This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft File: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft (raw, json) Hash identifier: RdQ14SkdUKu9Sb/6G1Y4vZQfixbfYbzjmrNFp5pwtpk= Subject key identifier: C8:89:D7:FA:CC:3C:82:FA:16:A1:2D:8C:B0:83:28:B1:56:16:F5:89 Authority key identifier: 84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80 Certificate issuer: /CN=84106bfa023f17cf6d67eac9fdd2868a72f76680 Certificate serial: 019B435BC6EA4E909C84222562C45821FAD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 00:00:46 +0000 Manifest this update: Mon 22 Dec 2025 00:00:46 +0000 Manifest next update: Tue 23 Dec 2025 00:00:46 +0000 Files and hashes: 1: BZnndlQQXrhtsi1w92QwnbcTVos.roa (hash: xdoIZn2kmQaThra2U5g+oAnP8t2eo6iub1zi69U/YhE=) 2: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl (hash: GGJy8cBUZa/nCMHmUOT0pr/AUMe8YVT+uQzVHKx1/YY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:c6:ea:4e:90:9c:84:22:25:62:c4:58:21:fa:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84106bfa023f17cf6d67eac9fdd2868a72f76680 Validity Not Before: Dec 22 00:00:46 2025 GMT Not After : Dec 23 00:00:46 2025 GMT Subject: CN=c889d7facc3c82fa16a12d8cb08328b15616f589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:1f:28:f0:10:8c:bb:12:18:ee:40:6b:39: 29:28:3a:2b:73:15:09:f1:3d:60:73:54:3d:85:5c: 93:0c:c4:d2:2a:51:5b:9d:2c:c8:a3:e7:69:ea:43: 2c:df:81:0c:5e:66:79:33:02:e9:d9:eb:2f:44:92: 99:2f:3b:0a:bd:19:ae:e7:96:63:6f:c9:49:30:cb: 37:16:d4:56:8c:f1:83:95:16:a2:0e:da:4f:ef:df: 03:7f:2d:a7:7e:4a:ec:89:25:cc:f7:6f:73:40:f7: ab:0f:b0:c8:35:8e:db:af:fb:56:4d:45:ab:c7:81: c5:e2:70:2c:00:c5:14:80:cd:bf:f4:94:e6:36:7f: d5:0d:3f:e3:cb:c5:94:9a:88:49:5d:66:45:f9:fc: 54:00:48:64:35:31:55:cf:8a:35:6f:0a:f5:6d:c7: 0c:b9:08:3c:a7:f5:03:86:8d:b6:db:98:c2:5a:8a: 0a:7c:83:5d:5b:32:da:59:90:fb:6f:3f:a6:ac:94: 73:21:e8:90:e5:13:6b:ed:2e:51:fa:fb:83:35:bf: 92:36:a4:68:72:96:f5:83:8a:ce:36:f9:38:b7:6a: 38:73:db:4a:e9:c2:2c:ec:d1:9f:d9:1e:58:e1:26: c6:fd:da:91:32:32:70:0e:32:de:d6:2d:1e:6b:e1: a8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:89:D7:FA:CC:3C:82:FA:16:A1:2D:8C:B0:83:28:B1:56:16:F5:89 X509v3 Authority Key Identifier: keyid:84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:32:53:d8:a9:8f:bd:90:c2:79:48:02:f5:cf:3a:2d:85:6b: ef:2b:57:e4:a1:76:0e:ef:54:c9:10:0d:9f:55:cf:b1:55:dc: ed:93:e6:cc:53:52:74:b4:07:9f:c3:ec:33:8a:a1:a0:30:51: 1d:50:e6:b4:66:00:ed:1e:da:b6:50:18:24:28:51:f5:22:79: 3c:5d:81:ed:b0:20:41:ff:32:98:c0:80:15:72:05:8c:d5:92: 3e:d1:b7:37:0d:0b:1f:c6:1a:f6:03:4c:89:65:f4:3b:24:f6: b3:e2:53:d3:04:e3:04:72:91:44:e6:fd:66:1b:86:c5:72:28: 4f:7f:82:61:8b:32:7c:ef:bd:c5:31:3c:b5:fb:bd:3b:dc:5c: 6e:61:32:d6:5f:9b:55:0f:74:98:55:99:1c:c2:74:b8:78:95: a6:50:26:31:9d:d6:13:55:1e:99:d3:33:7d:6b:76:76:13:6f: 15:ae:95:a4:d6:32:8c:b5:12:7b:ff:24:92:2e:10:95:cd:37: ff:59:b5:f5:08:b5:e8:ab:b4:0d:2f:91:7f:a6:47:b7:d2:01: 24:ec:30:86:a8:c7:26:00:07:b0:55:fe:9a:1a:f4:e9:fc:f7: 18:02:5f:dd:d3:63:99:88:41:d0:d8:29:82:8d:b0:7f:8a:e7: c3:31:38:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW8bqTpCchCIlYsRYIfrVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MTA2YmZhMDIzZjE3Y2Y2ZDY3ZWFjOWZkZDI4NjhhNzJm NzY2ODAwHhcNMjUxMjIyMDAwMDQ2WhcNMjUxMjIzMDAwMDQ2WjAzMTEwLwYDVQQD EyhjODg5ZDdmYWNjM2M4MmZhMTZhMTJkOGNiMDgzMjhiMTU2MTZmNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv74fKPAQjLsSGO5AazkpKDorcxUJ 8T1gc1Q9hVyTDMTSKlFbnSzIo+dp6kMs34EMXmZ5MwLp2esvRJKZLzsKvRmu55Zj b8lJMMs3FtRWjPGDlRaiDtpP798Dfy2nfkrsiSXM929zQPerD7DINY7br/tWTUWr x4HF4nAsAMUUgM2/9JTmNn/VDT/jy8WUmohJXWZF+fxUAEhkNTFVz4o1bwr1bccM uQg8p/UDho2225jCWooKfINdWzLaWZD7bz+mrJRzIeiQ5RNr7S5R+vuDNb+SNqRo cpb1g4rONvk4t2o4c9tK6cIs7NGf2R5Y4SbG/dqRMjJwDjLe1i0ea+GoJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiJ1/rMPIL6FqEtjLCDKLFWFvWJMB8GA1UdIwQY MBaAFIQQa/oCPxfPbWfqyf3Shopy92aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZWIyOTMtOGU3Ni00NzBmLTg1NWYt YjYyNmQ1NzQ2ZDEzLzEvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83ZWIyOTMtOGU3Ni00NzBmLTg1NWYtYjYyNmQ1NzQ2ZDEz LzEvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjJT2KmP vZDCeUgC9c86LYVr7ytX5KF2Du9UyRANn1XPsVXc7ZPmzFNSdLQHn8PsM4qhoDBR HVDmtGYA7R7atlAYJChR9SJ5PF2B7bAgQf8ymMCAFXIFjNWSPtG3Nw0LH8Ya9gNM iWX0OyT2s+JT0wTjBHKRROb9ZhuGxXIoT3+CYYsyfO+9xTE8tfu9O9xcbmEy1l+b VQ90mFWZHMJ0uHiVplAmMZ3WE1UemdMzfWt2dhNvFa6VpNYyjLUSe/8kki4Qlc03 /1m19Qi16Ku0DS+Rf6ZHt9IBJOwwhqjHJgAHsFX+mhr06fz3GAJf3dNjmYhB0Ngp go2wf4rnwzE4xQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:58:02 2025 by rpki-client