This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: AIQE4g0/3shQ2WItvybleIyH+RuBvgolWxoRdfo4FIA= Subject key identifier: 6B:86:AD:AE:30:69:FD:27:11:1A:A1:DF:44:7D:37:56:82:34:3E:F3 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019AF389C8DA339D53AB96A001B228A29CD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 1780 Signing time: Sat 06 Dec 2025 12:01:24 +0000 Manifest this update: Sat 06 Dec 2025 12:01:24 +0000 Manifest next update: Sun 07 Dec 2025 12:01:24 +0000 Files and hashes: 1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=) 2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=) 3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=) 4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=) 5: 9-BujRyAiG67GPBXPyZf0-ILLF4.roa (hash: KkFtXt5WRV9VBYy3IBvnda5CkZe910L5RSJzKX/5FFY=) 6: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=) 7: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=) 8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=) 9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=) 10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=) 11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: D5Xi55yPQ/CXnoDrQK+TLTV7/UGVsWjBdoaNyQavXzI=) 12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=) 13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=) 14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=) 15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=) 16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=) 17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=) 18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=) 19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=) 20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=) 21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=) 22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=) 23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=) 24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=) 25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=) 26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=) 27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=) 28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=) 29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=) 30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=) 31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=) 32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=) 33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=) 34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:c8:da:33:9d:53:ab:96:a0:01:b2:28:a2:9c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Dec 6 12:01:24 2025 GMT Not After : Dec 7 12:01:24 2025 GMT Subject: CN=6b86adae3069fd27111aa1df447d375682343ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:43:e8:bd:03:02:26:07:95:bf:78:bf:96: d9:c2:77:6d:ae:ec:7f:8c:13:68:d1:aa:2c:24:19: 90:97:96:f6:2e:e5:c8:fb:c0:d7:f1:dc:ca:3a:74: 26:5f:70:e2:78:8b:8c:a7:7f:a9:86:d3:17:b2:ca: e8:c7:7d:92:fa:34:61:ea:78:00:0c:3c:95:f0:0e: 54:bb:ba:91:60:39:6f:19:24:1c:75:1f:6a:e4:3e: af:ec:d2:9a:10:69:cf:41:6b:74:63:e8:19:40:af: 43:c9:f9:62:8c:e3:e4:c7:c4:49:e9:e5:88:bf:05: 25:41:ec:9e:88:1e:da:0c:d2:42:4d:95:9b:64:d6: 9d:6b:96:52:4c:23:f0:8c:03:84:3d:c9:63:37:68: 8d:28:3e:b6:73:37:26:41:60:ce:09:0b:e9:18:da: 83:35:04:4f:8f:ed:7b:99:8a:cb:ca:68:05:e7:2f: 7e:50:e4:16:86:ed:ba:cf:e0:c5:50:3e:21:cb:55: d3:a5:04:b7:9b:65:21:f2:96:77:1e:c0:c1:ef:df: a1:a6:7a:f1:c7:6e:d0:ad:83:b0:92:4f:63:aa:76: a0:fe:2f:f4:7d:99:01:de:82:40:8d:fa:62:e6:cb: 17:9c:ae:ff:e0:e6:90:ff:c7:e7:7b:50:ff:a5:76: f4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:86:AD:AE:30:69:FD:27:11:1A:A1:DF:44:7D:37:56:82:34:3E:F3 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d2:c6:8f:44:80:3a:f9:71:6c:8f:02:da:ab:54:a6:21:dc: 33:45:77:53:38:98:34:71:15:47:66:b0:53:8f:19:36:77:0d: 65:8f:94:44:f5:62:f9:c3:e8:64:b0:5c:2e:8f:95:bd:76:fe: d6:67:cc:39:b9:22:fb:52:ef:d2:b8:d0:61:dc:87:1b:f3:90: 61:20:60:99:39:18:91:96:f7:b1:98:c4:ab:a4:e9:f8:ee:05: 14:07:d6:9d:7b:d8:cc:27:1b:ea:7f:9c:e9:a4:62:b3:82:f4: 6d:0f:99:43:67:df:c1:6a:aa:47:65:20:42:38:1f:89:16:c5: 92:1e:fc:ed:8c:ab:6b:cf:23:0b:91:92:08:04:20:16:f0:82: 08:89:f2:8b:75:68:e6:b1:c9:42:61:07:b3:03:d4:e9:33:5d: ac:6a:7c:09:3b:f9:34:98:99:5f:6e:21:30:b6:7a:bf:7c:7e: c9:e5:a1:ec:25:c9:2b:2f:6e:a8:c7:0c:1d:a3:93:a7:73:de: 78:cf:75:b3:64:68:19:d1:e8:15:e5:cf:3e:29:b5:7a:54:0c: 5a:00:28:34:a4:a9:99:49:48:c7:00:69:70:6a:4a:73:70:e9: 73:48:45:7c:5f:e0:be:b2:62:fa:a6:ec:29:11:e6:3e:12:ad: a7:05:65:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzicjaM51Tq5agAbIoopzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjUxMjA2MTIwMTI0WhcNMjUxMjA3MTIwMTI0WjAzMTEwLwYDVQQD Eyg2Yjg2YWRhZTMwNjlmZDI3MTExYWExZGY0NDdkMzc1NjgyMzQzZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iBD6L0DAiYHlb94v5bZwndtrux/ jBNo0aosJBmQl5b2LuXI+8DX8dzKOnQmX3DieIuMp3+phtMXssrox32S+jRh6ngA DDyV8A5Uu7qRYDlvGSQcdR9q5D6v7NKaEGnPQWt0Y+gZQK9DyflijOPkx8RJ6eWI vwUlQeyeiB7aDNJCTZWbZNada5ZSTCPwjAOEPcljN2iNKD62czcmQWDOCQvpGNqD NQRPj+17mYrLymgF5y9+UOQWhu26z+DFUD4hy1XTpQS3m2Uh8pZ3HsDB79+hpnrx x27QrYOwkk9jqnag/i/0fZkB3oJAjfpi5ssXnK7/4OaQ/8fne1D/pXb0cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuGra4waf0nERqh30R9N1aCND7zMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdLGj0SA OvlxbI8C2qtUpiHcM0V3UziYNHEVR2awU48ZNncNZY+URPVi+cPoZLBcLo+VvXb+ 1mfMObki+1Lv0rjQYdyHG/OQYSBgmTkYkZb3sZjEq6Tp+O4FFAfWnXvYzCcb6n+c 6aRis4L0bQ+ZQ2ffwWqqR2UgQjgfiRbFkh787Yyra88jC5GSCAQgFvCCCInyi3Vo 5rHJQmEHswPU6TNdrGp8CTv5NJiZX24hMLZ6v3x+yeWh7CXJKy9uqMcMHaOTp3Pe eM91s2RoGdHoFeXPPim1elQMWgAoNKSpmUlIxwBpcGpKc3Dpc0hFfF/gvrJi+qbs KRHmPhKtpwVl2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:40:14 2025 by rpki-client