This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft File: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json) Hash identifier: MP3yq/3fldZD76DiTIF3Ue/viatU4BWlFRHu+C6E3DU= Subject key identifier: 58:62:62:94:7C:87:34:E5:B8:F3:EF:CF:36:EA:DB:CA:D1:0A:3B:A8 Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4 Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4 Certificate serial: 019AF3F728E35F014B9F2699F0D5580FA75A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft Manifest number: 09AB Signing time: Sat 06 Dec 2025 14:00:52 +0000 Manifest this update: Sat 06 Dec 2025 14:00:52 +0000 Manifest next update: Sun 07 Dec 2025 14:00:52 +0000 Files and hashes: 1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: 8AzA8vmlCx1MBdjvMBHBICb5HJ/5SBcuOWg9HxcvLnY=) 2: rNGuPSJft-Vo3aMmE_0SHixDFYs.roa (hash: RB3m8yl02sm8Z1EZzBwUHBfxuJzfyJEgz7CGmiyldWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:28:e3:5f:01:4b:9f:26:99:f0:d5:58:0f:a7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4 Validity Not Before: Dec 6 14:00:52 2025 GMT Not After : Dec 7 14:00:52 2025 GMT Subject: CN=586262947c8734e5b8f3efcf36eadbcad10a3ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:76:fd:02:5e:90:f7:de:aa:44:f9:b0:db:46: 40:c6:ce:61:45:f8:12:41:f3:86:8c:14:29:33:97: cb:da:b6:30:71:b0:e3:15:e7:2f:d6:56:60:61:c9: 59:6d:39:07:0b:29:d9:fa:85:42:d5:d1:21:f2:4b: bd:28:6e:0e:94:23:66:ac:e2:51:8c:e0:89:75:ef: c1:aa:f7:16:08:db:9a:42:51:8d:f4:71:63:bd:fd: 6f:79:d4:e0:60:a2:8f:c8:79:39:67:56:93:67:b4: e9:64:ca:77:1e:ec:92:89:df:d4:ed:28:bc:4e:51: 3b:20:0a:b6:98:54:2b:e9:93:bd:4a:bd:03:e1:6c: 35:82:8b:30:1a:28:98:93:31:8d:60:a9:68:17:12: d4:3f:03:f2:a8:3e:1d:d3:f1:f9:5f:9b:5f:27:1f: 6c:f9:94:48:f9:b5:bd:85:ac:48:12:d4:b0:8c:21: 17:f0:6e:e4:d5:37:27:9a:2e:97:f6:24:1f:d2:65: 8d:f0:06:ad:90:3a:6d:b6:35:d7:3a:aa:d0:80:90: 45:12:66:11:2e:0c:85:07:ea:34:f3:30:49:4f:05: 4a:c5:8a:c2:c0:9e:bc:6e:13:b2:fa:02:06:17:82: 3b:cd:54:c7:10:14:69:5e:3f:d6:77:38:ef:f5:d6: 5c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:62:62:94:7C:87:34:E5:B8:F3:EF:CF:36:EA:DB:CA:D1:0A:3B:A8 X509v3 Authority Key Identifier: keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6a:3a:14:dd:a0:6e:2c:29:ac:13:48:1c:d6:95:d5:ed:61: f4:de:77:54:c8:9a:c0:f5:fa:39:29:0b:45:1d:f8:67:23:16: d8:71:f4:2a:0e:c4:b4:e6:3b:98:68:b1:35:38:dd:f6:99:d9: 3e:0e:64:5d:af:48:06:ca:79:00:cd:74:51:3b:09:38:bc:88: 32:ad:58:15:3a:e1:72:34:3a:cb:cb:0e:b6:3a:4b:db:6e:87: 08:b4:2b:fb:6c:73:9b:4c:f8:4f:10:cf:4d:97:5f:4f:1c:fa: e3:d2:c9:12:82:3c:02:4d:7f:6a:5e:28:e5:1c:08:96:23:73: 33:d5:56:10:6d:17:f2:91:1b:09:7e:fd:a2:0a:8e:b6:c0:eb: fc:16:bc:00:32:a2:72:7f:0e:19:8c:27:9a:cb:a2:56:6a:15: f3:a3:7e:bd:ec:25:84:7c:85:08:e8:12:54:1d:2a:0f:af:27: 5f:5f:e1:00:96:bc:c5:06:5e:9c:4d:e8:06:48:47:9d:f0:cf: 81:6d:64:ff:1e:c9:ae:74:48:7c:cb:ca:59:72:e1:1e:62:46: a4:d2:31:99:92:63:cd:ad:52:f3:e1:2a:96:5b:2c:14:6a:dc: 9d:93:f9:c8:73:eb:83:36:be:06:5f:01:90:69:e4:30:a3:48: bb:76:40:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9yjjXwFLnyaZ8NVYD6daMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYjVmYzNkODk4MzQ4ZDM1Yzc3YmYxNmMzZWQ5Y2ZlODE1 OTU1YjQwHhcNMjUxMjA2MTQwMDUyWhcNMjUxMjA3MTQwMDUyWjAzMTEwLwYDVQQD Eyg1ODYyNjI5NDdjODczNGU1YjhmM2VmY2YzNmVhZGJjYWQxMGEzYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3b9Al6Q996qRPmw20ZAxs5hRfgS QfOGjBQpM5fL2rYwcbDjFecv1lZgYclZbTkHCynZ+oVC1dEh8ku9KG4OlCNmrOJR jOCJde/BqvcWCNuaQlGN9HFjvf1vedTgYKKPyHk5Z1aTZ7TpZMp3HuySid/U7Si8 TlE7IAq2mFQr6ZO9Sr0D4Ww1goswGiiYkzGNYKloFxLUPwPyqD4d0/H5X5tfJx9s +ZRI+bW9haxIEtSwjCEX8G7k1Tcnmi6X9iQf0mWN8AatkDpttjXXOqrQgJBFEmYR LgyFB+o08zBJTwVKxYrCwJ68bhOy+gIGF4I7zVTHEBRpXj/Wdzjv9dZcfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhiYpR8hzTluPPvzzbq28rRCjuoMB8GA1UdIwQY MBaAFB+1/D2Jg0jTXHe/FsPtnP6BWVW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNGViMmYtYzExNS00ZGVlLWE1ZTct ZGVkZWEzYWIwZDNiLzEvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kNGViMmYtYzExNS00ZGVlLWE1ZTctZGVkZWEzYWIwZDNi LzEvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWo6FN2g biwprBNIHNaV1e1h9N53VMiawPX6OSkLRR34ZyMW2HH0Kg7EtOY7mGixNTjd9pnZ Pg5kXa9IBsp5AM10UTsJOLyIMq1YFTrhcjQ6y8sOtjpL226HCLQr+2xzm0z4TxDP TZdfTxz649LJEoI8Ak1/al4o5RwIliNzM9VWEG0X8pEbCX79ogqOtsDr/Ba8ADKi cn8OGYwnmsuiVmoV86N+vewlhHyFCOgSVB0qD68nX1/hAJa8xQZenE3oBkhHnfDP gW1k/x7JrnRIfMvKWXLhHmJGpNIxmZJjza1S8+EqllssFGrcnZP5yHPrgza+Bl8B kGnkMKNIu3ZAeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:39:54 2025 by rpki-client