This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json) Hash identifier: E0GSLQn3Iw8kZL4kT5chak99ybTh2HK53NSzTnF+eA4= Subject key identifier: 9F:33:8A:3C:E8:C4:6D:BF:7D:10:D1:73:D9:85:83:40:FD:06:5D:0D Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d Certificate serial: 019AF49BDBB49391AE6B8D724DE821E9C4B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft Manifest number: 14B0 Signing time: Sat 06 Dec 2025 17:00:46 +0000 Manifest this update: Sat 06 Dec 2025 17:00:46 +0000 Manifest next update: Sun 07 Dec 2025 17:00:46 +0000 Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: nsezU6XEE/iVJeHTo9+oWgKcZ+SUgHwWvrozLId2dNo=) 2: HtyuFwumqnKPMziahbUKFS0HWi4.roa (hash: +Ry2R7+vd5notaRsVNHJudJevoZS3UrzytB191N2Lxg=) 3: J_BkHOkhHT0AEp-6tEsjYFw6hs0.roa (hash: JAS00/5XA38hVRagh+vY9Urvk5gt+2KkIUuPK6DqVFc=) 4: nPGwQCzaguMv6zj3Fc1otRQL65Y.roa (hash: 8JiUrMWy4jhS7VoztMhcDmEoQ8qVt8FQ/VbezbbM4z4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:db:b4:93:91:ae:6b:8d:72:4d:e8:21:e9:c4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d Validity Not Before: Dec 6 17:00:46 2025 GMT Not After : Dec 7 17:00:46 2025 GMT Subject: CN=9f338a3ce8c46dbf7d10d173d9858340fd065d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5f:b3:cb:5b:85:39:d5:c0:6c:70:17:2a:5d: 32:30:86:8b:5f:d9:76:11:6a:cf:5d:d5:b1:1e:14: 44:31:7b:15:99:0a:bf:16:b5:74:7b:12:bf:97:df: 1b:e2:2f:3d:74:cc:a6:b1:b4:b4:93:44:73:36:55: 58:57:8f:58:76:3a:04:18:c6:4d:33:67:9d:79:bd: 2f:39:7f:04:84:5c:27:79:7a:8a:85:ed:ea:d9:27: bf:24:3e:9c:4d:92:fc:89:d0:55:1d:53:28:34:8e: c1:88:98:01:c7:6a:d7:02:21:20:82:09:14:86:ae: cb:1a:14:c6:37:e9:00:cd:6a:78:06:16:0c:bd:bc: 2b:c6:4b:27:52:a2:9d:5e:b2:8e:9f:d5:7a:2c:f0: 4e:fa:0a:75:87:d5:12:dc:3b:e1:c3:2c:5e:e1:76: aa:09:60:12:d2:a6:ff:17:29:22:4e:04:89:df:12: 00:29:78:94:3d:f5:cc:c6:e6:f2:eb:16:0c:50:d4: 9c:ba:3c:64:95:58:f0:ee:16:52:55:51:ea:93:56: f6:8f:b1:ec:27:07:1e:ad:f7:2a:c6:dc:82:61:4d: b6:8b:9f:b8:f1:35:26:f3:87:af:0a:f3:2f:0c:34: 58:2c:47:a7:89:db:18:3c:5f:bc:87:f5:ad:7f:b6: 71:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:33:8A:3C:E8:C4:6D:BF:7D:10:D1:73:D9:85:83:40:FD:06:5D:0D X509v3 Authority Key Identifier: keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:87:e5:79:a7:1d:6e:43:d1:af:65:79:03:41:2f:fb:c3:27: bc:a2:6a:2a:2f:62:32:34:b7:6a:3c:93:dd:b2:46:39:2c:a6: e1:62:22:0f:c2:f3:82:02:f1:65:9a:12:f9:c5:07:4c:8e:91: c7:49:75:b9:9f:f2:fe:5e:56:2d:75:00:ff:14:98:1d:9a:e3: 06:16:6e:0f:c5:3e:cc:cb:45:2f:ea:c0:fe:9f:a2:45:1d:ef: 04:fb:42:a1:6c:d2:99:8c:c2:89:0c:46:62:c4:20:e1:f7:cf: fb:af:10:b2:f4:ce:8d:3e:de:f7:fe:a4:a5:e2:5e:68:71:63: 6e:17:c6:51:60:a8:56:bb:97:5e:f1:a9:c4:ce:d8:24:e1:3e: f4:47:f9:6f:00:7a:af:d8:2b:de:2b:3f:58:13:48:ff:39:1f: e9:4a:ec:af:2a:4b:82:a9:44:96:f8:ef:aa:62:37:f1:02:d8: 45:2f:ee:c1:ef:60:9d:16:9a:45:bf:16:10:8a:8a:7b:2c:be: 12:fa:1c:e8:73:d7:12:2d:a6:d2:4a:fd:d7:8b:25:81:09:4c: 36:20:ea:a9:83:01:0b:cd:e3:16:80:a0:0d:92:5f:33:79:f9: 6d:0b:c8:19:4e:fd:2d:97:42:a0:f6:99:df:38:d1:a0:db:53: e6:37:1a:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9u0k5Gua41yTegh6cS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZDFjZDQ3YTUzZWY1N2ViYjU2N2JjODgyYWQyOTg2ZmFh YzVmMGQwHhcNMjUxMjA2MTcwMDQ2WhcNMjUxMjA3MTcwMDQ2WjAzMTEwLwYDVQQD Eyg5ZjMzOGEzY2U4YzQ2ZGJmN2QxMGQxNzNkOTg1ODM0MGZkMDY1ZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV+zy1uFOdXAbHAXKl0yMIaLX9l2 EWrPXdWxHhREMXsVmQq/FrV0exK/l98b4i89dMymsbS0k0RzNlVYV49YdjoEGMZN M2edeb0vOX8EhFwneXqKhe3q2Se/JD6cTZL8idBVHVMoNI7BiJgBx2rXAiEgggkU hq7LGhTGN+kAzWp4BhYMvbwrxksnUqKdXrKOn9V6LPBO+gp1h9US3Dvhwyxe4Xaq CWAS0qb/FykiTgSJ3xIAKXiUPfXMxuby6xYMUNScujxklVjw7hZSVVHqk1b2j7Hs JwcerfcqxtyCYU22i5+48TUm84evCvMvDDRYLEenidsYPF+8h/Wtf7ZxkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8zijzoxG2/fRDRc9mFg0D9Bl0NMB8GA1UdIwQY MBaAFNXRzUelPvV+u1Z7yIKtKYb6rF8NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84NjE5NTMtNWY2NS00NDY1LTkwNDYt ZjRkMDcxZjUwZjFkLzEvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84NjE5NTMtNWY2NS00NDY1LTkwNDYtZjRkMDcxZjUwZjFk LzEvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYfleacd bkPRr2V5A0Ev+8MnvKJqKi9iMjS3ajyT3bJGOSym4WIiD8LzggLxZZoS+cUHTI6R x0l1uZ/y/l5WLXUA/xSYHZrjBhZuD8U+zMtFL+rA/p+iRR3vBPtCoWzSmYzCiQxG YsQg4ffP+68QsvTOjT7e9/6kpeJeaHFjbhfGUWCoVruXXvGpxM7YJOE+9Ef5bwB6 r9gr3is/WBNI/zkf6UrsrypLgqlElvjvqmI38QLYRS/uwe9gnRaaRb8WEIqKeyy+ Evoc6HPXEi2m0kr914slgQlMNiDqqYMBC83jFoCgDZJfM3n5bQvIGU79LZdCoPaZ 3zjRoNtT5jcalw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:00 2025 by rpki-client