This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json) Hash identifier: gwL2TWOtkM+2uUk/LMgozwMOmLP4CtLBJlQYyklGNpU= Subject key identifier: 92:EE:7E:88:A5:FB:DC:33:E6:B6:8A:E3:56:E6:0F:0B:F1:B5:D3:5B Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0 Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0 Certificate serial: 019AF27707875F01834F0DAAD66AE2BB1AD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft Manifest number: 176E Signing time: Sat 06 Dec 2025 07:01:18 +0000 Manifest this update: Sat 06 Dec 2025 07:01:18 +0000 Manifest next update: Sun 07 Dec 2025 07:01:18 +0000 Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: dPiqtqobftsjKlZ3M7sOQiuJc4Is+4+q/lEO0Mx2e80=) 2: 9ljz8BH-r5M9E0E8QZVdMscfFcc.roa (hash: R05FnjufsdTaxBZfb6zSEUa9ud9KopjuHR8LRayH9Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:07:87:5f:01:83:4f:0d:aa:d6:6a:e2:bb:1a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0 Validity Not Before: Dec 6 07:01:18 2025 GMT Not After : Dec 7 07:01:18 2025 GMT Subject: CN=92ee7e88a5fbdc33e6b68ae356e60f0bf1b5d35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:ed:ea:ed:19:61:57:a1:a2:a1:48:17:82: fd:c6:d4:98:01:2d:66:70:0d:82:4f:a7:f2:4f:a2: fc:d1:15:3a:05:29:ca:eb:a0:50:e4:24:48:e4:8e: 8a:98:bb:54:0c:0d:c8:75:b1:56:66:aa:ac:72:0b: 34:53:85:2e:41:50:c7:bc:85:6b:86:e9:db:b4:fe: 3a:dc:cd:5f:69:e8:21:66:66:ff:b4:88:50:9c:c4: 60:b1:38:7a:1f:eb:70:d6:30:cf:32:6c:34:28:eb: ca:98:82:c6:31:f0:c9:0d:3d:4f:09:c3:fd:99:05: 16:36:40:4c:70:46:9d:b6:26:b9:42:87:fd:fa:d9: e9:97:be:7d:58:f7:29:ed:32:b7:a2:69:e7:56:f5: 37:46:3c:9a:5c:dd:14:77:b2:79:33:89:ed:3c:6c: 58:fe:0e:82:ac:39:94:ad:8b:41:31:2a:f0:a0:cf: 32:45:0f:60:96:79:57:ea:6e:e4:5c:2d:fd:48:66: 95:f3:d9:16:3f:26:df:39:0e:50:fe:b4:d1:db:b6: b4:de:56:bd:95:de:09:7d:cc:a3:30:44:fb:3f:f3: 5a:7f:3f:9d:db:f9:b0:77:1b:63:8c:0f:aa:50:4d: 83:42:3f:74:73:f5:f5:0f:29:6f:a4:9c:30:06:ba: f4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EE:7E:88:A5:FB:DC:33:E6:B6:8A:E3:56:E6:0F:0B:F1:B5:D3:5B X509v3 Authority Key Identifier: keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:db:3b:62:88:23:8b:e5:1d:0f:e9:97:bf:0f:00:9c:1d:7a: 37:86:fd:ed:9b:e3:2e:8e:25:87:23:8c:1c:13:d6:01:3f:86: a6:8b:55:4c:fb:0f:0e:0e:0f:0b:3c:a5:f8:0d:45:3f:2c:f6: ae:fa:3c:a1:c9:8b:69:c2:ee:7f:69:b7:75:5d:21:6c:5e:25: 3d:4a:3d:38:6f:c2:19:c3:b6:35:a5:49:c5:33:70:f6:e4:8a: 9b:a6:d8:82:2d:b1:75:56:52:13:41:d6:5a:8d:e1:73:1c:15: e5:50:a4:87:fb:15:cc:4b:d1:74:bd:36:2e:d6:f6:41:7f:01: 1b:42:83:4c:ea:35:a0:d2:f2:f2:17:55:34:10:26:8f:ab:e7: 70:87:cb:b1:51:10:20:88:68:dc:d5:6a:d9:99:e3:88:92:51: 70:3d:4f:11:5b:93:5f:a3:de:98:f2:70:08:15:d1:ef:cd:d2: d3:0c:5c:eb:0c:52:90:85:bd:9b:54:51:00:b2:24:15:44:f6: ab:be:8a:38:5b:ea:d3:e7:9d:19:25:50:9f:4c:ea:8c:29:58: fd:37:f7:37:e9:5a:69:06:e0:70:a5:44:a5:bf:19:6e:f2:d5: c5:56:74:4a:2f:bb:1e:86:82:c3:4d:45:e2:23:1a:2b:0b:2d: 3f:b7:b6:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydweHXwGDTw2q1mriuxrUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MTI3NDJiOTFkNzcwZmU4ZWZiYzliNWRjZjhkYzM4OTg0 ZGQwZjAwHhcNMjUxMjA2MDcwMTE4WhcNMjUxMjA3MDcwMTE4WjAzMTEwLwYDVQQD Eyg5MmVlN2U4OGE1ZmJkYzMzZTZiNjhhZTM1NmU2MGYwYmYxYjVkMzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTnt6u0ZYVehoqFIF4L9xtSYAS1m cA2CT6fyT6L80RU6BSnK66BQ5CRI5I6KmLtUDA3IdbFWZqqscgs0U4UuQVDHvIVr hunbtP463M1faeghZmb/tIhQnMRgsTh6H+tw1jDPMmw0KOvKmILGMfDJDT1PCcP9 mQUWNkBMcEadtia5Qof9+tnpl759WPcp7TK3omnnVvU3RjyaXN0Ud7J5M4ntPGxY /g6CrDmUrYtBMSrwoM8yRQ9glnlX6m7kXC39SGaV89kWPybfOQ5Q/rTR27a03la9 ld4JfcyjMET7P/Nafz+d2/mwdxtjjA+qUE2DQj90c/X1DylvpJwwBrr06QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLufoil+9wz5raK41bmDwvxtdNbMB8GA1UdIwQY MBaAFNYSdCuR13D+jvvJtdz43DiYTdDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8xM2ZiNjUtNGVlNy00MDI2LWFhM2Et OWQ1NmUzYWRjYTkwLzEvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8xM2ZiNjUtNGVlNy00MDI2LWFhM2EtOWQ1NmUzYWRjYTkw LzEvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9s7Yogj i+UdD+mXvw8AnB16N4b97ZvjLo4lhyOMHBPWAT+GpotVTPsPDg4PCzyl+A1FPyz2 rvo8ocmLacLuf2m3dV0hbF4lPUo9OG/CGcO2NaVJxTNw9uSKm6bYgi2xdVZSE0HW Wo3hcxwV5VCkh/sVzEvRdL02Ltb2QX8BG0KDTOo1oNLy8hdVNBAmj6vncIfLsVEQ IIho3NVq2ZnjiJJRcD1PEVuTX6PemPJwCBXR783S0wxc6wxSkIW9m1RRALIkFUT2 q76KOFvq0+edGSVQn0zqjClY/Tf3N+laaQbgcKVEpb8ZbvLVxVZ0Si+7HoaCw01F 4iMaKwstP7e2oQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:21:01 2025 by rpki-client