This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json) Hash identifier: FDtc1xKapGkFOk96JO7i+a0PCqr8AKexnB2LfOqz19A= Subject key identifier: 33:3E:19:C9:51:82:87:52:A4:B9:F5:E0:B6:01:13:39:FC:9C:E2:87 Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Certificate serial: 019AF05155B61AEFDABD4AC7CE81014B7FCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft Manifest number: 4E Signing time: Fri 05 Dec 2025 21:00:53 +0000 Manifest this update: Fri 05 Dec 2025 21:00:53 +0000 Manifest next update: Sat 06 Dec 2025 21:00:53 +0000 Files and hashes: 1: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: AMOu9ty5eranDld73r8AajN71N1upLaXRYQUdwhvcYI=) 2: tFKBgVopEDWycM_ICm7jh-VZF3M.roa (hash: LgvsB0E5FX1iC1patAeSP801Ruuw0DUNZ/4X/K37x9c=) 3: uWcS24zvJ13WMxHQUrc7buDsA7o.roa (hash: tbOlJpzzORkR39HmHF8in7FppFxjaYmZdxjOnH/qbIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:55:b6:1a:ef:da:bd:4a:c7:ce:81:01:4b:7f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Validity Not Before: Dec 5 21:00:53 2025 GMT Not After : Dec 6 21:00:53 2025 GMT Subject: CN=333e19c951828752a4b9f5e0b6011339fc9ce287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:54:d6:f6:07:8e:e6:33:ce:57:b6:81:e2: cd:d3:25:45:56:6c:52:85:0b:4a:dc:ac:e0:de:4e: b0:64:55:09:1b:0b:1e:e5:eb:cc:8c:6b:fe:ad:45: 21:97:7f:af:c9:16:87:e1:8f:4f:d1:de:06:33:ed: 70:c8:6f:42:09:e5:bc:a2:12:d9:0c:e3:63:0a:98: 41:67:f5:63:d6:fb:66:3a:da:f9:49:0e:94:3c:2f: 5b:66:38:7e:89:fb:7f:bd:4e:9c:9d:da:12:13:ed: c3:1a:e9:77:61:21:c6:3f:e3:87:7f:6f:c0:8e:12: 23:1f:71:e0:78:de:7f:3f:65:20:7b:d5:63:75:5c: fc:0d:2a:ac:11:96:6a:9f:78:66:3a:6c:e8:0e:74: 1c:9f:d1:33:cf:71:8f:97:47:cc:7d:fa:63:28:05: d3:c2:ba:7b:ba:1e:47:6d:a8:36:28:33:33:6d:d3: f5:0f:d4:d8:d9:a1:24:68:40:d0:82:fd:ba:f1:5c: 63:e2:8f:02:6a:f6:cc:9d:2d:d1:68:21:e1:58:44: bd:a5:bc:65:5d:9e:3a:d2:e9:f6:91:5b:a2:21:3d: b3:0f:2f:ca:70:3c:02:3d:89:4f:9f:75:a0:f1:d2: 36:c1:59:37:95:ac:84:18:df:a2:b2:0c:ff:7b:63: 3e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3E:19:C9:51:82:87:52:A4:B9:F5:E0:B6:01:13:39:FC:9C:E2:87 X509v3 Authority Key Identifier: keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:72:40:5f:65:f5:29:b9:91:c5:15:0f:c8:b6:e5:20:1b:c8: d9:44:f9:91:e1:2c:44:48:ae:87:ed:cb:69:cb:a8:18:42:c5: 6b:4d:54:eb:8f:69:73:d8:0d:ff:8e:2b:16:18:7b:00:91:94: ec:d4:f9:7d:07:40:f7:c7:a2:70:d8:b1:c1:6e:0e:0a:ff:57: 2b:67:24:35:50:55:61:1f:b0:63:c3:6f:b8:ae:75:29:40:77: 3e:c1:48:c7:5f:b2:1c:00:ab:72:40:1e:03:4d:d5:0c:55:f7: f8:1f:d8:fe:f0:74:5b:c1:15:b8:89:70:73:9d:e9:92:c3:d0: a7:c6:63:c7:43:40:c5:ad:52:fb:17:3d:a2:23:1a:b5:16:27: b0:d7:c0:b0:ba:cb:81:a2:62:4b:75:54:5e:83:c7:a3:e9:a2: 6e:22:e0:7b:05:75:6b:a5:21:de:96:eb:a0:22:30:3f:6a:16: 84:73:c8:5a:ab:64:76:07:c4:b4:c3:c7:24:bc:34:f0:69:25: 7c:ee:a5:0b:a2:c6:ad:29:0f:9b:ea:ea:b0:57:4a:96:7a:ca: 77:1a:86:f1:c3:e3:78:29:f2:e1:be:a3:26:1d:91:cf:4b:c2: 4b:e6:ea:09:91:58:2e:36:6f:dd:99:7b:1f:de:fd:6d:c6:65: 37:d3:b2:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUVW2Gu/avUrHzoEBS3/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl NGYyYzYwHhcNMjUxMjA1MjEwMDUzWhcNMjUxMjA2MjEwMDUzWjAzMTEwLwYDVQQD EygzMzNlMTljOTUxODI4NzUyYTRiOWY1ZTBiNjAxMTMzOWZjOWNlMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+lU1vYHjuYzzle2geLN0yVFVmxS hQtK3Kzg3k6wZFUJGwse5evMjGv+rUUhl3+vyRaH4Y9P0d4GM+1wyG9CCeW8ohLZ DONjCphBZ/Vj1vtmOtr5SQ6UPC9bZjh+ift/vU6cndoSE+3DGul3YSHGP+OHf2/A jhIjH3HgeN5/P2Uge9VjdVz8DSqsEZZqn3hmOmzoDnQcn9Ezz3GPl0fMffpjKAXT wrp7uh5Hbag2KDMzbdP1D9TY2aEkaEDQgv268Vxj4o8CavbMnS3RaCHhWES9pbxl XZ460un2kVuiIT2zDy/KcDwCPYlPn3Wg8dI2wVk3layEGN+isgz/e2M+2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDM+GclRgodSpLn14LYBEzn8nOKHMB8GA1UdIwQY MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt NzRkOTFjZGJlMTk1LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1 LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnJAX2X1 KbmRxRUPyLblIBvI2UT5keEsREiuh+3LacuoGELFa01U649pc9gN/44rFhh7AJGU 7NT5fQdA98eicNixwW4OCv9XK2ckNVBVYR+wY8NvuK51KUB3PsFIx1+yHACrckAe A03VDFX3+B/Y/vB0W8EVuIlwc53pksPQp8Zjx0NAxa1S+xc9oiMatRYnsNfAsLrL gaJiS3VUXoPHo+mibiLgewV1a6Uh3pbroCIwP2oWhHPIWqtkdgfEtMPHJLw08Gkl fO6lC6LGrSkPm+rqsFdKlnrKdxqG8cPjeCny4b6jJh2Rz0vCS+bqCZFYLjZv3Zl7 H979bcZlN9Oycw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:37:49 2025 by rpki-client