This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json) Hash identifier: kAjXlz6T1//Ax6diy8DfHorMB9FFXWeO9MSf+ys+RMQ= Subject key identifier: 3A:7B:B8:45:3B:29:AA:54:84:B4:CC:68:8C:9D:E6:04:25:0C:2E:72 Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3 Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3 Certificate serial: 019AF389810E00050F33E95D0D2325166F8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft Manifest number: 88 Signing time: Sat 06 Dec 2025 12:01:06 +0000 Manifest this update: Sat 06 Dec 2025 12:01:06 +0000 Manifest next update: Sun 07 Dec 2025 12:01:06 +0000 Files and hashes: 1: GuyH86XUUME_chhdFNwgWR87nWY.roa (hash: AkV+gL0S5u4NFSo7a7yCWxTWlu4itSTOyYkBPLj5o3E=) 2: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: JwxdqT3pofOhZYqs6KvU4U7Ma6B7sPLj4wxsUShj134=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:81:0e:00:05:0f:33:e9:5d:0d:23:25:16:6f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3 Validity Not Before: Dec 6 12:01:06 2025 GMT Not After : Dec 7 12:01:06 2025 GMT Subject: CN=3a7bb8453b29aa5484b4cc688c9de604250c2e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ab:11:6a:fb:41:78:ec:b1:bc:73:de:d2:a8: a2:ff:60:52:20:14:03:d0:c8:bc:04:35:d1:fc:dd: f0:11:50:16:36:ea:06:35:d5:1d:c5:23:21:44:57: f1:6c:db:b4:ae:03:39:78:e4:54:a6:96:34:dc:1b: d4:35:8e:78:f9:2b:49:08:4b:70:35:44:8e:1c:49: 5e:b1:71:45:aa:b6:4d:4e:88:cf:04:1a:1e:c1:66: bd:91:96:ef:04:99:ae:5d:0c:f7:b2:cc:7f:00:8e: 62:07:ea:32:be:30:26:94:69:e1:04:70:ee:82:7f: e5:c6:73:ca:51:8f:1a:20:c2:e3:63:8a:8f:7f:a8: 09:1c:d4:c4:a0:a1:39:03:94:47:eb:20:aa:9d:c0: c8:23:f8:1c:47:8f:ce:a8:40:a4:d0:61:55:f3:51: 35:0d:ff:a1:d6:70:17:a6:e1:2f:e0:1f:57:58:fa: 1d:8d:b9:1d:ff:f7:ce:d9:76:7a:6f:05:b8:bb:67: c0:66:fb:05:4d:5a:2c:34:64:9f:3f:f5:8e:13:b6: 2f:ca:ea:05:69:46:8d:66:5b:e4:24:64:3b:70:9b: 32:de:0b:70:93:60:c7:90:ab:c4:dc:ca:e2:a7:6e: 74:4d:70:2a:5d:b8:35:1f:e9:16:85:a2:3c:cb:3e: b1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7B:B8:45:3B:29:AA:54:84:B4:CC:68:8C:9D:E6:04:25:0C:2E:72 X509v3 Authority Key Identifier: keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:47:a6:a3:e8:85:d7:b1:4e:07:a1:81:82:b2:9a:da:e7:07: 73:14:2e:1c:2c:0a:a6:0c:73:fd:c5:b2:3e:3e:1d:80:7e:be: e5:e7:b6:d8:3c:10:fe:9c:b3:4b:dc:49:2d:1c:4b:45:51:ad: 9a:59:13:40:d1:25:8b:82:9f:9f:54:c5:eb:32:a5:43:18:c1: 83:a2:1d:a5:a3:d4:5c:bc:61:f8:b8:89:b5:9a:f9:b4:c1:d5: 82:67:56:45:c5:81:c1:bd:63:db:f9:bb:dc:49:35:64:e2:e4: a8:6d:a8:9c:00:28:23:d1:dd:d8:20:94:8d:cb:fc:8a:42:89: 5a:ff:fe:bb:5c:98:94:f0:1a:95:c9:ad:cb:80:fe:f2:91:2c: 1f:52:63:2a:1d:58:ec:ae:3d:3d:c0:d5:05:ae:5f:a6:c2:42: 34:be:b5:2b:0e:c2:25:06:3a:6d:1f:03:bc:13:af:70:9c:f2: 50:0b:b9:a3:f6:33:2b:d6:80:2e:98:2b:f6:e0:0b:1d:6e:fb: b9:f7:83:48:d3:31:42:84:6e:b7:83:b6:09:a3:6b:50:30:f0: a4:3f:de:6f:99:e8:bb:09:b2:7b:6c:cc:98:2b:96:7c:aa:f0: 4b:6c:02:f8:f4:6f:74:70:dd:a9:6f:e5:dc:97:67:cf:0b:b1: 7d:7d:5e:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYEOAAUPM+ldDSMlFm+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNTM5YTYxNGUwYWExY2ZhMTlmY2Y4ZWUwYmZhYTAzNDYz MTQzYzMwHhcNMjUxMjA2MTIwMTA2WhcNMjUxMjA3MTIwMTA2WjAzMTEwLwYDVQQD EygzYTdiYjg0NTNiMjlhYTU0ODRiNGNjNjg4YzlkZTYwNDI1MGMyZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6sRavtBeOyxvHPe0qii/2BSIBQD 0Mi8BDXR/N3wEVAWNuoGNdUdxSMhRFfxbNu0rgM5eORUppY03BvUNY54+StJCEtw NUSOHElesXFFqrZNTojPBBoewWa9kZbvBJmuXQz3ssx/AI5iB+oyvjAmlGnhBHDu gn/lxnPKUY8aIMLjY4qPf6gJHNTEoKE5A5RH6yCqncDII/gcR4/OqECk0GFV81E1 Df+h1nAXpuEv4B9XWPodjbkd//fO2XZ6bwW4u2fAZvsFTVosNGSfP/WOE7YvyuoF aUaNZlvkJGQ7cJsy3gtwk2DHkKvE3Mrip250TXAqXbg1H+kWhaI8yz6xRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp7uEU7KapUhLTMaIyd5gQlDC5yMB8GA1UdIwQY MBaAFB9TmmFOCqHPoZ/PjuC/qgNGMUPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MjdiZjEtNzk5OS00M2UxLWI3ZjUt YWJlMWUzNzkyNWNmLzEvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85MjdiZjEtNzk5OS00M2UxLWI3ZjUtYWJlMWUzNzkyNWNm LzEvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREemo+iF 17FOB6GBgrKa2ucHcxQuHCwKpgxz/cWyPj4dgH6+5ee22DwQ/pyzS9xJLRxLRVGt mlkTQNEli4Kfn1TF6zKlQxjBg6IdpaPUXLxh+LiJtZr5tMHVgmdWRcWBwb1j2/m7 3Ek1ZOLkqG2onAAoI9Hd2CCUjcv8ikKJWv/+u1yYlPAalcmty4D+8pEsH1JjKh1Y 7K49PcDVBa5fpsJCNL61Kw7CJQY6bR8DvBOvcJzyUAu5o/YzK9aALpgr9uALHW77 ufeDSNMxQoRut4O2CaNrUDDwpD/eb5nouwmye2zMmCuWfKrwS2wC+PRvdHDdqW/l 3JdnzwuxfX1e8A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:19 2025 by rpki-client