This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: IVPO0HHf6fj76ETDYtjbQBHm/vUGSnraq4BcH84YVoE= Subject key identifier: 99:28:8E:88:E4:43:7F:31:B5:D3:CC:EB:D2:C8:A1:59:54:29:AD:6F Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019AF352AF3DCFDEB4409EA47D7CCD1B248A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 178B Signing time: Sat 06 Dec 2025 11:01:13 +0000 Manifest this update: Sat 06 Dec 2025 11:01:13 +0000 Manifest next update: Sun 07 Dec 2025 11:01:13 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: UKH3p5t9EU24vqLVJHFGZmZjQTExCnTq+c0WZk8pS/4=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:af:3d:cf:de:b4:40:9e:a4:7d:7c:cd:1b:24:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Dec 6 11:01:13 2025 GMT Not After : Dec 7 11:01:13 2025 GMT Subject: CN=99288e88e4437f31b5d3ccebd2c8a1595429ad6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:18:c1:f2:82:20:4b:0f:8a:67:e8:5e:37: e3:25:19:5b:2c:f3:1b:62:7e:6e:b4:34:f6:49:a0: 19:d5:e9:c2:9e:d5:54:5d:e8:a5:d6:cc:cc:dd:97: 6f:5f:00:6d:be:39:42:66:e3:cf:0f:cc:a0:41:50: 0b:9e:47:63:df:5d:ee:e6:e0:e7:a2:18:8e:4f:10: 00:27:f7:9c:af:33:63:ac:84:8d:38:87:d9:fd:74: 42:b2:c6:ad:f3:25:3f:31:39:43:ec:c6:48:f7:04: 9b:41:9f:67:58:76:aa:d0:c0:33:d0:47:e5:90:65: 90:5e:71:01:0f:64:e1:61:f6:7e:13:b6:e6:5c:a7: f0:16:a1:3c:66:6f:8a:c1:3c:87:c3:66:d0:25:b7: ea:f0:81:d4:af:88:95:7b:57:f0:94:52:1a:e9:f2: 6c:42:d8:d4:8c:a6:96:63:e5:f9:3a:9c:18:f4:7d: d3:cf:61:4f:53:5e:f1:f7:45:fd:4b:81:2f:55:f0: 67:2a:7a:e6:14:71:5e:e8:5e:aa:83:91:3a:55:61: cb:cb:52:fa:98:7b:45:02:ca:6b:1c:fe:8b:e2:27: 70:8a:9a:88:30:95:72:11:8f:6b:ec:81:b9:27:cf: 3e:66:ac:29:31:5f:28:e2:be:e8:f4:f4:d8:91:e2: 4f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:28:8E:88:E4:43:7F:31:B5:D3:CC:EB:D2:C8:A1:59:54:29:AD:6F X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:25:81:04:7c:12:13:cd:b0:ac:9c:96:ff:61:9e:a9:42:fb: 63:9e:b2:9d:1c:ce:84:48:22:25:6b:5c:e8:8d:9f:cc:82:da: c8:9f:b2:a7:94:af:19:14:8f:c3:5c:7a:38:a6:ea:89:13:94: 1e:56:ad:7a:22:5a:47:24:fe:eb:19:73:85:23:44:32:19:b4: 7a:5d:d7:49:f9:2d:94:d2:4e:04:b5:9f:4e:cf:b9:7e:1a:2c: 47:0f:9f:ee:24:33:05:22:83:71:50:e3:c2:77:ee:11:39:a7: 3e:7f:08:55:4b:54:0a:0e:f1:43:8b:4e:01:14:a3:fe:38:2d: cc:88:4f:27:ab:26:a8:01:f2:fb:31:e1:9e:15:b8:35:1d:32: 23:fc:29:fb:78:e3:5b:c4:b6:dc:db:b7:e7:14:9d:08:1b:eb: c9:af:06:f4:7a:9d:b4:3a:33:5a:81:7d:8b:26:05:85:63:f5: 46:8d:a2:93:07:e3:1a:a9:c2:0f:94:ed:71:65:11:28:4c:a2: 8d:b4:83:e1:26:e2:0d:87:b8:a7:4e:c6:31:da:6a:07:e2:72: cc:8c:9e:b3:24:83:63:7c:fd:ed:6c:c1:76:e0:e9:92:8d:a1: d6:fb:d4:b3:b0:23:7c:ab:f9:bd:b9:db:b8:78:e3:ff:31:30: 2b:8a:c4:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUq89z960QJ6kfXzNGySKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUxMjA2MTEwMTEzWhcNMjUxMjA3MTEwMTEzWjAzMTEwLwYDVQQD Eyg5OTI4OGU4OGU0NDM3ZjMxYjVkM2NjZWJkMmM4YTE1OTU0MjlhZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dIYwfKCIEsPimfoXjfjJRlbLPMb Yn5utDT2SaAZ1enCntVUXeil1szM3ZdvXwBtvjlCZuPPD8ygQVALnkdj313u5uDn ohiOTxAAJ/ecrzNjrISNOIfZ/XRCssat8yU/MTlD7MZI9wSbQZ9nWHaq0MAz0Efl kGWQXnEBD2ThYfZ+E7bmXKfwFqE8Zm+KwTyHw2bQJbfq8IHUr4iVe1fwlFIa6fJs QtjUjKaWY+X5OpwY9H3Tz2FPU17x90X9S4EvVfBnKnrmFHFe6F6qg5E6VWHLy1L6 mHtFAsprHP6L4idwipqIMJVyEY9r7IG5J88+ZqwpMV8o4r7o9PTYkeJPAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkojojkQ38xtdPM69LIoVlUKa1vMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzyWBBHwS E82wrJyW/2GeqUL7Y56ynRzOhEgiJWtc6I2fzILayJ+yp5SvGRSPw1x6OKbqiROU HlateiJaRyT+6xlzhSNEMhm0el3XSfktlNJOBLWfTs+5fhosRw+f7iQzBSKDcVDj wnfuETmnPn8IVUtUCg7xQ4tOARSj/jgtzIhPJ6smqAHy+zHhnhW4NR0yI/wp+3jj W8S23Nu35xSdCBvrya8G9HqdtDozWoF9iyYFhWP1Ro2ikwfjGqnCD5TtcWURKEyi jbSD4SbiDYe4p07GMdpqB+JyzIyesySDY3z97WzBduDpko2h1vvUs7AjfKv5vbnb uHjj/zEwK4rEww== -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:36 2025 by rpki-client