This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft File: H6EtaHxiehgvgdTMyz8yIBhh9nc.mft (raw, json) Hash identifier: lBCgK/QLQX8+v1KxbGJVfS1GluU4RO7TG2auEFr+u1Q= Subject key identifier: E6:C8:BA:D4:7B:FA:D0:44:FB:97:C0:53:9C:8F:C4:D3:8E:A2:01:F2 Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77 Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677 Certificate serial: 019AF2AD552D19FF014ED0045AC631A4C76D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 08:00:36 +0000 Manifest this update: Sat 06 Dec 2025 08:00:36 +0000 Manifest next update: Sun 07 Dec 2025 08:00:36 +0000 Files and hashes: 1: H6EtaHxiehgvgdTMyz8yIBhh9nc.crl (hash: 1jhxbkIsR8CKHuSh2mK+HZOrN+fF4cU1c9qh93IhlYg=) 2: TYWepdwzCmiIVwEz7K8yZe03CRw.roa (hash: Gskq7xmpmSlLRwYuMMpLlLQSUWpIBfZkyQHS0PN6dOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:55:2d:19:ff:01:4e:d0:04:5a:c6:31:a4:c7:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677 Validity Not Before: Dec 6 08:00:36 2025 GMT Not After : Dec 7 08:00:36 2025 GMT Subject: CN=e6c8bad47bfad044fb97c0539c8fc4d38ea201f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:87:1e:75:a1:6f:c1:4a:e2:7e:77:11:e4:00: 3b:8d:8d:2f:91:20:66:27:16:df:d9:77:ef:19:b2: b9:89:bf:4f:09:93:38:f8:13:9e:df:dc:db:00:be: 99:8d:40:cb:d7:02:14:ac:ab:f4:e9:55:c4:f0:e5: 9a:c1:68:78:af:ea:45:a8:64:b6:a7:81:64:9a:3b: b0:1f:e3:38:10:ed:51:2d:2b:15:f7:d6:b2:1c:4b: a4:82:7e:1d:03:b3:64:77:a4:e0:7a:3e:d9:e5:b4: 20:46:71:c4:00:d2:7c:b2:ce:40:f8:97:fe:b3:52: 02:7c:a8:7f:67:e2:d0:19:79:40:a8:a0:fe:93:7f: 15:87:a8:81:8e:49:0c:55:23:31:7c:97:d0:16:4a: a0:fc:8e:12:ac:40:d8:ef:ea:27:4d:30:dd:f3:9e: 74:f1:fb:33:de:bd:b5:ca:33:3e:b4:a3:a1:c7:ac: 73:4e:46:ff:6b:49:d4:65:97:d4:45:59:5e:c0:35: ed:40:9c:db:de:f1:46:82:58:d3:14:f5:db:e6:7e: 61:24:c8:42:be:fd:a5:85:2d:44:c6:ed:3e:e0:ed: a9:27:6f:42:1b:d7:88:a9:4d:2c:a3:51:3e:2c:02: bf:fb:3c:4b:23:3b:2c:59:5d:8a:57:32:66:cc:15: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C8:BA:D4:7B:FA:D0:44:FB:97:C0:53:9C:8F:C4:D3:8E:A2:01:F2 X509v3 Authority Key Identifier: keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f5:5e:7c:79:45:3e:03:52:8a:b3:21:45:5a:31:81:28:86: e8:a4:be:84:b0:08:5d:44:ae:e6:1c:95:b4:a5:0e:08:0d:58: cd:ee:1d:d6:3a:14:39:74:93:41:7a:c1:01:df:52:d3:33:0b: 1c:35:de:e7:e4:10:96:36:fb:5f:fc:de:d7:e1:f1:62:b7:bd: a3:38:ac:f4:43:e5:f1:a7:fc:4d:ff:2a:d0:2d:0d:74:d0:f8: c3:48:3c:9b:f8:e2:b4:cb:00:f4:53:5b:8d:a5:d6:fe:45:47: 7c:d4:aa:22:1a:f5:26:ae:f6:00:30:c6:3e:7d:3d:4c:ea:01: 4b:1e:22:86:84:41:5b:4b:0c:cc:7b:fa:90:39:7a:31:50:3e: 4d:ba:50:6c:ce:61:30:13:a4:aa:96:d5:2b:d7:95:b8:6d:4c: ac:a9:39:56:80:1f:af:b0:a8:78:89:4a:c3:ec:4d:4c:bb:b1: 64:a3:24:9a:0f:49:6e:71:4b:ed:5a:e0:21:95:41:e8:ba:bd: d5:6f:64:89:65:bb:c3:1c:03:61:d4:a9:fc:93:bb:fb:cf:87: 61:a3:d8:5f:2c:ce:8c:56:18:ec:ee:4c:0c:27:5e:64:56:77: 28:f0:d1:14:9a:3e:f2:e9:a9:60:e9:04:60:04:1a:fd:d4:3c: cc:47:2a:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVUtGf8BTtAEWsYxpMdtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYTEyZDY4N2M2MjdhMTgyZjgxZDRjY2NiM2YzMjIwMTg2 MWY2NzcwHhcNMjUxMjA2MDgwMDM2WhcNMjUxMjA3MDgwMDM2WjAzMTEwLwYDVQQD EyhlNmM4YmFkNDdiZmFkMDQ0ZmI5N2MwNTM5YzhmYzRkMzhlYTIwMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzocedaFvwUrifncR5AA7jY0vkSBm Jxbf2XfvGbK5ib9PCZM4+BOe39zbAL6ZjUDL1wIUrKv06VXE8OWawWh4r+pFqGS2 p4FkmjuwH+M4EO1RLSsV99ayHEukgn4dA7Nkd6Tgej7Z5bQgRnHEANJ8ss5A+Jf+ s1ICfKh/Z+LQGXlAqKD+k38Vh6iBjkkMVSMxfJfQFkqg/I4SrEDY7+onTTDd8550 8fsz3r21yjM+tKOhx6xzTkb/a0nUZZfURVlewDXtQJzb3vFGgljTFPXb5n5hJMhC vv2lhS1Exu0+4O2pJ29CG9eIqU0so1E+LAK/+zxLIzssWV2KVzJmzBUdKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObIutR7+tBE+5fAU5yPxNOOogHyMB8GA1UdIwQY MBaAFB+hLWh8YnoYL4HUzMs/MiAYYfZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80YzI5ZDAtNThlYS00OGU4LWJhYzct ODljY2MyZDQ1NjNiLzEvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC80YzI5ZDAtNThlYS00OGU4LWJhYzctODljY2MyZDQ1NjNi LzEvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPVefHlF PgNSirMhRVoxgSiG6KS+hLAIXUSu5hyVtKUOCA1Yze4d1joUOXSTQXrBAd9S0zML HDXe5+QQljb7X/ze1+HxYre9ozis9EPl8af8Tf8q0C0NdND4w0g8m/jitMsA9FNb jaXW/kVHfNSqIhr1Jq72ADDGPn09TOoBSx4ihoRBW0sMzHv6kDl6MVA+TbpQbM5h MBOkqpbVK9eVuG1MrKk5VoAfr7CoeIlKw+xNTLuxZKMkmg9JbnFL7VrgIZVB6Lq9 1W9kiWW7wxwDYdSp/JO7+8+HYaPYXyzOjFYY7O5MDCdeZFZ3KPDRFJo+8umpYOkE YAQa/dQ8zEcqng== -----END CERTIFICATE-----Generated at Sat Dec 6 13:07:51 2025 by rpki-client