This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json) Hash identifier: VXkV5F1Adxn6KXhEEn0xiYf7XOAP6HLkol1IM8Z6MWI= Subject key identifier: E0:05:FD:EB:F7:CF:FC:7D:0E:D2:11:EC:13:13:61:40:2A:B7:7D:41 Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2 Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2 Certificate serial: 019AF5E5B35EFA68F8A1CFDB5FE7C09AEB5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft Manifest number: 0701 Signing time: Sat 06 Dec 2025 23:01:02 +0000 Manifest this update: Sat 06 Dec 2025 23:01:02 +0000 Manifest next update: Sun 07 Dec 2025 23:01:02 +0000 Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: J+OOG0y3pUmBRQGq7YXBKrX+PzYy6J7vIDpcU5QObmM=) 2: neQhSGrd27w6Xn2chZDgwEsCrLI.roa (hash: 1tkSubS/cwYJgj12QwQ+XvFzRT5l/tNW9QOj+Oo5EeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:b3:5e:fa:68:f8:a1:cf:db:5f:e7:c0:9a:eb:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2 Validity Not Before: Dec 6 23:01:02 2025 GMT Not After : Dec 7 23:01:02 2025 GMT Subject: CN=e005fdebf7cffc7d0ed211ec131361402ab77d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:70:e0:0c:72:c2:69:4c:b2:9d:af:ef:60:0f: 1b:12:ee:23:7c:44:30:64:88:87:1c:af:eb:dd:92: 90:6a:3d:a5:11:70:12:e9:04:15:d9:01:c2:75:b7: 90:2e:3d:93:41:07:5c:d3:7f:ef:16:dd:d9:c0:9c: 03:b8:4f:69:03:61:0d:a1:c2:6f:95:3a:5b:a0:65: 64:ef:36:35:25:1c:80:b1:79:73:ee:65:21:86:0a: 54:e5:bd:b9:4b:19:b4:ef:d2:c3:d3:61:c8:16:bb: 57:ac:0d:c5:92:60:a3:94:d9:ea:16:c8:e2:1e:11: eb:0a:73:0c:6d:91:fe:3f:85:fe:d0:f9:6c:58:12: 9b:68:55:c9:cf:cd:2c:30:94:a6:54:23:5f:e7:93: 8b:e0:01:3e:8c:41:17:cc:21:f7:9f:1a:bf:e9:6b: d4:3b:f8:4e:f4:26:e4:49:58:be:90:3e:12:02:31: 6b:24:d5:03:21:f0:ba:99:20:9f:50:34:5b:4e:40: 81:ed:c4:ac:18:e9:df:87:f8:60:c8:4f:f9:25:af: c0:c7:ec:73:e3:37:52:86:fd:5a:75:98:37:e6:f9: 10:2d:1d:08:bf:a3:e0:df:4b:17:45:6e:38:86:e6: f6:f9:b0:14:59:4c:e5:01:80:41:8a:00:12:03:cf: 0d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:05:FD:EB:F7:CF:FC:7D:0E:D2:11:EC:13:13:61:40:2A:B7:7D:41 X509v3 Authority Key Identifier: keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a0:bc:a6:5a:16:b2:ad:f1:b7:90:dc:04:da:7d:b7:fa:f1: bf:f0:e0:a0:4e:9b:d4:ff:7c:4c:0d:6d:66:8e:ea:31:10:c1: 02:29:a6:3a:3f:c9:5e:18:d1:14:29:5b:3a:3f:5c:00:52:73: 81:72:c4:a8:a9:7a:93:49:cb:de:7a:c9:6c:9c:76:c2:42:6f: f6:38:98:4c:81:08:8b:32:11:00:19:92:2c:eb:59:dc:9b:0b: 76:6f:94:39:e5:d9:f8:7e:e5:d5:90:8f:77:c0:fb:ec:be:15: ad:da:e0:96:6a:3b:15:a5:f9:ea:e6:93:99:82:98:df:8e:a1: 70:e7:05:e9:1f:4f:68:01:38:5b:6d:66:0a:83:c2:f2:3c:8d: e6:f1:be:da:4d:c0:1f:da:df:81:bc:82:17:6e:b6:fd:70:d2: bb:b9:2c:03:93:72:d3:ed:42:03:27:77:64:46:2c:12:2a:1a: fa:b1:a8:fa:71:95:fe:36:d3:1a:a8:88:0e:b3:a6:b2:96:a7: 3e:87:60:45:c2:b9:3b:30:31:ba:4a:4a:0b:d6:4b:87:32:8d: 1f:15:05:1b:b5:c5:fb:89:a2:18:df:63:7a:58:3f:06:cf:f1: 06:30:0a:5a:ae:4b:2b:d0:3f:5f:c3:fb:0a:65:85:20:ed:4e: db:63:e4:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15bNe+mj4oc/bX+fAmutdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NWY0MTJhZGIxOGQ0MmZhZGQwYTg1ODczNzE4ZGFkYTkz MWQxYzIwHhcNMjUxMjA2MjMwMTAyWhcNMjUxMjA3MjMwMTAyWjAzMTEwLwYDVQQD EyhlMDA1ZmRlYmY3Y2ZmYzdkMGVkMjExZWMxMzEzNjE0MDJhYjc3ZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHDgDHLCaUyyna/vYA8bEu4jfEQw ZIiHHK/r3ZKQaj2lEXAS6QQV2QHCdbeQLj2TQQdc03/vFt3ZwJwDuE9pA2ENocJv lTpboGVk7zY1JRyAsXlz7mUhhgpU5b25Sxm079LD02HIFrtXrA3FkmCjlNnqFsji HhHrCnMMbZH+P4X+0PlsWBKbaFXJz80sMJSmVCNf55OL4AE+jEEXzCH3nxq/6WvU O/hO9CbkSVi+kD4SAjFrJNUDIfC6mSCfUDRbTkCB7cSsGOnfh/hgyE/5Ja/Ax+xz 4zdShv1adZg35vkQLR0Iv6Pg30sXRW44hub2+bAUWUzlAYBBigASA88N2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAF/ev3z/x9DtIR7BMTYUAqt31BMB8GA1UdIwQY MBaAFIdfQSrbGNQvrdCoWHNxja2pMdHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iODQxY2MtZDY2My00NjMzLTljNDkt MTQ3ZTM4NmMwMTUwLzEvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iODQxY2MtZDY2My00NjMzLTljNDktMTQ3ZTM4NmMwMTUw LzEvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6C8ploW sq3xt5DcBNp9t/rxv/DgoE6b1P98TA1tZo7qMRDBAimmOj/JXhjRFClbOj9cAFJz gXLEqKl6k0nL3nrJbJx2wkJv9jiYTIEIizIRABmSLOtZ3JsLdm+UOeXZ+H7l1ZCP d8D77L4Vrdrglmo7FaX56uaTmYKY346hcOcF6R9PaAE4W21mCoPC8jyN5vG+2k3A H9rfgbyCF262/XDSu7ksA5Ny0+1CAyd3ZEYsEioa+rGo+nGV/jbTGqiIDrOmspan PodgRcK5OzAxukpKC9ZLhzKNHxUFG7XF+4miGN9jelg/Bs/xBjAKWq5LK9A/X8P7 CmWFIO1O22PkPA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:29 2025 by rpki-client