This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft File: H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json) Hash identifier: PZfmWipWU5B7hyLFeOM2AH4x4/QEqBlXBF52iNflwAo= Subject key identifier: 29:94:53:E3:C9:E3:28:45:F7:B4:5F:2D:42:30:84:32:C2:E6:F7:3E Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E Certificate issuer: /CN=1f482e5e412c1debb776dedfaf45c33174e7642e Certificate serial: 019AF5AE94AABD8A7471C5ADD618A30834EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft Manifest number: 05AE Signing time: Sat 06 Dec 2025 22:00:50 +0000 Manifest this update: Sat 06 Dec 2025 22:00:50 +0000 Manifest next update: Sun 07 Dec 2025 22:00:50 +0000 Files and hashes: 1: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: KWSPRgk/8dfs85XSGlUd37y5e6qLUmas28l6/bgeHE8=) 2: StsIBWXPkUmDPSa1M3nyv0UDUR4.roa (hash: rqGYqeTGV9tyOvnudhslVeQEEchE0GwN6rysMNZqs1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:94:aa:bd:8a:74:71:c5:ad:d6:18:a3:08:34:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e Validity Not Before: Dec 6 22:00:50 2025 GMT Not After : Dec 7 22:00:50 2025 GMT Subject: CN=299453e3c9e32845f7b45f2d42308432c2e6f73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4f:bf:f8:3e:b9:9f:2b:b5:59:b2:20:58:d4: 30:15:94:50:cc:3b:07:fa:bb:db:52:f6:8b:b4:7d: 75:3e:f8:5e:29:0a:04:9d:12:b3:99:ce:9e:61:0b: c6:64:f6:c5:98:27:16:b5:da:84:ed:22:79:c4:d3: 36:08:9b:10:a4:07:da:13:9a:36:63:e1:63:a7:9d: 65:90:ec:6f:44:ac:60:eb:5a:46:f0:0d:30:99:fe: 6b:4e:42:7d:67:40:d3:7f:14:48:ab:58:8e:7a:d9: 29:7a:f7:88:86:b8:84:1f:0c:a7:fc:5a:f7:25:05: 99:84:37:3c:1e:43:0c:67:fa:69:01:2f:80:41:4c: 87:4d:33:8c:c3:d5:bf:3e:61:bf:fe:43:27:ef:5a: 71:83:cc:dd:13:e4:ca:e2:86:64:a3:a8:08:9e:53: b1:0e:a7:ea:4e:b6:72:f7:d1:e0:e1:28:92:34:26: ea:67:9f:74:de:4b:de:18:00:b3:46:b6:39:da:e6: 7e:14:01:dc:4c:70:49:f5:a1:2d:50:71:81:63:c0: db:65:59:14:9f:e9:ce:60:6f:5d:a8:a0:1d:f0:9d: fe:09:87:7b:f5:fb:b6:e7:e3:a9:f9:80:2e:74:ba: 54:75:47:f8:13:74:8e:97:d0:6a:1a:2d:80:bc:29: 50:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:94:53:E3:C9:E3:28:45:F7:B4:5F:2D:42:30:84:32:C2:E6:F7:3E X509v3 Authority Key Identifier: keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:17:9a:e2:05:36:84:3a:68:bf:db:26:d9:f9:8c:9a:6e:99: ee:08:9a:7a:17:a5:c8:57:43:ec:73:0d:5f:bc:78:2f:64:a7: df:6b:b2:21:ee:d2:39:98:c1:1e:6b:da:0e:61:e4:85:ad:06: 05:d4:54:4a:9f:c4:af:05:f2:b3:8c:13:c6:a2:f3:8a:56:43: 68:54:81:bd:ac:ab:61:9a:fc:1d:af:02:12:e6:fc:17:33:71: 87:7f:29:b6:3d:b6:cd:80:2a:8b:72:f4:b3:dc:79:be:4b:95: 95:e8:fe:0d:17:34:ab:9a:41:5b:44:f0:47:89:77:2d:48:a7: d4:84:fc:4c:11:0b:d2:d7:e1:de:b0:03:57:5e:9a:12:ad:15: 78:81:e0:d0:bb:a0:93:b1:06:34:75:77:93:97:f5:10:31:28: 89:1b:9c:12:0b:53:ed:19:d0:6f:93:c3:72:35:f7:dc:42:04: c4:a4:ef:40:a9:50:01:bd:df:8b:a3:10:ec:3b:81:eb:bd:8c: ab:1a:d5:47:4e:b8:ea:0c:99:8a:44:40:e9:52:de:ec:25:9f: 0c:23:b6:f9:15:c8:ce:05:c2:fc:fe:3d:12:14:2a:15:24:9c: 39:d8:5b:62:6e:27:48:41:48:ba:45:80:82:8f:ac:e7:0b:db: e9:b3:61:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rpSqvYp0ccWt1hijCDTvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDgyZTVlNDEyYzFkZWJiNzc2ZGVkZmFmNDVjMzMxNzRl NzY0MmUwHhcNMjUxMjA2MjIwMDUwWhcNMjUxMjA3MjIwMDUwWjAzMTEwLwYDVQQD EygyOTk0NTNlM2M5ZTMyODQ1ZjdiNDVmMmQ0MjMwODQzMmMyZTZmNzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E+/+D65nyu1WbIgWNQwFZRQzDsH +rvbUvaLtH11PvheKQoEnRKzmc6eYQvGZPbFmCcWtdqE7SJ5xNM2CJsQpAfaE5o2 Y+Fjp51lkOxvRKxg61pG8A0wmf5rTkJ9Z0DTfxRIq1iOetkpeveIhriEHwyn/Fr3 JQWZhDc8HkMMZ/ppAS+AQUyHTTOMw9W/PmG//kMn71pxg8zdE+TK4oZko6gInlOx DqfqTrZy99Hg4SiSNCbqZ5903kveGACzRrY52uZ+FAHcTHBJ9aEtUHGBY8DbZVkU n+nOYG9dqKAd8J3+CYd79fu25+Op+YAudLpUdUf4E3SOl9BqGi2AvClQOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmUU+PJ4yhF97RfLUIwhDLC5vc+MB8GA1UdIwQY MBaAFB9ILl5BLB3rt3be369FwzF052QuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83ZGRlOTYtMTBkZC00MzIzLTgxZDIt ZDJlMzM3MmFjMjljLzEvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83ZGRlOTYtMTBkZC00MzIzLTgxZDItZDJlMzM3MmFjMjlj LzEvSDBndVhrRXNIZXUzZHQ3ZnIwWERNWFRuWkM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxea4gU2 hDpov9sm2fmMmm6Z7giaehelyFdD7HMNX7x4L2Sn32uyIe7SOZjBHmvaDmHkha0G BdRUSp/ErwXys4wTxqLzilZDaFSBvayrYZr8Ha8CEub8FzNxh38ptj22zYAqi3L0 s9x5vkuVlej+DRc0q5pBW0TwR4l3LUin1IT8TBEL0tfh3rADV16aEq0VeIHg0Lug k7EGNHV3k5f1EDEoiRucEgtT7RnQb5PDcjX33EIExKTvQKlQAb3fi6MQ7DuB672M qxrVR0646gyZikRA6VLe7CWfDCO2+RXIzgXC/P49EhQqFSScOdhbYm4nSEFIukWA go+s5wvb6bNh/w== -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:09 2025 by rpki-client