This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft File: H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json) Hash identifier: l3776zy1fHk1GLV7J9kkF9TwOpFUkNsGOunXV7zERtY= Subject key identifier: 9A:14:DB:A3:96:71:5E:8E:C1:80:7B:C5:2E:AD:F4:0C:2C:FE:2E:1C Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66 Certificate issuer: /CN=1f6fe007917eb6327be3061a9af6ec548d353066 Certificate serial: 019AF23F7506B2AC576AF4D45DC8C15D22AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft Manifest number: 081F Signing time: Sat 06 Dec 2025 06:00:36 +0000 Manifest this update: Sat 06 Dec 2025 06:00:36 +0000 Manifest next update: Sun 07 Dec 2025 06:00:36 +0000 Files and hashes: 1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: ydtPAIe72ptkJKXBykEzvhqP/6XJEWx0r/F65EERyXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:75:06:b2:ac:57:6a:f4:d4:5d:c8:c1:5d:22:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066 Validity Not Before: Dec 6 06:00:36 2025 GMT Not After : Dec 7 06:00:36 2025 GMT Subject: CN=9a14dba396715e8ec1807bc52eadf40c2cfe2e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:83:54:c3:f5:d5:17:dc:8e:7c:83:7f:34: 2e:67:91:01:f1:85:8e:ee:d4:f1:ef:32:d9:89:62: 2d:42:10:5a:86:26:c0:4a:25:ab:d7:ca:55:34:97: ff:dd:e6:86:8c:25:8c:45:be:eb:68:1e:58:68:bc: c2:a3:4d:8b:cf:0a:8d:ee:0c:88:dd:21:48:5c:df: fe:e0:69:ff:d7:55:e2:31:b4:fe:33:50:88:93:b3: 6a:17:ab:bf:52:54:91:6e:7d:82:85:4b:bc:39:d1: ad:e7:ef:ff:82:2c:39:84:8a:59:6c:14:0e:a6:26: fb:b1:c0:1a:54:3c:6d:d1:45:d4:52:3d:45:5e:a8: 01:d3:21:55:ce:f4:ab:81:a4:98:61:16:95:56:69: 72:c5:14:ee:44:c7:47:59:0d:5e:1f:0a:ca:9e:75: 0d:2b:da:b5:60:bd:34:58:61:31:d4:2f:4c:a0:af: 92:3a:87:ef:11:53:d4:c7:ca:a0:fb:35:bd:f6:2c: b6:de:5b:48:2e:0c:a1:50:b9:80:94:e1:b8:0b:d0: 83:45:89:3f:65:bd:9d:23:38:5f:2c:25:a9:3f:df: 55:1d:49:ae:08:c7:76:98:9f:aa:a5:b0:35:d7:c8: 2a:b7:03:82:4d:19:10:98:e9:c2:f3:0f:56:96:6f: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:14:DB:A3:96:71:5E:8E:C1:80:7B:C5:2E:AD:F4:0C:2C:FE:2E:1C X509v3 Authority Key Identifier: keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:80:e4:7f:41:6c:ed:85:5b:cb:47:77:a1:2e:3c:b1:56:c1: 64:76:07:c6:b0:d0:39:ad:49:06:46:f7:58:18:33:3b:16:8b: c9:e2:7c:1b:d7:3e:9c:ea:a5:fc:52:ef:70:e7:76:47:69:5b: 02:7e:67:00:28:58:07:e6:9f:10:1a:8b:98:d3:d1:e4:a6:64: 4b:27:99:b7:ff:14:d6:c3:05:44:19:d8:07:79:f9:86:1c:a8: bd:1d:fe:a6:0e:a7:31:6e:78:45:e2:39:82:bc:a2:69:10:3c: c1:c2:cf:6c:7e:64:f6:b9:c8:02:6b:52:ce:71:84:43:37:11: 80:64:3b:cc:ee:df:97:8c:14:b8:b1:18:83:42:be:57:10:8d: 63:fb:f8:a2:ab:95:b5:75:48:22:2d:dd:25:11:4c:d8:25:0a: 00:08:2f:32:78:26:5b:85:27:18:94:4f:bf:2c:58:05:83:eb: a4:fb:5a:76:6b:df:b7:54:21:a4:3c:f6:6c:60:83:1f:89:bf: 2f:b7:43:2d:bd:b6:9e:a1:eb:1c:24:9d:93:88:40:5b:72:d0: da:31:04:1f:6d:0d:65:37:16:a2:4f:ab:72:db:24:29:17:43: 00:40:b7:60:d6:8c:f1:01:12:7e:d3:0c:23:ff:bf:cd:07:f9: ba:88:bc:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3UGsqxXavTUXcjBXSKuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNmZlMDA3OTE3ZWI2MzI3YmUzMDYxYTlhZjZlYzU0OGQz NTMwNjYwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD Eyg5YTE0ZGJhMzk2NzE1ZThlYzE4MDdiYzUyZWFkZjQwYzJjZmUyZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM2DVMP11RfcjnyDfzQuZ5EB8YWO 7tTx7zLZiWItQhBahibASiWr18pVNJf/3eaGjCWMRb7raB5YaLzCo02LzwqN7gyI 3SFIXN/+4Gn/11XiMbT+M1CIk7NqF6u/UlSRbn2ChUu8OdGt5+//giw5hIpZbBQO pib7scAaVDxt0UXUUj1FXqgB0yFVzvSrgaSYYRaVVmlyxRTuRMdHWQ1eHwrKnnUN K9q1YL00WGEx1C9MoK+SOofvEVPUx8qg+zW99iy23ltILgyhULmAlOG4C9CDRYk/ Zb2dIzhfLCWpP99VHUmuCMd2mJ+qpbA118gqtwOCTRkQmOnC8w9Wlm9g+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoU26OWcV6OwYB7xS6t9Aws/i4cMB8GA1UdIwQY MBaAFB9v4AeRfrYye+MGGpr27FSNNTBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJfZ0I1Ri10ako3NHdZYW12YnNWSTAxTUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xNTU1YjgtODUzZC00M2Q2LTgxMjQt MDliM2I4NzIyNjg4LzEvSDJfZ0I1Ri10ako3NHdZYW12YnNWSTAxTUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xNTU1YjgtODUzZC00M2Q2LTgxMjQtMDliM2I4NzIyNjg4 LzEvSDJfZ0I1Ri10ako3NHdZYW12YnNWSTAxTUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYDkf0Fs 7YVby0d3oS48sVbBZHYHxrDQOa1JBkb3WBgzOxaLyeJ8G9c+nOql/FLvcOd2R2lb An5nAChYB+afEBqLmNPR5KZkSyeZt/8U1sMFRBnYB3n5hhyovR3+pg6nMW54ReI5 gryiaRA8wcLPbH5k9rnIAmtSznGEQzcRgGQ7zO7fl4wUuLEYg0K+VxCNY/v4oquV tXVIIi3dJRFM2CUKAAgvMngmW4UnGJRPvyxYBYPrpPtadmvft1QhpDz2bGCDH4m/ L7dDLb22nqHrHCSdk4hAW3LQ2jEEH20NZTcWok+rctskKRdDAEC3YNaM8QESftMM I/+/zQf5uoi8JQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:56:27 2025 by rpki-client