This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft File: hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft (raw, json) Hash identifier: k4wulLmHN4GNPXXS05W2CeW61Ext+GSXXSz3gHSoNto= Subject key identifier: B0:6A:C0:74:31:FB:DA:71:CA:A7:36:AC:56:2B:AE:B8:4D:E9:9B:E5 Authority key identifier: 84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5 Certificate issuer: /CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5 Certificate serial: 019AF163DC3D2C7ABDC03FE09E97C668339E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft Manifest number: 133C Signing time: Sat 06 Dec 2025 02:00:44 +0000 Manifest this update: Sat 06 Dec 2025 02:00:44 +0000 Manifest next update: Sun 07 Dec 2025 02:00:44 +0000 Files and hashes: 1: hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl (hash: F1jPxHp09QtnbJXJl3jMDRVbU/wqXkniO7AANcU/mOY=) 2: pNHLiZosFPLwAP2_39dVXVedoA8.roa (hash: 21Dk8gbrcOnUWwtpjgoXFZDgkCZkwg2MK05wmg5NEPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:dc:3d:2c:7a:bd:c0:3f:e0:9e:97:c6:68:33:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5 Validity Not Before: Dec 6 02:00:44 2025 GMT Not After : Dec 7 02:00:44 2025 GMT Subject: CN=b06ac07431fbda71caa736ac562baeb84de99be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:aa:9a:2c:6c:27:da:96:18:12:c3:88:2b:98: 83:e5:81:f8:14:6d:24:cc:13:4d:02:1d:02:3c:5e: e2:cd:7e:d5:15:22:41:b9:63:3f:65:70:58:b5:d4: 64:d4:63:92:da:3d:0b:ac:06:4e:63:d8:82:93:b2: 33:de:7c:d8:25:47:c9:5c:61:5b:54:2f:aa:b9:9e: a0:30:b9:c8:1b:af:ad:4b:9f:e5:62:0f:37:6e:29: c6:11:cc:f4:1d:7e:85:33:ff:a7:de:4d:e3:2f:59: ad:3c:ef:29:c5:37:93:e8:bb:f9:b4:75:29:7f:34: fe:da:88:9c:34:cb:1a:45:26:60:b8:6a:eb:05:7c: 3a:dc:40:cb:1b:2f:9d:f0:a8:77:44:e4:e3:c4:45: 16:ca:d3:f3:a8:16:60:6d:2a:5a:9e:04:28:f1:e8: f3:52:5a:29:ed:5b:a4:ac:42:59:e8:c9:08:e9:02: 4a:44:40:2e:83:a3:49:c9:7a:1c:60:a9:de:51:65: 5b:f3:09:82:b0:c4:34:9a:cf:93:21:2f:05:19:01: 90:e0:82:f9:15:e3:06:e5:0b:d0:fa:05:65:79:1f: 97:59:e2:e2:5c:14:24:59:8c:9d:b2:23:e2:55:d9: 5d:73:b7:e7:71:b9:73:84:a9:1f:ca:63:f0:77:94: 7a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6A:C0:74:31:FB:DA:71:CA:A7:36:AC:56:2B:AE:B8:4D:E9:9B:E5 X509v3 Authority Key Identifier: keyid:84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:19:af:21:dc:53:fb:8e:6a:e0:f0:b3:8c:28:6a:57:c8:3b: 1f:be:91:b7:b9:28:b7:10:89:34:04:14:0e:a6:03:00:4c:26: c2:30:79:02:4d:38:5b:d2:8f:65:83:68:13:35:36:9a:66:f9: ab:92:8e:2e:06:12:e9:e8:45:31:11:a8:c9:e9:81:99:77:ab: 3b:11:3c:93:72:dd:e7:25:ea:9a:30:6d:7f:7c:c4:70:57:57: dd:23:d2:a2:38:89:0c:fa:be:38:ea:6e:e6:26:90:2c:1e:c3: 14:e2:21:5b:ab:fe:fb:b2:7f:e9:63:fe:54:19:e6:60:a9:4f: bc:39:1c:72:83:f6:55:34:9b:29:69:ff:c6:16:0b:f7:ed:32: 70:94:78:da:9f:88:65:13:09:d0:ff:74:96:36:db:f7:11:f9: 78:46:01:4f:6d:31:c9:60:d7:6c:ff:29:fd:b8:9a:63:ec:19: 7d:84:00:d7:9e:21:e9:72:50:cb:fc:ee:0a:c4:a3:ff:86:2c: 2e:41:4a:26:84:d0:fb:e1:ec:e7:d6:a9:2a:49:65:c9:79:a7: 94:af:ee:97:d0:0e:6e:2c:45:7d:6d:7d:8d:ef:e8:50:32:ef: 3b:28:d5:95:ae:4c:b4:00:2e:6d:8d:0a:b3:53:d0:81:76:79: 2c:24:7a:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9w9LHq9wD/gnpfGaDOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0N2RjNzY1ZDFhMDM5ZTZmYmQ2YjhmYmI2NGQwN2Q1OGJm NTg0ZjUwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD EyhiMDZhYzA3NDMxZmJkYTcxY2FhNzM2YWM1NjJiYWViODRkZTk5YmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aqaLGwn2pYYEsOIK5iD5YH4FG0k zBNNAh0CPF7izX7VFSJBuWM/ZXBYtdRk1GOS2j0LrAZOY9iCk7Iz3nzYJUfJXGFb VC+quZ6gMLnIG6+tS5/lYg83binGEcz0HX6FM/+n3k3jL1mtPO8pxTeT6Lv5tHUp fzT+2oicNMsaRSZguGrrBXw63EDLGy+d8Kh3ROTjxEUWytPzqBZgbSpangQo8ejz Ulop7VukrEJZ6MkI6QJKREAug6NJyXocYKneUWVb8wmCsMQ0ms+TIS8FGQGQ4IL5 FeMG5QvQ+gVleR+XWeLiXBQkWYydsiPiVdldc7fncblzhKkfymPwd5R6sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBqwHQx+9pxyqc2rFYrrrhN6ZvlMB8GA1UdIwQY MBaAFIR9x2XRoDnm+9a4+7ZNB9WL9YT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEgzSFpkR2dPZWI3MXJqN3RrMEgxWXYxaFBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZTUwMzAtZGEyNC00YmJiLTliOTUt MDljZjdlNzJhMDMzLzEvaEgzSFpkR2dPZWI3MXJqN3RrMEgxWXYxaFBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83ZTUwMzAtZGEyNC00YmJiLTliOTUtMDljZjdlNzJhMDMz LzEvaEgzSFpkR2dPZWI3MXJqN3RrMEgxWXYxaFBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxmvIdxT +45q4PCzjChqV8g7H76Rt7kotxCJNAQUDqYDAEwmwjB5Ak04W9KPZYNoEzU2mmb5 q5KOLgYS6ehFMRGoyemBmXerOxE8k3Ld5yXqmjBtf3zEcFdX3SPSojiJDPq+OOpu 5iaQLB7DFOIhW6v++7J/6WP+VBnmYKlPvDkccoP2VTSbKWn/xhYL9+0ycJR42p+I ZRMJ0P90ljbb9xH5eEYBT20xyWDXbP8p/biaY+wZfYQA154h6XJQy/zuCsSj/4Ys LkFKJoTQ++Hs59apKkllyXmnlK/ul9AObixFfW19je/oUDLvOyjVla5MtAAubY0K s1PQgXZ5LCR6Ig== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:00 2025 by rpki-client