This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json) Hash identifier: ylspHC7oHdGNqgpGSpx8Q8KgSCCLrwYGYQcQuw5PTD0= Subject key identifier: 4E:AF:1A:E0:AC:23:54:EB:61:4A:82:9B:17:B6:8E:5C:1A:F4:27:48 Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13 Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713 Certificate serial: 019B360E5A386F2FAC857E6691335D2E9708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft Manifest number: 0601 Signing time: Fri 19 Dec 2025 10:01:08 +0000 Manifest this update: Fri 19 Dec 2025 10:01:08 +0000 Manifest next update: Sat 20 Dec 2025 10:01:08 +0000 Files and hashes: 1: 2IUVrUcX57wEcebuPBNhbM7rtII.roa (hash: xFARryMWCZ7xJebZzJ48q6NyTNbF+EONupkOj48G4Zc=) 2: 3mgL5kmPTE1KzgmolBjYNrOCQw4.roa (hash: 4p0hGsG00DucWMHppeS8f+vIw114RVg7ok5Btqh+zyQ=) 3: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: P68+GnwLJIJpsENtsD29fMKOUfx2xykBgttC2a3/aog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:5a:38:6f:2f:ac:85:7e:66:91:33:5d:2e:97:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713 Validity Not Before: Dec 19 10:01:08 2025 GMT Not After : Dec 20 10:01:08 2025 GMT Subject: CN=4eaf1ae0ac2354eb614a829b17b68e5c1af42748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0a:88:22:7b:16:73:4d:e8:46:52:00:ff:c8: d3:18:df:dc:9a:61:bc:91:1f:05:24:ac:42:a7:ae: 21:61:61:3d:7e:c2:c0:59:b8:01:42:06:5c:eb:ec: cb:31:33:fc:cd:46:d1:1f:12:0e:ca:e9:75:84:79: 38:11:69:e7:29:eb:74:4b:ce:03:54:e9:2f:88:ee: 25:eb:64:c9:65:43:d7:de:d4:07:fc:f0:29:c9:73: 70:b0:2f:c9:0c:0d:84:95:82:5d:04:5f:3d:a3:e6: d4:60:db:01:3f:cb:31:34:2b:85:e7:55:9a:6e:2d: 3e:b9:dc:c2:1e:1a:d6:c4:bf:48:ee:a7:80:a3:5a: 07:63:94:70:f9:44:5c:e6:13:79:1c:a5:d8:3d:77: 79:17:a7:13:d4:24:95:48:5f:b1:7d:40:b7:92:77: dd:2e:e9:3f:85:36:8c:41:7b:d6:f9:15:9a:56:08: 01:23:18:c2:47:be:de:66:1e:43:74:60:ba:69:a1: a9:41:06:c8:07:51:86:1e:2a:81:4a:d4:31:28:b9: fa:f9:3e:99:7b:44:02:2a:61:72:29:ec:38:e8:a8: 8f:dd:1b:3a:92:1b:80:bc:da:5f:be:43:17:3b:49: 28:1d:71:a0:07:7e:46:4d:5b:54:2b:35:b4:6d:7d: bb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AF:1A:E0:AC:23:54:EB:61:4A:82:9B:17:B6:8E:5C:1A:F4:27:48 X509v3 Authority Key Identifier: keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:6b:35:73:a0:e4:a8:8c:87:87:9a:b0:7e:9a:fd:fb:c6:ed: 5d:b5:f1:16:cd:6a:91:1a:5a:07:3c:d9:ac:4b:92:5a:e0:a3: ba:17:4f:6f:77:26:57:ef:4c:7b:2a:d2:e9:d3:6a:98:45:f0: fc:01:d6:c1:b8:25:23:75:aa:7a:1c:5b:f2:f1:24:62:e0:48: 38:cd:26:f3:1b:62:c1:b2:3d:c4:94:e9:c3:19:3e:12:4c:91: 1f:2a:d5:99:44:21:b7:d6:f2:d6:ec:dd:ae:dd:4f:b5:a7:a9: 64:c2:81:a9:8a:14:a3:70:4c:da:b2:3f:c9:2e:c0:f9:19:4a: 2f:78:4b:bb:53:96:dd:3d:ec:00:91:44:74:e5:ad:c9:98:b9: 5d:d9:44:e0:e9:bf:4b:a5:90:63:a2:96:4d:7d:c0:0f:a2:81: 56:ce:d6:ee:ae:47:20:0b:83:4e:56:54:80:e9:95:1e:d8:93: b8:01:ba:e8:e3:0e:4f:4d:60:49:f5:58:fb:00:c7:63:df:01: ad:e4:e6:82:e7:64:04:a1:b1:db:32:20:2d:1f:bf:48:03:ac: 4f:1f:69:2c:5f:ed:9d:2d:fb:bf:51:f0:85:b6:90:37:a8:7c: f4:3d:f3:31:23:a3:ae:b5:e8:cd:45:63:6f:d2:32:88:64:2e: c6:4c:66:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2Dlo4by+shX5mkTNdLpcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlY2I5YmQ1ZWQ5NmU2OWRkYThmYzJhMWZlMDIxNDdhZGFl OGY3MTMwHhcNMjUxMjE5MTAwMTA4WhcNMjUxMjIwMTAwMTA4WjAzMTEwLwYDVQQD Eyg0ZWFmMWFlMGFjMjM1NGViNjE0YTgyOWIxN2I2OGU1YzFhZjQyNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgqIInsWc03oRlIA/8jTGN/cmmG8 kR8FJKxCp64hYWE9fsLAWbgBQgZc6+zLMTP8zUbRHxIOyul1hHk4EWnnKet0S84D VOkviO4l62TJZUPX3tQH/PApyXNwsC/JDA2ElYJdBF89o+bUYNsBP8sxNCuF51Wa bi0+udzCHhrWxL9I7qeAo1oHY5Rw+URc5hN5HKXYPXd5F6cT1CSVSF+xfUC3knfd Luk/hTaMQXvW+RWaVggBIxjCR77eZh5DdGC6aaGpQQbIB1GGHiqBStQxKLn6+T6Z e0QCKmFyKew46KiP3Rs6khuAvNpfvkMXO0koHXGgB35GTVtUKzW0bX27aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6vGuCsI1TrYUqCmxe2jlwa9CdIMB8GA1UdIwQY MBaAFB7Lm9Xtluad2o/Cof4CFHra6PcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHN1YjFlMlc1cDNhajhLaF9nSVVldHJvOXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jMzQxNTAtNTkxMi00OTBjLWIzNWIt ZjU0ZmJmNjkxN2JjLzEvSHN1YjFlMlc1cDNhajhLaF9nSVVldHJvOXhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9jMzQxNTAtNTkxMi00OTBjLWIzNWItZjU0ZmJmNjkxN2Jj LzEvSHN1YjFlMlc1cDNhajhLaF9nSVVldHJvOXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGs1c6Dk qIyHh5qwfpr9+8btXbXxFs1qkRpaBzzZrEuSWuCjuhdPb3cmV+9MeyrS6dNqmEXw /AHWwbglI3Wqehxb8vEkYuBIOM0m8xtiwbI9xJTpwxk+EkyRHyrVmUQht9by1uzd rt1PtaepZMKBqYoUo3BM2rI/yS7A+RlKL3hLu1OW3T3sAJFEdOWtyZi5XdlE4Om/ S6WQY6KWTX3AD6KBVs7W7q5HIAuDTlZUgOmVHtiTuAG66OMOT01gSfVY+wDHY98B reTmgudkBKGx2zIgLR+/SAOsTx9pLF/tnS37v1HwhbaQN6h89D3zMSOjrrXozUVj b9IyiGQuxkxmgw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:29:13 2025 by rpki-client