This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json) Hash identifier: BKZJvZ83kFfudKdyPBhJTCv7OOfvLwUPbbYrEMRjMbE= Subject key identifier: B8:85:AD:50:FC:92:81:1D:11:A5:47:25:D6:F2:21:56:F5:47:CB:4E Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5 Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5 Certificate serial: 019AF1D26750F486F3653C0F1175B28DDD19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft Manifest number: 0649 Signing time: Sat 06 Dec 2025 04:01:29 +0000 Manifest this update: Sat 06 Dec 2025 04:01:29 +0000 Manifest next update: Sun 07 Dec 2025 04:01:29 +0000 Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: HleApRdRNVyle2/VIOQYgAQ5JTIrQIpPdi7FaaEcxtQ=) 2: VgX2YIG6L_L8c5HWMPiqq1n_S1o.roa (hash: BRlNIKeJrtOTaA3OLFtig45D6GjYy7gWY1CCeaiI+5U=) 3: sDqZRTbZvAQQTn6KJoc_Vm9WzY4.roa (hash: iL19VOkv+2+1Ma+y58+a49a0z0arTyOufs85rap+38w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:67:50:f4:86:f3:65:3c:0f:11:75:b2:8d:dd:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5 Validity Not Before: Dec 6 04:01:29 2025 GMT Not After : Dec 7 04:01:29 2025 GMT Subject: CN=b885ad50fc92811d11a54725d6f22156f547cb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7d:c4:d7:d3:15:14:ad:08:31:d5:d8:41:ef: 61:06:b7:1f:18:e6:a7:68:d4:3a:3d:fd:d6:ea:10: 03:60:c6:de:fb:fc:a8:a1:98:97:b3:29:8f:d8:f4: 65:d4:b7:79:0d:2b:88:5d:9a:48:32:f3:b9:1f:c7: ec:53:02:cf:f1:ad:b4:ff:c4:0d:50:22:bf:87:da: 73:ae:25:2c:73:20:72:81:78:37:b1:09:59:ed:46: 97:9f:80:af:03:7c:d1:a5:25:79:fc:22:44:0b:d7: d2:3c:74:ea:8d:e1:69:10:ec:14:41:b3:ea:86:79: 62:75:45:93:56:ce:1d:ea:cf:89:63:83:30:8d:98: 71:fe:b2:b8:dc:5c:2c:87:4d:15:ff:30:dc:1f:86: 96:5a:33:d3:aa:bf:7d:c2:1a:64:c3:b0:26:da:37: 0a:e5:8d:b1:35:dc:09:bc:52:53:06:dd:92:72:25: 9c:b7:74:f9:04:46:3e:33:c7:d4:f1:32:0d:22:c4: f3:fe:f4:78:8e:19:0c:4a:f2:0e:39:82:7c:0b:26: d3:1c:b8:36:dc:9f:c9:7c:8d:31:10:b2:a0:1d:38: 87:49:63:97:71:9c:14:35:37:62:14:79:e5:66:02: e0:4b:cf:6f:b0:44:3d:45:29:57:d0:b5:e8:13:71: 8a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:85:AD:50:FC:92:81:1D:11:A5:47:25:D6:F2:21:56:F5:47:CB:4E X509v3 Authority Key Identifier: keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:35:81:40:23:f6:be:ef:26:32:dc:27:9e:0d:c0:f7:2f:13: 38:37:0b:ad:9f:8b:3d:c4:fc:90:a5:81:28:57:9b:c6:5c:7b: 5a:08:97:85:90:d8:0f:d2:52:16:e9:a4:96:7c:a2:6b:88:8a: 70:97:c9:4a:83:0b:67:fa:f9:d1:55:85:b1:d0:4a:5b:41:6f: d2:da:01:73:cd:a6:a9:c9:2c:87:72:fc:a2:3d:76:09:9d:db: e1:9b:f9:d3:9a:70:42:a8:a2:b6:72:e8:eb:fc:13:9c:83:c5: 02:22:1b:a1:53:36:e7:9e:3d:a7:05:28:af:df:03:07:1b:7d: c6:eb:fd:db:ba:ce:b3:d4:b7:ef:f5:a8:ee:15:f7:fb:9f:3d: 81:c6:18:38:c0:b9:25:6a:cf:19:3d:d5:36:6b:0d:a0:7c:96: 37:f4:0d:e6:54:f6:f0:aa:30:3c:be:1e:76:33:da:b7:f1:49: 8c:eb:45:0a:53:9d:eb:e0:3d:a3:67:ed:67:7c:1c:f4:79:c4: 9a:da:a7:cb:65:d6:9b:fe:31:c7:5b:60:a3:d4:7e:eb:c1:56: c5:55:b0:34:3d:23:79:d2:62:86:f6:58:96:a0:33:05:33:e2: 75:d0:79:70:99:0c:d0:bf:cb:3b:90:8f:92:d8:4b:ec:a5:46: fc:56:15:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mdQ9IbzZTwPEXWyjd0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYWFjYWI4ZTQ1NmJiMjkxOTc5YTczNTdhNzAyNGYwMGJl YmFhZjUwHhcNMjUxMjA2MDQwMTI5WhcNMjUxMjA3MDQwMTI5WjAzMTEwLwYDVQQD EyhiODg1YWQ1MGZjOTI4MTFkMTFhNTQ3MjVkNmYyMjE1NmY1NDdjYjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg33E19MVFK0IMdXYQe9hBrcfGOan aNQ6Pf3W6hADYMbe+/yooZiXsymP2PRl1Ld5DSuIXZpIMvO5H8fsUwLP8a20/8QN UCK/h9pzriUscyBygXg3sQlZ7UaXn4CvA3zRpSV5/CJEC9fSPHTqjeFpEOwUQbPq hnlidUWTVs4d6s+JY4MwjZhx/rK43Fwsh00V/zDcH4aWWjPTqr99whpkw7Am2jcK 5Y2xNdwJvFJTBt2SciWct3T5BEY+M8fU8TINIsTz/vR4jhkMSvIOOYJ8CybTHLg2 3J/JfI0xELKgHTiHSWOXcZwUNTdiFHnlZgLgS89vsEQ9RSlX0LXoE3GKhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiFrVD8koEdEaVHJdbyIVb1R8tOMB8GA1UdIwQY MBaAFB+qyrjkVrspGXmnNXpwJPAL66r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MDFmZDMtYThjZC00ZTJkLTlkMzIt MmZiNzJhMGFlZjZkLzEvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81MDFmZDMtYThjZC00ZTJkLTlkMzItMmZiNzJhMGFlZjZk LzEvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjWBQCP2 vu8mMtwnng3A9y8TODcLrZ+LPcT8kKWBKFebxlx7WgiXhZDYD9JSFumklnyia4iK cJfJSoMLZ/r50VWFsdBKW0Fv0toBc82mqcksh3L8oj12CZ3b4Zv505pwQqiitnLo 6/wTnIPFAiIboVM25549pwUor98DBxt9xuv927rOs9S37/Wo7hX3+589gcYYOMC5 JWrPGT3VNmsNoHyWN/QN5lT28KowPL4edjPat/FJjOtFClOd6+A9o2ftZ3wc9HnE mtqny2XWm/4xx1tgo9R+68FWxVWwND0jedJihvZYlqAzBTPiddB5cJkM0L/LO5CP kthL7KVG/FYVzg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:58 2025 by rpki-client