This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json) Hash identifier: oC8Y1ou3CGFVufkL6sihNZcfI3WQOwpz7Ux4VrdrZc4= Subject key identifier: 6D:B3:E8:C5:32:BF:7B:7A:FF:FD:6B:69:11:F0:86:71:F7:05:D9:12 Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61 Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61 Certificate serial: 019AF7D45294E04B4ED7F1293F99F5CAB224 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 08:01:18 +0000 Manifest this update: Sun 07 Dec 2025 08:01:18 +0000 Manifest next update: Mon 08 Dec 2025 08:01:18 +0000 Files and hashes: 1: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: 4slr2yGr9xvSVEbQuDcghq64pWXMWuRNyRIr0UurCAo=) 2: oyXaOgxI1N0gL-mT4wAa6DfHmfQ.roa (hash: 8sggfPG1wysa3rNvbgw+mJfeUSqlumTtEBYr1asLE8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:52:94:e0:4b:4e:d7:f1:29:3f:99:f5:ca:b2:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61 Validity Not Before: Dec 7 08:01:18 2025 GMT Not After : Dec 8 08:01:18 2025 GMT Subject: CN=6db3e8c532bf7b7afffd6b6911f08671f705d912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0f:d8:b4:df:bd:8b:65:c0:94:ed:fe:47:43: cc:ae:b8:39:b1:99:21:18:aa:25:7f:e7:1e:e5:c2: fe:ad:13:e4:c7:59:22:4c:79:b4:f9:6b:81:c8:05: bf:21:29:47:33:da:56:86:5b:91:ee:ad:43:f5:ce: ff:e3:55:a3:af:e7:03:64:aa:fc:c1:9e:81:81:d2: 85:1f:b5:12:ad:b3:ec:5a:38:9f:0d:af:d4:ba:20: fd:15:8d:45:a8:93:2a:98:3d:94:1f:8e:e4:77:3e: b3:13:74:9b:60:77:36:38:5c:07:27:c5:8d:d1:78: bb:f9:c8:93:ed:ea:de:64:b9:c0:7a:c1:16:b4:f3: db:03:ea:7d:bf:9b:4d:41:6b:12:38:70:70:64:55: 45:f9:c2:04:b9:ad:ed:84:7e:6f:34:9b:0e:eb:1b: 80:14:bb:de:dd:ee:5e:31:c0:2e:d4:01:55:81:df: 7d:27:03:aa:24:31:fa:fa:3a:0e:12:75:d0:11:d5: 48:6b:a0:fb:84:88:f6:0e:d0:11:83:39:1d:69:a9: af:8a:cd:86:ca:59:b9:d2:74:ae:a2:5e:99:c5:b6: 3d:ca:f6:ed:e4:11:df:fe:79:19:57:36:47:31:7c: 3c:97:62:58:dc:f8:81:2d:db:19:cb:ec:cb:fe:d5: bc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B3:E8:C5:32:BF:7B:7A:FF:FD:6B:69:11:F0:86:71:F7:05:D9:12 X509v3 Authority Key Identifier: keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:5f:c2:5b:e0:93:9b:1a:7a:0a:06:96:83:79:17:02:87:83: 41:c7:ef:09:d1:ac:a2:b6:3b:bd:e0:af:13:05:c8:2c:3a:76: 3f:85:42:61:b7:3a:59:80:a5:e5:b8:e3:f4:e1:12:2c:e1:ff: 09:85:e7:a3:84:fa:a4:dd:58:a7:d2:4d:d5:4b:ec:7b:64:91: 76:61:87:4d:d4:f9:e8:c8:df:c4:6e:7b:fc:6a:26:2e:ed:bd: 77:7b:b7:03:50:bb:4a:9f:3f:bd:db:53:01:4e:8c:87:17:07: 18:db:8f:fb:a4:2e:b4:b0:1a:9d:c7:4f:7c:b2:cb:69:ea:f7: 60:d4:79:05:55:8b:4a:82:5d:7c:67:e9:8c:20:7b:4d:68:14: 1f:e0:01:8d:38:9b:e7:48:b3:be:33:c5:d2:2f:81:bb:f7:22: 58:35:62:f2:cc:d9:4a:dd:cb:8b:11:ed:bc:fd:36:f0:60:e5: 90:60:cf:ea:a7:6a:f2:e0:c4:b1:58:19:2b:cb:98:0e:1b:24: 04:c0:6d:d0:e4:65:55:26:48:01:6f:28:30:66:84:2e:c3:8f: a9:6f:af:b2:20:12:80:3d:92:30:30:6c:f8:8d:2a:a7:88:98: 90:ef:ea:1b:da:6d:67:bf:a8:b8:e8:1e:93:ea:bd:f0:6e:36: 2f:a1:66:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31FKU4EtO1/EpP5n1yrIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjg4Zjk4NTdkOWU0NDBjMTA1OGRjODk1OWU0OWY4YjMx ODNmNjEwHhcNMjUxMjA3MDgwMTE4WhcNMjUxMjA4MDgwMTE4WjAzMTEwLwYDVQQD Eyg2ZGIzZThjNTMyYmY3YjdhZmZmZDZiNjkxMWYwODY3MWY3MDVkOTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww/YtN+9i2XAlO3+R0PMrrg5sZkh GKolf+ce5cL+rRPkx1kiTHm0+WuByAW/ISlHM9pWhluR7q1D9c7/41Wjr+cDZKr8 wZ6BgdKFH7USrbPsWjifDa/UuiD9FY1FqJMqmD2UH47kdz6zE3SbYHc2OFwHJ8WN 0Xi7+ciT7ereZLnAesEWtPPbA+p9v5tNQWsSOHBwZFVF+cIEua3thH5vNJsO6xuA FLve3e5eMcAu1AFVgd99JwOqJDH6+joOEnXQEdVIa6D7hIj2DtARgzkdaamvis2G ylm50nSuol6ZxbY9yvbt5BHf/nkZVzZHMXw8l2JY3PiBLdsZy+zL/tW8bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2z6MUyv3t6//1raRHwhnH3BdkSMB8GA1UdIwQY MBaAFB9oj5hX2eRAwQWNyJWeSfizGD9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUt MDIxYzJlMDczNWIxLzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUtMDIxYzJlMDczNWIx LzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAql/CW+CT mxp6CgaWg3kXAoeDQcfvCdGsorY7veCvEwXILDp2P4VCYbc6WYCl5bjj9OESLOH/ CYXno4T6pN1Yp9JN1Uvse2SRdmGHTdT56MjfxG57/GomLu29d3u3A1C7Sp8/vdtT AU6MhxcHGNuP+6QutLAancdPfLLLaer3YNR5BVWLSoJdfGfpjCB7TWgUH+ABjTib 50izvjPF0i+Bu/ciWDVi8szZSt3LixHtvP028GDlkGDP6qdq8uDEsVgZK8uYDhsk BMBt0ORlVSZIAW8oMGaELsOPqW+vsiASgD2SMDBs+I0qp4iYkO/qG9ptZ7+ouOge k+q98G42L6FmiQ== -----END CERTIFICATE-----Generated at Sun Dec 7 10:06:35 2025 by rpki-client