This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json) Hash identifier: 0u5Kq7xb6xKUsPYhrmHFUmfpdYuwmdTEEuyGZrfBDWA= Subject key identifier: 4D:1C:5D:8F:FA:91:F9:D0:04:F1:9D:B8:BC:3E:86:1C:EA:35:32:2C Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36 Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36 Certificate serial: 019AF49B9EE6EB971BC15B0227CE59A69AD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:00:30 +0000 Manifest this update: Sat 06 Dec 2025 17:00:30 +0000 Manifest next update: Sun 07 Dec 2025 17:00:30 +0000 Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: uYUU7wgtVnkbVkd7ixhCSqmZJGNL3CP2JSrwlYhfUJI=) 2: HUVkGsdlCFOUct2ob4-4pOtlsOM.roa (hash: IfkJT/mKBfcu6BevAktc/69QyZFWwDwWSgoOqzPD22M=) 3: dDCoImKQNrHXyasH5BqbAo27W3o.roa (hash: f48SfVN/nMYwPQ7yDQlyTF9yoojdYsN08X4hTrgTFDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:9e:e6:eb:97:1b:c1:5b:02:27:ce:59:a6:9a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36 Validity Not Before: Dec 6 17:00:30 2025 GMT Not After : Dec 7 17:00:30 2025 GMT Subject: CN=4d1c5d8ffa91f9d004f19db8bc3e861cea35322c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9a:e2:df:ac:93:b3:36:2c:17:d4:24:36:fa: 6f:b4:24:6e:a6:04:30:54:9b:e4:6e:00:0a:40:e6: fe:99:a9:ac:d9:16:3e:af:04:aa:57:57:5a:b9:4d: 20:45:27:ba:a6:56:e2:76:3b:69:5b:fe:1b:29:d2: e7:39:4a:14:61:6c:3d:b0:21:fc:f8:80:5a:a3:65: 2e:af:97:d0:2f:84:ea:f9:ae:9d:7e:5a:e8:03:af: 2d:d1:09:7d:e1:f6:d4:a0:b8:6d:1b:90:db:d3:0e: 92:fa:36:6e:fa:b6:1c:1b:58:ab:eb:68:cc:1d:df: f6:46:aa:38:08:9e:2c:b0:20:b6:80:af:fd:f8:77: 8b:a6:a2:20:84:b2:8b:79:91:cf:4f:b9:f8:d6:b1: bf:34:ef:77:33:0c:12:88:16:13:34:7e:7d:ca:73: ff:04:84:e3:4b:5f:69:eb:1d:fd:bb:10:0b:53:34: 12:38:28:7d:77:ed:51:d8:c8:97:0b:af:70:a6:ff: b9:2e:cc:b1:ff:cd:02:71:41:db:9b:69:8d:15:23: 13:92:f6:55:7d:78:4f:86:a9:8d:a0:11:3a:0f:b2: 1f:27:0b:c4:5d:2a:0e:c9:12:b1:c8:e1:e8:60:be: da:4e:ef:56:ab:1e:e3:1a:9b:96:d6:64:9b:ff:b1: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1C:5D:8F:FA:91:F9:D0:04:F1:9D:B8:BC:3E:86:1C:EA:35:32:2C X509v3 Authority Key Identifier: keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c3:7b:c1:1f:15:96:28:fd:25:dd:79:fa:5a:e6:5b:62:b8: 90:3f:d0:30:13:12:6d:24:b3:1a:d0:c0:11:c7:ba:5f:ac:86: 0e:96:96:b3:1f:30:c2:67:a8:fb:c1:21:65:0c:3b:ca:01:e9: 13:a5:e8:8a:26:24:f7:fb:d7:3a:9e:a7:bd:43:e6:92:ec:81: df:f7:da:d3:ab:47:6e:95:f9:66:05:51:b2:e7:b7:84:17:e6: c9:cd:10:7f:7f:60:ca:5a:b5:af:8f:ca:d4:be:aa:a7:06:b2: 83:d6:c8:23:2d:d2:a1:e6:8c:8c:b0:6c:34:51:fe:39:e7:f0: cd:3e:15:99:47:b2:61:75:70:71:a6:35:1a:26:03:3f:50:7a: ae:4f:c7:78:a5:74:a3:25:a4:69:ff:ed:68:68:20:0c:92:03: 3c:96:6c:f3:36:f1:0c:13:4d:db:9f:23:93:b5:82:75:2e:31: dd:1b:49:8c:5b:ba:79:82:dc:30:36:98:ab:e6:b7:2f:40:a6: f2:ee:5e:6b:e7:a0:7f:13:0c:e3:f9:53:d4:88:b4:83:2b:8c: 50:45:37:a7:11:1a:be:ae:0c:3f:36:1e:4f:3b:67:5f:2d:88: ad:0a:af:5b:07:f7:16:26:f6:57:d5:ee:44:5c:da:6d:95:6b: 51:cb:9d:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m57m65cbwVsCJ85ZpprSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNWNmNmQxMjBlMjgxMzhiMGFhMmZjODNjYmE5YjBlOTY3 OTZjMzYwHhcNMjUxMjA2MTcwMDMwWhcNMjUxMjA3MTcwMDMwWjAzMTEwLwYDVQQD Eyg0ZDFjNWQ4ZmZhOTFmOWQwMDRmMTlkYjhiYzNlODYxY2VhMzUzMjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJri36yTszYsF9QkNvpvtCRupgQw VJvkbgAKQOb+mams2RY+rwSqV1dauU0gRSe6plbidjtpW/4bKdLnOUoUYWw9sCH8 +IBao2Uur5fQL4Tq+a6dflroA68t0Ql94fbUoLhtG5Db0w6S+jZu+rYcG1ir62jM Hd/2Rqo4CJ4ssCC2gK/9+HeLpqIghLKLeZHPT7n41rG/NO93MwwSiBYTNH59ynP/ BITjS19p6x39uxALUzQSOCh9d+1R2MiXC69wpv+5Lsyx/80CcUHbm2mNFSMTkvZV fXhPhqmNoBE6D7IfJwvEXSoOyRKxyOHoYL7aTu9Wqx7jGpuW1mSb/7HhIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0cXY/6kfnQBPGduLw+hhzqNTIsMB8GA1UdIwQY MBaAFB9c9tEg4oE4sKovyDy6mw6WeWw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wMGU4ZTEtYzIzNS00OWE5LTlmOTIt NjM4MzFhZTk1MWVmLzEvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wMGU4ZTEtYzIzNS00OWE5LTlmOTItNjM4MzFhZTk1MWVm LzEvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsN7wR8V lij9Jd15+lrmW2K4kD/QMBMSbSSzGtDAEce6X6yGDpaWsx8wwmeo+8EhZQw7ygHp E6XoiiYk9/vXOp6nvUPmkuyB3/fa06tHbpX5ZgVRsue3hBfmyc0Qf39gylq1r4/K 1L6qpwayg9bIIy3SoeaMjLBsNFH+OefwzT4VmUeyYXVwcaY1GiYDP1B6rk/HeKV0 oyWkaf/taGggDJIDPJZs8zbxDBNN258jk7WCdS4x3RtJjFu6eYLcMDaYq+a3L0Cm 8u5ea+egfxMM4/lT1Ii0gyuMUEU3pxEavq4MPzYeTztnXy2IrQqvWwf3Fib2V9Xu RFzabZVrUcudaA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:04 2025 by rpki-client