This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json) Hash identifier: lIcYvM8m2Pq18nhMKz7/HEVEeqeltnK8QGNrSy6dslk= Subject key identifier: 83:D2:21:3C:5A:A3:01:01:CA:E9:17:39:35:EF:0F:3F:08:CC:6A:01 Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb Certificate serial: 019B3532832EB445570FF8141FCD49574FB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft Manifest number: 142F Signing time: Fri 19 Dec 2025 06:01:01 +0000 Manifest this update: Fri 19 Dec 2025 06:01:01 +0000 Manifest next update: Sat 20 Dec 2025 06:01:01 +0000 Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: 4EswIY5fuMa3e3YA1ezQotvQXcaa+HO5PjofB+yV62U=) 2: YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa (hash: UwEIySf0ujQ0bIXU2dedyQ3b/IuoBDp7UIw7LsZq4qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:83:2e:b4:45:57:0f:f8:14:1f:cd:49:57:4f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb Validity Not Before: Dec 19 06:01:01 2025 GMT Not After : Dec 20 06:01:01 2025 GMT Subject: CN=83d2213c5aa30101cae9173935ef0f3f08cc6a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e9:82:5c:d3:db:0f:64:3c:a2:bc:15:6c:b1: e5:2e:a2:b7:9a:41:31:82:49:19:3f:eb:23:95:88: d5:cc:53:21:2a:e0:27:d6:3f:5d:f6:6c:d3:cb:53: a5:60:fd:5a:db:b5:4b:ea:d4:5c:a9:63:ed:e2:c6: 6c:16:a7:29:43:ff:ec:b8:87:3e:b8:5f:21:49:e5: 70:1c:9f:d6:b5:ed:f0:df:78:7f:b4:50:83:3e:c0: e5:de:87:30:b9:f9:a3:9c:be:14:66:92:60:4d:66: 39:37:f8:a5:15:8a:f9:85:83:25:36:d5:c0:3f:47: 50:e9:86:b4:df:85:d6:ca:c1:7c:ba:cf:da:c4:3c: 07:d2:73:c5:74:ae:c9:50:5c:51:72:7e:c7:db:18: cf:51:07:8e:d3:d4:2c:13:17:42:bb:71:60:2f:5f: 63:3c:65:a8:6d:f4:26:fd:3a:43:de:f0:71:0a:be: 04:96:f8:d2:bb:ea:74:dc:5f:b6:f1:8f:46:72:b7: 30:2e:cb:bd:f3:30:90:2e:9f:1d:74:1d:6a:6e:5e: eb:92:11:8e:5e:08:30:50:86:88:83:7d:77:bc:77: 28:8e:53:cd:62:d8:8c:32:a1:dd:86:a1:75:05:28: 2d:ee:b5:0f:21:24:1c:4a:9b:27:78:3d:9f:00:49: 39:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D2:21:3C:5A:A3:01:01:CA:E9:17:39:35:EF:0F:3F:08:CC:6A:01 X509v3 Authority Key Identifier: keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:18:66:ae:d8:b7:68:b0:d6:5a:85:8a:65:7e:c2:c5:d4:94: 24:85:02:4a:a3:52:6b:c5:d6:79:b5:66:1c:17:e6:bd:56:0a: 24:9a:5a:53:21:cd:ad:86:71:cd:57:63:71:37:07:b5:03:8d: 42:d4:41:c3:fc:07:bf:b8:4e:f3:35:03:5e:aa:59:3f:65:03: 77:70:96:da:1d:ca:ad:8a:17:50:7e:b1:67:9e:8b:bb:60:85: 4b:02:35:33:0d:39:78:47:11:ae:92:da:5b:0c:1d:fb:db:13: 0d:06:e8:a6:c6:51:c8:d4:76:98:56:4d:7b:70:2b:f8:1b:9b: 3b:7e:d7:cf:e0:ff:78:00:4b:05:0e:8e:2d:17:12:1f:93:47: d6:79:b7:ac:d0:d6:f2:81:c3:fd:95:58:d9:8b:3c:e3:cf:22: e7:10:4f:df:02:49:24:2e:dd:d9:b6:17:fe:eb:18:71:47:e5: 6b:d7:6d:48:d9:b9:65:ee:d4:04:af:6d:00:fa:33:03:42:73: cb:e2:97:4b:16:3b:85:c8:85:7e:91:a8:5d:8c:c1:9e:5e:02: fc:ae:0a:70:60:4f:3e:07:e1:bb:86:55:e0:27:9d:12:91:80: 5a:0e:96:cb:e5:69:7d:b6:83:7b:14:21:b8:89:20:2b:1d:6d: 81:cf:68:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MoMutEVXD/gUH81JV0+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOTRkMWEyOWNjZTI2MTUzYjkzNGZiNDdjMmVlMjE2NzRi Yjg1Y2IwHhcNMjUxMjE5MDYwMTAxWhcNMjUxMjIwMDYwMTAxWjAzMTEwLwYDVQQD Eyg4M2QyMjEzYzVhYTMwMTAxY2FlOTE3MzkzNWVmMGYzZjA4Y2M2YTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOmCXNPbD2Q8orwVbLHlLqK3mkEx gkkZP+sjlYjVzFMhKuAn1j9d9mzTy1OlYP1a27VL6tRcqWPt4sZsFqcpQ//suIc+ uF8hSeVwHJ/Wte3w33h/tFCDPsDl3ocwufmjnL4UZpJgTWY5N/ilFYr5hYMlNtXA P0dQ6Ya034XWysF8us/axDwH0nPFdK7JUFxRcn7H2xjPUQeO09QsExdCu3FgL19j PGWobfQm/TpD3vBxCr4ElvjSu+p03F+28Y9GcrcwLsu98zCQLp8ddB1qbl7rkhGO XggwUIaIg313vHcojlPNYtiMMqHdhqF1BSgt7rUPISQcSpsneD2fAEk5FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPSITxaowEByukXOTXvDz8IzGoBMB8GA1UdIwQY MBaAFB+U0aKcziYVO5NPtHwu4hZ0u4XLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUt NTU0Y2FiYjlhZDA1LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUtNTU0Y2FiYjlhZDA1 LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxhmrti3 aLDWWoWKZX7CxdSUJIUCSqNSa8XWebVmHBfmvVYKJJpaUyHNrYZxzVdjcTcHtQON QtRBw/wHv7hO8zUDXqpZP2UDd3CW2h3KrYoXUH6xZ56Lu2CFSwI1Mw05eEcRrpLa Wwwd+9sTDQbopsZRyNR2mFZNe3Ar+BubO37Xz+D/eABLBQ6OLRcSH5NH1nm3rNDW 8oHD/ZVY2Ys8488i5xBP3wJJJC7d2bYX/usYcUfla9dtSNm5Ze7UBK9tAPozA0Jz y+KXSxY7hciFfpGoXYzBnl4C/K4KcGBPPgfhu4ZV4CedEpGAWg6Wy+VpfbaDexQh uIkgKx1tgc9oUw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:26:30 2025 by rpki-client