This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json) Hash identifier: s4psff2GdcmETgmhOmcudxKnHR/EiazkbOwIC7eFJ9c= Subject key identifier: 6B:22:9D:25:9C:3E:7A:A2:E7:8E:F1:30:9C:2D:93:E4:BB:55:62:C0 Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc Certificate serial: 019AF49BEAD884F58BD5033A05FBC1A133B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 17:00:50 +0000 Manifest this update: Sat 06 Dec 2025 17:00:50 +0000 Manifest next update: Sun 07 Dec 2025 17:00:50 +0000 Files and hashes: 1: EV_VJQ7znLLT_4jLuRQdPiIqgco.roa (hash: D3X5PT8yDu7pN/mU+PmRQS2ADQ706uf76HlBQmopR6o=) 2: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: oxJ89RALTm7UysvseZW7GEICtWbpcbou1fQCWGFiWtY=) 3: _A233dG0OsivwYkQExiSR967RqA.roa (hash: W1a0C5qkdasTQfph8n3hvMTYG6/PIGL4cSCJYs2ipZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ea:d8:84:f5:8b:d5:03:3a:05:fb:c1:a1:33:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc Validity Not Before: Dec 6 17:00:50 2025 GMT Not After : Dec 7 17:00:50 2025 GMT Subject: CN=6b229d259c3e7aa2e78ef1309c2d93e4bb5562c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:bd:d9:8e:de:ca:82:81:bc:4e:7c:03:63: ec:e0:98:bd:36:4e:60:a0:8b:16:cd:f5:fb:8d:fb: ff:a4:a5:43:e7:c6:48:7b:79:19:4c:10:d6:47:49: 6d:40:6f:28:59:0c:9c:c2:9f:74:45:64:7f:c3:3f: 8a:4d:52:a5:51:b7:9f:e8:de:f3:c7:67:74:e1:58: 30:74:52:ac:7c:28:cf:c8:e2:fe:ed:5f:02:14:8c: 9e:dc:e0:5d:05:85:e1:6a:50:25:86:03:9f:83:f6: 27:f8:84:44:1e:d7:68:10:6e:a9:47:e2:0d:f7:9a: 75:f0:6d:ce:f4:0f:16:11:e1:fb:90:6d:6e:af:22: 91:fe:65:12:9e:d1:fc:c0:d7:3f:19:40:01:c3:18: 1c:ab:c0:d1:69:a5:83:e9:fd:10:a5:51:b3:0f:0e: 18:23:ca:b3:f3:49:4c:e1:df:11:dd:78:81:46:94: 2f:c8:75:88:58:65:7b:5e:36:51:c4:62:fa:71:d6: 2c:6e:83:f7:8b:e8:0d:68:50:45:d7:d2:92:b7:5d: 84:04:59:0e:0c:50:18:15:a2:0c:d7:41:f7:f1:c6: 23:6c:98:d3:90:8a:3b:fe:86:13:34:dd:0a:05:da: da:67:d5:e1:9b:be:64:4e:43:66:6e:8e:b8:17:73: 9a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:22:9D:25:9C:3E:7A:A2:E7:8E:F1:30:9C:2D:93:E4:BB:55:62:C0 X509v3 Authority Key Identifier: keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:36:38:98:6c:69:43:02:d9:50:96:c6:bc:ec:04:df:60:30: 29:0a:fe:d3:45:47:ba:4a:96:1f:7d:c5:5b:b3:ca:70:26:e5: 5a:51:f9:4a:0d:d6:fc:c2:c1:48:e0:4d:3b:71:07:2a:cb:c2: 72:ec:00:d5:a1:79:8f:2d:f4:55:7a:c7:f0:cb:52:ec:87:40: 23:59:2c:3c:72:21:a9:8a:03:25:6a:73:5e:d5:ab:b3:55:d2: ff:ce:eb:e3:ac:cc:8b:9d:29:af:e3:b1:cb:30:da:98:d6:37: 67:9e:3b:cf:7c:10:0a:39:86:3d:40:06:ac:62:e0:12:d6:73: 45:44:2f:9c:f3:9a:ae:7a:cb:79:06:38:d9:3e:12:5b:d4:f5: 32:78:b7:be:32:f0:c7:09:5c:f8:53:b3:f0:4c:9e:1d:4d:22: 1c:a4:92:ec:01:88:44:82:9d:7d:87:0b:81:f2:48:d7:10:30: 56:b3:0f:85:4d:aa:6b:47:2d:b1:5b:b7:aa:2b:5c:fa:fd:e9: a3:1b:8d:dc:7c:92:66:62:59:b4:93:75:37:f7:35:1d:38:b4: 36:b4:db:8f:51:cc:ac:42:68:e4:d6:40:b3:c5:07:17:5e:ac: 11:d1:2b:42:04:b9:33:50:39:3d:0f:3d:85:65:5c:6e:4e:32: 1d:9c:5e:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+rYhPWL1QM6BfvBoTOyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYThhYzM3Zjk2OTUxNjk2MjdmNzVlMDk4OTYzMzk2ZGU5 NjM4Y2MwHhcNMjUxMjA2MTcwMDUwWhcNMjUxMjA3MTcwMDUwWjAzMTEwLwYDVQQD Eyg2YjIyOWQyNTljM2U3YWEyZTc4ZWYxMzA5YzJkOTNlNGJiNTU2MmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8e92Y7eyoKBvE58A2Ps4Ji9Nk5g oIsWzfX7jfv/pKVD58ZIe3kZTBDWR0ltQG8oWQycwp90RWR/wz+KTVKlUbef6N7z x2d04VgwdFKsfCjPyOL+7V8CFIye3OBdBYXhalAlhgOfg/Yn+IREHtdoEG6pR+IN 95p18G3O9A8WEeH7kG1uryKR/mUSntH8wNc/GUABwxgcq8DRaaWD6f0QpVGzDw4Y I8qz80lM4d8R3XiBRpQvyHWIWGV7XjZRxGL6cdYsboP3i+gNaFBF19KSt12EBFkO DFAYFaIM10H38cYjbJjTkIo7/oYTNN0KBdraZ9Xhm75kTkNmbo64F3OaMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsinSWcPnqi547xMJwtk+S7VWLAMB8GA1UdIwQY MBaAFB+orDf5aVFpYn914JiWM5beljjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUt MDIzYjZjMDc5M2YxLzEvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUtMDIzYjZjMDc5M2Yx LzEvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjY4mGxp QwLZUJbGvOwE32AwKQr+00VHukqWH33FW7PKcCblWlH5Sg3W/MLBSOBNO3EHKsvC cuwA1aF5jy30VXrH8MtS7IdAI1ksPHIhqYoDJWpzXtWrs1XS/87r46zMi50pr+Ox yzDamNY3Z547z3wQCjmGPUAGrGLgEtZzRUQvnPOarnrLeQY42T4SW9T1Mni3vjLw xwlc+FOz8EyeHU0iHKSS7AGIRIKdfYcLgfJI1xAwVrMPhU2qa0ctsVu3qitc+v3p oxuN3HySZmJZtJN1N/c1HTi0NrTbj1HMrEJo5NZAs8UHF16sEdErQgS5M1A5PQ89 hWVcbk4yHZxeWA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:55:21 2025 by rpki-client