This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft File: H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json) Hash identifier: 9qQf+BkytUKzTPTtQZaXB+PoQReN+pxr/QyMXofH4g4= Subject key identifier: 07:FA:82:C8:C9:75:05:1B:65:AA:16:CE:10:18:8B:DB:8E:1B:9A:39 Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34 Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34 Certificate serial: 019AF23FE74145220BC5E0344350500FADAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft Manifest number: 177A Signing time: Sat 06 Dec 2025 06:01:05 +0000 Manifest this update: Sat 06 Dec 2025 06:01:05 +0000 Manifest next update: Sun 07 Dec 2025 06:01:05 +0000 Files and hashes: 1: BSSjKlHFChUEI7UNPGcgVGQIMGQ.roa (hash: gAyHnonUZ3YhlZs8Bw/b4nOc3ZBRTxJbg4YBiYurlLc=) 2: Du67LuSR--FTZRs33JDJ1Yh_Yqc.roa (hash: Uq3e+EYwHhZpPWXp5ry3+fcpGqjbo+HY9H6K+cMEsOA=) 3: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: nxx1oBee2VNsOEBonnBLbGoOEFZPzzcsj8ivclo68a4=) 4: KKoRgXzLVxX8M0ge-PzEa-7tJn8.roa (hash: ZB5HW8dKxDtda/UB5dE3fN6v3EtscnOQiCRsaguyfYs=) 5: vPm_UYg8wre_NolD1hu0Cx9JGzE.roa (hash: Rws+EnLA4ahX/aasRkr6vitQH/K/D1I71mx2gpcNmkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e7:41:45:22:0b:c5:e0:34:43:50:50:0f:ad:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34 Validity Not Before: Dec 6 06:01:05 2025 GMT Not After : Dec 7 06:01:05 2025 GMT Subject: CN=07fa82c8c975051b65aa16ce10188bdb8e1b9a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:56:9b:a0:20:36:d9:3e:c9:16:85:f3:18: 3e:7b:3a:a3:89:62:b3:65:81:f2:9e:82:40:94:bb: 15:66:7a:d1:a2:01:6f:3a:a9:73:93:19:2e:5d:1d: 3c:cd:cf:00:0c:30:07:57:9d:09:d7:44:f7:29:98: c7:94:3a:6a:ac:94:e1:cc:68:20:00:87:47:5c:6b: 0c:fd:8b:18:75:08:0b:76:98:e1:2c:d2:75:67:fe: 77:a9:f8:f8:43:3a:70:2a:cf:f8:d5:3b:fd:f8:a9: ed:3c:53:c8:d1:b7:65:66:ac:01:83:72:8a:42:96: 8d:f6:cc:c9:dc:56:15:cb:4a:58:ba:3f:93:df:2b: 44:59:79:70:df:ac:f2:24:72:56:bf:c2:d1:34:7e: 14:13:35:f6:e4:f9:68:bf:75:37:f2:76:db:c3:69: 61:00:6e:00:a9:f2:65:fd:48:d4:4c:ee:25:6a:18: 4a:80:fb:64:a4:45:4d:41:08:37:ee:c5:f6:d1:56: bf:cc:fe:87:3f:17:5f:b3:36:ae:d2:33:70:41:cc: d6:89:48:58:7d:d9:8a:a4:e2:a3:32:f1:5a:6a:1d: c3:bd:00:66:49:f5:18:f9:6c:64:53:a0:d6:ba:5c: b1:b3:e0:52:a8:ed:33:31:51:4a:4c:c0:a0:4e:da: ff:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FA:82:C8:C9:75:05:1B:65:AA:16:CE:10:18:8B:DB:8E:1B:9A:39 X509v3 Authority Key Identifier: keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:47:75:79:66:e0:a6:eb:08:14:04:45:24:3f:1e:c9:87:08: 5f:25:9a:e1:28:3f:48:5d:cf:f0:2e:d6:da:25:12:73:00:73: f6:5c:00:4b:d3:03:0e:18:85:32:a0:93:f8:17:21:e4:7c:82: 79:96:0b:56:6a:a1:34:70:65:d3:47:89:73:92:f3:35:2d:42: 1d:cf:e0:09:3b:d3:f6:77:db:e1:95:00:1a:02:de:f5:3b:2e: f1:69:db:9b:6f:b9:92:1f:67:e0:8d:87:d3:87:5a:19:24:37: 28:77:1b:e1:1a:f9:c8:e3:57:d8:f0:2b:d1:c9:08:c3:3d:ea: 1a:2d:93:79:02:f3:37:3f:34:23:64:dd:45:cb:9b:ec:50:ef: 90:43:d7:9c:79:da:13:eb:8d:d5:8f:c4:54:68:38:35:9c:94: fe:63:25:5c:3a:84:90:50:cb:0e:17:0f:c1:9a:fa:6c:a4:f6: 01:2d:e8:59:14:45:60:5d:86:b2:eb:a5:c5:53:66:6f:98:3b: 5e:e1:03:d1:3a:2b:a7:73:86:62:0e:3c:04:ad:72:1d:ba:a3: 88:a5:fd:fc:93:02:e8:0d:ad:ab:6a:d1:da:12:1c:45:c7:71: e5:92:1c:85:97:9e:c5:17:2a:68:57:eb:76:41:53:b2:22:68: fe:16:50:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+dBRSILxeA0Q1BQD62uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjFhYTVkMWJlZmQ3YTBmZTNlNGRmZTNhYThkYTczZWZj ZmJhMzQwHhcNMjUxMjA2MDYwMTA1WhcNMjUxMjA3MDYwMTA1WjAzMTEwLwYDVQQD EygwN2ZhODJjOGM5NzUwNTFiNjVhYTE2Y2UxMDE4OGJkYjhlMWI5YTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3FWm6AgNtk+yRaF8xg+ezqjiWKz ZYHynoJAlLsVZnrRogFvOqlzkxkuXR08zc8ADDAHV50J10T3KZjHlDpqrJThzGgg AIdHXGsM/YsYdQgLdpjhLNJ1Z/53qfj4QzpwKs/41Tv9+KntPFPI0bdlZqwBg3KK QpaN9szJ3FYVy0pYuj+T3ytEWXlw36zyJHJWv8LRNH4UEzX25Plov3U38nbbw2lh AG4AqfJl/UjUTO4lahhKgPtkpEVNQQg37sX20Va/zP6HPxdfszau0jNwQczWiUhY fdmKpOKjMvFaah3DvQBmSfUY+WxkU6DWulyxs+BSqO0zMVFKTMCgTtr/qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAf6gsjJdQUbZaoWzhAYi9uOG5o5MB8GA1UdIwQY MBaAFB9hql0b79eg/j5N/jqo2nPvz7o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUt YzYyMWU4ZGY5NWZmLzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUtYzYyMWU4ZGY5NWZm LzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0d1eWbg pusIFARFJD8eyYcIXyWa4Sg/SF3P8C7W2iUScwBz9lwAS9MDDhiFMqCT+Bch5HyC eZYLVmqhNHBl00eJc5LzNS1CHc/gCTvT9nfb4ZUAGgLe9Tsu8Wnbm2+5kh9n4I2H 04daGSQ3KHcb4Rr5yONX2PAr0ckIwz3qGi2TeQLzNz80I2TdRcub7FDvkEPXnHna E+uN1Y/EVGg4NZyU/mMlXDqEkFDLDhcPwZr6bKT2AS3oWRRFYF2GsuulxVNmb5g7 XuED0Torp3OGYg48BK1yHbqjiKX9/JMC6A2tq2rR2hIcRcdx5ZIchZeexRcqaFfr dkFTsiJo/hZQQA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:15 2025 by rpki-client