This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json) Hash identifier: fubbiAg6YTa6Ghew2cim2/m+uLzUZc1FVJd1y3BJp1o= Subject key identifier: 29:3E:7B:1B:18:AB:D9:95:44:9A:E0:62:EA:2A:0E:3B:C1:22:BE:93 Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8 Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8 Certificate serial: 019AF42E1AA636D932FCE622CE2F344CAC48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft Manifest number: 15F6 Signing time: Sat 06 Dec 2025 15:00:53 +0000 Manifest this update: Sat 06 Dec 2025 15:00:53 +0000 Manifest next update: Sun 07 Dec 2025 15:00:53 +0000 Files and hashes: 1: PAjoOsQf0RmmoZA6UENFacJ4ClY.roa (hash: ZTPqKop0ZcVt0foxrf1KsXpnvWpYw7IeU4H32JK9XIU=) 2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: AM7jZ1tWdxyMIWJlaUhAO0VXZMFFRYOtft0/sDZskSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:1a:a6:36:d9:32:fc:e6:22:ce:2f:34:4c:ac:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8 Validity Not Before: Dec 6 15:00:53 2025 GMT Not After : Dec 7 15:00:53 2025 GMT Subject: CN=293e7b1b18abd995449ae062ea2a0e3bc122be93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:73:e7:e6:72:60:6c:cf:a7:27:12:d1:6a: 25:83:c9:48:f4:82:19:f3:f2:43:22:4f:85:17:07: 27:f1:9c:df:43:69:08:ce:02:a4:5c:ff:3c:f6:49: 14:ca:c7:87:fe:71:a1:25:b8:88:89:40:58:c5:49: 21:58:51:84:a4:30:1e:ad:26:bf:ec:ab:63:3c:d2: 9e:08:c7:8c:15:24:53:f6:a9:25:c8:cb:fc:52:7e: d0:90:00:6a:10:24:29:6e:49:92:2f:25:b3:e3:98: ba:cb:f6:54:9b:1e:e2:0f:da:a1:d1:62:8a:28:48: 39:ce:4e:d9:d8:97:53:0b:c5:8a:d9:8b:c1:26:0c: b7:c1:09:86:9f:26:cd:4b:9d:ec:db:5d:8b:b5:35: 24:91:0a:cb:64:f5:58:e8:da:5c:ed:48:76:3d:0a: 36:42:3a:ae:60:8e:61:01:f2:39:46:c7:ad:a8:e1: a6:d8:dc:f0:9c:6c:18:fb:43:3e:3a:df:82:05:fa: c0:f1:b3:f3:23:ed:ff:88:a3:ed:da:9b:77:eb:35: 18:92:c3:2b:6f:dc:b2:59:f4:40:f3:b6:e6:48:b9: cb:3d:05:a4:0f:d4:7d:8f:58:0a:a1:3a:69:4a:89: dd:96:fd:76:0b:b2:2e:03:bb:0a:d6:40:09:78:e2: 91:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3E:7B:1B:18:AB:D9:95:44:9A:E0:62:EA:2A:0E:3B:C1:22:BE:93 X509v3 Authority Key Identifier: keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:c5:ea:d7:3a:26:7a:84:37:db:86:cb:4c:02:9a:35:95:86: 83:37:eb:e2:5e:1b:24:fd:0d:bb:2e:82:e4:38:1c:db:d5:7b: 8d:e3:6d:85:53:a5:29:24:f9:31:ed:39:2b:d9:3a:ab:ea:5e: e0:5b:8e:40:e0:f0:4f:62:ad:3f:3b:da:53:96:46:cc:e8:3e: 09:a5:36:79:df:b3:f3:70:47:e4:70:83:d1:f9:f5:9d:3e:ad: 78:42:df:0e:21:5d:72:ca:79:8b:2d:22:fc:94:0e:59:47:b8: d7:a9:c0:82:d4:03:df:0c:7c:9f:d3:14:09:c2:b0:c1:02:bb: c0:98:c8:2c:27:53:4d:83:3e:f3:3d:94:ae:0a:8a:dc:18:12: 7d:45:68:6d:e0:35:30:fb:fc:6f:0f:74:4a:d3:de:08:f0:39: b4:6e:5c:cb:02:44:2a:c9:a8:a4:ff:1c:cd:86:ef:99:69:74: 44:1b:85:0e:df:6d:0a:d3:27:4a:1f:f5:25:f1:11:06:9a:16: e5:ae:20:a2:e5:6a:82:e8:81:b2:f5:4d:b4:d4:68:27:35:45: b7:67:88:ef:ba:c4:eb:19:87:3d:3b:ca:71:cb:ea:dd:6a:59: f1:1b:3e:78:c3:d4:8c:8b:94:1f:e9:7d:b2:a2:e5:4a:51:b3: 54:d6:1e:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LhqmNtky/OYizi80TKxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0N2QxYmViZTRjMjNjNDIxN2I4NGY3ZmQ4MTkyYWIyNTU1 NDE1YTgwHhcNMjUxMjA2MTUwMDUzWhcNMjUxMjA3MTUwMDUzWjAzMTEwLwYDVQQD EygyOTNlN2IxYjE4YWJkOTk1NDQ5YWUwNjJlYTJhMGUzYmMxMjJiZTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6Jz5+ZyYGzPpycS0Wolg8lI9IIZ 8/JDIk+FFwcn8ZzfQ2kIzgKkXP889kkUyseH/nGhJbiIiUBYxUkhWFGEpDAerSa/ 7KtjPNKeCMeMFSRT9qklyMv8Un7QkABqECQpbkmSLyWz45i6y/ZUmx7iD9qh0WKK KEg5zk7Z2JdTC8WK2YvBJgy3wQmGnybNS53s212LtTUkkQrLZPVY6Npc7Uh2PQo2 QjquYI5hAfI5RsetqOGm2NzwnGwY+0M+Ot+CBfrA8bPzI+3/iKPt2pt36zUYksMr b9yyWfRA87bmSLnLPQWkD9R9j1gKoTppSondlv12C7IuA7sK1kAJeOKRVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCk+exsYq9mVRJrgYuoqDjvBIr6TMB8GA1UdIwQY MBaAFIR9G+vkwjxCF7hPf9gZKrJVVBWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mODFlYWItYmMzNi00MmE2LTgyMmEt Y2RiMWQzODU1NmJiLzEvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mODFlYWItYmMzNi00MmE2LTgyMmEtY2RiMWQzODU1NmJi LzEvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcXq1zom eoQ324bLTAKaNZWGgzfr4l4bJP0Nuy6C5Dgc29V7jeNthVOlKST5Me05K9k6q+pe 4FuOQODwT2KtPzvaU5ZGzOg+CaU2ed+z83BH5HCD0fn1nT6teELfDiFdcsp5iy0i /JQOWUe416nAgtQD3wx8n9MUCcKwwQK7wJjILCdTTYM+8z2UrgqK3BgSfUVobeA1 MPv8bw90StPeCPA5tG5cywJEKsmopP8czYbvmWl0RBuFDt9tCtMnSh/1JfERBpoW 5a4gouVqguiBsvVNtNRoJzVFt2eI77rE6xmHPTvKccvq3WpZ8Rs+eMPUjIuUH+l9 sqLlSlGzVNYexQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:33 2025 by rpki-client