This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft File: H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json) Hash identifier: CiP70K5ObFVl+Nc0UYYGIzfypozSJeFqKEAdZgAzlBM= Subject key identifier: 3C:8C:FA:EB:B1:DF:27:2B:F4:02:0C:41:D5:9F:96:C7:B9:95:CB:69 Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF Certificate issuer: /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf Certificate serial: 019AF2096EEC2CB6CF4C4BC238DF9DC7B5CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft Manifest number: 0F96 Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: X05Lt5dLPjq//ypEtLficwI2RmnWmNal1+cEHwfa7Qc=) 2: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (hash: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6e:ec:2c:b6:cf:4c:4b:c2:38:df:9d:c7:b5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=3c8cfaebb1df272bf4020c41d59f96c7b995cb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:8c:3a:d5:df:e1:1d:eb:d1:42:c3:5a:4d: 02:c5:0b:4e:50:bb:ec:21:39:16:0e:90:50:c5:d4: fc:b9:9c:68:d0:e9:72:4a:9a:29:f7:ac:98:61:07: b4:9d:d9:e0:44:7c:40:b1:b1:70:a6:23:9a:f5:fc: fa:24:28:65:45:36:a3:c0:54:cd:1c:be:db:2b:c0: 3f:98:92:b3:a7:da:e9:c7:6a:b8:66:1e:ea:ab:a2: 18:21:81:ff:11:ce:e7:ff:43:4c:35:15:40:89:25: e8:a1:a2:62:3b:9d:67:07:29:8c:62:fc:92:09:3a: c6:be:b5:fb:87:07:33:35:be:b8:2b:1e:68:64:4e: e2:79:c3:48:5f:96:f1:b4:f4:a4:56:c2:ae:3f:76: 8f:2b:f8:42:a6:9a:40:9c:c6:fe:d6:23:06:9b:62: f4:e6:7f:9a:2a:b4:40:29:0c:c6:f7:3f:4b:73:66: b4:3e:ce:cc:0f:57:d7:02:df:90:03:b0:ca:6c:f4: 37:f6:13:6e:1c:41:99:0f:80:95:39:6c:24:74:40: de:3f:3d:fc:28:60:1e:9e:f4:96:6b:ac:39:58:97: c0:8b:62:84:f4:ec:ac:6e:cb:3e:3b:d5:8d:79:8a: b0:ff:dd:aa:3c:6c:cc:39:63:db:fe:22:8a:0d:12: f1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8C:FA:EB:B1:DF:27:2B:F4:02:0C:41:D5:9F:96:C7:B9:95:CB:69 X509v3 Authority Key Identifier: keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:36:25:7e:a2:b1:55:e5:8e:0f:24:23:1c:67:f2:95:87:1e: ef:f6:71:29:64:da:21:c8:95:ef:33:95:b3:35:16:99:99:45: 89:98:da:d0:bc:0a:af:5e:2b:7d:5c:75:88:d4:10:c3:21:81: f1:88:b6:92:38:9d:4e:ec:61:cb:b7:0e:ba:cb:be:8b:39:1b: 0d:54:1d:b3:a6:8d:f7:7a:49:8f:de:12:64:43:99:b1:14:f0: 9a:81:71:d7:6f:1c:ba:55:63:2b:8e:8b:10:57:50:f8:3d:5d: 30:6b:02:df:0b:24:61:e3:8a:80:07:5f:0a:88:24:db:37:be: ed:a3:7b:a7:bd:f0:52:2b:63:39:4c:7b:dd:62:2e:2e:bd:c0: 82:fe:3b:d1:5b:fa:79:26:55:e7:30:73:3a:74:e2:04:a1:99: c2:f1:d6:d8:4d:e8:ea:35:f9:1a:b5:e5:85:6d:23:b4:48:23: b4:b3:05:7e:48:e5:77:2e:65:69:36:56:45:d2:81:a5:95:64: 8e:94:00:74:79:ec:c6:c1:e2:6b:57:5d:98:d1:a5:69:d1:30: 7e:f5:85:b0:36:4a:80:75:e7:a0:05:24:3b:1c:11:4d:d1:2d: 1d:49:ac:4c:82:e6:ef:17:ea:c3:05:8b:98:31:f3:06:82:0b: 29:22:fc:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCW7sLLbPTEvCON+dx7XNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOTRkMTM1NGU3MjMwNmE5ZjdmOTUxZjkzZjUyZThkMTNh NDBhYmYwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD EygzYzhjZmFlYmIxZGYyNzJiZjQwMjBjNDFkNTlmOTZjN2I5OTVjYjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9SMOtXf4R3r0ULDWk0CxQtOULvs ITkWDpBQxdT8uZxo0OlySpop96yYYQe0ndngRHxAsbFwpiOa9fz6JChlRTajwFTN HL7bK8A/mJKzp9rpx2q4Zh7qq6IYIYH/Ec7n/0NMNRVAiSXooaJiO51nBymMYvyS CTrGvrX7hwczNb64Kx5oZE7iecNIX5bxtPSkVsKuP3aPK/hCpppAnMb+1iMGm2L0 5n+aKrRAKQzG9z9Lc2a0Ps7MD1fXAt+QA7DKbPQ39hNuHEGZD4CVOWwkdEDePz38 KGAenvSWa6w5WJfAi2KE9Oysbss+O9WNeYqw/92qPGzMOWPb/iKKDRLxBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyM+uux3ycr9AIMQdWflse5lctpMB8GA1UdIwQY MBaAFB+U0TVOcjBqn3+VH5P1Lo0TpAq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kZjk2YTUtMzE1Ny00ODgzLTgwODMt MjEyZjg5M2ZjODM1LzEvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kZjk2YTUtMzE1Ny00ODgzLTgwODMtMjEyZjg5M2ZjODM1 LzEvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDYlfqKx VeWODyQjHGfylYce7/ZxKWTaIciV7zOVszUWmZlFiZja0LwKr14rfVx1iNQQwyGB 8Yi2kjidTuxhy7cOusu+izkbDVQds6aN93pJj94SZEOZsRTwmoFx128culVjK46L EFdQ+D1dMGsC3wskYeOKgAdfCogk2ze+7aN7p73wUitjOUx73WIuLr3Agv470Vv6 eSZV5zBzOnTiBKGZwvHW2E3o6jX5GrXlhW0jtEgjtLMFfkjldy5laTZWRdKBpZVk jpQAdHnsxsHia1ddmNGladEwfvWFsDZKgHXnoAUkOxwRTdEtHUmsTILm7xfqwwWL mDHzBoILKSL8nA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:15 2025 by rpki-client