This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft File: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft (raw, json) Hash identifier: E2OvAfiZDqYGhLX78FjWdeBr90m25eFoSxznDXg2HRA= Subject key identifier: 2B:40:AC:F1:44:E6:B6:13:DF:A6:63:E4:51:3D:88:D6:30:6F:0D:D7 Authority key identifier: 1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32 Certificate issuer: /CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32 Certificate serial: 019AF2765963925AB3FE2A5B23BE26517A63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft Manifest number: 04D0 Signing time: Sat 06 Dec 2025 07:00:33 +0000 Manifest this update: Sat 06 Dec 2025 07:00:33 +0000 Manifest next update: Sun 07 Dec 2025 07:00:33 +0000 Files and hashes: 1: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl (hash: eCUWXMwKY1XKtQhBK0Q4EqXiTC80v/DS5NVxZY/Gd60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:59:63:92:5a:b3:fe:2a:5b:23:be:26:51:7a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32 Validity Not Before: Dec 6 07:00:33 2025 GMT Not After : Dec 7 07:00:33 2025 GMT Subject: CN=2b40acf144e6b613dfa663e4513d88d6306f0dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:e9:3a:cb:83:f8:2c:df:77:35:c4:f8:5a: 39:2c:d4:d7:52:53:ca:13:f0:e8:ed:2c:22:10:9e: f1:5d:80:37:c3:7d:c6:c0:f7:a5:80:f8:09:24:a3: 5b:74:19:ab:91:d8:08:30:1d:d2:b7:56:59:fd:b8: ed:df:f5:66:b1:5a:04:d1:e9:bb:58:28:c9:21:d9: 9d:62:30:33:e0:83:78:4f:2e:1a:8d:76:e4:4e:8c: 83:e5:30:af:99:6c:07:eb:8c:e9:d6:c6:59:fb:5c: 31:c0:80:6e:47:39:06:fe:79:d1:59:68:16:88:94: b3:7c:2f:d1:e5:fd:59:6f:2a:12:59:d4:38:9f:5d: 65:b9:f9:0b:6a:ca:1b:01:92:02:00:ae:a0:13:89: f1:c3:e9:19:6e:5b:19:74:dd:97:0c:b2:27:79:f7: 62:3e:6c:d8:6d:b0:46:0e:ab:34:57:0b:40:1c:14: 22:31:37:4c:29:a3:af:37:1d:48:e2:1f:ef:da:0a: 15:a0:da:8a:e4:5e:70:86:92:bb:63:1d:ce:1e:3e: a2:79:4a:da:ff:ba:fe:79:1b:af:2a:91:59:ff:9c: 91:68:aa:40:77:6e:85:07:20:4c:22:f8:b6:08:09: c7:61:38:a1:19:5d:9f:e0:44:f7:49:7d:31:28:a1: dd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:40:AC:F1:44:E6:B6:13:DF:A6:63:E4:51:3D:88:D6:30:6F:0D:D7 X509v3 Authority Key Identifier: keyid:1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1c:96:61:9b:94:d4:07:cc:5f:6b:1c:39:91:5f:86:3d:18: 01:fb:82:8a:80:2a:60:12:16:83:1f:38:ed:c8:ca:27:01:69: be:7e:e0:6f:34:28:c3:1a:7c:39:0e:49:78:00:dd:8f:c7:7c: ef:b0:b0:7d:c9:09:db:48:a1:cf:21:59:84:71:4e:96:69:be: 26:7b:a7:18:50:1a:a8:58:e8:81:5c:9c:b2:7f:21:34:fa:f5: dd:04:bd:e0:49:d7:0b:a0:a3:0c:8c:9c:51:d0:06:fb:a4:fc: 11:84:4c:0e:75:ad:73:fc:46:03:29:4f:6e:45:4d:e2:68:58: 67:e2:75:7f:35:ae:2f:0f:a1:d5:16:7a:ba:1e:24:aa:02:dc: 64:5d:a0:23:f5:82:01:7c:01:fe:17:34:4a:4c:f9:07:01:ac: b0:a2:66:4c:ff:7d:ed:49:2b:35:ca:1f:43:97:45:9e:52:62: 87:25:34:1f:38:f9:67:b9:0a:30:d5:9d:2e:c4:05:21:cd:f9: 3e:a7:70:3c:d1:93:28:0e:a8:89:ce:38:58:9e:32:1c:36:4b: 77:94:aa:05:61:65:b1:dc:51:be:f5:2c:be:63:f8:f3:fd:3a: 9e:21:d5:fb:e6:f4:2e:9a:2a:2d:98:ff:42:a8:e4:2f:f4:06: 39:ae:1a:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlljklqz/ipbI74mUXpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODk3ZGJmZjAxYWZkOWQxZTc3YjZmOWZlMDhkOTc3NDJm NTZkMzIwHhcNMjUxMjA2MDcwMDMzWhcNMjUxMjA3MDcwMDMzWjAzMTEwLwYDVQQD EygyYjQwYWNmMTQ0ZTZiNjEzZGZhNjYzZTQ1MTNkODhkNjMwNmYwZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2/pOsuD+CzfdzXE+Fo5LNTXUlPK E/Do7SwiEJ7xXYA3w33GwPelgPgJJKNbdBmrkdgIMB3St1ZZ/bjt3/VmsVoE0em7 WCjJIdmdYjAz4IN4Ty4ajXbkToyD5TCvmWwH64zp1sZZ+1wxwIBuRzkG/nnRWWgW iJSzfC/R5f1ZbyoSWdQ4n11lufkLasobAZICAK6gE4nxw+kZblsZdN2XDLInefdi PmzYbbBGDqs0VwtAHBQiMTdMKaOvNx1I4h/v2goVoNqK5F5whpK7Yx3OHj6ieUra /7r+eRuvKpFZ/5yRaKpAd26FByBMIvi2CAnHYTihGV2f4ET3SX0xKKHd+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtArPFE5rYT36Zj5FE9iNYwbw3XMB8GA1UdIwQY MBaAFB+Jfb/wGv2dHne2+f4I2XdC9W0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRsOXZfQWFfWjBlZDdiNV9nalpkMEwxYlRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lNDAxZDAtNjlmZS00MzI2LWEwNDIt NDExYzNkMmQwNjllLzEvSDRsOXZfQWFfWjBlZDdiNV9nalpkMEwxYlRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9lNDAxZDAtNjlmZS00MzI2LWEwNDItNDExYzNkMmQwNjll LzEvSDRsOXZfQWFfWjBlZDdiNV9nalpkMEwxYlRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxyWYZuU 1AfMX2scOZFfhj0YAfuCioAqYBIWgx847cjKJwFpvn7gbzQowxp8OQ5JeADdj8d8 77CwfckJ20ihzyFZhHFOlmm+JnunGFAaqFjogVycsn8hNPr13QS94EnXC6CjDIyc UdAG+6T8EYRMDnWtc/xGAylPbkVN4mhYZ+J1fzWuLw+h1RZ6uh4kqgLcZF2gI/WC AXwB/hc0Skz5BwGssKJmTP997UkrNcofQ5dFnlJihyU0Hzj5Z7kKMNWdLsQFIc35 PqdwPNGTKA6oic44WJ4yHDZLd5SqBWFlsdxRvvUsvmP48/06niHV++b0LpoqLZj/ QqjkL/QGOa4aUw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:08 2025 by rpki-client