This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json) Hash identifier: iSFtYjvum6QU5OBPF87mUeDdjABS7XrXzvdjXpC1gaM= Subject key identifier: 16:E1:32:E9:9D:DB:9E:A4:1C:03:58:9C:21:C6:AF:54:22:A1:B5:52 Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35 Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35 Certificate serial: 019AF3F78B68C0AE4712DF232A6342FF8257 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:01:17 +0000 Manifest this update: Sat 06 Dec 2025 14:01:17 +0000 Manifest next update: Sun 07 Dec 2025 14:01:17 +0000 Files and hashes: 1: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: J+hU2XrSd8HKQDlHY3hq2spmAMBsAL4uUn3uIz4TmHw=) 2: PGC2gjbo2htZQJwYOmeelo5Z83Y.roa (hash: JFulXR+ljWTJG0RiuMIfac488bMeOxp9OF6JRC9SK3k=) 3: kTvVn_B76BHAkt21A667VWLx85c.roa (hash: RlO7Fkyzwvg6DOaLdLA5nagDWX7X86stBqbWJQSamrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:8b:68:c0:ae:47:12:df:23:2a:63:42:ff:82:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35 Validity Not Before: Dec 6 14:01:17 2025 GMT Not After : Dec 7 14:01:17 2025 GMT Subject: CN=16e132e99ddb9ea41c03589c21c6af5422a1b552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e7:30:e5:67:af:f0:9b:45:45:ac:03:41:3f: 9a:99:7f:b0:c0:eb:30:b2:4d:b0:48:a9:68:c0:0c: 37:ec:32:c5:66:b5:4a:99:97:e0:c4:af:96:e8:d2: 0b:4b:ce:e6:64:be:06:27:c2:ed:e1:08:61:14:e7: 31:78:b1:d6:18:16:8a:90:8c:44:24:1e:2a:5d:7b: e4:ec:45:2b:14:d2:0c:4b:6b:9f:7e:52:7a:a1:d9: 60:c2:73:ed:9d:7b:34:60:02:54:e2:a6:ec:1b:cb: 6c:cf:44:d1:70:25:58:d8:87:91:16:60:dc:6b:2e: 86:46:0c:91:47:70:96:63:ec:b8:88:06:65:eb:c6: 3a:c9:a0:10:e0:34:4c:23:6e:ae:41:12:cb:d8:bc: 38:98:5f:da:f1:6f:a0:96:81:39:6d:68:0c:76:31: b7:b7:34:b9:38:06:90:c3:5f:52:4a:17:98:22:f9: e7:22:13:1f:ed:28:a7:fa:30:68:32:0d:d6:5d:a4: f9:e4:3a:9b:2f:7e:4c:e4:3c:03:d5:d2:cb:e5:65: 25:ea:b0:c8:8d:65:31:6f:90:76:30:25:38:a3:0e: 0e:74:ae:52:f1:57:2d:28:aa:6a:03:a5:3e:6b:8d: 1b:e0:b3:ff:8e:7d:82:97:e0:46:91:89:93:91:af: cf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E1:32:E9:9D:DB:9E:A4:1C:03:58:9C:21:C6:AF:54:22:A1:B5:52 X509v3 Authority Key Identifier: keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:73:7d:79:fc:e0:6e:d9:0f:58:e8:22:be:28:0f:c4:a6:5e: 0d:80:8f:92:28:82:1d:82:03:86:a4:7d:9e:10:0d:ef:02:ad: d2:8b:c0:74:38:21:b5:6a:0b:d0:f4:7e:cb:f3:97:e5:2b:8b: c9:c7:2f:a9:26:40:ce:43:56:6a:97:d2:0e:51:6e:46:22:d5: be:d2:78:d6:67:6a:62:bb:ca:ff:81:40:b4:48:dd:3d:c9:9a: a2:e0:a8:9e:0d:d8:20:ad:65:fc:8f:6d:76:10:de:dc:89:39: 10:cb:07:ed:1e:b3:7b:54:04:f5:ab:ca:87:a2:2d:80:78:3d: e0:19:53:cd:5a:97:f0:12:b5:cc:5a:8c:53:22:da:7e:a7:9c: 08:4d:71:0d:ff:df:cd:d8:19:21:da:19:97:6a:26:9f:a3:e9: 1b:80:d0:6b:3f:5c:4a:89:23:25:24:b2:af:e7:b5:84:5e:35: 3e:f0:91:73:03:64:e6:40:08:1f:12:a7:f0:79:d8:2e:12:2d: ad:79:84:06:78:6b:23:53:c2:87:2d:9f:1a:94:b7:7a:39:5c: 8c:58:2f:45:8a:7b:67:43:94:ba:5a:12:ce:5f:cc:80:c8:7b: 37:4a:c2:60:1f:db:ed:ff:ac:38:a0:c0:30:99:f7:12:31:37: 2a:81:4d:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz94towK5HEt8jKmNC/4JXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODk2Y2QzZDhkMWEwNjk5ZGE1MjEwNTVkZmI1OGRjMDZk ZGRmMzUwHhcNMjUxMjA2MTQwMTE3WhcNMjUxMjA3MTQwMTE3WjAzMTEwLwYDVQQD EygxNmUxMzJlOTlkZGI5ZWE0MWMwMzU4OWMyMWM2YWY1NDIyYTFiNTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOcw5Wev8JtFRawDQT+amX+wwOsw sk2wSKlowAw37DLFZrVKmZfgxK+W6NILS87mZL4GJ8Lt4QhhFOcxeLHWGBaKkIxE JB4qXXvk7EUrFNIMS2ufflJ6odlgwnPtnXs0YAJU4qbsG8tsz0TRcCVY2IeRFmDc ay6GRgyRR3CWY+y4iAZl68Y6yaAQ4DRMI26uQRLL2Lw4mF/a8W+gloE5bWgMdjG3 tzS5OAaQw19SSheYIvnnIhMf7Sin+jBoMg3WXaT55DqbL35M5DwD1dLL5WUl6rDI jWUxb5B2MCU4ow4OdK5S8VctKKpqA6U+a40b4LP/jn2Cl+BGkYmTka/PaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbhMumd256kHANYnCHGr1QiobVSMB8GA1UdIwQY MBaAFB+JbNPY0aBpnaUhBV37WNwG3d81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2It YzMzMjc4MjJhMTM4LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2ItYzMzMjc4MjJhMTM4 LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHN9efzg btkPWOgivigPxKZeDYCPkiiCHYIDhqR9nhAN7wKt0ovAdDghtWoL0PR+y/OX5SuL yccvqSZAzkNWapfSDlFuRiLVvtJ41mdqYrvK/4FAtEjdPcmaouCong3YIK1l/I9t dhDe3Ik5EMsH7R6ze1QE9avKh6ItgHg94BlTzVqX8BK1zFqMUyLafqecCE1xDf/f zdgZIdoZl2omn6PpG4DQaz9cSokjJSSyr+e1hF41PvCRcwNk5kAIHxKn8HnYLhIt rXmEBnhrI1PChy2fGpS3ejlcjFgvRYp7Z0OUuloSzl/MgMh7N0rCYB/b7f+sOKDA MJn3EjE3KoFN2g== -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:52 2025 by rpki-client