This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft File: H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json) Hash identifier: hDR519aNczGhUr+2wVB5KJR6aoOQ3UGoGR97Tc2lB2s= Subject key identifier: 75:B2:88:83:E1:90:E6:36:62:29:BA:ED:1D:81:0C:3A:61:B5:57:B3 Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd Certificate serial: 019B085AFBC1E965EEBDACC72A9317333530 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft Manifest number: 07C4 Signing time: Wed 10 Dec 2025 13:02:18 +0000 Manifest this update: Wed 10 Dec 2025 13:02:18 +0000 Manifest next update: Thu 11 Dec 2025 13:02:18 +0000 Files and hashes: 1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: Q0iT5Omcb6Yy//psP/GG/ZKlru0I/j9Zw4ijfh4PSPY=) 2: HcCGVf1c2Ti9Q8GpR181zKxoK-4.roa (hash: epMyekEuNY8Rw5EQGjHEPi8q6cf4LUx00XdGU4u6gyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5a:fb:c1:e9:65:ee:bd:ac:c7:2a:93:17:33:35:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd Validity Not Before: Dec 10 13:02:18 2025 GMT Not After : Dec 11 13:02:18 2025 GMT Subject: CN=75b28883e190e6366229baed1d810c3a61b557b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:5e:eb:f0:e9:ae:1b:0a:a4:cd:e3:3d:5d: 8b:19:90:09:0f:24:d2:9c:6a:24:7c:32:29:04:21: 9f:16:79:75:f4:bc:c4:35:9c:74:fc:5d:fa:46:91: e4:0d:77:10:31:83:c5:85:23:54:41:a9:f9:2e:23: 92:ac:8a:be:d5:5d:a5:62:03:08:2f:f8:45:4c:8f: 74:1b:6c:90:02:d2:da:00:76:e7:ed:38:23:8c:2b: 4c:0f:58:ce:03:15:db:2d:8b:57:a7:c8:68:2a:52: 03:fc:ce:5b:00:98:da:a3:dd:c3:49:ad:75:72:92: ad:71:de:41:2c:0a:5c:bb:d3:71:22:03:e4:c3:be: 08:8c:f7:a4:e0:8d:96:91:45:d7:79:ef:7a:4a:78: 54:3d:19:94:04:02:0d:f5:82:0b:2b:c6:64:bb:39: 2c:82:83:30:3a:81:98:e0:b3:f0:51:af:e5:77:07: ed:7e:6b:f0:fa:b6:3c:a4:d7:82:43:4c:73:57:4d: 60:33:56:d0:00:42:8d:c2:54:7d:6e:94:97:ea:ee: 21:38:e3:93:b6:57:9a:d3:a8:b2:58:84:4a:21:71: 1e:58:d1:88:b5:c1:1a:09:c7:02:d3:f2:03:d1:db: a4:00:8e:14:74:b2:89:44:73:9c:7b:80:f9:11:9c: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B2:88:83:E1:90:E6:36:62:29:BA:ED:1D:81:0C:3A:61:B5:57:B3 X509v3 Authority Key Identifier: keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:83:a4:39:2e:4b:27:0c:55:dc:3b:27:7d:11:a5:ba:16:92: 98:70:79:9b:88:7e:5e:44:9d:70:69:da:cf:65:f8:d9:00:3a: 48:c7:99:4a:53:2b:aa:67:bb:4e:73:3c:0d:98:95:46:27:40: c1:81:ef:f6:68:1f:94:70:41:32:20:39:e1:28:75:31:36:69: 1e:c7:51:3f:39:41:be:1c:d3:90:6f:9a:e4:66:9a:ec:39:e0: 26:dd:5c:22:91:f5:34:00:b1:03:21:db:4e:97:17:24:1f:7d: c2:60:a1:6d:72:ca:f6:97:52:8a:1e:6a:d3:1d:26:d3:fe:a4: e2:3b:c0:f7:ff:98:01:82:cc:cf:3d:8c:91:61:ef:7b:5b:fb: 05:87:3f:08:33:87:c3:78:77:0b:2d:5f:d8:3f:0b:80:d1:c1: dd:e3:ea:45:3c:f9:2c:b7:35:d6:3e:e7:95:64:8b:b1:ac:de: 47:bc:ec:3c:29:2a:eb:49:ac:b4:96:81:52:04:82:48:8c:3d: d1:87:de:47:77:05:a5:71:e6:ff:db:dd:3a:63:7c:80:5d:6d: da:3b:6a:37:45:5e:13:7c:26:67:eb:ba:99:2c:03:95:a9:db: 8d:4b:9d:22:37:49:e3:bf:97:d3:02:5f:1c:87:4b:9a:3b:1e: 7e:a4:5b:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWvvB6WXuvazHKpMXMzUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYWZjYTUzYWM1NGU1N2U1MmMwMTAxMzhhMjEyNzk0YzY3 MGUwY2QwHhcNMjUxMjEwMTMwMjE4WhcNMjUxMjExMTMwMjE4WjAzMTEwLwYDVQQD Eyg3NWIyODg4M2UxOTBlNjM2NjIyOWJhZWQxZDgxMGMzYTYxYjU1N2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmte6/DprhsKpM3jPV2LGZAJDyTS nGokfDIpBCGfFnl19LzENZx0/F36RpHkDXcQMYPFhSNUQan5LiOSrIq+1V2lYgMI L/hFTI90G2yQAtLaAHbn7TgjjCtMD1jOAxXbLYtXp8hoKlID/M5bAJjao93DSa11 cpKtcd5BLApcu9NxIgPkw74IjPek4I2WkUXXee96SnhUPRmUBAIN9YILK8Zkuzks goMwOoGY4LPwUa/ldwftfmvw+rY8pNeCQ0xzV01gM1bQAEKNwlR9bpSX6u4hOOOT tlea06iyWIRKIXEeWNGItcEaCccC0/ID0dukAI4UdLKJRHOce4D5EZySsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWyiIPhkOY2Yim67R2BDDphtVezMB8GA1UdIwQY MBaAFB+vylOsVOV+UsAQE4ohJ5TGcODNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYt Yzk5NWQyZWM5ZTk0LzEvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYtYzk5NWQyZWM5ZTk0 LzEvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYOkOS5L JwxV3DsnfRGluhaSmHB5m4h+XkSdcGnaz2X42QA6SMeZSlMrqme7TnM8DZiVRidA wYHv9mgflHBBMiA54Sh1MTZpHsdRPzlBvhzTkG+a5Gaa7DngJt1cIpH1NACxAyHb TpcXJB99wmChbXLK9pdSih5q0x0m0/6k4jvA9/+YAYLMzz2MkWHve1v7BYc/CDOH w3h3Cy1f2D8LgNHB3ePqRTz5LLc11j7nlWSLsazeR7zsPCkq60mstJaBUgSCSIw9 0YfeR3cFpXHm/9vdOmN8gF1t2jtqN0VeE3wmZ+u6mSwDlanbjUudIjdJ47+X0wJf HIdLmjsefqRb3Q== -----END CERTIFICATE-----Generated at Wed Dec 10 17:21:56 2025 by rpki-client