This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft File: _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json) Hash identifier: evwKpbL0Z9IqkGoQu1i2hoqlfGBN4Bo5hEte9N5RKpc= Subject key identifier: 6D:83:C8:E3:D9:6E:58:C9:16:84:75:CA:77:B8:22:09:20:72:9C:C5 Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee Certificate serial: 019AF49BD690595155DC9330B1ECD577DD67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft Manifest number: 1401 Signing time: Sat 06 Dec 2025 17:00:44 +0000 Manifest this update: Sat 06 Dec 2025 17:00:44 +0000 Manifest next update: Sun 07 Dec 2025 17:00:44 +0000 Files and hashes: 1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: 216DHXq7NW8kyKpz+EfzObXIfqg8iJg/od897oilzmE=) 2: m1aho7A62fK7s2UNnicExFjE6us.roa (hash: ADQVW+bl8YrIssIav1fCxE/xWNAztKLL5kf78n8W9UA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:d6:90:59:51:55:dc:93:30:b1:ec:d5:77:dd:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee Validity Not Before: Dec 6 17:00:44 2025 GMT Not After : Dec 7 17:00:44 2025 GMT Subject: CN=6d83c8e3d96e58c9168475ca77b8220920729cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b1:9b:d0:03:51:38:53:fe:73:21:29:dd:db: 31:25:14:7c:02:b5:27:c6:9b:c3:f7:1c:0f:e2:f6: 53:81:3c:90:7f:5b:76:dd:c0:76:16:7d:f6:7e:87: c8:b3:9f:db:88:72:8e:50:5c:ff:57:2a:b2:2a:b5: dc:7e:5e:e4:ab:4e:e8:e2:95:86:cd:11:02:74:a4: 1b:1c:58:56:e4:4b:f5:c1:55:e3:3e:d5:f0:bc:98: d7:38:9c:db:7c:d6:f0:51:29:95:c8:b2:db:67:05: f0:51:56:b8:79:01:38:29:9d:74:88:ac:b2:06:f2: 7d:7f:2c:2e:a9:98:ee:8e:f1:1a:a1:34:5d:fe:3b: 6a:66:2b:81:44:c5:19:3b:65:96:50:bc:bf:67:9b: 9e:33:54:8f:82:01:a6:4e:ff:d3:89:60:ad:23:a3: aa:f5:da:d4:c5:37:b8:4a:48:ee:a4:69:57:de:3a: 45:0a:8c:e4:b2:90:fa:1f:95:42:2d:fd:1f:f8:56: ee:27:45:09:9a:d6:4d:73:9c:48:da:d8:4b:a3:fa: da:b4:0c:d2:07:a6:dd:7a:cb:d2:24:7b:16:fc:b0: 58:9e:dc:78:98:97:9d:bd:cc:db:f2:a4:ca:ae:d8: e9:ca:00:c7:0c:68:55:b0:22:38:1a:70:99:b9:e0: ce:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:83:C8:E3:D9:6E:58:C9:16:84:75:CA:77:B8:22:09:20:72:9C:C5 X509v3 Authority Key Identifier: keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:18:1c:45:c6:35:35:8b:c9:69:26:3e:2b:99:97:4c:92:d8: 27:2c:41:41:ea:cd:78:9c:e5:7b:d1:89:c2:76:19:b5:94:11: 45:f0:28:a9:62:b5:36:5c:61:d1:84:a0:2f:e8:dc:f5:de:dc: 9a:29:2f:c6:d4:43:47:ca:30:12:d5:46:fc:22:4a:51:03:27: 5f:1b:1d:d3:2b:5c:1f:06:0d:2f:41:a6:6c:15:6a:a9:fe:da: 04:4b:f4:ed:97:35:54:22:e8:39:23:71:df:a6:4b:14:2c:91: ff:28:52:33:68:cd:5f:f6:31:25:62:fa:4d:22:6a:a4:47:67: f4:3c:4a:82:c1:11:bb:02:ff:d6:1c:59:0a:ed:14:15:21:7d: ba:93:7e:49:c5:20:ab:97:6a:e4:40:1c:cd:2a:78:1c:b8:d1: 26:8b:14:9c:68:21:be:89:cc:d1:6a:bc:a0:24:9f:4d:9e:a6: ec:7a:3c:e1:4a:11:c8:ad:c7:c0:ed:4b:9a:2e:be:de:31:e5: 12:10:35:1b:b9:fa:a9:b3:a8:2a:90:4d:7b:96:7a:3d:75:39: 2f:16:38:9e:59:0a:6e:1e:16:f7:1e:a0:84:85:37:46:ec:7c: 5d:2f:79:28:7e:2a:3d:53:aa:4f:ed:54:53:e3:64:49:79:69: e9:d8:a6:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9aQWVFV3JMwsezVd91nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjN2Q0YWI3NzYxYWJhMjRmMzNkNWI2ZGZiYzI3Y2FiNzM4 YmI1ZWUwHhcNMjUxMjA2MTcwMDQ0WhcNMjUxMjA3MTcwMDQ0WjAzMTEwLwYDVQQD Eyg2ZDgzYzhlM2Q5NmU1OGM5MTY4NDc1Y2E3N2I4MjIwOTIwNzI5Y2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LGb0ANROFP+cyEp3dsxJRR8ArUn xpvD9xwP4vZTgTyQf1t23cB2Fn32fofIs5/biHKOUFz/VyqyKrXcfl7kq07o4pWG zRECdKQbHFhW5Ev1wVXjPtXwvJjXOJzbfNbwUSmVyLLbZwXwUVa4eQE4KZ10iKyy BvJ9fywuqZjujvEaoTRd/jtqZiuBRMUZO2WWULy/Z5ueM1SPggGmTv/TiWCtI6Oq 9drUxTe4SkjupGlX3jpFCozkspD6H5VCLf0f+FbuJ0UJmtZNc5xI2thLo/ratAzS B6bdesvSJHsW/LBYntx4mJedvczb8qTKrtjpygDHDGhVsCI4GnCZueDOpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2DyOPZbljJFoR1yne4IgkgcpzFMB8GA1UdIwQY MBaAFPx9Srd2Grok8z1bbfvCfKtzi7XuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wMjg3Y2YtODUzYi00NTE2LTlmMDYt NDUyZWMzYTk1ODhiLzEvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wMjg3Y2YtODUzYi00NTE2LTlmMDYtNDUyZWMzYTk1ODhi LzEvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBgcRcY1 NYvJaSY+K5mXTJLYJyxBQerNeJzle9GJwnYZtZQRRfAoqWK1Nlxh0YSgL+jc9d7c mikvxtRDR8owEtVG/CJKUQMnXxsd0ytcHwYNL0GmbBVqqf7aBEv07Zc1VCLoOSNx 36ZLFCyR/yhSM2jNX/YxJWL6TSJqpEdn9DxKgsERuwL/1hxZCu0UFSF9upN+ScUg q5dq5EAczSp4HLjRJosUnGghvonM0Wq8oCSfTZ6m7Ho84UoRyK3HwO1Lmi6+3jHl EhA1G7n6qbOoKpBNe5Z6PXU5LxY4nlkKbh4W9x6ghIU3Rux8XS95KH4qPVOqT+1U U+NkSXlp6dimEg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:17:49 2025 by rpki-client