This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft File: H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json) Hash identifier: e/QERBrI2DbgyMjijAeiU8aCZE0ULMvCO293PDEuIFE= Subject key identifier: 5D:AB:AB:3C:A7:5C:FE:BC:36:71:E8:10:25:DC:AB:53:01:78:71:DA Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f Certificate serial: 019AF389FE37947DB1A7BA8FD7C570A942F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:01:38 +0000 Manifest this update: Sat 06 Dec 2025 12:01:38 +0000 Manifest next update: Sun 07 Dec 2025 12:01:38 +0000 Files and hashes: 1: 1YHm_89mdmO3B6rQNuElV51RHnc.roa (hash: MnfHwqRrOYbX1ON7yZ7M8gI0u2brRrZRizU4+uQlZVo=) 2: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: rwr+UKsnYNQxQm2YqQcB14bJv7myv4IQO9c2CjZ47S8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:fe:37:94:7d:b1:a7:ba:8f:d7:c5:70:a9:42:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f Validity Not Before: Dec 6 12:01:38 2025 GMT Not After : Dec 7 12:01:38 2025 GMT Subject: CN=5dabab3ca75cfebc3671e81025dcab53017871da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:e8:eb:41:d6:62:e7:8d:e3:6f:16:99:c2: 43:ec:7b:00:0c:16:28:27:08:24:be:cc:7c:d8:d0: 7a:3e:5a:e6:70:70:ca:6a:9f:91:c9:aa:12:34:39: 7b:c6:9c:65:23:23:06:d0:0a:51:3a:d9:48:15:e4: ba:3b:2a:78:d4:c5:0e:2f:45:7a:89:b9:12:b2:2f: 06:e8:13:07:f2:c8:d6:89:04:04:0e:79:7e:dc:c3: ae:fd:38:ef:9c:f9:2d:c3:4b:95:7d:2e:01:0a:5a: 63:0f:39:27:7c:95:e8:58:3b:81:b7:d5:c8:82:4a: c4:d3:28:a8:fc:29:f6:51:e9:a8:49:8a:03:99:8f: a1:3a:0c:d0:1c:a5:a2:a6:14:5b:1c:49:5c:00:cf: 51:0a:54:11:12:07:70:5f:dc:1e:fc:ee:35:83:b8: 26:4b:05:af:a4:f9:44:bd:bf:b6:80:70:20:7a:a3: a5:56:37:8e:58:1e:cb:bd:31:6d:e0:9b:28:45:4e: 3a:df:52:d0:9d:83:e9:61:04:12:b9:fc:ec:5f:f0: ef:3c:ab:9c:31:36:2a:b8:c2:06:b6:fa:f2:d9:54: a0:a8:5e:47:0c:1e:07:c4:e9:f8:80:62:ab:c8:51: c4:7d:7d:9f:3d:52:01:d9:8e:01:01:dd:b5:fb:64: 10:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AB:AB:3C:A7:5C:FE:BC:36:71:E8:10:25:DC:AB:53:01:78:71:DA X509v3 Authority Key Identifier: keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5f:56:44:6a:75:50:1d:37:44:15:b3:87:6c:05:69:45:35: 0a:b4:80:43:bf:b1:d2:c4:67:e6:e7:f4:63:e9:ac:77:3b:2d: 65:92:5d:bb:c6:46:4e:e4:b1:d8:76:4b:86:55:89:e8:64:cf: 5f:3d:06:58:5f:c9:06:c0:ac:cf:bb:cf:3d:bc:3b:04:4a:2a: c4:dc:b1:8e:4f:c1:ea:71:6e:25:9e:8b:13:55:e4:cc:4e:70: 5f:6a:b9:5a:ed:e9:bc:71:4c:92:d2:b5:4d:ca:2d:8c:63:c0: 94:ae:43:f1:62:16:75:ce:9c:e7:16:03:3a:3c:ed:dd:59:5a: ad:8f:1d:66:5f:62:7f:67:c1:63:82:5f:f5:db:72:fb:7d:86: 94:0f:bd:92:5a:6f:79:d6:24:b8:9a:7e:e5:26:fb:c4:36:02: 92:13:d0:81:e2:31:40:3a:7b:c6:37:56:ac:58:dc:8a:67:bf: 74:d4:f8:cd:c5:89:0a:eb:2a:6c:08:3f:8c:65:73:28:6b:e7: df:01:55:2f:e7:64:c8:63:e5:f0:33:f6:31:02:4d:11:53:2b: 7b:92:4c:59:b3:66:57:3c:8d:c6:2e:1d:ee:fc:b6:fc:67:e9: 4b:61:b2:2a:15:0f:c1:46:10:cc:51:4c:55:0a:db:4a:5d:4b: 6b:af:7c:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzif43lH2xp7qP18VwqUL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNTA0YjFiYjcxNjhlNjgwYjE5NTQyZjhmNzMwMzg2MTQ0 YzhhNWYwHhcNMjUxMjA2MTIwMTM4WhcNMjUxMjA3MTIwMTM4WjAzMTEwLwYDVQQD Eyg1ZGFiYWIzY2E3NWNmZWJjMzY3MWU4MTAyNWRjYWI1MzAxNzg3MWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszLo60HWYueN428WmcJD7HsADBYo Jwgkvsx82NB6PlrmcHDKap+RyaoSNDl7xpxlIyMG0ApROtlIFeS6Oyp41MUOL0V6 ibkSsi8G6BMH8sjWiQQEDnl+3MOu/TjvnPktw0uVfS4BClpjDzknfJXoWDuBt9XI gkrE0yio/Cn2UemoSYoDmY+hOgzQHKWiphRbHElcAM9RClQREgdwX9we/O41g7gm SwWvpPlEvb+2gHAgeqOlVjeOWB7LvTFt4JsoRU4631LQnYPpYQQSufzsX/DvPKuc MTYquMIGtvry2VSgqF5HDB4HxOn4gGKryFHEfX2fPVIB2Y4BAd21+2QQpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2rqzynXP68NnHoECXcq1MBeHHaMB8GA1UdIwQY MBaAFB9QSxu3Fo5oCxlUL49zA4YUTIpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYt MzViYjYwZWEwN2MxLzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYtMzViYjYwZWEwN2Mx LzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC19WRGp1 UB03RBWzh2wFaUU1CrSAQ7+x0sRn5uf0Y+msdzstZZJdu8ZGTuSx2HZLhlWJ6GTP Xz0GWF/JBsCsz7vPPbw7BEoqxNyxjk/B6nFuJZ6LE1XkzE5wX2q5Wu3pvHFMktK1 TcotjGPAlK5D8WIWdc6c5xYDOjzt3VlarY8dZl9if2fBY4Jf9dty+32GlA+9klpv edYkuJp+5Sb7xDYCkhPQgeIxQDp7xjdWrFjcime/dNT4zcWJCusqbAg/jGVzKGvn 3wFVL+dkyGPl8DP2MQJNEVMre5JMWbNmVzyNxi4d7vy2/GfpS2GyKhUPwUYQzFFM VQrbSl1La698Mg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:04 2025 by rpki-client