This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json) Hash identifier: kmwP/afuRyLai9voav1DtKU1mU1ucC/5+0XaVuMKLSI= Subject key identifier: 5B:CB:CE:0A:4C:2E:5E:B0:05:A5:1F:10:D8:98:1D:77:A5:1A:F5:25 Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb Certificate serial: 019AF19B2DF9247911CE72BC21448C6E57DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft Manifest number: 140C Signing time: Sat 06 Dec 2025 03:01:10 +0000 Manifest this update: Sat 06 Dec 2025 03:01:10 +0000 Manifest next update: Sun 07 Dec 2025 03:01:10 +0000 Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: /s9Z1M6ecszwzoYRTL83+GJKT2vQHz2bV4pLnrBt/zA=) 2: YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa (hash: UwEIySf0ujQ0bIXU2dedyQ3b/IuoBDp7UIw7LsZq4qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2d:f9:24:79:11:ce:72:bc:21:44:8c:6e:57:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb Validity Not Before: Dec 6 03:01:10 2025 GMT Not After : Dec 7 03:01:10 2025 GMT Subject: CN=5bcbce0a4c2e5eb005a51f10d8981d77a51af525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:14:2b:2f:6f:6e:e6:7b:d8:71:f4:de:c9:43: c8:8d:c9:c6:94:c2:03:83:4b:23:fe:e9:d8:ca:ba: fb:ac:e2:66:79:3d:c6:bb:7f:50:d7:11:80:71:a3: 4c:f8:70:83:a6:eb:2f:e4:27:55:ad:b9:5f:09:ab: 78:05:b1:94:47:7b:bb:88:c7:74:b5:5b:13:f9:91: 3a:2f:8c:95:27:df:c6:57:ea:c9:e9:53:22:42:01: 54:51:65:90:a5:c9:e1:c5:35:ed:32:a4:94:15:74: ad:1d:e3:58:67:f1:8f:cb:db:e0:a3:0f:40:cc:46: 4a:5f:61:2c:35:5f:9e:39:31:38:d4:86:48:83:16: 2d:d1:ce:6a:14:49:d3:00:29:72:f0:bd:f7:b1:d5: 4e:aa:7a:af:b5:0b:1d:3c:ec:06:0e:87:87:06:db: 23:b2:6f:4d:0f:64:a4:e2:f5:6a:06:63:b2:48:52: 36:bd:7b:15:d0:54:70:c5:c5:cf:e5:8b:3e:fe:ec: 33:b2:1c:0f:d0:8d:67:cd:59:45:24:33:4e:ff:43: af:72:69:d4:a3:fd:b6:8f:68:d3:ab:21:c4:9d:85: 1a:9e:b5:f5:a0:25:16:f8:9b:a7:d2:6a:28:5d:1b: 9a:7f:c8:c6:8b:7f:b9:c6:da:61:7e:d1:c0:10:9d: 7a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CB:CE:0A:4C:2E:5E:B0:05:A5:1F:10:D8:98:1D:77:A5:1A:F5:25 X509v3 Authority Key Identifier: keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b4:91:83:d6:01:09:2c:87:71:95:27:91:e3:54:c9:e9:e4: 02:41:3b:7c:c8:a7:b4:3a:ed:c5:36:b5:7e:96:0d:09:3b:71: 2e:46:c7:6c:ae:04:b2:58:9b:51:93:2d:f7:6f:bf:1d:f6:76: 42:50:42:ab:8c:2a:b9:d2:09:71:c7:b5:94:c4:f6:5a:c9:14: 82:bc:02:d2:2d:7f:bb:2f:67:ac:20:07:7e:54:25:19:0f:f6: f5:a4:8e:4f:f8:54:6d:65:55:7b:5b:ca:42:71:ad:cb:ac:a6: d5:2d:b0:a1:8b:ed:cb:4c:7c:20:cc:95:a9:09:c0:a5:4e:6c: 50:cc:ee:41:c8:4e:fd:27:9a:78:bc:40:10:31:f5:ae:4f:10: ed:e9:e3:d6:08:4d:67:f6:a2:0c:56:ed:da:ac:41:fb:22:e5: 3f:59:d5:cd:96:eb:a5:20:cb:72:2a:48:79:12:7b:bf:7b:99: e1:b6:54:59:51:04:62:fe:83:e2:99:23:06:00:a8:1d:22:61: 67:50:de:81:25:29:5c:f5:47:a2:ce:66:e0:2d:bf:22:74:9a: 08:d0:a5:11:ae:ed:a3:b8:7d:21:bf:26:7b:b1:7a:e5:c5:1f: 91:3c:c5:88:fb:3f:3b:63:09:2a:06:b2:75:b8:3e:ca:24:dd: 29:94:ee:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmy35JHkRznK8IUSMblfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOTRkMWEyOWNjZTI2MTUzYjkzNGZiNDdjMmVlMjE2NzRi Yjg1Y2IwHhcNMjUxMjA2MDMwMTEwWhcNMjUxMjA3MDMwMTEwWjAzMTEwLwYDVQQD Eyg1YmNiY2UwYTRjMmU1ZWIwMDVhNTFmMTBkODk4MWQ3N2E1MWFmNTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixQrL29u5nvYcfTeyUPIjcnGlMID g0sj/unYyrr7rOJmeT3Gu39Q1xGAcaNM+HCDpusv5CdVrblfCat4BbGUR3u7iMd0 tVsT+ZE6L4yVJ9/GV+rJ6VMiQgFUUWWQpcnhxTXtMqSUFXStHeNYZ/GPy9vgow9A zEZKX2EsNV+eOTE41IZIgxYt0c5qFEnTACly8L33sdVOqnqvtQsdPOwGDoeHBtsj sm9ND2Sk4vVqBmOySFI2vXsV0FRwxcXP5Ys+/uwzshwP0I1nzVlFJDNO/0OvcmnU o/22j2jTqyHEnYUanrX1oCUW+Jun0mooXRuaf8jGi3+5xtphftHAEJ16KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvLzgpMLl6wBaUfENiYHXelGvUlMB8GA1UdIwQY MBaAFB+U0aKcziYVO5NPtHwu4hZ0u4XLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUt NTU0Y2FiYjlhZDA1LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUtNTU0Y2FiYjlhZDA1 LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbSRg9YB CSyHcZUnkeNUyenkAkE7fMintDrtxTa1fpYNCTtxLkbHbK4EslibUZMt92+/HfZ2 QlBCq4wqudIJcce1lMT2WskUgrwC0i1/uy9nrCAHflQlGQ/29aSOT/hUbWVVe1vK QnGty6ym1S2woYvty0x8IMyVqQnApU5sUMzuQchO/SeaeLxAEDH1rk8Q7enj1ghN Z/aiDFbt2qxB+yLlP1nVzZbrpSDLcipIeRJ7v3uZ4bZUWVEEYv6D4pkjBgCoHSJh Z1DegSUpXPVHos5m4C2/InSaCNClEa7to7h9Ib8me7F65cUfkTzFiPs/O2MJKgay dbg+yiTdKZTuPg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:43 2025 by rpki-client