This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json) Hash identifier: f7esNfAC1bCVqNKqaoIYgWJU8M5xueEK+8tJmvdpCew= Subject key identifier: 03:7E:01:AA:43:C3:63:9B:31:93:35:93:92:A9:85:5E:61:9B:67:05 Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce Certificate serial: 019AF19B024C79D18C104CED096D180DFBBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft Manifest number: 06F4 Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: 0Z-rzxBLOWIfSfgExnNziFjknFI.roa (hash: WIPxFrkjwE/aiN3DpBiUfgIiKOHJkBOTh5tGpO+hM/Q=) 2: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: dGmj4XT8EG+sRzWPqD8Dg1qJ1AGx/a7yWO3cSlsUwIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:02:4c:79:d1:8c:10:4c:ed:09:6d:18:0d:fb:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=037e01aa43c3639b3193359392a9855e619b6705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:60:d5:63:cb:b8:fc:39:8b:05:92:e5:56:da: 75:5f:1e:64:c5:f4:08:a4:c1:d2:f9:09:0d:b6:57: 83:80:01:bc:2f:f9:5a:28:a2:d6:28:8e:42:dd:60: 0f:7a:e9:6b:c6:c3:b3:4b:84:7a:0d:80:8e:89:1f: 29:85:ed:22:23:61:2a:c2:9f:71:01:4b:b9:0f:4a: a8:b6:ec:5c:3e:c0:5b:e8:40:9b:af:72:7b:c9:d2: 3f:02:e1:ee:e7:b8:72:9c:c7:b2:a1:bd:67:1f:e2: e6:a7:63:17:0f:b9:8d:97:31:53:06:3a:aa:ea:1c: 27:c2:df:8c:92:e8:61:ad:d7:ef:76:2f:1c:58:68: 95:4f:ab:a3:44:7a:38:ca:9c:5b:a4:2b:4e:e8:8d: 4f:83:d6:ff:c8:b5:5f:0a:24:13:ae:ed:58:41:b7: c3:33:d3:8b:95:b3:93:4b:ce:0a:aa:4f:93:ea:6d: 4c:54:93:31:9c:63:86:25:55:3d:76:fc:70:a1:f6: a1:54:69:f3:46:98:d7:e5:90:90:10:6d:e7:05:44: f6:93:d8:4a:99:5c:51:ea:9e:71:9a:9e:a7:4c:98: 10:44:ff:b6:45:ee:25:60:ff:c9:6b:6f:e3:93:bc: e0:b9:f5:8e:8f:3c:59:05:dd:31:d6:fc:1f:a2:20: d8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7E:01:AA:43:C3:63:9B:31:93:35:93:92:A9:85:5E:61:9B:67:05 X509v3 Authority Key Identifier: keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5b:be:30:9e:c2:49:73:34:ad:4b:74:8c:18:19:64:5d:c6: be:3e:2f:05:60:37:ee:b1:8d:7f:e3:64:2d:38:a9:d8:d6:1b: 3b:1f:3f:9b:80:1f:35:f0:78:43:aa:ba:31:52:43:58:31:ad: d6:a3:44:40:b1:8d:aa:3f:31:e5:7a:44:4d:67:96:9b:25:88: 54:0b:39:b1:12:a1:06:34:05:c2:e8:c5:31:f9:35:3a:49:4c: d2:f5:82:11:54:9d:33:7d:3e:e0:91:4a:21:f6:4c:f1:5a:fd: 56:98:df:02:48:29:61:48:10:3e:56:34:43:d1:4a:76:68:08: c9:70:59:a4:f3:91:1d:91:dc:98:55:c0:5b:3c:cc:62:3e:fa: 42:aa:56:e3:43:2c:04:16:88:f0:2c:de:65:da:18:af:97:17: 50:a1:30:fd:b7:0c:d6:32:89:9e:8e:0e:ca:0d:26:d8:95:c8: af:39:20:11:5b:82:f0:18:9f:6f:2f:31:a1:66:fa:12:88:ce: 36:88:cf:90:d2:e4:b3:4d:54:2f:ea:74:65:92:9d:6d:bb:a1: 73:39:54:4a:ee:12:eb:f7:c0:16:48:13:b3:a8:19:30:75:6a: a9:25:6b:fb:f7:8c:8b:8b:b0:97:b7:cd:21:d9:8e:ee:79:7c: 72:4e:1e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwJMedGMEEztCW0YDfu/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0N2U2MmNiZjVmZWYzMzc3ZjllN2NkNTg1NThmNDRlMmVl YTliY2UwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD EygwMzdlMDFhYTQzYzM2MzliMzE5MzM1OTM5MmE5ODU1ZTYxOWI2NzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mDVY8u4/DmLBZLlVtp1Xx5kxfQI pMHS+QkNtleDgAG8L/laKKLWKI5C3WAPeulrxsOzS4R6DYCOiR8phe0iI2Eqwp9x AUu5D0qotuxcPsBb6ECbr3J7ydI/AuHu57hynMeyob1nH+Lmp2MXD7mNlzFTBjqq 6hwnwt+Mkuhhrdfvdi8cWGiVT6ujRHo4ypxbpCtO6I1Pg9b/yLVfCiQTru1YQbfD M9OLlbOTS84Kqk+T6m1MVJMxnGOGJVU9dvxwofahVGnzRpjX5ZCQEG3nBUT2k9hK mVxR6p5xmp6nTJgQRP+2Re4lYP/Ja2/jk7zgufWOjzxZBd0x1vwfoiDYxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAN+AapDw2ObMZM1k5KphV5hm2cFMB8GA1UdIwQY MBaAFNR+Ysv1/vM3f5581YVY9E4u6pvOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEt NDY5ZDNhNTFkNDdkLzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEtNDY5ZDNhNTFkNDdk LzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlu+MJ7C SXM0rUt0jBgZZF3Gvj4vBWA37rGNf+NkLTip2NYbOx8/m4AfNfB4Q6q6MVJDWDGt 1qNEQLGNqj8x5XpETWeWmyWIVAs5sRKhBjQFwujFMfk1OklM0vWCEVSdM30+4JFK IfZM8Vr9VpjfAkgpYUgQPlY0Q9FKdmgIyXBZpPORHZHcmFXAWzzMYj76QqpW40Ms BBaI8CzeZdoYr5cXUKEw/bcM1jKJno4Oyg0m2JXIrzkgEVuC8Bifby8xoWb6EojO NojPkNLks01UL+p0ZZKdbbuhczlUSu4S6/fAFkgTs6gZMHVqqSVr+/eMi4uwl7fN IdmO7nl8ck4eIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:01 2025 by rpki-client