This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft File: rh6ygNFyKEakQSTExi0AWfYa8kI.mft (raw, json) Hash identifier: d2T1V8BH6lWsjMnmRYJ6YemfzukmnBoNULl8OhTzGZI= Subject key identifier: 1E:B7:BF:E4:93:E3:86:9E:80:5C:31:23:E9:3B:10:A8:6D:F5:45:37 Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42 Certificate issuer: /CN=ae1eb280d1722846a44124c4c62d0059f61af242 Certificate serial: 019AF1D22F41A8B18118E0EB0EB3353795BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: AkkqTkgoNjucTbIenc-XdoQnIZI.roa (hash: 22rbMnk8MBt5UQAAhQP9wIF7s9K2LwR7KpEuXLLCYQA=) 2: rh6ygNFyKEakQSTExi0AWfYa8kI.crl (hash: xOoRJHVmmEL4AQc6ZTXhqXHs1Bk7A9K9RD0H7hB+sKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2f:41:a8:b1:81:18:e0:eb:0e:b3:35:37:95:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242 Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=1eb7bfe493e3869e805c3123e93b10a86df54537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bf:ac:c0:bb:b9:1a:8e:00:85:6c:57:76:08: fa:84:67:43:81:7e:5f:a3:ba:9c:ad:6e:83:e8:00: 8b:de:94:4c:41:e0:9f:27:d2:03:d5:9f:6a:51:80: b9:ac:dc:a8:e2:02:da:95:aa:cd:30:91:98:ee:12: d3:3c:5b:26:e5:62:e0:0e:b7:02:3b:57:ce:23:5c: d9:e1:9a:a5:c9:0a:7f:4c:4d:81:6c:ca:2c:4a:45: f7:7e:90:9b:b8:52:06:4e:05:05:9e:93:f3:3b:cf: 4e:b6:63:3d:0a:30:ee:92:47:c2:1a:78:1f:b6:a7: 7f:20:55:91:1d:46:b2:2f:d4:66:16:b0:91:ac:63: 56:89:58:1b:d9:49:06:19:dc:7b:c3:da:62:af:d3: 7b:8a:eb:20:0d:29:97:e1:65:fc:44:c2:f9:36:51: c2:79:5f:1a:66:5c:f9:a3:be:ab:d5:66:d8:59:bc: 08:12:10:12:a9:e8:d0:c0:fb:48:46:2b:08:b6:e5: 71:99:ef:93:6f:60:22:e5:58:60:cd:17:69:46:1d: e6:e9:b0:0e:32:46:91:a7:8a:5b:23:8d:41:19:f6: 1a:0c:2f:02:cb:41:61:48:2d:82:9e:11:06:1e:4c: d9:b3:30:c5:50:d1:3f:e0:c4:b3:c7:2e:23:78:65: 52:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B7:BF:E4:93:E3:86:9E:80:5C:31:23:E9:3B:10:A8:6D:F5:45:37 X509v3 Authority Key Identifier: keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:cc:4c:64:8d:06:3e:23:20:9f:4f:f7:53:c3:18:02:07:a3: f4:0d:d1:0e:4e:89:12:36:73:3f:de:82:ca:2e:00:81:b9:d3: 52:f1:da:1d:e1:6d:45:48:b7:b7:95:88:7e:a9:de:d8:a1:60: 84:ae:bb:20:41:b0:46:07:fd:67:3d:11:90:7c:10:82:84:8c: 13:4e:e9:28:3f:34:25:be:b8:a8:e3:fc:13:97:1c:cc:4a:e0: 45:63:86:45:5d:3d:a6:2a:79:71:ad:6e:1b:b7:0b:6e:9d:a5: f4:e7:1a:85:26:c6:97:92:b2:f6:c3:1b:c6:e9:53:17:66:72: 7d:89:ac:3f:43:f3:b8:25:cd:59:86:24:bb:e1:cc:93:36:4c: c9:39:c9:8c:b3:83:85:4c:3a:cf:31:78:0e:6b:7c:73:f1:d9: 04:32:96:8b:b0:0f:bd:3a:48:e5:53:c0:fc:3a:47:3d:0f:9c: 95:7a:53:22:18:4b:fc:02:bf:43:a7:e8:8e:1c:f6:65:24:95: 9f:8f:65:65:c3:bb:73:ca:06:0b:9f:12:6f:e3:f4:37:d6:8a: 4d:d5:25:31:61:9d:71:a5:1c:14:7e:0c:55:c1:3f:3c:17:8a: ff:29:f5:ef:a7:a6:c9:76:74:87:0c:95:ee:6a:5e:88:c1:34: bd:46:85:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0i9BqLGBGODrDrM1N5W+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMWViMjgwZDE3MjI4NDZhNDQxMjRjNGM2MmQwMDU5ZjYx YWYyNDIwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD EygxZWI3YmZlNDkzZTM4NjllODA1YzMxMjNlOTNiMTBhODZkZjU0NTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77+swLu5Go4AhWxXdgj6hGdDgX5f o7qcrW6D6ACL3pRMQeCfJ9ID1Z9qUYC5rNyo4gLalarNMJGY7hLTPFsm5WLgDrcC O1fOI1zZ4ZqlyQp/TE2BbMosSkX3fpCbuFIGTgUFnpPzO89OtmM9CjDukkfCGngf tqd/IFWRHUayL9RmFrCRrGNWiVgb2UkGGdx7w9pir9N7iusgDSmX4WX8RML5NlHC eV8aZlz5o76r1WbYWbwIEhASqejQwPtIRisItuVxme+Tb2Ai5VhgzRdpRh3m6bAO MkaRp4pbI41BGfYaDC8Cy0FhSC2CnhEGHkzZszDFUNE/4MSzxy4jeGVSNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB63v+ST44aegFwxI+k7EKht9UU3MB8GA1UdIwQY MBaAFK4esoDRcihGpEEkxMYtAFn2GvJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xZmRmMDQtOGI0ZS00MzMyLWE0ZGUt Nzc5M2I5ZWZiMWJkLzEvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8xZmRmMDQtOGI0ZS00MzMyLWE0ZGUtNzc5M2I5ZWZiMWJk LzEvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisxMZI0G PiMgn0/3U8MYAgej9A3RDk6JEjZzP96Cyi4AgbnTUvHaHeFtRUi3t5WIfqne2KFg hK67IEGwRgf9Zz0RkHwQgoSME07pKD80Jb64qOP8E5cczErgRWOGRV09pip5ca1u G7cLbp2l9OcahSbGl5Ky9sMbxulTF2ZyfYmsP0PzuCXNWYYku+HMkzZMyTnJjLOD hUw6zzF4Dmt8c/HZBDKWi7APvTpI5VPA/DpHPQ+clXpTIhhL/AK/Q6fojhz2ZSSV n49lZcO7c8oGC58Sb+P0N9aKTdUlMWGdcaUcFH4MVcE/PBeK/yn176emyXZ0hwyV 7mpeiME0vUaFVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:53 2025 by rpki-client