This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json) Hash identifier: Q7aKR/fXYYyqOEdjmvsrBx+/4FPHBphgMLjhEz20AqI= Subject key identifier: 8E:23:1B:13:65:B3:16:4E:DA:46:43:24:5B:7F:62:90:34:76:A7:C0 Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24 Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324 Certificate serial: 019AF2AD9758C465193919B5C1ED4B32D776 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 08:00:53 +0000 Manifest this update: Sat 06 Dec 2025 08:00:53 +0000 Manifest next update: Sun 07 Dec 2025 08:00:53 +0000 Files and hashes: 1: GYb1F3991igV-Xs-ZoTKTm-Vg7M.roa (hash: oDfsrWpPRTbFkqWOBaawHb+IseXIbMKYHakcvEvzdXQ=) 2: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: 35QNLXcAndLhf2UifA1O3DUV/WFoWMVS/mjuxOB4S+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:97:58:c4:65:19:39:19:b5:c1:ed:4b:32:d7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324 Validity Not Before: Dec 6 08:00:53 2025 GMT Not After : Dec 7 08:00:53 2025 GMT Subject: CN=8e231b1365b3164eda4643245b7f62903476a7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:3a:42:f6:fb:4f:fc:61:bf:da:cf:15:37: 09:4a:cc:b1:14:ef:cf:68:b0:7a:ea:34:dd:0d:c8: 00:8f:21:dc:15:76:a6:12:0b:e4:a3:91:6f:62:e3: af:2c:ad:fc:35:3f:74:5e:53:e6:27:61:87:8e:3d: 31:2f:ed:97:cb:4c:49:18:f8:52:a7:be:4c:c8:d1: 17:77:6d:51:b2:0b:a7:32:10:9e:a9:f5:75:da:51: 36:cc:c5:9c:e9:c3:86:7f:59:9b:4f:d6:0a:87:c0: d7:ea:16:1d:2a:6c:0f:60:58:ae:3a:40:37:f1:49: 9d:84:81:00:6a:6f:0d:12:c7:df:62:b9:7c:0f:ba: 43:5f:a1:84:95:71:11:77:86:cf:3b:bb:07:6f:7d: 56:23:28:a9:76:f0:9e:78:4d:0f:36:8a:df:97:b4: de:30:f6:5b:0e:b7:69:ca:b2:8e:87:da:00:f6:73: bb:2a:1d:1f:26:31:b6:f4:a2:66:29:35:fb:c3:df: 1a:06:d6:a8:b9:64:54:fd:47:52:b1:80:6e:dd:12: cf:4a:38:69:e8:a8:f8:0a:5c:b5:d1:88:85:d1:70: ff:d1:0a:51:e6:aa:6e:8e:71:a5:7f:66:98:6d:68: 7c:1c:31:59:5d:ca:c8:5f:f1:6e:94:eb:07:30:bd: 4a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:23:1B:13:65:B3:16:4E:DA:46:43:24:5B:7F:62:90:34:76:A7:C0 X509v3 Authority Key Identifier: keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:25:c9:55:39:4a:12:2b:c3:67:05:31:91:0e:78:2a:82:f2: 8e:9c:52:b6:9e:59:c1:aa:39:b9:8b:fe:c8:f8:bf:f4:48:19: 30:00:e2:71:b0:cd:72:10:d6:6f:7b:ed:bf:63:81:3a:45:e1: c8:50:b7:2a:3b:33:3c:ee:fa:cd:28:60:e5:68:73:3e:73:7c: 6f:0d:57:7b:09:9a:4e:11:3e:2c:75:7e:5e:ee:bb:13:6f:aa: ab:e0:19:c8:1c:26:6e:66:a1:25:0b:de:b1:83:a3:91:10:81: bd:a7:5b:a1:9a:65:fc:ab:80:9f:e8:25:18:95:9b:78:bb:95: 9c:b1:28:e9:7c:da:49:45:62:75:37:b6:61:f0:1c:e2:bd:d6: 9d:36:bc:5a:e0:41:63:93:fa:00:75:28:be:b8:c3:ea:fa:76: 4c:94:ef:76:d1:9a:4d:c6:03:b2:90:36:79:7f:a2:89:11:25: 88:db:54:74:08:a1:33:c8:b5:45:43:2d:e8:88:9c:a0:de:de: 3e:45:69:95:b9:38:54:bd:9c:c7:56:63:ed:cb:57:c9:c0:8e: 0e:0a:8a:6d:61:36:0a:87:59:9a:2a:d6:f7:35:20:6f:b0:79: b7:61:c1:b2:01:5c:8f:5b:03:31:6d:80:6e:8a:fd:1a:2b:d7: c3:2c:bf:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZdYxGUZORm1we1LMtd2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOWZmZDhlZTMyYjNlMzU3OTc4ZDljYjk5MjE2Y2NlODEz N2EzMjQwHhcNMjUxMjA2MDgwMDUzWhcNMjUxMjA3MDgwMDUzWjAzMTEwLwYDVQQD Eyg4ZTIzMWIxMzY1YjMxNjRlZGE0NjQzMjQ1YjdmNjI5MDM0NzZhN2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa86Qvb7T/xhv9rPFTcJSsyxFO/P aLB66jTdDcgAjyHcFXamEgvko5FvYuOvLK38NT90XlPmJ2GHjj0xL+2Xy0xJGPhS p75MyNEXd21RsgunMhCeqfV12lE2zMWc6cOGf1mbT9YKh8DX6hYdKmwPYFiuOkA3 8UmdhIEAam8NEsffYrl8D7pDX6GElXERd4bPO7sHb31WIyipdvCeeE0PNorfl7Te MPZbDrdpyrKOh9oA9nO7Kh0fJjG29KJmKTX7w98aBtaouWRU/UdSsYBu3RLPSjhp 6Kj4Cly10YiF0XD/0QpR5qpujnGlf2aYbWh8HDFZXcrIX/FulOsHML1KcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4jGxNlsxZO2kZDJFt/YpA0dqfAMB8GA1UdIwQY MBaAFB+f/Y7jKz41eXjZy5khbM6BN6MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUt YWFlNjM4ZGJiMWMxLzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUtYWFlNjM4ZGJiMWMx LzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSXJVTlK EivDZwUxkQ54KoLyjpxStp5Zwao5uYv+yPi/9EgZMADicbDNchDWb3vtv2OBOkXh yFC3KjszPO76zShg5WhzPnN8bw1XewmaThE+LHV+Xu67E2+qq+AZyBwmbmahJQve sYOjkRCBvadboZpl/KuAn+glGJWbeLuVnLEo6XzaSUVidTe2YfAc4r3WnTa8WuBB Y5P6AHUovrjD6vp2TJTvdtGaTcYDspA2eX+iiREliNtUdAihM8i1RUMt6IicoN7e PkVplbk4VL2cx1Zj7ctXycCODgqKbWE2CodZmirW9zUgb7B5t2HBsgFcj1sDMW2A bor9GivXwyy/0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:51 2025 by rpki-client