This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft File: H83UEOElAi3gfKWWP5L3jo-JSG4.mft (raw, json) Hash identifier: UF/OVuhaobHhk8aTl34I1laVK64X+x5pV1+tuPSYQWA= Subject key identifier: ED:9D:3E:08:1C:61:71:35:9D:4F:E2:36:74:6A:E0:54:1D:F9:3E:FA Authority key identifier: 1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E Certificate issuer: /CN=1fcdd410e125022de07ca5963f92f78e8f89486e Certificate serial: 019AF19B192C4B2210C60BB862C0A73B1D03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: H83UEOElAi3gfKWWP5L3jo-JSG4.crl (hash: Vpt13MbZ2Y7w04nPHbfTZR8ZfjaFLKxrg/qZezkQY2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:19:2c:4b:22:10:c6:0b:b8:62:c0:a7:3b:1d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fcdd410e125022de07ca5963f92f78e8f89486e Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=ed9d3e081c6171359d4fe236746ae0541df93efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fb:ee:cf:73:27:6d:70:0f:3b:7b:41:4f:6a: e3:f8:9d:65:99:26:97:af:8d:c7:d9:6e:a9:91:7d: e2:a0:79:e2:61:a1:22:7c:5a:d0:45:92:fb:e9:11: 82:a3:4b:3d:14:2a:02:2d:d1:2f:d3:90:c5:b0:14: e0:2b:36:dc:cf:aa:94:50:b8:49:26:6e:94:00:b8: 5d:23:ce:67:0b:ae:a0:4c:85:c0:22:78:63:f3:d7: e6:d0:b4:ae:28:66:7d:25:30:2f:1a:4c:fe:29:1e: b3:6a:8f:85:e0:47:97:38:dd:4d:9d:a4:03:8d:44: 33:56:e4:f4:24:7c:9f:17:dc:3e:c3:11:15:e7:93: d8:65:2f:d5:25:8c:db:2d:6f:47:97:c5:48:c1:eb: 5a:e7:d3:2b:05:e1:bf:8d:dc:f0:54:2d:15:49:99: ba:c7:17:d3:30:01:95:58:3b:94:1b:7f:bb:42:dd: fe:ff:81:db:8e:5a:48:e9:25:15:3d:cc:a1:01:28: 83:b7:2b:e4:ef:ae:bc:56:ba:3c:01:60:58:07:88: 5a:26:12:06:fc:42:b8:bf:c8:22:81:6e:a1:40:a3: 54:73:c1:cb:63:56:65:63:9f:7d:5e:3b:a1:d3:7a: a1:4d:94:85:58:9c:ec:3f:a3:34:dc:e8:1c:24:23: 6c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9D:3E:08:1C:61:71:35:9D:4F:E2:36:74:6A:E0:54:1D:F9:3E:FA X509v3 Authority Key Identifier: keyid:1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c4:06:61:26:38:37:1e:df:04:b2:87:9b:95:c2:ae:6d:84: e9:be:43:b9:91:a8:61:63:f3:dc:c9:52:81:6f:c2:a3:8b:42: 4a:3d:19:c2:4e:63:73:c0:f1:39:b2:1e:71:3e:f5:74:1e:9f: 86:43:b6:c8:e0:c3:eb:f0:b2:64:a0:82:4d:9c:64:c3:8a:04: e7:55:20:10:dc:9c:bb:fc:74:21:ca:24:9b:a0:c9:78:6b:5f: 78:00:30:df:7c:8a:25:ca:04:8e:7b:06:4b:b8:af:d2:4d:75: ad:0c:09:b1:d9:8f:76:12:d6:e6:c7:30:de:b0:f2:59:c2:b8: c3:b8:23:b3:60:0b:9d:4e:2e:a0:50:8f:62:a2:c7:56:42:a5: 78:ff:12:5a:d4:ef:42:a7:5a:9a:e5:4d:3c:a5:40:d9:7c:e8: ba:7b:f2:8f:8d:7b:32:c7:74:45:31:bf:d8:a7:a0:51:63:fa: 54:35:d4:65:c1:ca:1e:57:49:22:d4:77:c5:2a:98:46:2a:f7: 38:26:b0:af:36:ce:9d:d4:a9:a8:15:e6:fc:aa:59:ae:a6:3f: e0:e7:9e:b8:aa:8e:4d:cd:c4:8b:8a:ce:5e:ae:df:ff:ab:08: ce:8d:2d:7b:28:19:63:fd:69:ec:08:05:ac:7b:90:98:bb:70: a1:28:cf:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxksSyIQxgu4YsCnOx0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmY2RkNDEwZTEyNTAyMmRlMDdjYTU5NjNmOTJmNzhlOGY4 OTQ4NmUwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD EyhlZDlkM2UwODFjNjE3MTM1OWQ0ZmUyMzY3NDZhZTA1NDFkZjkzZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPvuz3MnbXAPO3tBT2rj+J1lmSaX r43H2W6pkX3ioHniYaEifFrQRZL76RGCo0s9FCoCLdEv05DFsBTgKzbcz6qUULhJ Jm6UALhdI85nC66gTIXAInhj89fm0LSuKGZ9JTAvGkz+KR6zao+F4EeXON1NnaQD jUQzVuT0JHyfF9w+wxEV55PYZS/VJYzbLW9Hl8VIweta59MrBeG/jdzwVC0VSZm6 xxfTMAGVWDuUG3+7Qt3+/4HbjlpI6SUVPcyhASiDtyvk7668Vro8AWBYB4haJhIG /EK4v8gigW6hQKNUc8HLY1ZlY599Xjuh03qhTZSFWJzsP6M03OgcJCNstwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2dPggcYXE1nU/iNnRq4FQd+T76MB8GA1UdIwQY MBaAFB/N1BDhJQIt4Hyllj+S946PiUhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDgzVUVPRWxBaTNnZktXV1A1TDNqby1KU0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZmE4MWItMWYzZi00ODJkLTk1MjUt YWI2OWRhOGYzN2VjLzEvSDgzVUVPRWxBaTNnZktXV1A1TDNqby1KU0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81ZmE4MWItMWYzZi00ODJkLTk1MjUtYWI2OWRhOGYzN2Vj LzEvSDgzVUVPRWxBaTNnZktXV1A1TDNqby1KU0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcQGYSY4 Nx7fBLKHm5XCrm2E6b5DuZGoYWPz3MlSgW/Co4tCSj0Zwk5jc8DxObIecT71dB6f hkO2yODD6/CyZKCCTZxkw4oE51UgENycu/x0Icokm6DJeGtfeAAw33yKJcoEjnsG S7iv0k11rQwJsdmPdhLW5scw3rDyWcK4w7gjs2ALnU4uoFCPYqLHVkKleP8SWtTv QqdamuVNPKVA2Xzounvyj417Msd0RTG/2KegUWP6VDXUZcHKHldJItR3xSqYRir3 OCawrzbOndSpqBXm/KpZrqY/4OeeuKqOTc3Ei4rOXq7f/6sIzo0teygZY/1p7AgF rHuQmLtwoSjPVw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:01 2025 by rpki-client