWhcNMjUxMjA3MTIwMDQxWjAzMTEwLwYDVQQD EyhkOTJiY2UzYmE1NTczMGJmYTc1YzBjZjBmMDc4NGI4MjBmMGZjYzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLqH0sj9zLiBL5+KiCRHATWC2OEE s8rvA2rhWWoKpzT7yVAzagAVLAqELqj3IQqzKArNHLrQaO5GVnijVqPMdGOpixbQ v7/AN7kZS4BkVjXSuswTunsl6CjOaa5DwWUrl9/ZYo85Q+vu1CNk15TJJFl9Cpbe Oq4YCzbvm6rvniMnc0l3z7KwAQ0ALvmffgR5Hc76zd363pblBo8PCfw4vXjJfPkJ rPdIOM73BTo+jgRpXvtPOmZmIGWvrNGGhVq3L1UfrmqAQ64utqwFJ0Orc7rSwyQT KegjUAJ9eUVpct7/SP60mBsXTty/rSQGmom3zaWMjKCJJtJ5pcFKtsFBCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkrzjulVzC/p1wM8PB4S4IPD8xTMB8GA1UdIwQY MBaAFIYYhyq5+iugLLAaRM6OuHZBKBwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhpSEtybjZLNkFzc0JwRXpvNjRka0VvSEJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84MjlhODctMjJmYS00NjMyLTg2MmMt YmQ2OWY1MjYxODFiLzEvaGhpSEtybjZLNkFzc0JwRXpvNjRka0VvSEJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC84MjlhODctMjJmYS00NjMyLTg2MmMtYmQ2OWY1MjYxODFi LzEvaGhpSEtybjZLNkFzc0JwRXpvNjRka0VvSEJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgurdwWuJ UCTCqDqWH/DEocYIRe66Qo7vzw2BUIu61AFLeiWTEfgicFHGAPx81Ubb9j72cLw2 gxwpNxYLI5NyAq471oiKTuvmdsMgzevBbDbT5lJOldQb8mGHd8DqcPVEq07I6QLn spk5U1xFi5/gsjTUqN8gRxQeEO2GjlYfDI9BIVtIsdMLs1P12BsIsGkjKWsBhGlN UliZiI7u2b4hSuMKeBFSvNU1uDbCfwZ6g03m88Gu7Bf98zmXlpEZzsD613BGxvpG mUhKOmkJ1JQYBdbL3TxGHL4IOneDOJnNV4DRAIt2+YF5uLL+U/lOvpBhfJh2HejJ QS4kVyNp0rDIdw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:16 2025 by rpki-client