This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft File: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft (raw, json) Hash identifier: Lul80b7BHznwQlCJyGQVLiH2nGEIbFiGOl0wCwLHnmU= Subject key identifier: A0:7C:68:30:71:42:A6:32:02:C0:9D:5B:16:6D:D0:7F:D5:FA:57:26 Authority key identifier: 84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80 Certificate issuer: /CN=84106bfa023f17cf6d67eac9fdd2868a72f76680 Certificate serial: 019AF61C5848F36BCCCA73946C3315759E7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 00:00:43 +0000 Manifest this update: Sun 07 Dec 2025 00:00:43 +0000 Manifest next update: Mon 08 Dec 2025 00:00:43 +0000 Files and hashes: 1: BZnndlQQXrhtsi1w92QwnbcTVos.roa (hash: xdoIZn2kmQaThra2U5g+oAnP8t2eo6iub1zi69U/YhE=) 2: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl (hash: RYY4ur/OUCqgFQEwIZJ1EDUAuK/PvIh+endkbBqiFwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:58:48:f3:6b:cc:ca:73:94:6c:33:15:75:9e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84106bfa023f17cf6d67eac9fdd2868a72f76680 Validity Not Before: Dec 7 00:00:43 2025 GMT Not After : Dec 8 00:00:43 2025 GMT Subject: CN=a07c68307142a63202c09d5b166dd07fd5fa5726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:88:3c:47:fe:db:c6:ab:5a:41:58:2b:9d: d7:6e:8c:c8:6c:ed:7c:2f:ea:c7:1c:fa:ee:3a:0d: e1:dd:dd:e4:8f:8c:42:7a:db:21:87:5e:df:15:34: 16:19:1f:c5:65:af:cd:dd:9d:06:4a:7c:b1:ad:b5: cf:c6:c3:89:23:54:6e:93:0a:64:b6:90:57:f4:41: e9:77:a3:30:70:78:6e:a2:99:ff:0a:d2:62:2d:11: 3a:de:e9:e5:3a:aa:05:6a:af:5c:f4:3d:cb:36:b2: a1:fd:d5:26:ff:7e:61:d3:9f:71:ae:7b:d3:e0:45: fb:c2:6f:64:50:a5:e2:9d:57:5b:92:00:32:84:b8: 00:e9:bc:e9:c0:ee:e6:1c:6b:9d:89:0a:cd:7f:c4: 29:73:fc:8b:cf:5c:47:b4:34:05:86:ce:0a:9d:d1: 37:58:66:b5:db:57:96:28:ef:37:bd:47:87:7e:1d: 19:fc:58:47:57:66:eb:1b:48:ba:2c:9d:63:84:73: fe:d0:e0:16:58:02:1f:37:3d:52:3e:6d:a6:9c:3c: cf:6f:22:3c:c0:87:7f:0c:3a:22:e9:70:01:b1:e2: 15:f3:9d:8d:b9:38:0a:37:20:2d:57:ac:84:45:60: 84:05:f5:c8:c2:ec:26:03:b0:3c:91:b3:2f:1d:0d: 54:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7C:68:30:71:42:A6:32:02:C0:9D:5B:16:6D:D0:7F:D5:FA:57:26 X509v3 Authority Key Identifier: keyid:84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a0:b8:cc:87:13:b5:2e:51:4c:88:25:58:db:c3:73:30:72: 8b:29:f5:19:23:8a:54:fd:ed:f7:08:70:e5:37:5b:1f:32:69: 4c:f6:bf:9e:b2:fe:c6:21:77:84:78:ee:22:a3:41:84:8d:5a: 26:5c:6b:22:41:ba:f9:50:7e:42:ed:45:d6:f8:7a:15:a3:e4: ed:a6:03:af:1f:7e:4c:84:9d:c8:51:87:c9:0e:07:3a:97:0c: 29:08:d9:86:81:c0:53:5f:23:ff:f8:bf:1d:5a:84:f2:7c:60: 2f:c9:af:f7:2f:7c:c7:c7:dc:a9:f7:ae:48:78:ff:c9:77:4d: a0:04:2f:d7:4a:f6:1f:6c:57:49:b7:7c:cb:6c:52:4d:f0:8e: 10:94:e0:84:f3:c5:01:ea:80:29:7a:a1:81:cf:ca:f8:df:39: c6:20:2e:77:8e:84:a2:a9:b5:49:bf:c7:af:99:98:51:a7:6b: ae:15:bb:ea:1b:2a:9c:5a:d6:78:05:df:f4:0a:52:d9:b4:8a: 51:57:7a:83:1f:0c:3e:7b:23:29:ab:23:3b:b8:8d:6f:7c:f3: 0a:d6:ea:ed:71:17:dd:61:d5:c1:ca:5f:04:74:9d:7d:1c:21: 57:ac:6f:d1:c2:c3:7b:58:8f:11:22:89:b3:60:a5:37:c0:38: 0b:86:e1:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HFhI82vMynOUbDMVdZ57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MTA2YmZhMDIzZjE3Y2Y2ZDY3ZWFjOWZkZDI4NjhhNzJm NzY2ODAwHhcNMjUxMjA3MDAwMDQzWhcNMjUxMjA4MDAwMDQzWjAzMTEwLwYDVQQD EyhhMDdjNjgzMDcxNDJhNjMyMDJjMDlkNWIxNjZkZDA3ZmQ1ZmE1NzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQSIPEf+28arWkFYK53XbozIbO18 L+rHHPruOg3h3d3kj4xCetshh17fFTQWGR/FZa/N3Z0GSnyxrbXPxsOJI1Rukwpk tpBX9EHpd6MwcHhuopn/CtJiLRE63unlOqoFaq9c9D3LNrKh/dUm/35h059xrnvT 4EX7wm9kUKXinVdbkgAyhLgA6bzpwO7mHGudiQrNf8Qpc/yLz1xHtDQFhs4KndE3 WGa121eWKO83vUeHfh0Z/FhHV2brG0i6LJ1jhHP+0OAWWAIfNz1SPm2mnDzPbyI8 wId/DDoi6XABseIV852NuTgKNyAtV6yERWCEBfXIwuwmA7A8kbMvHQ1URQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKB8aDBxQqYyAsCdWxZt0H/V+lcmMB8GA1UdIwQY MBaAFIQQa/oCPxfPbWfqyf3Shopy92aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZWIyOTMtOGU3Ni00NzBmLTg1NWYt YjYyNmQ1NzQ2ZDEzLzEvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83ZWIyOTMtOGU3Ni00NzBmLTg1NWYtYjYyNmQ1NzQ2ZDEz LzEvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaC4zIcT tS5RTIglWNvDczByiyn1GSOKVP3t9whw5TdbHzJpTPa/nrL+xiF3hHjuIqNBhI1a JlxrIkG6+VB+Qu1F1vh6FaPk7aYDrx9+TISdyFGHyQ4HOpcMKQjZhoHAU18j//i/ HVqE8nxgL8mv9y98x8fcqfeuSHj/yXdNoAQv10r2H2xXSbd8y2xSTfCOEJTghPPF AeqAKXqhgc/K+N85xiAud46Eoqm1Sb/Hr5mYUadrrhW76hsqnFrWeAXf9ApS2bSK UVd6gx8MPnsjKasjO7iNb3zzCtbq7XEX3WHVwcpfBHSdfRwhV6xv0cLDe1iPESKJ s2ClN8A4C4bhyQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:49:59 2025 by rpki-client