This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft File: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json) Hash identifier: srgzInoas5XtOr+tzWV9LAWBsn9WJiRORN9njwRVVaM= Subject key identifier: 36:1D:C3:5D:A1:3C:34:30:BF:D0:7C:E4:00:73:05:6C:71:FF:DA:0E Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D Certificate issuer: /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d Certificate serial: 019AF23F794FF1DB2DB40EE6D6F127DFA06B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft Manifest number: 04E8 Signing time: Sat 06 Dec 2025 06:00:37 +0000 Manifest this update: Sat 06 Dec 2025 06:00:37 +0000 Manifest next update: Sun 07 Dec 2025 06:00:37 +0000 Files and hashes: 1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: R29NdJv7TV2TNLCWQg99ru+IZULWfb/V1VY0AT2TKjo=) 2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:79:4f:f1:db:2d:b4:0e:e6:d6:f1:27:df:a0:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d Validity Not Before: Dec 6 06:00:37 2025 GMT Not After : Dec 7 06:00:37 2025 GMT Subject: CN=361dc35da13c3430bfd07ce40073056c71ffda0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:a7:1a:aa:5a:d9:e6:cc:63:aa:00:4a:85: ab:87:df:77:33:4c:96:ae:79:35:d4:f9:24:b8:dd: 65:f8:09:fa:4a:fb:aa:01:38:af:b8:9f:bb:3e:b2: 1d:5b:ea:25:5e:ef:65:11:c6:b2:08:7b:f5:81:7c: d7:51:d4:88:d6:fa:43:32:7c:e1:ff:ad:c9:ea:a6: c5:67:ae:4a:79:cc:36:d2:53:cc:7c:31:2f:ea:21: 99:8e:25:9c:0d:3c:0f:9e:6c:1c:32:21:6a:b8:e6: 1e:fc:c6:68:90:cd:ed:05:a9:db:01:b6:0a:23:da: da:d5:c9:ae:61:b0:f3:42:29:d3:dc:33:1c:8f:2b: 33:0a:bd:a8:2e:5d:92:80:cb:a5:c2:b3:1f:0f:2f: 6c:8e:c3:21:d2:de:1b:ab:93:46:51:85:71:4d:bc: 48:0a:a6:1d:89:c4:81:cb:ec:a7:26:81:2c:fa:c4: ac:3c:94:0d:a0:29:3f:ae:14:c2:1c:2a:a4:40:0d: a4:53:e8:30:2d:4f:f1:de:0d:81:21:b5:ae:4f:16: 0b:43:2b:4a:0c:f5:57:39:65:8c:a4:1e:ec:61:8e: 67:2c:fe:9e:c6:db:b9:26:01:d1:a0:53:30:17:0c: cd:51:7c:fe:5b:2e:98:30:c3:39:b8:b2:12:54:7f: 6d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1D:C3:5D:A1:3C:34:30:BF:D0:7C:E4:00:73:05:6C:71:FF:DA:0E X509v3 Authority Key Identifier: keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4f:7b:c9:96:b0:b0:0f:fa:0a:85:7d:d7:e5:c0:cb:98:c3: a2:0a:24:e6:4b:98:f7:cc:aa:e3:03:5a:9e:3b:0e:be:ed:37: b3:17:d0:30:f7:c7:b3:0d:aa:3f:12:c6:58:65:70:22:0a:fa: f9:d3:f1:31:c3:ff:24:6e:f8:18:7c:db:c8:44:fc:e4:aa:5f: 01:e6:c2:44:4b:2d:62:21:b4:5c:2e:ba:45:79:37:0c:4d:8f: 61:72:36:26:05:b7:99:c3:98:cb:fe:76:b5:80:fe:82:31:1c: 9e:34:af:95:8b:55:ec:e5:86:59:f5:d2:6d:25:f6:d4:12:f5: 27:79:76:51:52:0a:32:60:a9:e8:02:ea:d8:c3:99:aa:92:db: 24:df:ff:54:8b:69:46:54:30:73:61:b6:27:68:3b:81:54:4a: ef:71:29:02:89:85:c1:4f:b7:9c:6d:31:23:41:cd:0d:ae:93: c2:b7:3f:26:b6:da:14:f6:41:d0:28:55:35:19:86:1f:ba:aa: b1:65:a1:e6:14:26:2d:47:ee:c3:9a:23:e0:f1:21:41:36:49: ce:69:cd:58:b1:83:e3:88:64:1d:59:9a:38:2a:e3:35:28:86: e7:56:03:a9:ef:15:fd:a8:45:cc:12:11:c2:94:6f:83:c9:2a: 8d:63:36:3c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryP3lP8dsttA7m1vEn36BrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMTFjOTU2MGZhOTEwNWU2YmRjNGI0OTJlZmFiNjQxYWI1 MDgwMWQwHhcNMjUxMjA2MDYwMDM3WhcNMjUxMjA3MDYwMDM3WjAzMTEwLwYDVQQD EygzNjFkYzM1ZGExM2MzNDMwYmZkMDdjZTQwMDczMDU2YzcxZmZkYTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU+nGqpa2ebMY6oASoWrh993M0yW rnk11PkkuN1l+An6SvuqATivuJ+7PrIdW+olXu9lEcayCHv1gXzXUdSI1vpDMnzh /63J6qbFZ65Kecw20lPMfDEv6iGZjiWcDTwPnmwcMiFquOYe/MZokM3tBanbAbYK I9ra1cmuYbDzQinT3DMcjyszCr2oLl2SgMulwrMfDy9sjsMh0t4bq5NGUYVxTbxI CqYdicSBy+ynJoEs+sSsPJQNoCk/rhTCHCqkQA2kU+gwLU/x3g2BIbWuTxYLQytK DPVXOWWMpB7sYY5nLP6extu5JgHRoFMwFwzNUXz+Wy6YMMM5uLISVH9t/QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDYdw12hPDQwv9B85ABzBWxx/9oOMB8GA1UdIwQY MBaAFPoRyVYPqRBea9xLSS76tkGrUIAdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oSEpWZy1wRUY1cjNFdEpMdnEyUWF0UWdCMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvMDBlZTZhLTVlOTUtNGUxMC04ZWU2 LTdlMjIyYmZlY2M5MC8xLzEtaEhKVmctcEVGNXIzRXRKTHZxMlFhdFFnQjAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I4LzAwZWU2YS01ZTk1LTRlMTAtOGVlNi03ZTIyMmJmZWNj OTAvMS8xLWhISlZnLXBFRjVyM0V0Skx2cTJRYXRRZ0IwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATE97 yZawsA/6CoV91+XAy5jDogok5kuY98yq4wNanjsOvu03sxfQMPfHsw2qPxLGWGVw Igr6+dPxMcP/JG74GHzbyET85KpfAebCREstYiG0XC66RXk3DE2PYXI2JgW3mcOY y/52tYD+gjEcnjSvlYtV7OWGWfXSbSX21BL1J3l2UVIKMmCp6ALq2MOZqpLbJN// VItpRlQwc2G2J2g7gVRK73EpAomFwU+3nG0xI0HNDa6Twrc/JrbaFPZB0ChVNRmG H7qqsWWh5hQmLUfuw5oj4PEhQTZJzmnNWLGD44hkHVmaOCrjNSiG51YDqe8V/ahF zBIRwpRvg8kqjWM2PA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:04 2025 by rpki-client