This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json) Hash identifier: rraL7U+vuiX63f6iCeEStY1LOcXF3ev2epPVAgyhn1s= Subject key identifier: 7C:2A:7B:D5:B0:AE:12:67:57:AC:E6:E4:7C:3E:B4:CF:BE:2B:84:0F Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Certificate serial: 019AF051C98241FA6CC82D8D4F349F757E3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft Manifest number: 11EA Signing time: Fri 05 Dec 2025 21:01:23 +0000 Manifest this update: Fri 05 Dec 2025 21:01:23 +0000 Manifest next update: Sat 06 Dec 2025 21:01:23 +0000 Files and hashes: 1: 7q0WrWMejy7wbR787YAaoWGbJFQ.roa (hash: wvukoKMYamTKrvVMIAVFKbPLx57mG8Vi2Twko2h+BGA=) 2: 9N4nOv3tg3sEbPyzZf0it1Hq25E.roa (hash: IJnSS5a9u+7nIpL38LijT/DvQkKhhTmKcLRcnn9ZFq4=) 3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: kU1yaT6sTBzxchOwQfYvuayv5cXRJP/TCq9mEpXsZzw=) 4: HFw-x8czfBceHHrxWFsisFaU53k.roa (hash: cYh9OngZxsihRjHnYd3zU3o4mbQkOgFi9+M2bbApN3k=) 5: X8AY7TE63_MLYw5qzgUDNFtz5p0.roa (hash: X2a5upeXUq+OfzrT3NEfhOg+ntOWBbajp/Ueexg9I2s=) 6: lZMuhPvtZ2azCXBKPog94p3v2Xw.roa (hash: xEuRWjb3WfY9qNirTUGj3ZWp2yVhhUygTy4CswJMg3c=) 7: uIXD9TM7mcGL2h8D_v3d0KyzT9E.roa (hash: N8tk1k3ctTBw3mBa+DDHR+60L2fh+aJO68VY7R3S2T4=) 8: vlexF02dkqJLD0WdrTxwGKUdE4I.roa (hash: cuDkI790X0jMiu+jzLtuqyGyt6ox4BybHkrBEnZriww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:c9:82:41:fa:6c:c8:2d:8d:4f:34:9f:75:7e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Validity Not Before: Dec 5 21:01:23 2025 GMT Not After : Dec 6 21:01:23 2025 GMT Subject: CN=7c2a7bd5b0ae126757ace6e47c3eb4cfbe2b840f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:0e:6a:a0:e5:2a:f4:b6:a0:84:b2:40:f0: b7:ba:22:2e:c1:30:1e:30:0d:fc:ee:ea:ed:ee:9c: 88:ee:6f:cf:f9:be:01:40:51:74:f2:18:c7:b8:ac: fb:18:50:df:fb:38:51:be:be:a5:ec:1e:90:96:31: 0e:fb:c8:fc:d1:3f:c6:8e:34:8a:eb:31:d7:ce:9a: 2c:55:73:f2:9f:09:fe:48:b0:20:b3:b6:5e:82:e9: c4:4c:27:5a:dc:ad:89:1f:91:ff:da:52:8a:27:b1: 33:35:9d:18:f7:51:5e:ba:a4:6f:f7:e6:12:ca:06: d4:55:43:63:23:0c:79:25:ed:0e:e5:81:01:e0:57: 78:aa:bf:e4:2c:1b:c3:4a:12:56:64:c8:2a:c8:d7: b9:c3:ad:7f:cd:f0:85:2a:8a:9a:e2:b3:9d:1b:98: ba:56:f7:ec:72:10:92:ab:34:12:41:ff:11:57:ab: b0:b1:6d:49:64:0a:75:ef:50:84:a7:a6:a5:20:db: 08:28:c9:e2:4e:ad:b6:42:6c:6c:1c:38:39:b0:9b: 93:fe:a9:6d:4c:32:24:f8:2f:7c:c6:32:25:e9:79: f1:88:74:a1:b8:af:81:51:ff:64:0d:4c:1c:31:3c: 95:8d:d7:a9:4f:52:84:88:e5:78:8e:85:be:3d:ef: 53:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2A:7B:D5:B0:AE:12:67:57:AC:E6:E4:7C:3E:B4:CF:BE:2B:84:0F X509v3 Authority Key Identifier: keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:21:71:22:71:41:c8:93:fa:77:08:38:b1:16:e4:2a:d9:95: a0:06:4e:0c:17:04:11:fa:f2:fa:44:1c:bd:a1:35:da:c3:16: 02:9b:6e:9f:8c:63:01:0a:57:aa:5d:38:b8:d7:24:40:91:91: a6:bf:aa:79:f7:e8:3c:54:01:9b:f4:ed:9a:ca:bc:94:f1:58: ea:3d:c9:bd:1f:a6:08:95:09:fa:5a:f7:d2:61:11:f6:70:66: d7:05:71:df:18:79:6e:5a:e7:a3:f0:f3:29:60:6a:6e:e2:db: 73:83:f6:39:27:94:51:6a:81:76:09:a7:3d:44:9e:dd:23:c2: c4:f9:62:c3:c7:68:31:af:01:52:e1:fe:f5:13:c5:0a:42:3b: 07:1b:77:33:86:3b:d0:77:33:86:02:ff:ca:55:8c:d4:33:fd: 63:0f:9e:98:b6:00:8a:63:aa:26:d3:2b:da:cd:10:b7:4f:1d: 23:f7:90:68:a5:8f:40:bb:09:27:ab:9f:04:49:76:02:45:0b: de:87:32:3f:c6:39:10:99:1d:e0:95:5a:48:66:31:6e:07:04: cf:9e:2a:88:c7:de:1b:4a:54:f9:65:4a:02:56:59:f3:92:63: 05:8b:f4:88:51:48:2d:5f:17:56:11:30:df:9f:cb:5e:7b:a3: ca:fe:fe:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUcmCQfpsyC2NTzSfdX49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYzQ5MjdhYjE5NGFlMTIzN2ZkZTJkM2JlZjY5MDM4ODkz ZjBkYzUwHhcNMjUxMjA1MjEwMTIzWhcNMjUxMjA2MjEwMTIzWjAzMTEwLwYDVQQD Eyg3YzJhN2JkNWIwYWUxMjY3NTdhY2U2ZTQ3YzNlYjRjZmJlMmI4NDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UsOaqDlKvS2oISyQPC3uiIuwTAe MA387urt7pyI7m/P+b4BQFF08hjHuKz7GFDf+zhRvr6l7B6QljEO+8j80T/GjjSK 6zHXzposVXPynwn+SLAgs7ZegunETCda3K2JH5H/2lKKJ7EzNZ0Y91FeuqRv9+YS ygbUVUNjIwx5Je0O5YEB4Fd4qr/kLBvDShJWZMgqyNe5w61/zfCFKoqa4rOdG5i6 VvfschCSqzQSQf8RV6uwsW1JZAp171CEp6alINsIKMniTq22QmxsHDg5sJuT/qlt TDIk+C98xjIl6XnxiHShuK+BUf9kDUwcMTyVjdepT1KEiOV4joW+Pe9T8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwqe9WwrhJnV6zm5Hw+tM++K4QPMB8GA1UdIwQY MBaAFB/EknqxlK4SN/3i0772kDiJPw3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODIt OGI4YTAxYmQ3NDE0LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODItOGI4YTAxYmQ3NDE0 LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyFxInFB yJP6dwg4sRbkKtmVoAZODBcEEfry+kQcvaE12sMWAptun4xjAQpXql04uNckQJGR pr+qeffoPFQBm/Ttmsq8lPFY6j3JvR+mCJUJ+lr30mER9nBm1wVx3xh5blrno/Dz KWBqbuLbc4P2OSeUUWqBdgmnPUSe3SPCxPliw8doMa8BUuH+9RPFCkI7Bxt3M4Y7 0HczhgL/ylWM1DP9Yw+emLYAimOqJtMr2s0Qt08dI/eQaKWPQLsJJ6ufBEl2AkUL 3ocyP8Y5EJkd4JVaSGYxbgcEz54qiMfeG0pU+WVKAlZZ85JjBYv0iFFILV8XVhEw 35/LXnujyv7+dQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:31 2025 by rpki-client