This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json) Hash identifier: W00BNp8rvMXXh6qStzZEPZlCNPIABWfR+9LhVaZFy14= Subject key identifier: D3:6A:A0:62:75:02:F7:59:C2:9E:FD:6E:8B:F2:03:39:83:E6:6F:A4 Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41 Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941 Certificate serial: 019AF42E0F616F231B7DC6FFD9B35E8B9174 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft Manifest number: 0E54 Signing time: Sat 06 Dec 2025 15:00:50 +0000 Manifest this update: Sat 06 Dec 2025 15:00:50 +0000 Manifest next update: Sun 07 Dec 2025 15:00:50 +0000 Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: 7It2a3iWfN2wR7EX5hirLMsfGcERJXyhGAudOJnC71U=) 2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:0f:61:6f:23:1b:7d:c6:ff:d9:b3:5e:8b:91:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941 Validity Not Before: Dec 6 15:00:50 2025 GMT Not After : Dec 7 15:00:50 2025 GMT Subject: CN=d36aa0627502f759c29efd6e8bf2033983e66fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5b:0e:07:72:e4:02:70:b2:ca:ef:03:33:0c: 13:9d:84:e4:e4:a3:5c:a8:cc:d6:1a:5b:42:5a:19: 9a:50:14:1a:74:5f:45:3e:b8:0a:f5:94:68:62:5c: 39:34:92:78:7e:bc:a1:f2:17:81:94:7f:64:3b:49: b0:c6:10:96:54:2a:a6:58:93:c6:29:ab:89:0d:3e: c9:62:91:c0:e7:0e:85:b9:79:fe:d3:31:a3:88:30: 07:35:6b:95:5a:fe:38:11:8f:26:ee:7e:2d:20:84: cc:ca:ad:ce:72:7d:d6:43:93:69:df:dc:02:bc:2a: 3c:7b:a2:7a:3f:dd:c3:0d:53:93:4d:9f:85:5e:9f: 9a:62:40:02:5b:c7:0d:31:d3:ca:d4:9b:99:10:eb: 3f:f0:38:ca:99:d6:4b:0e:f4:44:af:8d:60:7e:e3: e2:01:15:25:19:47:54:53:9b:ee:39:61:fe:bf:00: 88:e8:2f:f7:8e:46:0a:05:5c:ad:4a:d0:2e:f8:d2: 05:b3:88:02:5d:d9:9f:38:42:3a:50:db:15:65:b2: 94:2e:21:d1:56:1c:21:d5:b5:d1:13:0b:4a:cf:27: 13:52:88:00:a4:ae:e1:08:23:46:d9:b9:68:bf:db: e1:43:2e:52:99:c8:06:73:fa:60:3b:a4:e3:3e:3f: 24:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6A:A0:62:75:02:F7:59:C2:9E:FD:6E:8B:F2:03:39:83:E6:6F:A4 X509v3 Authority Key Identifier: keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:8f:39:01:a1:74:77:0e:74:34:ba:f5:5f:b8:74:22:88:1f: 32:d9:14:27:4b:21:62:6a:43:64:3d:fa:07:ad:9a:db:e7:ee: 0a:43:c9:70:ee:6c:f7:d6:40:4c:46:91:f7:21:38:7d:5a:4e: e1:5b:c5:be:61:84:50:d4:98:6c:0f:d3:6b:87:74:ac:8e:cb: 53:60:06:5c:fe:eb:1f:27:f1:41:c5:22:50:de:ab:8c:32:ba: 4f:e5:22:8e:a1:e0:a5:78:33:c2:d3:d6:57:f3:f5:87:2b:46: 8f:73:98:17:a7:39:98:84:ce:7b:98:a1:40:bc:6b:5a:b7:03: f0:cb:30:fe:ca:da:81:ad:f1:34:ab:ac:d4:28:b6:3d:04:39: ea:68:74:c0:61:0f:35:aa:5d:4f:b1:aa:24:1f:8a:7a:fd:44: 96:aa:8f:1b:5c:28:ea:a8:20:9c:18:17:b7:73:79:f4:74:17: 26:4c:fd:f6:e7:ff:aa:58:d2:6a:28:a7:81:6e:10:e8:b3:39: 14:5f:18:96:59:10:40:97:6e:42:f5:b3:64:83:e8:84:92:e6: e1:39:48:95:cf:09:37:b7:d5:e0:8c:66:e2:2c:19:61:0f:b4: d0:cb:35:e6:13:1d:42:7b:48:48:0d:ea:56:28:e3:cc:08:d0: 57:ed:fd:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lg9hbyMbfcb/2bNei5F0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDU2Y2M1YjdjZTNjMjA3OWY3ODZmZWMxZGZiY2IyNTI0 Mzk5NDEwHhcNMjUxMjA2MTUwMDUwWhcNMjUxMjA3MTUwMDUwWjAzMTEwLwYDVQQD EyhkMzZhYTA2Mjc1MDJmNzU5YzI5ZWZkNmU4YmYyMDMzOTgzZTY2ZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFsOB3LkAnCyyu8DMwwTnYTk5KNc qMzWGltCWhmaUBQadF9FPrgK9ZRoYlw5NJJ4fryh8heBlH9kO0mwxhCWVCqmWJPG KauJDT7JYpHA5w6FuXn+0zGjiDAHNWuVWv44EY8m7n4tIITMyq3Ocn3WQ5Np39wC vCo8e6J6P93DDVOTTZ+FXp+aYkACW8cNMdPK1JuZEOs/8DjKmdZLDvREr41gfuPi ARUlGUdUU5vuOWH+vwCI6C/3jkYKBVytStAu+NIFs4gCXdmfOEI6UNsVZbKULiHR Vhwh1bXREwtKzycTUogApK7hCCNG2blov9vhQy5SmcgGc/pgO6TjPj8kTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNqoGJ1AvdZwp79bovyAzmD5m+kMB8GA1UdIwQY MBaAFB9FbMW3zjwgefeG/sHfvLJSQ5lBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzIt YmQ3ZDM0NTFhYTY2LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzItYmQ3ZDM0NTFhYTY2 LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApY85AaF0 dw50NLr1X7h0IogfMtkUJ0shYmpDZD36B62a2+fuCkPJcO5s99ZATEaR9yE4fVpO 4VvFvmGEUNSYbA/Ta4d0rI7LU2AGXP7rHyfxQcUiUN6rjDK6T+UijqHgpXgzwtPW V/P1hytGj3OYF6c5mITOe5ihQLxrWrcD8Msw/sraga3xNKus1Ci2PQQ56mh0wGEP NapdT7GqJB+Kev1ElqqPG1wo6qggnBgXt3N59HQXJkz99uf/qljSaiingW4Q6LM5 FF8YllkQQJduQvWzZIPohJLm4TlIlc8JN7fV4Ixm4iwZYQ+00Ms15hMdQntISA3q VijjzAjQV+39IQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:31 2025 by rpki-client