This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
File:                     HHOn_DBLwC2AdEdtB121zc0tq94.mft (raw, json)
Hash identifier:          G6zbAkfboJjU8GQcyiWokjUxPTjHhDhKDV5Iafq9qZc=
Subject key identifier:   AE:BE:39:CA:1A:A9:74:26:3E:0D:62:E6:B4:07:37:FF:11:4B:24:D8
Authority key identifier: 1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE
Certificate issuer:       /CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
Certificate serial:       019AF6537FEDE159EE7249A8329D6A985835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
Manifest number:          1761
Signing time:             Sun 07 Dec 2025 01:00:58 +0000
Manifest this update:     Sun 07 Dec 2025 01:00:58 +0000
Manifest next update:     Mon 08 Dec 2025 01:00:58 +0000
Files and hashes:         1: HHOn_DBLwC2AdEdtB121zc0tq94.crl (hash: nDPPnR5ijerTdH4kfHSjsMZYTiEw74GNtgqYDZYWVXo=)
                          2: XYgFwZ2CqAs8qGiTQfLochhhVr8.roa (hash: BIq6NWuUjoCoJhl8MtA2+RZunC4kB77cQPXrKGuFmZs=)
                          3: t0qPcPRjVDt7pBpmEOs0txskz9Y.roa (hash: XD1Ri+rvAUqquChGrpBG2cA7FtrzDzcA4IhVajyPuaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:53:7f:ed:e1:59:ee:72:49:a8:32:9d:6a:98:58:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
        Validity
            Not Before: Dec  7 01:00:58 2025 GMT
            Not After : Dec  8 01:00:58 2025 GMT
        Subject: CN=aebe39ca1aa974263e0d62e6b40737ff114b24d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:df:6a:a1:b0:32:64:fa:a2:fe:3f:a8:e5:30:
                    94:42:7d:71:32:bf:a5:7a:69:90:9d:24:70:2b:dc:
                    2b:26:63:28:78:75:31:93:9c:01:94:f1:a1:9e:0a:
                    11:9e:9b:58:16:ae:be:ae:6e:59:c9:30:15:5b:a7:
                    88:e4:e8:c5:2e:78:e9:06:bf:78:ba:34:ed:d2:4f:
                    ae:e6:a8:30:0c:02:a6:0c:f4:40:80:d9:96:b8:d8:
                    47:96:e9:62:8e:a0:2e:08:85:55:a3:6c:85:fc:0e:
                    27:48:44:e2:14:d2:32:20:53:e7:7f:b2:8e:ec:f7:
                    77:a7:9b:71:d1:63:47:ae:31:4d:4f:7c:a6:e7:f2:
                    3d:76:71:e1:87:75:12:bb:1e:4d:62:04:80:ff:1f:
                    31:68:40:fc:01:21:74:75:e4:87:03:19:f9:36:06:
                    a2:df:90:3e:8c:5a:8d:e1:0d:1e:c8:9e:1c:a3:da:
                    ae:5f:d3:c6:73:15:49:78:09:a8:9f:69:d4:e7:e8:
                    df:ec:41:21:8c:1c:4f:e9:30:6a:d9:b8:ee:e0:23:
                    1a:38:34:bc:a1:41:2f:03:54:fc:77:3b:bb:0d:68:
                    ca:af:ce:f1:f5:98:c3:2c:15:43:a2:76:96:65:57:
                    57:7a:46:91:92:07:10:62:d5:0d:1c:af:4e:b0:1c:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BE:39:CA:1A:A9:74:26:3E:0D:62:E6:B4:07:37:FF:11:4B:24:D8
            X509v3 Authority Key Identifier:
                keyid:1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ec:24:df:3c:fd:fc:20:3c:6a:53:2f:de:62:2e:09:de:5f:
         cc:62:28:be:ec:ee:26:0f:f7:90:d0:4e:5f:ca:16:2a:f7:eb:
         58:63:1a:12:d8:6b:5f:a5:b2:bf:ee:c4:9e:5a:32:79:4f:32:
         5d:20:c8:eb:97:4e:1f:80:2b:31:ef:69:17:5b:6a:d7:f4:cf:
         06:71:11:2f:ea:e0:14:d1:e7:de:51:7a:70:df:28:fb:0a:bc:
         57:75:74:e5:fb:9c:04:42:88:91:bb:fa:8b:3b:43:88:28:cf:
         a1:b7:30:14:ec:10:18:88:d9:3f:df:03:d7:61:0c:04:7c:ee:
         4d:41:99:19:90:af:46:11:db:50:2b:02:2b:83:3e:64:fd:d4:
         6b:1d:f8:c8:d1:59:35:27:62:bc:fc:ff:03:3b:a4:36:b6:43:
         72:ab:55:17:4e:99:71:ef:31:a3:38:29:ad:2b:9d:7a:9d:da:
         2f:35:8a:77:d1:7b:15:73:bc:49:5f:6e:96:a1:30:66:eb:69:
         51:04:06:0b:78:d0:85:c5:06:cc:aa:76:15:9d:44:a3:f0:38:
         9a:47:c3:47:23:6d:11:a0:10:21:02:38:a3:19:23:54:73:1a:
         06:cc:5e:a1:7b:92:a4:5f:45:57:eb:36:9b:9c:91:c7:96:bf:
         26:92:0f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:53:14 2025 by rpki-client