This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json) Hash identifier: /pLZhXJsMLSOWgZ3O2ti82sI7K5RFOEAAN1au6sEUk0= Subject key identifier: 34:72:C2:7F:2B:86:F3:C5:81:D9:FB:5B:54:2C:AB:FA:3F:53:C3:05 Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66 Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466 Certificate serial: 019AF0BF3A84B5AC9FD73F6FD3019FBB0FEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft Manifest number: 0E6A Signing time: Fri 05 Dec 2025 23:00:55 +0000 Manifest this update: Fri 05 Dec 2025 23:00:55 +0000 Manifest next update: Sat 06 Dec 2025 23:00:55 +0000 Files and hashes: 1: 9LtCAwdvQTxrsgjAgJBXTY-dexQ.roa (hash: YbPa7xrFRquA6rkXPn/4oW9xs5SCR/ZWuuJuhONwhvc=) 2: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: H1/6UNj/ICYDOqq+LmowRoiZehDgIGxj3JeP6L4c4ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:3a:84:b5:ac:9f:d7:3f:6f:d3:01:9f:bb:0f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466 Validity Not Before: Dec 5 23:00:55 2025 GMT Not After : Dec 6 23:00:55 2025 GMT Subject: CN=3472c27f2b86f3c581d9fb5b542cabfa3f53c305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6f:ee:f6:6d:66:91:50:44:99:25:f5:66:e5: d9:93:c5:fb:80:c2:96:eb:67:9e:d8:e0:ac:be:be: 29:ce:b8:53:8a:01:bd:be:6c:f8:a4:86:2f:cb:8f: a0:70:e5:ac:5a:03:55:ab:31:36:98:2c:0a:61:ed: e2:a0:f9:16:cf:5f:cb:76:f0:6c:29:80:d1:74:dd: c8:82:01:a4:ba:3a:f9:ea:ea:55:d7:0d:ce:8e:b6: 17:fb:ed:c1:db:65:c0:49:b0:61:1a:66:82:65:a1: 16:50:df:42:33:8e:f2:23:6e:0b:25:9d:d4:d7:83: 42:41:a1:be:d4:c3:e4:aa:00:93:f7:c3:fa:9b:88: 0a:be:1b:92:cf:c6:19:6a:c0:60:83:c6:91:9e:00: 81:c0:df:e8:18:61:cc:91:1a:8b:31:95:f7:6e:d7: 7e:f4:90:2b:35:6d:e1:d0:a4:8a:25:5b:c8:6e:53: a4:f3:bb:de:3e:58:fe:d3:d7:d1:93:d2:ca:9a:c9: 94:46:86:e5:59:d8:cf:97:33:48:76:69:0e:ab:7b: 75:d0:bb:4c:71:59:cd:c7:21:27:5b:3c:3c:5f:e1: 6d:bf:43:af:c0:28:04:7c:d3:e9:b1:df:ce:9b:7c: 94:e3:bf:e0:ba:a7:3c:54:8e:29:06:4f:e7:0a:66: ae:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:72:C2:7F:2B:86:F3:C5:81:D9:FB:5B:54:2C:AB:FA:3F:53:C3:05 X509v3 Authority Key Identifier: keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:0c:7f:94:35:3c:ed:59:68:a3:de:93:40:8b:29:1c:66:50: 7a:ea:bb:25:11:90:e2:1a:23:01:46:59:ed:77:2b:29:fd:97: 82:cf:16:b8:da:0c:5d:42:bf:8d:a6:8e:47:dd:a2:57:12:80: 51:f8:23:5d:2e:23:4e:bf:de:92:28:27:31:28:a3:82:81:82: dd:4c:31:75:e3:a6:ff:7d:ed:1e:58:2d:29:62:85:ef:40:6d: 18:67:fc:0f:1a:a7:bf:e8:08:b5:50:3b:91:d7:8e:2b:9d:fc: a2:89:cc:03:9b:e0:35:75:0c:03:cc:d5:2c:51:73:27:8e:d8: 14:a9:e1:34:08:69:6d:6f:18:73:c7:7d:a4:bb:70:88:20:2b: a0:e6:37:b5:f9:40:77:a4:6c:7f:90:92:a7:a9:21:2f:24:1a: e4:41:0c:68:c3:12:4b:4a:c7:e0:e5:58:29:7c:92:d7:8d:d2: 99:f8:b4:63:50:7a:52:7d:09:c8:57:38:cd:3c:70:bf:4c:c6: d9:e2:0b:a6:82:54:8f:77:d0:7d:63:a2:76:d9:ad:3b:a6:04: f4:24:43:8a:0c:8c:6d:91:3d:82:93:65:cd:84:40:fd:74:00: e8:9d:05:8c:f4:a4:a3:61:05:38:6f:33:86:77:8b:c2:fd:11: 20:8a:cd:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzqEtayf1z9v0wGfuw/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOTc1OTlmNjNkNzg3YzY1YjJlZjlmZjcwZGQ2MzY1Mjc0 MDQ0NjYwHhcNMjUxMjA1MjMwMDU1WhcNMjUxMjA2MjMwMDU1WjAzMTEwLwYDVQQD EygzNDcyYzI3ZjJiODZmM2M1ODFkOWZiNWI1NDJjYWJmYTNmNTNjMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW/u9m1mkVBEmSX1ZuXZk8X7gMKW 62ee2OCsvr4pzrhTigG9vmz4pIYvy4+gcOWsWgNVqzE2mCwKYe3ioPkWz1/LdvBs KYDRdN3IggGkujr56upV1w3OjrYX++3B22XASbBhGmaCZaEWUN9CM47yI24LJZ3U 14NCQaG+1MPkqgCT98P6m4gKvhuSz8YZasBgg8aRngCBwN/oGGHMkRqLMZX3btd+ 9JArNW3h0KSKJVvIblOk87vePlj+09fRk9LKmsmURoblWdjPlzNIdmkOq3t10LtM cVnNxyEnWzw8X+Ftv0OvwCgEfNPpsd/Om3yU47/guqc8VI4pBk/nCmau4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRywn8rhvPFgdn7W1Qsq/o/U8MFMB8GA1UdIwQY MBaAFB+XWZ9j14fGWy75/3DdY2UnQERmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjct N2VjZTdkMDczNjUxLzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjctN2VjZTdkMDczNjUx LzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQx/lDU8 7Vloo96TQIspHGZQeuq7JRGQ4hojAUZZ7XcrKf2Xgs8WuNoMXUK/jaaOR92iVxKA UfgjXS4jTr/ekignMSijgoGC3UwxdeOm/33tHlgtKWKF70BtGGf8Dxqnv+gItVA7 kdeOK538oonMA5vgNXUMA8zVLFFzJ47YFKnhNAhpbW8Yc8d9pLtwiCAroOY3tflA d6Rsf5CSp6khLyQa5EEMaMMSS0rH4OVYKXyS143Smfi0Y1B6Un0JyFc4zTxwv0zG 2eILpoJUj3fQfWOidtmtO6YE9CRDigyMbZE9gpNlzYRA/XQA6J0FjPSko2EFOG8z hneLwv0RIIrN2g== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:27 2025 by rpki-client