This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft File: hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json) Hash identifier: fblxkU6S8GI+GI6t7AAUgAa0X07tc5Zv3KENrO/YzO0= Subject key identifier: 8F:32:23:69:2E:37:20:51:04:D8:87:32:A1:36:18:4A:CA:5B:66:16 Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05 Certificate issuer: /CN=8619fc9099ce23ea5a3a8f199c53f91428878705 Certificate serial: 019AF31CABD082B83991CF2111EFA9089ECB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:02:13 +0000 Manifest this update: Sat 06 Dec 2025 10:02:13 +0000 Manifest next update: Sun 07 Dec 2025 10:02:13 +0000 Files and hashes: 1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: IhqAwzuj0TQJxrBj+fOAbsYIP52rvWNFKrb7p9ah7b8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ab:d0:82:b8:39:91:cf:21:11:ef:a9:08:9e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705 Validity Not Before: Dec 6 10:02:13 2025 GMT Not After : Dec 7 10:02:13 2025 GMT Subject: CN=8f3223692e37205104d88732a136184aca5b6616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cb:54:8a:81:05:bb:81:da:9c:01:76:53:77: 88:6a:7b:b1:c9:62:29:6b:e3:0a:04:43:27:98:5c: f6:84:e5:3e:19:ab:5c:91:34:3d:0e:1d:b8:0e:f4: 0c:fb:5e:61:a4:d3:2d:24:49:94:aa:a4:bc:16:49: de:73:55:0f:11:fd:13:2f:4b:e0:2f:5f:e6:a9:36: 20:e7:35:b4:bb:14:a0:1b:2c:0e:31:43:1b:47:f8: e3:fc:82:9f:d1:a5:2f:41:b2:20:a1:d8:f3:d7:65: 8c:29:17:63:e8:a9:d6:2d:1f:51:98:33:72:e4:5d: 33:5f:57:bb:d2:0e:91:40:4d:51:f3:3a:aa:98:0f: 34:bf:33:d4:4f:05:02:d5:a5:df:65:6d:fc:86:91: 00:c8:af:b3:ae:03:29:8a:d8:f1:7e:bd:94:c7:f6: ae:39:17:ea:28:c5:f3:90:99:ed:e0:24:87:2e:1a: 24:ce:a6:c5:d4:0d:6c:80:09:5b:c2:f3:ec:ab:d1: dc:7c:31:c3:21:91:7b:76:af:22:0c:2f:37:ee:54: 5d:30:10:fe:e0:72:e2:0b:3f:68:84:07:2d:a9:09: d7:d9:4b:8c:12:da:09:48:26:3e:02:b5:8e:5c:66: 95:10:40:67:b9:e4:b4:ba:b4:53:f7:52:45:28:ae: 87:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:32:23:69:2E:37:20:51:04:D8:87:32:A1:36:18:4A:CA:5B:66:16 X509v3 Authority Key Identifier: keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e0:0b:59:72:f4:be:a0:53:49:22:7f:b7:13:fb:14:39:48: 89:d6:22:34:16:41:3e:d8:8d:48:0e:71:b9:26:8e:98:ac:68: 9b:93:90:2c:98:a8:c7:1f:48:20:84:1d:82:43:ad:e2:b6:3e: 80:d7:c3:1c:b0:ee:7e:59:13:43:47:5d:90:0d:c2:2e:72:f8: a4:a3:8d:57:34:1f:ee:e6:3b:87:af:62:6a:7d:14:b2:35:9c: 59:b6:ea:73:35:99:50:82:0a:a7:34:17:8d:ef:36:9d:ad:42: e5:aa:b1:83:40:9e:99:04:7e:34:7d:e3:53:3a:1e:09:d3:85: c3:66:24:50:e9:36:b3:8e:56:19:ce:69:7f:28:6c:ee:5f:55: c1:a3:d2:67:32:e2:f0:0b:f5:06:9b:aa:be:e4:b1:42:7d:62: a7:05:d0:18:dc:cf:dc:28:f1:24:52:fb:4c:7b:a6:28:f7:9f: 03:0a:71:41:c3:14:cb:88:c1:26:cb:63:5e:65:69:a5:6e:79: 68:89:76:75:7a:c9:b6:63:13:8f:bb:95:0a:1a:b4:60:01:67: 06:59:4c:15:ad:9b:81:e6:28:c4:5a:dc:82:6c:a8:76:bb:de: 05:bb:a8:05:d2:a3:f9:4a:6b:58:ef:f2:b5:c3:3e:78:54:6f: b2:fc:8c:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHKvQgrg5kc8hEe+pCJ7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTlmYzkwOTljZTIzZWE1YTNhOGYxOTljNTNmOTE0Mjg4 Nzg3MDUwHhcNMjUxMjA2MTAwMjEzWhcNMjUxMjA3MTAwMjEzWjAzMTEwLwYDVQQD Eyg4ZjMyMjM2OTJlMzcyMDUxMDRkODg3MzJhMTM2MTg0YWNhNWI2NjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8tUioEFu4HanAF2U3eIanuxyWIp a+MKBEMnmFz2hOU+GatckTQ9Dh24DvQM+15hpNMtJEmUqqS8Fknec1UPEf0TL0vg L1/mqTYg5zW0uxSgGywOMUMbR/jj/IKf0aUvQbIgodjz12WMKRdj6KnWLR9RmDNy 5F0zX1e70g6RQE1R8zqqmA80vzPUTwUC1aXfZW38hpEAyK+zrgMpitjxfr2Ux/au ORfqKMXzkJnt4CSHLhokzqbF1A1sgAlbwvPsq9HcfDHDIZF7dq8iDC837lRdMBD+ 4HLiCz9ohActqQnX2UuMEtoJSCY+ArWOXGaVEEBnueS0urRT91JFKK6H+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8yI2kuNyBRBNiHMqE2GErKW2YWMB8GA1UdIwQY MBaAFIYZ/JCZziPqWjqPGZxT+RQoh4cFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jY2YzYjAtYWRmZC00ZmY0LWFlZjAt YjNmOTkxMGVlOTBkLzEvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jY2YzYjAtYWRmZC00ZmY0LWFlZjAtYjNmOTkxMGVlOTBk LzEvaGhuOGtKbk9JLXBhT284Wm5GUDVGQ2lIaHdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOALWXL0 vqBTSSJ/txP7FDlIidYiNBZBPtiNSA5xuSaOmKxom5OQLJioxx9IIIQdgkOt4rY+ gNfDHLDuflkTQ0ddkA3CLnL4pKONVzQf7uY7h69ian0UsjWcWbbqczWZUIIKpzQX je82na1C5aqxg0CemQR+NH3jUzoeCdOFw2YkUOk2s45WGc5pfyhs7l9VwaPSZzLi 8Av1BpuqvuSxQn1ipwXQGNzP3CjxJFL7THumKPefAwpxQcMUy4jBJstjXmVppW55 aIl2dXrJtmMTj7uVChq0YAFnBllMFa2bgeYoxFrcgmyodrveBbuoBdKj+UprWO/y tcM+eFRvsvyMAw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:10 2025 by rpki-client