This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft File: H6EtaHxiehgvgdTMyz8yIBhh9nc.mft (raw, json) Hash identifier: MXHLdkyEX8Thlu4NpEoaASw7rk2ZrD7BTbxuBMqUnOI= Subject key identifier: 57:2D:81:3C:46:E0:24:ED:6B:59:5E:16:D9:1F:E5:52:29:B1:E9:E8 Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77 Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677 Certificate serial: 019B2E8B4813CCDB5F2EE11EBCA28CCD0E8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft Manifest number: 1788 Signing time: Wed 17 Dec 2025 23:00:38 +0000 Manifest this update: Wed 17 Dec 2025 23:00:38 +0000 Manifest next update: Thu 18 Dec 2025 23:00:38 +0000 Files and hashes: 1: H6EtaHxiehgvgdTMyz8yIBhh9nc.crl (hash: rlvYaCkQhbrFZ+2mnrERH7wUcIX1YRUbr29V3aBBNxg=) 2: TYWepdwzCmiIVwEz7K8yZe03CRw.roa (hash: Gskq7xmpmSlLRwYuMMpLlLQSUWpIBfZkyQHS0PN6dOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:48:13:cc:db:5f:2e:e1:1e:bc:a2:8c:cd:0e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677 Validity Not Before: Dec 17 23:00:38 2025 GMT Not After : Dec 18 23:00:38 2025 GMT Subject: CN=572d813c46e024ed6b595e16d91fe55229b1e9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:db:8c:a8:a0:2c:94:c6:16:c6:b6:5a:c3: c3:6c:78:5e:a1:73:7b:66:d8:7c:ad:1c:ea:bf:98: 94:0b:1b:e5:4e:65:78:7c:90:00:2f:f0:0e:30:c9: c5:4c:02:72:20:ee:da:ea:66:96:27:93:0c:fc:af: 94:3e:83:b1:18:fe:74:c6:63:61:e0:05:ae:12:c5: 4f:3d:8b:e1:ef:c1:d8:ac:ef:09:0e:2f:6b:56:e0: 02:6a:9e:bc:6c:ff:0a:eb:42:b1:da:0e:fc:c7:e2: 31:c7:cd:33:5b:0b:68:9e:24:21:51:f3:72:15:0b: b2:f6:95:11:95:96:1a:eb:70:81:e1:66:c0:7f:05: 02:31:98:39:7e:40:e2:d1:88:c9:cd:03:5f:3b:ef: 88:90:ed:6a:5c:f3:e8:ba:5f:b1:10:c4:bb:24:86: 98:b4:27:64:0c:ca:10:c0:79:76:c9:62:ef:db:70: ac:a0:a9:2c:7b:f6:c7:55:64:47:40:22:26:71:64: fd:8c:5b:ef:d2:51:2e:94:24:c8:49:da:f4:e8:b1: 65:9b:dd:eb:5e:bd:f3:aa:e5:ce:2f:96:e0:c0:ab: 65:f7:ff:3c:85:cf:5f:33:c6:d6:04:e1:0c:fc:ed: ad:b9:ea:8e:86:b6:d6:91:73:62:f9:32:0d:99:ee: db:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2D:81:3C:46:E0:24:ED:6B:59:5E:16:D9:1F:E5:52:29:B1:E9:E8 X509v3 Authority Key Identifier: keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ef:36:42:48:6f:e9:ef:9c:35:a7:ce:fa:11:01:26:72:8e: 08:b7:f6:32:fd:f0:b1:fe:ef:7f:23:22:04:29:96:a0:46:c5: 2b:a4:c9:23:90:25:8a:fe:7f:73:14:a7:84:9f:58:6f:d8:db: 29:49:10:62:3c:96:3c:ee:85:a0:72:e0:40:f3:0f:3e:c3:9f: df:21:96:d3:7d:87:d1:b3:8b:01:4b:36:04:36:59:34:1c:19: 37:ea:80:a5:12:64:23:ae:5b:db:8b:09:92:02:07:bd:28:05: 70:93:d7:7d:8b:92:4b:f3:fb:d1:23:b2:e2:42:2e:ed:01:6b: cc:ee:91:4e:2b:81:37:23:6d:ed:a5:b6:e7:61:6f:29:03:70: 34:05:9e:1d:47:ea:55:6c:6b:12:7a:e0:e2:13:e1:04:3f:dc: df:c1:e3:5c:68:68:d0:6e:ad:c8:1a:bf:35:79:c9:29:4b:5e: 33:cd:67:08:2a:f2:d1:6f:94:13:79:5c:fc:fa:07:86:6c:89: dd:c1:57:78:09:84:d4:9f:8b:77:94:c6:1f:aa:95:5c:d0:07: 9e:6b:0c:0c:e5:8c:a8:c6:18:30:b5:12:c1:df:82:09:02:c0: ab:54:31:01:42:ae:4d:89:26:c5:47:0e:c4:fc:18:43:72:62: 53:ed:9c:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui0gTzNtfLuEevKKMzQ6OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYTEyZDY4N2M2MjdhMTgyZjgxZDRjY2NiM2YzMjIwMTg2 MWY2NzcwHhcNMjUxMjE3MjMwMDM4WhcNMjUxMjE4MjMwMDM4WjAzMTEwLwYDVQQD Eyg1NzJkODEzYzQ2ZTAyNGVkNmI1OTVlMTZkOTFmZTU1MjI5YjFlOWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4vbjKigLJTGFsa2WsPDbHheoXN7 Zth8rRzqv5iUCxvlTmV4fJAAL/AOMMnFTAJyIO7a6maWJ5MM/K+UPoOxGP50xmNh 4AWuEsVPPYvh78HYrO8JDi9rVuACap68bP8K60Kx2g78x+Ixx80zWwtoniQhUfNy FQuy9pURlZYa63CB4WbAfwUCMZg5fkDi0YjJzQNfO++IkO1qXPPoul+xEMS7JIaY tCdkDMoQwHl2yWLv23CsoKkse/bHVWRHQCImcWT9jFvv0lEulCTISdr06LFlm93r Xr3zquXOL5bgwKtl9/88hc9fM8bWBOEM/O2tueqOhrbWkXNi+TINme7bCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFctgTxG4CTta1leFtkf5VIpsenoMB8GA1UdIwQY MBaAFB+hLWh8YnoYL4HUzMs/MiAYYfZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80YzI5ZDAtNThlYS00OGU4LWJhYzct ODljY2MyZDQ1NjNiLzEvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC80YzI5ZDAtNThlYS00OGU4LWJhYzctODljY2MyZDQ1NjNi LzEvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+82Qkhv 6e+cNafO+hEBJnKOCLf2Mv3wsf7vfyMiBCmWoEbFK6TJI5Aliv5/cxSnhJ9Yb9jb KUkQYjyWPO6FoHLgQPMPPsOf3yGW032H0bOLAUs2BDZZNBwZN+qApRJkI65b24sJ kgIHvSgFcJPXfYuSS/P70SOy4kIu7QFrzO6RTiuBNyNt7aW252FvKQNwNAWeHUfq VWxrEnrg4hPhBD/c38HjXGho0G6tyBq/NXnJKUteM81nCCry0W+UE3lc/PoHhmyJ 3cFXeAmE1J+Ld5TGH6qVXNAHnmsMDOWMqMYYMLUSwd+CCQLAq1QxAUKuTYkmxUcO xPwYQ3JiU+2cKA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:44:43 2025 by rpki-client