This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft File: hh3iAyQAiy0n65dJWszi67zch8c.mft (raw, json) Hash identifier: 2WJWe7rvRUorH0Qoe+9JN4ExoQrOYuJcabQGS1+Byu4= Subject key identifier: B6:88:90:04:7E:E3:03:17:84:34:36:C9:8A:36:9D:35:4A:C4:27:F7 Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7 Certificate issuer: /CN=861de20324008b2d27eb97495acce2ebbcdc87c7 Certificate serial: 019AF1D1AC0C3245A0AF1633BC7CCAF63117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: cdpye_KyS4EmcLPLYSZp6vr21yY.roa (hash: Zz0lFiDAwglkcbO2M8ukF/dTePvCgzsApZfE0jU6Bcs=) 2: hh3iAyQAiy0n65dJWszi67zch8c.crl (hash: sWOaKFxz6c9/E0Yw9FDxQS3lpGh9k1nVWb61nUo1jgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ac:0c:32:45:a0:af:16:33:bc:7c:ca:f6:31:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=b68890047ee30317843436c98a369d354ac427f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5b:fd:55:d4:71:44:82:3f:d7:e4:dc:17:08: 1f:6a:4b:20:79:99:b5:c5:d8:bb:67:e5:ff:91:47: 4f:e2:94:57:d9:cb:8d:4d:76:a8:f3:74:dd:09:f9: 47:79:72:2e:e7:e7:2d:09:0e:ba:b4:fb:e9:e4:d1: e8:65:80:ee:0f:e7:81:56:8b:79:f1:e6:f9:58:ae: ad:cc:49:4f:cc:6d:2c:52:30:70:d0:53:d5:66:17: 47:97:73:fa:e5:b4:26:2d:8c:60:90:d0:f4:06:cc: a3:0d:71:f6:e3:1e:90:5e:4a:a2:13:08:17:65:ae: 19:2b:32:83:96:6e:4b:09:ad:d6:e7:38:07:55:ac: 15:2d:17:b9:fa:66:f6:d2:05:de:8a:d6:6d:06:9d: e1:b2:0e:c2:46:f9:ff:a9:61:6e:bf:fe:e8:4e:d8: 44:ad:a4:4e:21:74:d3:a3:17:40:8f:96:29:07:06: fb:b3:34:8f:38:69:4c:b7:9b:d4:ee:be:90:cf:e7: 08:88:53:fc:d0:a7:19:ea:35:c3:e5:ec:29:84:54: 84:2f:91:92:ce:b7:21:77:ae:e5:f5:be:6e:b0:c6: b7:a6:d2:7a:51:92:93:3a:9c:43:6e:ac:cb:0e:19: 55:01:b8:da:55:a3:5e:a5:6e:4a:a8:d5:6a:58:e7: 8a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:88:90:04:7E:E3:03:17:84:34:36:C9:8A:36:9D:35:4A:C4:27:F7 X509v3 Authority Key Identifier: keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2c:78:a3:54:55:a0:74:3c:da:60:c9:e9:cd:61:57:44:d2: 6c:d3:9c:d7:0a:02:5f:f6:2f:0c:74:df:85:1a:a3:28:d0:ee: 0c:d7:f1:9a:97:d3:d2:33:74:b3:d5:79:95:fc:87:d9:82:cd: 41:61:a2:6f:1f:7c:a0:3b:31:d8:1f:dd:a5:fd:b6:12:b0:ff: 1b:e5:e2:58:a7:94:9d:4c:b1:92:db:a8:bc:0f:09:6a:b3:fe: ef:7f:d2:8c:93:2e:16:96:8b:15:5e:e3:1b:3f:fe:e2:87:90: ec:dd:30:0c:31:46:72:77:26:a3:27:4e:ed:e7:69:04:9d:cc: b5:6d:a1:e0:b1:99:08:cc:ca:ee:27:6d:bb:0a:ba:b8:bb:79: 38:af:b2:bd:3d:f0:83:97:8d:ed:fe:03:32:99:5e:6c:ee:13: b1:19:31:58:c2:51:01:95:d6:fd:49:c0:a2:9d:2f:5d:44:8c: f6:ac:b4:63:64:56:11:85:27:3e:16:b0:75:ff:62:97:ae:ab: 87:ad:21:80:12:4e:58:35:5b:67:78:3e:21:6e:e0:5a:e7:b7: 5b:33:07:e8:57:af:15:53:f9:e5:f2:32:1f:af:c8:97:d4:d5: 10:e9:ac:3d:28:53:ee:e4:d4:3e:3b:2e:2f:a7:64:5d:7c:a4: 38:2b:c1:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0awMMkWgrxYzvHzK9jEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MWRlMjAzMjQwMDhiMmQyN2ViOTc0OTVhY2NlMmViYmNk Yzg3YzcwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD EyhiNjg4OTAwNDdlZTMwMzE3ODQzNDM2Yzk4YTM2OWQzNTRhYzQyN2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Vv9VdRxRII/1+TcFwgfaksgeZm1 xdi7Z+X/kUdP4pRX2cuNTXao83TdCflHeXIu5+ctCQ66tPvp5NHoZYDuD+eBVot5 8eb5WK6tzElPzG0sUjBw0FPVZhdHl3P65bQmLYxgkND0BsyjDXH24x6QXkqiEwgX Za4ZKzKDlm5LCa3W5zgHVawVLRe5+mb20gXeitZtBp3hsg7CRvn/qWFuv/7oTthE raROIXTToxdAj5YpBwb7szSPOGlMt5vU7r6Qz+cIiFP80KcZ6jXD5ewphFSEL5GS zrchd67l9b5usMa3ptJ6UZKTOpxDbqzLDhlVAbjaVaNepW5KqNVqWOeKMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaIkAR+4wMXhDQ2yYo2nTVKxCf3MB8GA1UdIwQY MBaAFIYd4gMkAIstJ+uXSVrM4uu83IfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGgzaUF5UUFpeTBuNjVkSldzemk2N3pjaDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85M2FjZWMtYjFlZS00ZjMxLWFmNmUt MWU0NmFlODcyMWVmLzEvaGgzaUF5UUFpeTBuNjVkSldzemk2N3pjaDhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy85M2FjZWMtYjFlZS00ZjMxLWFmNmUtMWU0NmFlODcyMWVm LzEvaGgzaUF5UUFpeTBuNjVkSldzemk2N3pjaDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSx4o1RV oHQ82mDJ6c1hV0TSbNOc1woCX/YvDHTfhRqjKNDuDNfxmpfT0jN0s9V5lfyH2YLN QWGibx98oDsx2B/dpf22ErD/G+XiWKeUnUyxktuovA8JarP+73/SjJMuFpaLFV7j Gz/+4oeQ7N0wDDFGcncmoydO7edpBJ3MtW2h4LGZCMzK7idtuwq6uLt5OK+yvT3w g5eN7f4DMplebO4TsRkxWMJRAZXW/UnAop0vXUSM9qy0Y2RWEYUnPhawdf9il66r h60hgBJOWDVbZ3g+IW7gWue3WzMH6FevFVP55fIyH6/Il9TVEOmsPShT7uTUPjsu L6dkXXykOCvBmw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:00 2025 by rpki-client