This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft File: hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json) Hash identifier: 8SRgdACWag1xELorCOKaxX6XQUciHyl9l/cbiv4njeM= Subject key identifier: 06:95:82:C9:59:9D:31:6F:B5:67:57:DE:54:43:AB:94:C5:08:2E:89 Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25 Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225 Certificate serial: 019AF276E81E9295E9BD426CC3570537088A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft Manifest number: 16FA Signing time: Sat 06 Dec 2025 07:01:10 +0000 Manifest this update: Sat 06 Dec 2025 07:01:10 +0000 Manifest next update: Sun 07 Dec 2025 07:01:10 +0000 Files and hashes: 1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: 5Or6LqbwIHCIVwMIxlH/UPCi3YpuzaOVwRVdmR58KBs=) 2: kclE4AGa3IQ3ANoqx8hNmFyyOPc.roa (hash: era/rLdikRzOubIlTwlZQUllh2OgF4bxbh9GfJNQo5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e8:1e:92:95:e9:bd:42:6c:c3:57:05:37:08:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225 Validity Not Before: Dec 6 07:01:10 2025 GMT Not After : Dec 7 07:01:10 2025 GMT Subject: CN=069582c9599d316fb56757de5443ab94c5082e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8d:05:60:97:73:03:0c:b4:20:73:24:c5:33: 04:08:e5:ef:88:4c:35:1f:ee:b8:b1:da:81:23:7d: 41:dd:44:e5:88:81:b2:2f:91:f8:f7:ab:6e:a3:a8: dd:4b:05:7a:bc:28:aa:1e:48:27:81:88:7b:2c:b8: dc:5e:4a:58:60:d8:ff:84:70:8b:a1:39:b2:34:ff: d7:6f:6c:f1:4f:2d:2b:d7:b5:d8:51:9c:e6:51:60: 43:a0:a6:f6:f2:7e:0e:00:ee:2d:23:c4:c9:0f:3d: 0d:bd:21:7d:69:ba:3c:8e:49:9f:8d:03:c0:32:c3: 36:2f:75:e4:94:96:e4:50:c1:b4:a7:14:a8:2b:00: 99:8b:13:12:39:8d:2c:c0:c7:68:d4:95:bc:59:1e: c8:ac:82:88:90:be:68:b2:27:34:e1:c8:0f:27:aa: eb:e8:b2:80:d3:6f:05:ee:e7:f1:b9:c5:0d:4f:fa: 5b:00:f0:51:7b:b5:16:ad:60:bc:71:15:b7:a8:cd: 32:f3:47:8b:7a:3b:29:aa:6a:5f:3e:7c:9e:44:9a: ed:aa:74:1a:37:35:5d:eb:87:5e:ab:22:1b:d5:ee: 97:c3:0a:e9:2a:05:64:b0:11:cb:18:43:f6:a6:a8: 6f:24:ac:ad:7d:6a:67:1e:f3:ab:0c:23:24:55:a0: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:95:82:C9:59:9D:31:6F:B5:67:57:DE:54:43:AB:94:C5:08:2E:89 X509v3 Authority Key Identifier: keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:bf:e0:b3:98:35:cf:3c:ba:38:d9:ee:0e:3e:e5:d9:63:da: 58:04:56:c3:5b:13:2a:79:76:5a:9f:51:9f:f9:b5:de:d4:51: 64:0b:98:81:5a:51:5b:66:b4:1d:a0:77:3a:00:26:f9:82:80: 10:e7:8b:60:5d:3c:38:62:1d:2e:f0:e1:30:53:b5:07:a5:78: 79:88:3b:d2:3c:92:af:5e:82:5c:0d:9d:75:c4:52:82:be:88: 00:b4:d2:a6:40:20:57:55:5b:fb:13:02:5f:a2:9d:a9:41:7c: d7:c1:b6:29:5a:98:57:58:b2:78:ed:69:4c:30:0b:f9:08:05: 8e:be:cc:30:e7:18:a6:00:a7:8b:c0:af:53:2d:e8:38:5d:1d: 0f:dc:ca:ef:25:ae:11:4d:9b:8e:14:63:0f:eb:46:59:cf:4f: fe:44:9a:a2:df:cb:19:85:85:76:b5:43:48:96:46:8d:59:5d: 66:cc:6f:f1:a2:b8:1c:d9:68:c1:46:be:2f:98:e7:44:20:5a: 3d:3a:3e:2d:dd:64:e9:96:a4:1a:a2:91:96:ee:6c:78:c8:38: 6d:2e:f7:6a:7e:c3:f8:80:df:79:b2:7c:e7:0a:f8:19:83:2a: b5:f3:13:94:7a:90:bd:cc:71:ac:40:ce:d3:ec:16:5a:79:fb: be:66:2c:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydugekpXpvUJsw1cFNwiKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NzhiNzZjNjljOTkxNTI5NGZkYzM5MTM1ZTIwZGFjNzM3 NjIyMjUwHhcNMjUxMjA2MDcwMTEwWhcNMjUxMjA3MDcwMTEwWjAzMTEwLwYDVQQD EygwNjk1ODJjOTU5OWQzMTZmYjU2NzU3ZGU1NDQzYWI5NGM1MDgyZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I0FYJdzAwy0IHMkxTMECOXviEw1 H+64sdqBI31B3UTliIGyL5H496tuo6jdSwV6vCiqHkgngYh7LLjcXkpYYNj/hHCL oTmyNP/Xb2zxTy0r17XYUZzmUWBDoKb28n4OAO4tI8TJDz0NvSF9abo8jkmfjQPA MsM2L3XklJbkUMG0pxSoKwCZixMSOY0swMdo1JW8WR7IrIKIkL5osic04cgPJ6rr 6LKA028F7ufxucUNT/pbAPBRe7UWrWC8cRW3qM0y80eLejspqmpfPnyeRJrtqnQa NzVd64deqyIb1e6XwwrpKgVksBHLGEP2pqhvJKytfWpnHvOrDCMkVaBuZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaVgslZnTFvtWdX3lRDq5TFCC6JMB8GA1UdIwQY MBaAFIR4t2xpyZFSlP3DkTXiDaxzdiIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yODk2MDYtOWY1Yi00ZDM0LWFhY2Yt MmZkNjUwY2VmZDIxLzEvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8yODk2MDYtOWY1Yi00ZDM0LWFhY2YtMmZkNjUwY2VmZDIx LzEvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIr/gs5g1 zzy6ONnuDj7l2WPaWARWw1sTKnl2Wp9Rn/m13tRRZAuYgVpRW2a0HaB3OgAm+YKA EOeLYF08OGIdLvDhMFO1B6V4eYg70jySr16CXA2ddcRSgr6IALTSpkAgV1Vb+xMC X6KdqUF818G2KVqYV1iyeO1pTDAL+QgFjr7MMOcYpgCni8CvUy3oOF0dD9zK7yWu EU2bjhRjD+tGWc9P/kSaot/LGYWFdrVDSJZGjVldZsxv8aK4HNlowUa+L5jnRCBa PTo+Ld1k6ZakGqKRlu5seMg4bS73an7D+IDfebJ85wr4GYMqtfMTlHqQvcxxrEDO 0+wWWnn7vmYsaw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:57 2025 by rpki-client