This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json) Hash identifier: 7Zna/XH951OTDTvDwYE0s23BHWdH3euYZsdNwpfu5fE= Subject key identifier: B6:29:91:DF:2D:23:D1:D5:71:CD:56:53:B2:4F:2C:13:44:D3:C2:D2 Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d Certificate serial: 019AF42E4BADF02290A59E1FF6AF606B291A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft Manifest number: 0A5C Signing time: Sat 06 Dec 2025 15:01:06 +0000 Manifest this update: Sat 06 Dec 2025 15:01:06 +0000 Manifest next update: Sun 07 Dec 2025 15:01:06 +0000 Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: ur6AaR6TB+eUqlyphmfWBhw9cUrhdfIF2UvHQUlVRmo=) 2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=) 3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:4b:ad:f0:22:90:a5:9e:1f:f6:af:60:6b:29:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d Validity Not Before: Dec 6 15:01:06 2025 GMT Not After : Dec 7 15:01:06 2025 GMT Subject: CN=b62991df2d23d1d571cd5653b24f2c1344d3c2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:e1:84:37:cd:15:37:48:76:3a:32:de:ea: aa:ca:5b:89:9a:4b:9c:53:b2:f0:8b:76:4d:cc:5f: 16:b6:df:c4:4d:a4:8a:54:5e:1e:77:cb:22:17:6e: 0b:5b:8c:7b:fa:76:bc:9d:bd:67:e3:b1:fe:d0:c8: cb:5b:04:44:fc:d3:b1:cf:8e:6e:51:19:8a:ba:37: 0d:3f:1c:36:03:10:c9:9c:5f:1b:30:33:95:8d:2e: a7:83:11:c0:ff:cc:2e:a9:3d:d3:22:3c:79:77:d0: 0e:2b:ea:24:3b:43:e6:6d:f6:99:b7:30:c6:6c:e3: ec:e6:b3:b1:52:a8:e6:6a:e0:85:cd:0a:92:42:9e: 80:88:b3:73:c4:8e:c2:9e:ef:7e:5c:6e:ec:92:22: 24:3f:01:54:5b:1b:e3:fa:a7:00:de:8f:2e:fd:57: 10:a1:bb:0a:b8:ce:56:83:95:f0:fb:ff:c9:95:ba: 7c:0e:ef:64:f2:72:2d:83:c4:e1:90:a9:3a:f6:2d: 29:d5:16:94:9c:95:bc:ad:c3:5f:3e:c4:47:ba:fa: 20:34:e9:b0:84:d4:9e:6c:c5:22:6f:e2:fa:fa:ea: c5:17:53:23:55:84:b3:a0:eb:35:59:8b:a9:55:92: 7e:9d:7e:73:81:cc:5d:a8:55:2c:be:6f:26:b8:c0: 29:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:29:91:DF:2D:23:D1:D5:71:CD:56:53:B2:4F:2C:13:44:D3:C2:D2 X509v3 Authority Key Identifier: keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:89:9d:a8:fc:0a:5e:b5:c2:67:00:8b:7d:3c:4c:1e:7a:83: 8b:a9:a0:35:dc:4d:06:64:ea:b8:9a:10:bd:68:26:42:83:f0: 06:6f:92:d3:21:81:32:7f:9d:81:12:14:81:54:36:c0:37:93: c9:9f:46:52:07:48:f0:9c:77:1c:30:76:59:79:88:d8:3a:93: 07:ba:63:52:c6:21:d0:94:59:d5:d2:8a:7f:f5:d4:31:a9:b8: 3f:f2:d1:34:b6:3c:2b:b7:d4:bd:59:0f:ee:bc:dd:93:c8:4b: b2:38:80:7c:5d:39:5a:8f:45:b8:8a:68:2b:e3:3e:59:a3:a1: e6:d2:cf:5e:31:99:e9:86:ce:44:b9:d9:4e:b9:49:dd:1e:99: fe:ee:3b:93:c3:f4:ee:20:74:95:41:20:5c:3e:f8:f2:ed:0b: 62:e9:26:0e:7c:99:dc:ca:78:19:18:1e:38:ec:ba:a8:82:da: d7:2d:41:11:db:09:58:62:e7:04:ba:3b:3f:3f:39:2a:10:22: 78:5d:d8:52:7c:4d:e8:0c:cc:bd:fe:2e:b5:9c:70:ab:1d:b2: 5c:39:ca:68:91:5e:1d:0e:27:6d:c6:3e:1f:67:2a:31:1b:86: c0:14:46:f8:5b:31:61:58:90:92:ce:ca:c5:04:aa:23:fc:96: e4:fc:e2:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lkut8CKQpZ4f9q9gaykaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZjJjZjFhNjIzMGNkNjJjYjNjYThhMWJjMWQ0YTRiYjQz MzdjMWQwHhcNMjUxMjA2MTUwMTA2WhcNMjUxMjA3MTUwMTA2WjAzMTEwLwYDVQQD EyhiNjI5OTFkZjJkMjNkMWQ1NzFjZDU2NTNiMjRmMmMxMzQ0ZDNjMmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pThhDfNFTdIdjoy3uqqyluJmkuc U7Lwi3ZNzF8Wtt/ETaSKVF4ed8siF24LW4x7+na8nb1n47H+0MjLWwRE/NOxz45u URmKujcNPxw2AxDJnF8bMDOVjS6ngxHA/8wuqT3TIjx5d9AOK+okO0PmbfaZtzDG bOPs5rOxUqjmauCFzQqSQp6AiLNzxI7Cnu9+XG7skiIkPwFUWxvj+qcA3o8u/VcQ obsKuM5Wg5Xw+//Jlbp8Du9k8nItg8ThkKk69i0p1RaUnJW8rcNfPsRHuvogNOmw hNSebMUib+L6+urFF1MjVYSzoOs1WYupVZJ+nX5zgcxdqFUsvm8muMApjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYpkd8tI9HVcc1WU7JPLBNE08LSMB8GA1UdIwQY MBaAFB/yzxpiMM1iyzyoobwdSku0M3wdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSF9MUEdtSXd6V0xMUEtpaHZCMUtTN1F6ZkIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82YTQ4YTctMGMwMS00YWNhLWI0MzEt NmNlZGNmMjM0OTc1LzEvSF9MUEdtSXd6V0xMUEtpaHZCMUtTN1F6ZkIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82YTQ4YTctMGMwMS00YWNhLWI0MzEtNmNlZGNmMjM0OTc1 LzEvSF9MUEdtSXd6V0xMUEtpaHZCMUtTN1F6ZkIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJomdqPwK XrXCZwCLfTxMHnqDi6mgNdxNBmTquJoQvWgmQoPwBm+S0yGBMn+dgRIUgVQ2wDeT yZ9GUgdI8Jx3HDB2WXmI2DqTB7pjUsYh0JRZ1dKKf/XUMam4P/LRNLY8K7fUvVkP 7rzdk8hLsjiAfF05Wo9FuIpoK+M+WaOh5tLPXjGZ6YbORLnZTrlJ3R6Z/u47k8P0 7iB0lUEgXD748u0LYukmDnyZ3Mp4GRgeOOy6qILa1y1BEdsJWGLnBLo7Pz85KhAi eF3YUnxN6AzMvf4utZxwqx2yXDnKaJFeHQ4nbcY+H2cqMRuGwBRG+FsxYViQks7K xQSqI/yW5PziCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:37 2025 by rpki-client