This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft File: 1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json) Hash identifier: w29y4qt8Tustca6EnAARlzBKbODl9MIuqDB4YytiQX4= Subject key identifier: C8:13:EB:3E:37:A4:62:4A:8A:A6:CB:D1:B2:F5:E9:14:2C:56:F0:B3 Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c Certificate serial: 019AF3C03CE5936FF517AC7AB4A5EC2F231A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft Manifest number: 0A6C Signing time: Sat 06 Dec 2025 13:00:53 +0000 Manifest this update: Sat 06 Dec 2025 13:00:53 +0000 Manifest next update: Sun 07 Dec 2025 13:00:53 +0000 Files and hashes: 1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: zzpxROiduNe+y2YTyrqnBj+q2xwlYxUa0Nb9uovtA3Q=) 2: XYlDbmNEweM6LqFALkkvUh2W9lE.roa (hash: 9gP6l/HCX+2ev9Uk9YYU1pfiHW7Ig/5Pk5coTY/utmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:3c:e5:93:6f:f5:17:ac:7a:b4:a5:ec:2f:23:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c Validity Not Before: Dec 6 13:00:53 2025 GMT Not After : Dec 7 13:00:53 2025 GMT Subject: CN=c813eb3e37a4624a8aa6cbd1b2f5e9142c56f0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:45:55:6a:d3:09:64:ae:f9:dd:09:61:50:27: fb:e3:7e:8b:1c:4b:d1:97:64:f4:68:c6:9c:39:d8: 0e:ed:53:33:5b:1f:ec:9b:16:23:0d:09:ee:5e:cb: c3:3a:03:97:d2:ef:0d:38:fb:f6:e5:cf:23:53:b4: 30:c3:32:da:4a:25:c9:6d:3c:13:7e:31:8f:6b:be: 29:f2:e1:c1:fc:3d:82:49:87:65:3d:f3:a3:f4:b1: ff:9d:92:ed:db:ff:4a:d0:91:ad:f5:4b:ed:aa:eb: 55:8d:82:5b:42:2f:79:e6:0d:94:b1:c3:37:5e:4e: 83:9e:b8:2a:ff:d8:b4:f7:50:6e:0d:ea:47:ed:8f: 9f:76:bd:2c:6c:58:81:b2:3a:97:5f:ba:d9:95:43: 49:44:65:8b:ac:3e:94:7a:27:83:cb:a8:9d:b8:d2: 61:ee:cf:0a:77:db:0d:2b:5e:31:fc:f5:c1:28:d6: 2f:f8:f2:99:9d:43:80:f2:1f:eb:e5:b2:e1:d6:f3: 9d:5a:18:28:88:03:8f:30:c9:70:5e:ca:56:6d:99: 1e:2d:cf:19:96:27:bf:fd:fe:49:54:68:67:5c:ae: 32:f1:71:62:ab:d3:bd:93:a4:9c:31:cc:90:a5:5a: 3a:ac:b9:36:09:eb:66:fd:e2:fa:aa:31:9b:54:e9: e3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:13:EB:3E:37:A4:62:4A:8A:A6:CB:D1:B2:F5:E9:14:2C:56:F0:B3 X509v3 Authority Key Identifier: keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b1:87:fc:5f:a0:ca:33:2e:f4:21:b1:45:16:a5:3b:81:03: 2c:c2:6b:f8:cd:60:f9:01:6f:8d:d9:dd:1b:78:41:02:9f:d4: a3:c1:fd:2f:23:fb:ad:fb:8a:9a:15:9b:c2:88:dc:ce:41:6f: e8:9e:a5:b0:72:f0:8f:ec:d3:80:4d:e9:fc:d8:06:82:82:5d: 1c:3f:a8:c8:d8:1c:c5:14:e6:58:9d:c2:34:1f:95:34:e0:34: 67:87:ad:61:ca:98:b6:71:af:a9:b8:33:ee:2e:0b:c3:b5:26: 0d:69:1e:89:cf:f6:a6:e4:f8:9f:df:34:f4:7b:ed:aa:f7:5e: 91:9f:64:55:a7:16:81:4f:d1:8f:a8:7e:3e:91:36:b6:33:25: 10:7d:21:f7:b3:3b:63:cd:58:89:3c:5b:97:e2:66:13:d9:43: b9:a6:df:c2:f4:f7:d6:e8:a1:74:22:22:36:a7:71:35:df:b3: a0:0c:e3:40:2c:48:58:06:d1:b2:82:50:85:11:a7:1f:3a:ce: 55:6c:31:43:c8:91:61:04:e8:2b:75:e9:97:d5:05:11:e9:07: 5f:e8:46:40:bb:3d:06:51:99:da:c2:6c:27:09:81:87:dd:dd: 7f:78:ec:6f:7e:aa:78:7a:89:d6:3e:db:80:91:f6:ab:e3:78: 1d:3e:17:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDzlk2/1F6x6tKXsLyMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MTA4YTQ4NWRmYWYwNmE5MzFmNTQzYzA4NWEwMDljNmFl YTJkOWMwHhcNMjUxMjA2MTMwMDUzWhcNMjUxMjA3MTMwMDUzWjAzMTEwLwYDVQQD EyhjODEzZWIzZTM3YTQ2MjRhOGFhNmNiZDFiMmY1ZTkxNDJjNTZmMGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0VVatMJZK753QlhUCf7436LHEvR l2T0aMacOdgO7VMzWx/smxYjDQnuXsvDOgOX0u8NOPv25c8jU7QwwzLaSiXJbTwT fjGPa74p8uHB/D2CSYdlPfOj9LH/nZLt2/9K0JGt9UvtqutVjYJbQi955g2UscM3 Xk6Dnrgq/9i091BuDepH7Y+fdr0sbFiBsjqXX7rZlUNJRGWLrD6UeieDy6iduNJh 7s8Kd9sNK14x/PXBKNYv+PKZnUOA8h/r5bLh1vOdWhgoiAOPMMlwXspWbZkeLc8Z lie//f5JVGhnXK4y8XFiq9O9k6ScMcyQpVo6rLk2Cetm/eL6qjGbVOnjUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgT6z43pGJKiqbL0bL16RQsVvCzMB8GA1UdIwQY MBaAFNYQikhd+vBqkx9UPAhaAJxq6i2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWhDS1NGMzY4R3FUSDFROENGb0FuR3JxTFp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83NTg4Y2EtNTY3Ny00Nzk1LThhODEt YjZmOWRmNDU1MjQ5LzEvMWhDS1NGMzY4R3FUSDFROENGb0FuR3JxTFp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni83NTg4Y2EtNTY3Ny00Nzk1LThhODEtYjZmOWRmNDU1MjQ5 LzEvMWhDS1NGMzY4R3FUSDFROENGb0FuR3JxTFp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7GH/F+g yjMu9CGxRRalO4EDLMJr+M1g+QFvjdndG3hBAp/Uo8H9LyP7rfuKmhWbwojczkFv 6J6lsHLwj+zTgE3p/NgGgoJdHD+oyNgcxRTmWJ3CNB+VNOA0Z4etYcqYtnGvqbgz 7i4Lw7UmDWkeic/2puT4n9809HvtqvdekZ9kVacWgU/Rj6h+PpE2tjMlEH0h97M7 Y81YiTxbl+JmE9lDuabfwvT31uihdCIiNqdxNd+zoAzjQCxIWAbRsoJQhRGnHzrO VWwxQ8iRYQToK3Xpl9UFEekHX+hGQLs9BlGZ2sJsJwmBh93df3jsb36qeHqJ1j7b gJH2q+N4HT4XyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:07:46 2025 by rpki-client