This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft File: H_p_dysyOyTb5p0_Os91XmnWAc0.mft (raw, json) Hash identifier: 8RAQihfnW0eFsClFLUa8+eACKtkuAK+uMe2i/hdQXu0= Subject key identifier: F4:05:BF:A2:9E:AF:EA:E0:ED:9F:E7:EE:B8:62:6B:E5:53:50:06:12 Authority key identifier: 1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD Certificate issuer: /CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd Certificate serial: 019AF389B017121123200967F76C7B7114C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 12:01:18 +0000 Manifest this update: Sat 06 Dec 2025 12:01:18 +0000 Manifest next update: Sun 07 Dec 2025 12:01:18 +0000 Files and hashes: 1: EmLYbat0-CjjrryGAbAlQnrrrrQ.roa (hash: 8A9ahdOL6eJIIDSIKOF59+Qm0B8lNaZhUtGUWL64Trk=) 2: H_p_dysyOyTb5p0_Os91XmnWAc0.crl (hash: TsEjMld5zPj4srK+gYnbTZlH7wGD3ExmYsPEJwfF/lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:b0:17:12:11:23:20:09:67:f7:6c:7b:71:14:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd Validity Not Before: Dec 6 12:01:18 2025 GMT Not After : Dec 7 12:01:18 2025 GMT Subject: CN=f405bfa29eafeae0ed9fe7eeb8626be553500612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8c:c5:0c:81:c2:a8:1e:dd:b7:18:9a:0c:60: 4b:46:16:6e:76:e9:54:75:4b:9a:8a:31:88:70:07: 05:e3:fa:4d:fc:15:b3:78:ed:9c:df:c4:ec:38:6b: 1d:99:76:b4:24:f3:e4:fe:93:1a:47:72:ce:84:1f: 09:63:a6:88:96:84:66:4e:23:1e:fa:10:bf:8d:f3: fd:f6:4a:2b:c8:5b:b2:6d:22:56:cc:12:99:92:f8: 76:de:9a:c0:b5:26:74:4d:e8:8a:95:8f:66:fc:47: 9f:05:9d:8a:71:16:44:80:69:55:ee:a8:06:a7:31: 8a:c8:d0:09:81:52:a3:86:f6:ff:53:41:c9:97:fc: d6:fb:ae:1e:ba:bf:ef:e7:c9:2e:84:4f:35:aa:9e: 72:b8:21:9f:50:5c:ab:02:8d:70:50:fe:3e:47:b9: a9:14:be:3a:23:01:08:98:7d:6d:66:a5:94:5d:46: d2:13:32:e3:80:9d:f0:be:f6:26:41:2e:32:fd:b4: 9d:fb:dd:7f:7e:0a:39:b6:03:7f:d1:b3:03:e9:cc: bc:a9:e2:98:2d:8a:86:d0:17:78:a2:4c:63:23:b2: 9b:a7:30:3d:e5:88:6d:b1:0c:b1:83:98:bb:59:40: f7:29:84:4a:22:c3:4e:a5:ea:a0:90:e8:c9:83:00: 59:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:05:BF:A2:9E:AF:EA:E0:ED:9F:E7:EE:B8:62:6B:E5:53:50:06:12 X509v3 Authority Key Identifier: keyid:1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e5:61:be:46:5c:f0:fe:e0:74:4c:6c:97:0d:e7:30:e5:7c: ce:e8:c2:14:9a:ea:27:a8:bf:34:c6:2e:5a:3c:e7:bd:d3:6e: 4e:5e:72:48:63:13:41:c5:ac:98:71:80:40:dd:d2:a7:fb:0c: 69:3a:94:23:45:88:ca:d6:ab:9c:07:fb:10:40:eb:14:97:4e: 73:60:7f:4d:b8:32:0d:cc:50:1f:24:05:da:35:01:f6:7e:2f: c6:1d:d0:fd:c1:80:0d:8e:51:49:2b:e9:8c:6e:2e:b3:a2:84: 9e:76:64:1a:81:3f:9a:72:86:29:9d:10:b7:c5:a5:29:e7:7e: 95:69:27:7e:b2:ad:ea:1d:28:67:3c:7f:de:71:11:37:97:5f: 5e:b5:e4:a6:08:8a:1f:3b:cb:6b:e3:96:b1:28:94:a6:86:a0: a6:85:1c:33:2a:a2:ff:d5:2e:f7:36:94:a3:7e:e2:38:b7:ce: 15:de:1e:62:00:47:01:d0:e3:e6:08:81:f2:02:91:6b:33:6b: 6d:b2:41:27:03:2d:37:98:a7:05:4e:21:9d:db:85:a2:52:32: ca:69:7b:7e:93:79:a8:75:f2:71:80:2b:99:ee:c1:16:40:ed: 7d:c9:ef:5c:d0:5a:c9:86:51:f8:b5:9f:de:d2:0c:b6:91:1b: 35:7a:68:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibAXEhEjIAln92x7cRTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZmE3Zjc3MmIzMjNiMjRkYmU2OWQzZjNhY2Y3NTVlNjlk NjAxY2QwHhcNMjUxMjA2MTIwMTE4WhcNMjUxMjA3MTIwMTE4WjAzMTEwLwYDVQQD EyhmNDA1YmZhMjllYWZlYWUwZWQ5ZmU3ZWViODYyNmJlNTUzNTAwNjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIzFDIHCqB7dtxiaDGBLRhZudulU dUuaijGIcAcF4/pN/BWzeO2c38TsOGsdmXa0JPPk/pMaR3LOhB8JY6aIloRmTiMe +hC/jfP99koryFuybSJWzBKZkvh23prAtSZ0TeiKlY9m/EefBZ2KcRZEgGlV7qgG pzGKyNAJgVKjhvb/U0HJl/zW+64eur/v58kuhE81qp5yuCGfUFyrAo1wUP4+R7mp FL46IwEImH1tZqWUXUbSEzLjgJ3wvvYmQS4y/bSd+91/fgo5tgN/0bMD6cy8qeKY LYqG0Bd4okxjI7KbpzA95YhtsQyxg5i7WUD3KYRKIsNOpeqgkOjJgwBZQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQFv6Ker+rg7Z/n7rhia+VTUAYSMB8GA1UdIwQY MBaAFB/6f3crMjsk2+adPzrPdV5p1gHNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSF9wX2R5c3lPeVRiNXAwX09zOTFYbW5XQWMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MDZiMzgtNzZlYy00NzJlLWE5NGIt ODcwMzRmOWZjZTYxLzEvSF9wX2R5c3lPeVRiNXAwX09zOTFYbW5XQWMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81MDZiMzgtNzZlYy00NzJlLWE5NGItODcwMzRmOWZjZTYx LzEvSF9wX2R5c3lPeVRiNXAwX09zOTFYbW5XQWMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuVhvkZc 8P7gdExslw3nMOV8zujCFJrqJ6i/NMYuWjznvdNuTl5ySGMTQcWsmHGAQN3Sp/sM aTqUI0WIytarnAf7EEDrFJdOc2B/TbgyDcxQHyQF2jUB9n4vxh3Q/cGADY5RSSvp jG4us6KEnnZkGoE/mnKGKZ0Qt8WlKed+lWknfrKt6h0oZzx/3nERN5dfXrXkpgiK HzvLa+OWsSiUpoagpoUcMyqi/9Uu9zaUo37iOLfOFd4eYgBHAdDj5giB8gKRazNr bbJBJwMtN5inBU4hnduFolIyyml7fpN5qHXycYArme7BFkDtfcnvXNBayYZR+LWf 3tIMtpEbNXpobg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:17:52 2025 by rpki-client