This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft File: h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft (raw, json) Hash identifier: E+K/OySAH9zunX7zrPIFZzICips58u5xZvo2RmF2Feo= Subject key identifier: AF:3D:45:2F:4A:9C:30:56:CF:99:1F:B3:52:34:81:47:69:A5:CA:E7 Authority key identifier: 87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64 Certificate issuer: /CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364 Certificate serial: 019AF38983C139A47B44C5BF4BC27777EACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft Manifest number: FA Signing time: Sat 06 Dec 2025 12:01:06 +0000 Manifest this update: Sat 06 Dec 2025 12:01:06 +0000 Manifest next update: Sun 07 Dec 2025 12:01:06 +0000 Files and hashes: 1: GvyGkOachzJk9DygDnTBnDm6D0g.roa (hash: 9DNBA079y1VayC4HCKQN0sFF5/u3/PsV+NDhAUJH7m4=) 2: h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl (hash: i+GE0QXO7HOd/Y366M7BGcDyOHoFLEsJPnpLhl8gVXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:83:c1:39:a4:7b:44:c5:bf:4b:c2:77:77:ea:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364 Validity Not Before: Dec 6 12:01:06 2025 GMT Not After : Dec 7 12:01:06 2025 GMT Subject: CN=af3d452f4a9c3056cf991fb35234814769a5cae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2f:0a:0a:72:94:78:27:ab:ca:47:ea:ae:3d: 66:d5:94:93:39:10:be:b8:38:df:43:e1:b1:0f:e6: 03:b3:e8:6e:f4:ab:99:44:b0:52:94:60:49:ba:2d: ac:dc:d4:9c:38:2f:4f:2f:8c:00:13:94:ce:9b:04: 54:e2:d6:fe:a4:e6:de:65:ff:ec:3e:ad:ca:62:82: d6:cd:6f:e1:90:7d:4b:13:0a:4c:11:80:57:3a:b2: 21:79:bf:85:29:33:a8:fa:4f:d3:ee:ca:5c:d3:4a: ba:6a:06:56:0a:ee:5b:7e:02:d8:46:63:b0:c8:8a: a4:43:c8:d2:6d:6e:89:03:56:ea:0c:ce:8b:10:29: 51:6c:37:29:78:07:65:d2:f0:ae:7a:88:e1:92:6b: 30:8b:93:07:2f:fa:d1:aa:16:e6:59:0c:9d:bf:53: 77:77:c1:e1:98:1e:a4:0d:9e:75:29:31:03:cb:d8: ed:e7:90:77:ed:f8:d8:8e:2c:93:83:c5:65:ab:07: 36:fb:40:ec:a0:7e:aa:6c:a3:0b:79:bb:b2:46:de: 95:96:2d:bf:5f:9e:cf:f4:4c:9f:71:fc:c6:fb:48: 20:b1:70:7d:2e:07:dc:5d:42:88:54:1f:49:58:b2: 31:1a:8d:67:ea:9c:b3:93:94:3d:0e:f6:81:e2:f3: fa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3D:45:2F:4A:9C:30:56:CF:99:1F:B3:52:34:81:47:69:A5:CA:E7 X509v3 Authority Key Identifier: keyid:87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:3e:87:9a:f5:c1:28:a2:89:fc:4e:ff:51:08:ea:83:bc:ec: f5:5f:33:15:2b:15:32:f0:c8:9d:f5:4a:6b:48:74:1a:f2:fd: e8:17:5b:33:24:43:4d:d7:a8:7c:1e:57:c7:fb:fa:f4:8c:b0: 99:1b:ac:9f:63:c8:e4:80:d8:a9:d8:45:66:9d:65:bb:c4:f2: a7:f1:fc:5a:3a:99:e7:c4:82:84:fe:18:ad:2a:05:9c:f2:dd: 39:f0:ed:d7:cc:a2:ad:d4:7b:23:dc:ca:04:d3:33:af:d3:02: df:5a:14:4f:bf:62:84:37:c7:75:b8:63:61:00:93:5e:38:af: be:69:46:59:3e:ba:3a:f3:92:fc:dd:98:0c:4a:b6:de:0f:6a: 51:e3:45:1e:ed:af:5b:61:0a:3f:60:74:a4:8b:91:c4:f0:98: af:dd:a4:59:1c:19:61:9d:52:d6:25:eb:d0:c5:4f:ca:0b:32: b9:2d:de:22:9e:34:ad:21:27:7f:6d:b9:b4:1f:fe:e0:90:4d: 49:d5:ca:5c:d8:6d:e2:51:e2:43:2f:56:e5:c8:ed:53:69:07: d8:6d:c4:c6:8b:bc:9d:fc:b4:15:24:09:f6:08:e1:72:f3:60: c7:01:de:ac:c1:09:fb:ea:38:ea:4e:86:a2:17:25:80:34:42: 28:ab:5d:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYPBOaR7RMW/S8J3d+rPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NTEwNTRkZmJmZGFkMjJjNDllNmJiYWRhYjNhMThmNDJh MWMzNjQwHhcNMjUxMjA2MTIwMTA2WhcNMjUxMjA3MTIwMTA2WjAzMTEwLwYDVQQD EyhhZjNkNDUyZjRhOWMzMDU2Y2Y5OTFmYjM1MjM0ODE0NzY5YTVjYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki8KCnKUeCerykfqrj1m1ZSTORC+ uDjfQ+GxD+YDs+hu9KuZRLBSlGBJui2s3NScOC9PL4wAE5TOmwRU4tb+pObeZf/s Pq3KYoLWzW/hkH1LEwpMEYBXOrIheb+FKTOo+k/T7spc00q6agZWCu5bfgLYRmOw yIqkQ8jSbW6JA1bqDM6LEClRbDcpeAdl0vCueojhkmswi5MHL/rRqhbmWQydv1N3 d8HhmB6kDZ51KTEDy9jt55B37fjYjiyTg8Vlqwc2+0DsoH6qbKMLebuyRt6Vli2/ X57P9EyfcfzG+0ggsXB9LgfcXUKIVB9JWLIxGo1n6pyzk5Q9DvaB4vP6EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK89RS9KnDBWz5kfs1I0gUdppcrnMB8GA1UdIwQY MBaAFIdRBU37/a0ixJ5rutqzoY9CocNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZGE3ZWMtMWMzNC00NjQ3LTllODMt NzU3OWU4NWExYTQ5LzEvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xZGE3ZWMtMWMzNC00NjQ3LTllODMtNzU3OWU4NWExYTQ5 LzEvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfD6HmvXB KKKJ/E7/UQjqg7zs9V8zFSsVMvDInfVKa0h0GvL96BdbMyRDTdeofB5Xx/v69Iyw mRusn2PI5IDYqdhFZp1lu8Typ/H8WjqZ58SChP4YrSoFnPLdOfDt18yirdR7I9zK BNMzr9MC31oUT79ihDfHdbhjYQCTXjivvmlGWT66OvOS/N2YDEq23g9qUeNFHu2v W2EKP2B0pIuRxPCYr92kWRwZYZ1S1iXr0MVPygsyuS3eIp40rSEnf225tB/+4JBN SdXKXNht4lHiQy9W5cjtU2kH2G3Exou8nfy0FSQJ9gjhcvNgxwHerMEJ++o46k6G ohclgDRCKKtd7g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:17:48 2025 by rpki-client