This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft File: 612h2h-h1CXPHcnoJtZe2u1s2Jg.mft (raw, json) Hash identifier: NchSe9QxqRV/3S43fLkX2jXvPQPOl2qSZfrBKCe5gT8= Subject key identifier: 5B:82:79:B4:4B:D7:4D:4B:97:F0:3A:80:05:73:92:CA:A9:06:3E:6A Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98 Certificate issuer: /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898 Certificate serial: 019AF42DF83C0293CB2FACC3CBDF10715F97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft Manifest number: 1515 Signing time: Sat 06 Dec 2025 15:00:44 +0000 Manifest this update: Sat 06 Dec 2025 15:00:44 +0000 Manifest next update: Sun 07 Dec 2025 15:00:44 +0000 Files and hashes: 1: 612h2h-h1CXPHcnoJtZe2u1s2Jg.crl (hash: KHg+RK0CuEfVIT0An+yumOnuEv13BYFDlhPjW6vVmFk=) 2: T71-lLx_IRd0xdRoRiuKn01ramI.roa (hash: NdMh7OdN9MHFrjt5MDBsZ76I4BvEZisy0vA5gq92uHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:f8:3c:02:93:cb:2f:ac:c3:cb:df:10:71:5f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898 Validity Not Before: Dec 6 15:00:44 2025 GMT Not After : Dec 7 15:00:44 2025 GMT Subject: CN=5b8279b44bd74d4b97f03a80057392caa9063e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:e0:92:6e:20:36:b7:4f:81:1d:12:3e:16: 4a:5c:a0:b7:cd:5f:52:fa:ee:1c:3a:18:ac:92:f1: 87:88:d9:cc:57:c2:77:20:b7:7b:35:9d:4a:aa:1a: 08:ac:b8:bc:89:2a:0b:72:13:7f:cb:ae:95:90:d5: 34:1e:5c:12:0f:2d:fe:19:7b:95:d3:02:96:cf:11: 84:59:68:4f:64:a0:cf:8c:fc:37:9e:84:e7:ba:57: 20:e1:c5:4c:54:3e:ce:47:87:28:16:a9:25:db:5f: 85:45:be:96:ef:9f:c4:48:40:b6:bc:f1:83:aa:41: 81:aa:2b:a0:14:a3:e1:fa:da:51:81:c7:ff:b8:d6: 09:d6:61:0e:89:7c:8c:e8:85:04:de:87:3e:d2:44: 2f:ed:15:34:5f:1e:d3:1c:b8:17:09:64:46:29:10: 12:57:05:e3:7d:91:e4:f8:48:05:1d:76:e7:54:33: 82:49:3c:20:f9:a2:ec:74:9f:22:12:9f:6f:0c:13: cb:24:ab:f4:5b:ed:bb:e1:19:23:53:0e:f1:c7:b3: 1f:29:77:67:a8:f7:f2:ea:f5:b3:ab:44:a3:ac:4e: 5f:ad:67:36:1d:d2:ce:ee:0d:02:24:4a:59:ce:c3: d9:1b:a5:e4:a8:8f:c5:d4:30:f2:d2:85:4c:e7:df: 2d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:82:79:B4:4B:D7:4D:4B:97:F0:3A:80:05:73:92:CA:A9:06:3E:6A X509v3 Authority Key Identifier: keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d9:8a:37:39:36:fc:6f:cb:f5:e3:a5:5c:da:a4:7a:c2:c2: ea:bf:ed:b9:da:55:af:97:bc:2d:69:9c:43:ef:c8:a0:93:23: 53:ff:b0:a3:21:ef:22:59:f5:54:89:b8:d1:41:bc:46:40:2a: 7d:83:ce:eb:22:71:ac:10:7f:f7:21:05:a8:55:29:4d:96:05: 36:19:35:cf:e2:6d:30:7f:75:fd:48:ca:1a:db:03:43:c8:fd: 63:3e:32:ff:2c:cb:b4:35:16:6f:2a:ff:a6:1b:d7:7c:6b:53: 75:6f:0f:a5:45:4b:a5:5d:e0:fc:63:6a:24:56:75:2c:7a:66: 6d:4d:a7:cd:e9:78:a3:e8:26:11:ca:e0:36:61:62:53:d5:02: 0c:c6:62:d8:c6:b1:fc:26:50:36:72:e5:c3:d4:f0:15:0c:c8: 19:16:e1:61:b7:72:07:56:b5:83:88:9a:d9:d6:d5:5b:b2:f5: 25:e5:9a:4d:d3:95:91:01:33:21:9b:7a:9e:10:f2:43:0e:bf: 9a:15:15:37:d5:a2:c0:cc:1f:31:25:fb:0c:6b:f7:c8:88:29: 0f:a7:56:f7:5f:85:de:91:04:f1:94:24:37:cd:e1:b1:0d:79: 9d:40:61:32:cd:e4:c4:4e:c4:87:46:e6:4c:dc:62:bc:e4:57: 2e:ed:86:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lfg8ApPLL6zDy98QcV+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNWRhMWRhMWZhMWQ0MjVjZjFkYzllODI2ZDY1ZWRhZWQ2 Y2Q4OTgwHhcNMjUxMjA2MTUwMDQ0WhcNMjUxMjA3MTUwMDQ0WjAzMTEwLwYDVQQD Eyg1YjgyNzliNDRiZDc0ZDRiOTdmMDNhODAwNTczOTJjYWE5MDYzZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCrgkm4gNrdPgR0SPhZKXKC3zV9S +u4cOhiskvGHiNnMV8J3ILd7NZ1KqhoIrLi8iSoLchN/y66VkNU0HlwSDy3+GXuV 0wKWzxGEWWhPZKDPjPw3noTnulcg4cVMVD7OR4coFqkl21+FRb6W75/ESEC2vPGD qkGBqiugFKPh+tpRgcf/uNYJ1mEOiXyM6IUE3oc+0kQv7RU0Xx7THLgXCWRGKRAS VwXjfZHk+EgFHXbnVDOCSTwg+aLsdJ8iEp9vDBPLJKv0W+274RkjUw7xx7MfKXdn qPfy6vWzq0SjrE5frWc2HdLO7g0CJEpZzsPZG6XkqI/F1DDy0oVM598tKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuCebRL101Ll/A6gAVzksqpBj5qMB8GA1UdIwQY MBaAFOtdodofodQlzx3J6CbWXtrtbNiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjEyaDJoLWgxQ1hQSGNub0p0WmUydTFzMkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmFlNTQtZWQ2Ny00MDFhLTg4ZjMt N2Y4Yzk4M2YxNGE0LzEvNjEyaDJoLWgxQ1hQSGNub0p0WmUydTFzMkpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9kNmFlNTQtZWQ2Ny00MDFhLTg4ZjMtN2Y4Yzk4M2YxNGE0 LzEvNjEyaDJoLWgxQ1hQSGNub0p0WmUydTFzMkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONmKNzk2 /G/L9eOlXNqkesLC6r/tudpVr5e8LWmcQ+/IoJMjU/+woyHvIln1VIm40UG8RkAq fYPO6yJxrBB/9yEFqFUpTZYFNhk1z+JtMH91/UjKGtsDQ8j9Yz4y/yzLtDUWbyr/ phvXfGtTdW8PpUVLpV3g/GNqJFZ1LHpmbU2nzel4o+gmEcrgNmFiU9UCDMZi2Max /CZQNnLlw9TwFQzIGRbhYbdyB1a1g4ia2dbVW7L1JeWaTdOVkQEzIZt6nhDyQw6/ mhUVN9WiwMwfMSX7DGv3yIgpD6dW91+F3pEE8ZQkN83hsQ15nUBhMs3kxE7Eh0bm TNxivORXLu2GYg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:39:16 2025 by rpki-client