This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json) Hash identifier: lpd3g4YtuIOKlzo+QoCgNG6yi9Jy7LhscTDwlxzWH+M= Subject key identifier: DA:CA:8C:EF:5B:BE:6D:5B:97:75:18:59:0C:A4:BC:DD:23:4A:F5:44 Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2 Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2 Certificate serial: 019AF6535779B6A7B5EADEBCC298DEEE87EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft Manifest number: 1767 Signing time: Sun 07 Dec 2025 01:00:48 +0000 Manifest this update: Sun 07 Dec 2025 01:00:48 +0000 Manifest next update: Mon 08 Dec 2025 01:00:48 +0000 Files and hashes: 1: fY3YUzeQR4J5mSVlYztPydyoN5Q.roa (hash: mNZawaVbKUAZ9lV1chbhqIOQeYk5Gz7JPB6mT6lLW4o=) 2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: JL72lHuZq9Mr1RQFngYLyf3GgR1nQJjVIHWtdQMH0YI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:57:79:b6:a7:b5:ea:de:bc:c2:98:de:ee:87:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2 Validity Not Before: Dec 7 01:00:48 2025 GMT Not After : Dec 8 01:00:48 2025 GMT Subject: CN=daca8cef5bbe6d5b977518590ca4bcdd234af544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:75:8f:9b:d0:7f:57:b6:ee:ab:7c:de:9c:03: 62:00:46:86:b4:cb:cf:10:7e:5c:89:d8:bb:ee:d2: a2:a3:58:52:a0:3c:ee:62:12:22:99:4c:41:55:62: df:03:09:db:2d:b6:21:7a:d7:7d:9a:31:c3:8a:97: 82:bd:09:e7:e4:fd:8f:c2:7d:b5:b6:51:2c:ec:03: cf:88:71:6e:94:16:67:c1:40:8f:3a:dc:e6:90:d1: 63:e7:2e:74:6a:0a:16:a0:ec:cd:dc:26:83:82:cf: 14:c8:72:3c:55:a2:c8:ec:e6:3b:f3:19:60:9f:40: e5:14:1e:2d:b4:13:c7:f3:46:ce:d8:70:5e:6e:ad: 76:f6:9a:af:3f:6b:2e:76:9f:eb:79:8f:fb:a8:00: e9:e6:60:6a:88:83:42:c1:56:de:3f:1c:a7:5b:89: bf:84:41:18:ba:a0:98:29:56:0a:48:6b:43:64:a2: 23:eb:94:93:1f:aa:cc:47:87:9b:b0:76:a9:7e:62: 34:e0:bf:01:e8:48:e4:a2:bb:e7:e3:26:54:e2:f0: a6:aa:27:bc:18:38:9e:89:de:f5:17:4e:8d:d0:9f: 4a:45:bd:3e:07:0e:54:9f:f1:78:dc:df:07:ad:33: 28:de:09:d2:d2:b1:7f:cc:8a:33:86:4d:93:e5:e8: 5f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CA:8C:EF:5B:BE:6D:5B:97:75:18:59:0C:A4:BC:DD:23:4A:F5:44 X509v3 Authority Key Identifier: keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:18:11:29:60:ca:4d:38:cd:5f:6d:f2:99:86:78:78:45:1f: 18:51:dc:43:a7:b3:14:9a:e5:6f:cc:26:88:4a:5c:5c:a7:69: 6e:89:2d:2b:ef:47:4f:ce:71:6d:26:d6:69:55:1d:8e:23:1d: 97:c1:44:cb:40:c6:5e:fa:b2:f9:60:70:84:a8:4e:5f:3e:82: 9c:b2:54:a6:57:d7:f9:15:c0:23:b1:35:70:e5:11:04:74:04: 7e:c0:87:14:7f:6e:5a:4b:02:5f:9a:ab:59:2a:f9:5d:25:5c: 5b:f2:71:b1:8c:f3:da:4c:be:12:ca:f3:fe:15:76:f8:8d:2e: 15:28:02:c7:57:95:7e:ca:54:92:b4:8f:87:bb:79:fd:ad:4f: 4b:f1:eb:b5:b6:6a:22:59:8f:4d:8f:0b:12:25:fd:72:c7:03: 14:b6:57:8d:a6:18:81:88:9c:d6:aa:ea:27:b3:72:c7:e6:b4: 3d:37:bb:48:b3:77:46:1c:af:5a:77:e6:8c:59:5c:66:b3:f8: c8:b4:c9:95:34:fd:fa:73:ed:3e:51:bb:3d:0b:11:e8:54:2a: 71:54:0a:61:dc:e6:3c:d8:51:92:0b:7c:01:f5:ee:7a:77:01: 48:54:73:8e:67:ac:67:bd:91:59:35:19:01:92:5a:57:1a:c6: e9:aa:6e:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U1d5tqe16t68wpje7ofsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MWM2N2JkYjZkOGMyMzBmY2RiNDI3YTlmNzFiODAxMzU4 NzJmYzIwHhcNMjUxMjA3MDEwMDQ4WhcNMjUxMjA4MDEwMDQ4WjAzMTEwLwYDVQQD EyhkYWNhOGNlZjViYmU2ZDViOTc3NTE4NTkwY2E0YmNkZDIzNGFmNTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83WPm9B/V7buq3zenANiAEaGtMvP EH5cidi77tKio1hSoDzuYhIimUxBVWLfAwnbLbYhetd9mjHDipeCvQnn5P2Pwn21 tlEs7APPiHFulBZnwUCPOtzmkNFj5y50agoWoOzN3CaDgs8UyHI8VaLI7OY78xlg n0DlFB4ttBPH80bO2HBebq129pqvP2sudp/reY/7qADp5mBqiINCwVbePxynW4m/ hEEYuqCYKVYKSGtDZKIj65STH6rMR4ebsHapfmI04L8B6Ejkorvn4yZU4vCmqie8 GDieid71F06N0J9KRb0+Bw5Un/F43N8HrTMo3gnS0rF/zIozhk2T5ehfiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrKjO9bvm1bl3UYWQykvN0jSvVEMB8GA1UdIwQY MBaAFIYcZ7222MIw/NtCep9xuAE1hy/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC84YTExNWItMzg1OS00NzU5LTg1YWUt ZmI4NTNjNjUzMzRhLzEvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC84YTExNWItMzg1OS00NzU5LTg1YWUtZmI4NTNjNjUzMzRh LzEvaGh4bnZiYll3akQ4MjBKNm4zRzRBVFdITDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxgRKWDK TTjNX23ymYZ4eEUfGFHcQ6ezFJrlb8wmiEpcXKdpboktK+9HT85xbSbWaVUdjiMd l8FEy0DGXvqy+WBwhKhOXz6CnLJUplfX+RXAI7E1cOURBHQEfsCHFH9uWksCX5qr WSr5XSVcW/JxsYzz2ky+Esrz/hV2+I0uFSgCx1eVfspUkrSPh7t5/a1PS/HrtbZq IlmPTY8LEiX9cscDFLZXjaYYgYic1qrqJ7Nyx+a0PTe7SLN3RhyvWnfmjFlcZrP4 yLTJlTT9+nPtPlG7PQsR6FQqcVQKYdzmPNhRkgt8AfXuencBSFRzjmesZ72RWTUZ AZJaVxrG6apugw== -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:10 2025 by rpki-client