This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft File: hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json) Hash identifier: ttrdTFQsBSNodT1VWNE2dT/LNfjrY6jGTFANQdfva3A= Subject key identifier: D1:4E:F8:E1:BC:B0:79:A0:1A:1D:F1:54:DD:A6:29:40:0D:DF:0A:C6 Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25 Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225 Certificate serial: 019B2C6626456BED00D7354219B94DB3AEDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft Manifest number: 1718 Signing time: Wed 17 Dec 2025 13:00:50 +0000 Manifest this update: Wed 17 Dec 2025 13:00:50 +0000 Manifest next update: Thu 18 Dec 2025 13:00:50 +0000 Files and hashes: 1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: C7+QL6A08wYszHemzuf+wpUnsWQ4HcvpvCXevXUBkjg=) 2: kclE4AGa3IQ3ANoqx8hNmFyyOPc.roa (hash: era/rLdikRzOubIlTwlZQUllh2OgF4bxbh9GfJNQo5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:26:45:6b:ed:00:d7:35:42:19:b9:4d:b3:ae:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225 Validity Not Before: Dec 17 13:00:50 2025 GMT Not After : Dec 18 13:00:50 2025 GMT Subject: CN=d14ef8e1bcb079a01a1df154dda629400ddf0ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:3b:56:a4:d9:fc:47:4f:bd:72:36:2c:9a: a3:b6:18:e5:42:28:cc:af:31:30:49:f9:54:12:43: 19:03:ac:57:e2:14:9a:10:16:e4:35:40:61:5f:41: 1f:c9:c2:75:a6:b5:51:eb:8f:7e:1b:a1:14:b0:78: 25:c3:b3:ba:97:f7:48:8b:06:cf:5a:a7:57:55:1b: 3b:8c:16:4a:ec:4c:27:f9:4d:38:af:aa:a6:c5:0a: cd:da:97:47:7f:9d:89:c5:97:86:33:48:90:c0:8d: 32:e6:1d:1a:86:58:7d:64:cd:5d:80:ca:d6:d8:cc: 14:0b:a0:21:ae:ef:58:ae:e1:d8:3e:48:8c:0a:91: 61:cb:c2:c7:00:cf:f1:71:be:a0:ca:eb:b5:f5:c8: 73:c3:e0:ee:c2:82:61:01:07:46:df:d7:e0:c4:b2: b7:45:a9:c1:6d:b8:d4:2d:4b:31:96:14:a2:89:24: 58:9a:a2:92:92:1f:ae:f6:4d:5d:86:62:a2:fe:7f: d7:ae:d9:ff:48:fc:72:c2:28:c3:ea:2f:91:4b:b2: 36:99:e1:53:be:b6:6e:b7:84:e7:a5:d7:6c:95:4f: 53:27:e9:fb:4c:c9:b0:5f:16:2e:a8:2e:3d:b3:33: d4:5f:5b:8b:12:9b:c2:99:8b:fc:6f:5b:c6:a4:f7: f8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4E:F8:E1:BC:B0:79:A0:1A:1D:F1:54:DD:A6:29:40:0D:DF:0A:C6 X509v3 Authority Key Identifier: keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:49:a1:6a:bf:c9:c8:59:74:96:34:99:36:9b:18:9d:56:fe: b7:61:20:59:82:0a:b8:11:ef:79:bb:da:f4:05:42:e1:f7:f7: cd:f5:5d:af:1c:53:82:9a:1d:88:dc:04:4e:a6:da:76:0f:4c: a6:0a:43:9f:ea:44:c1:6b:ed:54:d5:a1:9e:cf:08:c8:ba:23: b8:b9:64:05:3a:ba:10:00:85:80:8f:0b:7f:be:98:9f:e5:e7: 35:be:87:60:07:c4:ba:f2:e8:12:05:a1:68:e8:49:89:19:81: 92:75:20:1e:b5:c5:68:46:49:f7:3f:35:e3:b0:e6:16:1d:b0: d0:3d:8d:32:32:21:0d:7f:44:b1:a3:8b:b3:e6:1c:46:60:53: f5:67:0e:90:61:92:f5:f0:bf:4f:8f:06:fb:74:c2:e3:4e:fb: d9:a6:1b:c2:ba:10:fb:61:81:39:af:86:e2:f5:7e:d3:87:c6: fe:81:c8:5e:4a:87:ee:9d:70:fc:73:2f:01:46:07:18:d3:9e: 5c:b0:80:af:23:1d:f7:20:cc:c1:c9:2c:8d:c3:5f:80:ee:29: b1:ee:40:c6:af:64:bf:78:5f:64:03:d5:79:3b:cd:52:94:c8: 20:e6:2b:ba:55:ed:5d:4f:a8:6e:6f:2f:75:dd:ca:c5:5c:60: d6:74:b1:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZiZFa+0A1zVCGblNs67aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NzhiNzZjNjljOTkxNTI5NGZkYzM5MTM1ZTIwZGFjNzM3 NjIyMjUwHhcNMjUxMjE3MTMwMDUwWhcNMjUxMjE4MTMwMDUwWjAzMTEwLwYDVQQD EyhkMTRlZjhlMWJjYjA3OWEwMWExZGYxNTRkZGE2Mjk0MDBkZGYwYWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKM7VqTZ/EdPvXI2LJqjthjlQijM rzEwSflUEkMZA6xX4hSaEBbkNUBhX0EfycJ1prVR649+G6EUsHglw7O6l/dIiwbP WqdXVRs7jBZK7Ewn+U04r6qmxQrN2pdHf52JxZeGM0iQwI0y5h0ahlh9ZM1dgMrW 2MwUC6Ahru9YruHYPkiMCpFhy8LHAM/xcb6gyuu19chzw+DuwoJhAQdG39fgxLK3 RanBbbjULUsxlhSiiSRYmqKSkh+u9k1dhmKi/n/Xrtn/SPxywijD6i+RS7I2meFT vrZut4TnpddslU9TJ+n7TMmwXxYuqC49szPUX1uLEpvCmYv8b1vGpPf4sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFO+OG8sHmgGh3xVN2mKUAN3wrGMB8GA1UdIwQY MBaAFIR4t2xpyZFSlP3DkTXiDaxzdiIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yODk2MDYtOWY1Yi00ZDM0LWFhY2Yt MmZkNjUwY2VmZDIxLzEvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8yODk2MDYtOWY1Yi00ZDM0LWFhY2YtMmZkNjUwY2VmZDIx LzEvaEhpM2JHbkprVktVX2NPUk5lSU5ySE4ySWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUmhar/J yFl0ljSZNpsYnVb+t2EgWYIKuBHvebva9AVC4ff3zfVdrxxTgpodiNwETqbadg9M pgpDn+pEwWvtVNWhns8IyLojuLlkBTq6EACFgI8Lf76Yn+XnNb6HYAfEuvLoEgWh aOhJiRmBknUgHrXFaEZJ9z8147DmFh2w0D2NMjIhDX9EsaOLs+YcRmBT9WcOkGGS 9fC/T48G+3TC40772aYbwroQ+2GBOa+G4vV+04fG/oHIXkqH7p1w/HMvAUYHGNOe XLCAryMd9yDMwcksjcNfgO4pse5Axq9kv3hfZAPVeTvNUpTIIOYrulXtXU+obm8v dd3KxVxg1nSx+A== -----END CERTIFICATE-----Generated at Wed Dec 17 18:11:42 2025 by rpki-client