This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft File: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json) Hash identifier: N7pd7A1DY5t6/F+IJp/jb1cL8744unXa4lq08eExRLU= Subject key identifier: 2D:18:2C:DE:83:F5:1C:59:CF:53:78:DF:DD:11:ED:79:A4:7B:DC:5D Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB Certificate issuer: /CN=f879baa89e214133ccf6460f24206ad2c86670eb Certificate serial: 019B36B2C3FF7BDB1DDBD62B7FB033D91965 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft Manifest number: 06E4 Signing time: Fri 19 Dec 2025 13:00:43 +0000 Manifest this update: Fri 19 Dec 2025 13:00:43 +0000 Manifest next update: Sat 20 Dec 2025 13:00:43 +0000 Files and hashes: 1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: R4aw6y/WYqwAIoWDun9EIOBXeqNSBuaTBhJVDSlECU4=) 2: AuXo05ybv8icHHWqDyU8sDSnZ1Y.roa (hash: UxOR6qET+hxOD3wGEyopUX9auNkRzvxhrEq1sLIBOVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:c3:ff:7b:db:1d:db:d6:2b:7f:b0:33:d9:19:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb Validity Not Before: Dec 19 13:00:43 2025 GMT Not After : Dec 20 13:00:43 2025 GMT Subject: CN=2d182cde83f51c59cf5378dfdd11ed79a47bdc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:47:35:3c:81:90:ae:70:db:55:59:c7:18: eb:5e:8a:b4:7c:25:02:d6:d6:a3:98:0c:10:c5:68: 36:a4:b5:23:9a:ad:8f:77:fe:a2:7b:7c:24:3a:00: ca:6a:0c:7e:03:53:b2:19:00:cb:12:9f:8f:33:b5: 44:e3:6b:fc:c5:1f:72:22:7b:c0:8a:d0:e8:09:30: 8d:44:10:64:e7:d2:07:60:93:9e:94:cc:41:98:5f: b8:fb:ee:0d:39:86:f3:9b:0b:23:c5:ba:e8:4c:bf: 61:81:64:19:eb:dc:14:a7:2d:d7:ae:b7:6b:7e:f5: 4b:e6:4c:ef:6b:4d:d6:9c:56:b1:9f:4e:ec:4e:b5: cd:bd:8e:1e:34:78:4c:f9:30:8b:c3:69:06:b4:de: 2d:38:37:0c:c4:74:8e:5a:fc:f2:f8:1d:dc:da:2c: 45:0c:a3:9a:2d:52:65:33:5a:8e:99:54:b6:b2:7a: 74:59:b6:61:8d:1f:ed:2e:92:a5:02:71:be:f4:8c: 0e:39:74:70:47:e5:fa:1c:65:26:cd:a9:1a:81:d6: c0:c6:ba:6f:d2:bf:26:2a:8c:8a:03:16:fd:21:7a: 40:fc:a6:dc:f7:da:69:cc:6d:2e:90:4c:65:b5:ad: 5b:c7:de:58:72:d8:42:15:e5:49:72:23:5a:f5:df: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:18:2C:DE:83:F5:1C:59:CF:53:78:DF:DD:11:ED:79:A4:7B:DC:5D X509v3 Authority Key Identifier: keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:99:36:2a:34:45:9c:7c:de:56:46:be:92:ed:6b:c5:2b:26: 4f:b0:4d:76:e2:b0:fc:3b:ab:6a:95:97:c9:36:70:6c:eb:f3: ad:59:78:3e:a6:aa:8d:c8:16:c1:1a:29:22:e6:83:13:01:bd: 20:95:c5:1e:ea:df:ac:46:ea:8a:60:0c:88:9b:6d:ac:2f:26: 3b:12:0c:0f:41:0f:31:be:c8:46:c1:fc:10:b5:eb:13:0a:06: 9b:18:cd:e9:ea:3b:64:61:44:3b:10:bf:68:e6:a6:f4:5c:f9: 07:81:18:76:2a:90:44:18:3c:72:9f:b4:19:a8:1a:89:d7:4d: 16:bd:34:3f:f4:62:78:22:d2:cb:db:a7:5a:c8:2e:70:96:e4: 54:e7:24:f3:29:8a:f9:be:3b:89:ba:cd:98:e4:77:08:5b:6b: a3:f6:3b:92:d0:51:03:de:c9:16:41:7d:9b:6f:d9:5d:fd:22: e4:5f:c5:2e:b3:9e:c0:b4:ff:9f:d9:1d:8f:fb:7a:66:89:ff: 1e:c9:0a:18:0e:34:81:02:21:7c:ff:6b:99:72:4c:a5:09:a3: b8:7f:72:6f:46:9e:5c:2d:83:a1:2a:9c:81:2b:10:a4:23:ab: bc:8c:7b:b9:b1:d4:31:ae:92:fa:83:d4:48:ce:3f:a0:33:e3: 62:50:7f:09 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs2ssP/e9sd29Yrf7Az2RllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NzliYWE4OWUyMTQxMzNjY2Y2NDYwZjI0MjA2YWQyYzg2 NjcwZWIwHhcNMjUxMjE5MTMwMDQzWhcNMjUxMjIwMTMwMDQzWjAzMTEwLwYDVQQD EygyZDE4MmNkZTgzZjUxYzU5Y2Y1Mzc4ZGZkZDExZWQ3OWE0N2JkYzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJhHNTyBkK5w21VZxxjrXoq0fCUC 1tajmAwQxWg2pLUjmq2Pd/6ie3wkOgDKagx+A1OyGQDLEp+PM7VE42v8xR9yInvA itDoCTCNRBBk59IHYJOelMxBmF+4++4NOYbzmwsjxbroTL9hgWQZ69wUpy3Xrrdr fvVL5kzva03WnFaxn07sTrXNvY4eNHhM+TCLw2kGtN4tODcMxHSOWvzy+B3c2ixF DKOaLVJlM1qOmVS2snp0WbZhjR/tLpKlAnG+9IwOOXRwR+X6HGUmzakagdbAxrpv 0r8mKoyKAxb9IXpA/Kbc99ppzG0ukExlta1bx95YcthCFeVJciNa9d/XKwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFC0YLN6D9RxZz1N4390R7Xmke9xdMB8GA1UdIwQY MBaAFPh5uqieIUEzzPZGDyQgatLIZnDrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IbTZxSjRoUVRQTTlrWVBKQ0JxMHNobWNPcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvNGNlZmFiLTQ3NzUtNDI1OC1iOTcx LTRmY2Y4NGM4NWI2My8xLzEtSG02cUo0aFFUUE05a1lQSkNCcTBzaG1jT3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2E3LzRjZWZhYi00Nzc1LTQyNTgtYjk3MS00ZmNmODRjODVi NjMvMS8xLUhtNnFKNGhRVFBNOWtZUEpDQnEwc2htY09zLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZk2 KjRFnHzeVka+ku1rxSsmT7BNduKw/DurapWXyTZwbOvzrVl4PqaqjcgWwRopIuaD EwG9IJXFHurfrEbqimAMiJttrC8mOxIMD0EPMb7IRsH8ELXrEwoGmxjN6eo7ZGFE OxC/aOam9Fz5B4EYdiqQRBg8cp+0GagaiddNFr00P/RieCLSy9unWsgucJbkVOck 8ymK+b47ibrNmOR3CFtro/Y7ktBRA97JFkF9m2/ZXf0i5F/FLrOewLT/n9kdj/t6 Zon/HskKGA40gQIhfP9rmXJMpQmjuH9yb0aeXC2DoSqcgSsQpCOrvIx7ubHUMa6S +oPUSM4/oDPjYlB/CQ== -----END CERTIFICATE-----Generated at Fri Dec 19 16:39:48 2025 by rpki-client