This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft File: H4mVTcWspw-Dcs96YrWry4oXwrc.mft (raw, json) Hash identifier: J9DWHxPFxJy54Ha1AyHjQ44LMLIFOKabQmjn7kHuHmQ= Subject key identifier: 7C:EC:40:88:F0:84:FA:94:D3:46:A1:88:F3:71:F5:41:9D:D6:EE:AA Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7 Certificate issuer: /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7 Certificate serial: 019AF209195E1178FEADA077102B20ADF6AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:13 +0000 Manifest this update: Sat 06 Dec 2025 05:01:13 +0000 Manifest next update: Sun 07 Dec 2025 05:01:13 +0000 Files and hashes: 1: H4mVTcWspw-Dcs96YrWry4oXwrc.crl (hash: 5IkSFOYkElQuRSpW4IrFXeqxFhZtIdwcyQwwI/+yXbE=) 2: VPSZKXOomg68CX3e2czb5vATzV0.roa (hash: u5eUOziaSNihoip6mFV/l4VWIAiX36Jv1InorW26yng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:19:5e:11:78:fe:ad:a0:77:10:2b:20:ad:f6:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7 Validity Not Before: Dec 6 05:01:13 2025 GMT Not After : Dec 7 05:01:13 2025 GMT Subject: CN=7cec4088f084fa94d346a188f371f5419dd6eeaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:6d:cb:6b:c2:e5:c7:48:0d:db:89:ae:2a: 53:e0:9f:8a:ca:88:58:58:21:73:df:84:d8:f5:05: 2a:02:5b:56:2d:b5:85:24:34:44:5c:c8:97:8b:3e: da:9a:68:4f:1a:d0:ae:1c:8d:71:20:6f:45:a2:38: 77:df:60:76:10:64:39:a7:bb:f1:29:ae:60:d1:5d: c1:7d:11:49:9a:ff:09:80:e2:f1:b1:08:5b:25:33: 80:18:41:3f:3e:46:33:6d:68:91:65:e9:90:59:3d: 0d:d8:57:02:d2:ab:b8:c0:61:e1:c2:cd:20:c4:c2: 1e:b2:bf:24:13:51:f0:85:f7:d0:c2:2a:24:f6:d6: b0:93:6b:d4:1a:83:91:fc:2e:fa:f5:93:ac:ce:4b: 3e:c9:40:21:5e:9e:63:28:62:39:aa:a7:31:16:fd: 5c:9b:fa:44:e2:87:89:a4:56:0c:8b:60:67:a9:ba: c4:3f:bb:58:48:45:69:b8:66:54:a0:6c:2c:ca:a5: 90:70:e6:9a:d0:af:e9:6e:3e:55:62:fa:e2:e6:6b: ba:9d:71:6a:37:ae:f4:63:a4:61:1e:10:76:fb:4a: f2:c8:95:5b:e1:c2:1a:29:42:34:4a:28:e4:3a:ec: a9:01:f3:13:94:50:b5:d6:8c:fd:81:54:bb:29:3a: ba:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EC:40:88:F0:84:FA:94:D3:46:A1:88:F3:71:F5:41:9D:D6:EE:AA X509v3 Authority Key Identifier: keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:43:36:90:26:8c:a3:29:46:2c:3b:15:88:43:f6:d5:a9:7f: a7:34:ac:45:7c:16:89:21:82:ab:03:54:37:6f:b3:54:ff:0e: 0e:44:2e:4e:9d:cf:a2:1f:9d:05:98:0d:12:68:33:6c:ab:6c: 24:cc:26:b6:42:90:92:5a:c7:bc:fd:67:36:8e:d3:9f:a8:20: fd:47:f1:df:7b:ee:de:d8:8a:c4:c8:25:51:d5:4a:68:be:26: 93:7b:9e:ca:59:8f:a1:3f:08:0e:d2:14:55:2e:a2:1c:94:f6: d3:c6:50:06:52:7e:af:ce:f2:ce:c4:0d:57:cd:59:d1:c5:02: b0:53:74:9b:a4:9d:4e:d4:05:e5:7f:a8:54:19:46:f8:13:90: 88:40:c0:49:8e:ba:c5:bc:0d:99:b6:fe:5d:ab:4a:32:bb:b7: 37:67:fa:33:62:a1:be:5d:44:10:82:ea:2d:7f:d4:56:7b:42: 2c:d9:c4:a6:52:25:df:be:98:3e:78:f6:1f:6a:67:9a:78:da: c2:b4:9e:b9:52:51:76:ed:f3:d3:50:5f:36:0d:94:6a:e2:64: 31:63:b0:dc:dc:a5:07:2f:0c:7f:7a:df:2c:24:d0:2b:a2:af: f1:68:6d:f6:82:9c:98:1e:29:c8:e5:1a:a2:8f:0a:dc:aa:d3: ad:a3:36:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRleEXj+raB3ECsgrfatMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODk5NTRkYzVhY2E3MGY4MzcyY2Y3YTYyYjVhYmNiOGEx N2MyYjcwHhcNMjUxMjA2MDUwMTEzWhcNMjUxMjA3MDUwMTEzWjAzMTEwLwYDVQQD Eyg3Y2VjNDA4OGYwODRmYTk0ZDM0NmExODhmMzcxZjU0MTlkZDZlZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomBty2vC5cdIDduJripT4J+KyohY WCFz34TY9QUqAltWLbWFJDREXMiXiz7ammhPGtCuHI1xIG9Fojh332B2EGQ5p7vx Ka5g0V3BfRFJmv8JgOLxsQhbJTOAGEE/PkYzbWiRZemQWT0N2FcC0qu4wGHhws0g xMIesr8kE1HwhffQwiok9tawk2vUGoOR/C769ZOszks+yUAhXp5jKGI5qqcxFv1c m/pE4oeJpFYMi2BnqbrEP7tYSEVpuGZUoGwsyqWQcOaa0K/pbj5VYvri5mu6nXFq N670Y6RhHhB2+0ryyJVb4cIaKUI0SijkOuypAfMTlFC11oz9gVS7KTq6vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzsQIjwhPqU00ahiPNx9UGd1u6qMB8GA1UdIwQY MBaAFB+JlU3FrKcPg3LPemK1q8uKF8K3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRtVlRjV3Nwdy1EY3M5NllyV3J5NG9Yd3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYmU5ZjMtYjk4Zi00ZGQzLThjOTkt NGUyZTdlODc0YTQwLzEvSDRtVlRjV3Nwdy1EY3M5NllyV3J5NG9Yd3JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mYmU5ZjMtYjk4Zi00ZGQzLThjOTktNGUyZTdlODc0YTQw LzEvSDRtVlRjV3Nwdy1EY3M5NllyV3J5NG9Yd3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkM2kCaM oylGLDsViEP21al/pzSsRXwWiSGCqwNUN2+zVP8ODkQuTp3Poh+dBZgNEmgzbKts JMwmtkKQklrHvP1nNo7Tn6gg/Ufx33vu3tiKxMglUdVKaL4mk3ueylmPoT8IDtIU VS6iHJT208ZQBlJ+r87yzsQNV81Z0cUCsFN0m6SdTtQF5X+oVBlG+BOQiEDASY66 xbwNmbb+XatKMru3N2f6M2Khvl1EEILqLX/UVntCLNnEplIl376YPnj2H2pnmnja wrSeuVJRdu3z01BfNg2UauJkMWOw3NylBy8Mf3rfLCTQK6Kv8Wht9oKcmB4pyOUa oo8K3KrTraM2DQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:36 2025 by rpki-client