This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json) Hash identifier: /AQmJPMMczEsb+dE+NremMT20WV2NuUXN2OUdujl7qk= Subject key identifier: C1:E5:2D:84:9D:7A:2C:8F:CD:BE:79:72:86:B2:D0:84:45:4C:A0:AA Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5 Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5 Certificate serial: 019AF5781A796C867C5642CDB3F42DFE30A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft Manifest number: 0652 Signing time: Sat 06 Dec 2025 21:01:20 +0000 Manifest this update: Sat 06 Dec 2025 21:01:20 +0000 Manifest next update: Sun 07 Dec 2025 21:01:20 +0000 Files and hashes: 1: KG6jzdyZvsoXu639b6uxjJ94LA0.roa (hash: zuHbXITXPWpIjm5UWYo1gnuNJcxQg0P5glow8hcHCUc=) 2: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: qtig9KFR0Qo58wQax8DbgALTIEmBQp51bxpMs3fHpYU=) 3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:1a:79:6c:86:7c:56:42:cd:b3:f4:2d:fe:30:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5 Validity Not Before: Dec 6 21:01:20 2025 GMT Not After : Dec 7 21:01:20 2025 GMT Subject: CN=c1e52d849d7a2c8fcdbe797286b2d084454ca0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ab:27:20:d6:83:37:bc:65:3f:94:b8:c8:66: f8:6e:46:bb:97:e2:ed:ad:01:67:69:e8:47:78:8a: 91:22:ba:4e:4a:62:18:87:01:0f:2d:f2:d7:50:64: ea:5e:de:5d:ff:b8:a4:11:17:23:57:e1:30:26:80: 5a:56:bf:7d:48:c9:22:cd:db:31:93:ec:d9:7d:db: d4:dd:a0:da:5e:ab:05:8b:03:24:77:9f:3c:1a:7b: 13:90:6a:2e:f7:4b:a3:01:41:5b:d9:63:9d:8c:ec: 27:6c:99:13:a5:dc:7f:77:8f:4c:3d:73:89:4f:4f: c3:e8:f5:0b:86:81:34:3b:5a:5e:3a:5e:9f:48:6c: 94:4f:0b:42:02:b8:2a:3e:00:aa:89:2f:7a:6d:b3: 8f:ab:c0:78:5a:b8:4c:fd:f7:d9:9a:57:fd:f2:de: 33:40:00:0c:d6:7f:f6:e5:dd:03:41:a1:53:7a:3f: 5c:89:70:bc:bd:6d:72:65:8b:97:59:91:f0:fd:0e: f1:6c:f5:56:bf:19:3f:d6:a6:cf:4d:62:82:96:40: fa:19:2c:7e:0b:e2:aa:1c:1d:6b:4c:21:98:5e:5a: 3d:36:c7:4c:d4:7d:b6:d0:86:fc:e4:37:fb:a9:a5: 4a:17:10:1b:c3:ff:d2:d2:50:29:a2:df:37:64:41: 89:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E5:2D:84:9D:7A:2C:8F:CD:BE:79:72:86:B2:D0:84:45:4C:A0:AA X509v3 Authority Key Identifier: keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:4d:9e:0c:64:ef:28:9a:22:39:71:74:23:6e:7e:ca:9e:d3: a1:3f:ea:1a:90:d0:92:fe:86:07:e7:e2:a6:a3:2e:30:18:9c: 6e:65:ad:1c:98:57:8c:d9:81:24:94:75:3e:47:27:3d:08:ef: 76:7a:cb:e1:ef:5c:7d:a8:f7:22:40:67:a4:27:76:ef:e2:b4: db:03:a5:03:a0:20:3b:c2:1a:7c:c2:0f:a4:68:c6:f1:70:97: 48:78:b8:1a:5a:55:fe:c2:c5:37:0f:4a:1a:3e:fb:b7:c4:31: a3:c8:0e:56:41:66:48:97:c1:66:cb:3a:c9:3f:f1:59:5f:2b: c8:d5:89:15:e9:66:9a:7d:55:3c:cf:99:f0:9b:56:ad:f7:ef: 2e:d0:7a:68:bd:b4:4a:1c:90:e9:fc:2f:01:7c:c1:6e:ce:e7: 6e:f0:d6:3c:7a:ea:3e:c4:29:4e:16:4a:55:c9:7d:e4:eb:32: a4:08:78:09:e3:db:92:fa:11:f0:40:a4:3b:17:a8:d9:2c:94: a7:1b:9b:9c:23:7a:ea:d7:df:40:da:bb:b4:95:8c:14:e6:fc: 0b:3e:48:8d:16:d8:97:eb:b0:9e:4c:97:e7:9c:02:89:7f:bc: b0:23:29:47:62:d6:b7:4c:45:e0:95:81:9b:68:8b:ef:91:db: de:48:e0:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eBp5bIZ8VkLNs/Qt/jChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1Yjg3MWQ2OTM5NTYxMDQ2NTc3OTMyM2I5MWIzNGU2OWJm Y2Y1YjUwHhcNMjUxMjA2MjEwMTIwWhcNMjUxMjA3MjEwMTIwWjAzMTEwLwYDVQQD EyhjMWU1MmQ4NDlkN2EyYzhmY2RiZTc5NzI4NmIyZDA4NDQ1NGNhMGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0asnINaDN7xlP5S4yGb4bka7l+Lt rQFnaehHeIqRIrpOSmIYhwEPLfLXUGTqXt5d/7ikERcjV+EwJoBaVr99SMkizdsx k+zZfdvU3aDaXqsFiwMkd588GnsTkGou90ujAUFb2WOdjOwnbJkTpdx/d49MPXOJ T0/D6PULhoE0O1peOl6fSGyUTwtCArgqPgCqiS96bbOPq8B4WrhM/ffZmlf98t4z QAAM1n/25d0DQaFTej9ciXC8vW1yZYuXWZHw/Q7xbPVWvxk/1qbPTWKClkD6GSx+ C+KqHB1rTCGYXlo9NsdM1H220Ib85Df7qaVKFxAbw//S0lApot83ZEGJkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHlLYSdeiyPzb55coay0IRFTKCqMB8GA1UdIwQY MBaAFIW4cdaTlWEEZXeTI7kbNOab/PW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAt MjZhMGI4ZGVmMGMzLzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82NzQ0YWMtOWExYy00MDEzLWJlMDAtMjZhMGI4ZGVmMGMz LzEvaGJoeDFwT1ZZUVJsZDVNanVSczA1cHY4OWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwU2eDGTv KJoiOXF0I25+yp7ToT/qGpDQkv6GB+fipqMuMBicbmWtHJhXjNmBJJR1PkcnPQjv dnrL4e9cfaj3IkBnpCd27+K02wOlA6AgO8IafMIPpGjG8XCXSHi4GlpV/sLFNw9K Gj77t8Qxo8gOVkFmSJfBZss6yT/xWV8ryNWJFelmmn1VPM+Z8JtWrffvLtB6aL20 ShyQ6fwvAXzBbs7nbvDWPHrqPsQpThZKVcl95OsypAh4CePbkvoR8ECkOxeo2SyU pxubnCN66tffQNq7tJWMFOb8Cz5IjRbYl+uwnkyX55wCiX+8sCMpR2LWt0xF4JWB m2iL75Hb3kjgeA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:44:14 2025 by rpki-client