This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json) Hash identifier: 8nzPu4p2o2nDWZue46/AK7uEAozK5RS24LCdP/2yHno= Subject key identifier: D2:80:3D:9C:55:96:9A:44:A5:25:2B:74:58:FD:AF:16:F1:01:91:46 Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10 Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610 Certificate serial: 019B34FB24C7093A92DC828D12C568B3475C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft Manifest number: 0726 Signing time: Fri 19 Dec 2025 05:00:32 +0000 Manifest this update: Fri 19 Dec 2025 05:00:32 +0000 Manifest next update: Sat 20 Dec 2025 05:00:32 +0000 Files and hashes: 1: 39yFNcs_aiMECPSY8yer3c7rqfs.roa (hash: kt8DxoHHJV7b65racNqYI0+ZGEt7nNXcd8uoIQ2X++s=) 2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: W18RDXNBxklncVmUKF6tgmRG3SHHXPa2Ickv8bWSqeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:24:c7:09:3a:92:dc:82:8d:12:c5:68:b3:47:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610 Validity Not Before: Dec 19 05:00:32 2025 GMT Not After : Dec 20 05:00:32 2025 GMT Subject: CN=d2803d9c55969a44a5252b7458fdaf16f1019146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:a5:bd:e6:9d:66:db:dd:cc:95:3c:e0:63: d2:25:36:e4:4a:63:ce:82:f3:5e:8d:36:cc:c2:d3: 08:5a:5d:d6:5a:cc:5b:6e:ef:02:74:4a:8a:f0:05: ef:ce:ed:57:ea:95:96:d2:d4:d5:b5:19:a4:a5:6f: 2e:29:05:8c:a2:88:1d:4b:da:9d:5e:26:92:41:32: 36:bd:39:6d:a9:9f:eb:9a:9d:33:8c:a1:6f:41:65: 31:27:cf:da:20:aa:1c:ed:bf:7c:88:f6:6d:37:67: 4a:b9:73:08:22:c9:b3:9d:48:4c:1c:78:fd:14:3d: 02:d8:8a:4a:3d:85:a7:76:4c:67:11:a3:04:3f:2d: e3:4a:5c:29:3f:79:62:a0:22:9a:b3:05:8e:12:87: d9:e9:05:01:da:04:17:35:f2:c8:c1:31:d5:c6:73: 64:92:8c:bb:66:0d:d7:98:33:31:01:07:81:8d:9e: d5:91:63:8c:ec:e5:f1:48:f1:8e:54:c0:84:f1:f0: 18:0c:0e:93:40:da:02:2c:3d:d8:52:a9:3b:bc:a3: dd:fb:9e:fa:e9:d9:76:d1:84:1d:85:c8:13:5c:9b: 6f:13:d1:8e:cb:d8:b2:71:dc:a0:3b:56:8e:95:3b: 8a:b0:5d:ae:cb:db:14:55:65:35:8b:65:23:37:ce: 1e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:80:3D:9C:55:96:9A:44:A5:25:2B:74:58:FD:AF:16:F1:01:91:46 X509v3 Authority Key Identifier: keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:dc:45:49:5b:cf:53:e0:15:6d:62:c7:00:12:91:54:dd:c7: 4e:7e:29:b7:86:9b:5a:52:cb:99:73:6d:43:9b:57:04:54:38: ca:3b:31:86:83:0a:65:3f:f4:ed:ad:84:ce:e8:41:86:34:ec: 75:94:ef:af:be:6f:78:49:d6:48:f4:3d:37:23:d9:e2:4f:cc: 13:d6:1e:bd:cc:0a:00:34:34:a9:95:83:1f:a3:b7:aa:a3:ac: e6:4e:b6:37:62:1f:68:d7:65:a3:a3:86:f9:6e:a7:df:65:1e: e7:4f:43:84:80:07:81:51:87:86:3e:b1:4b:75:7e:af:91:c3: 3c:27:25:6a:86:22:df:aa:be:12:02:ba:fa:54:56:8e:ba:4f: f3:f1:d4:0f:7b:07:ce:46:dd:b2:4c:2e:03:54:09:7a:5d:a8: 5d:e1:99:f9:61:b1:27:1f:d8:9e:7b:fb:1b:86:82:0f:31:27: c7:01:8d:3e:d8:81:cb:1f:1b:ef:31:f7:d8:2c:e2:57:84:85: 77:b7:9f:8f:70:08:8a:d9:5f:3e:01:dc:df:43:16:eb:fc:33: ca:ae:da:b9:89:33:47:6d:c3:69:61:f7:cc:91:50:83:d3:84: e5:39:f1:85:29:38:1f:f2:a5:40:61:8b:96:3b:ec:72:1c:70: af:6c:6a:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+yTHCTqS3IKNEsVos0dcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjdjZjFjYTJkZWEzMmZjZDk3MDJkZDI1MTBlYjZiZjJi Njg2MTAwHhcNMjUxMjE5MDUwMDMyWhcNMjUxMjIwMDUwMDMyWjAzMTEwLwYDVQQD EyhkMjgwM2Q5YzU1OTY5YTQ0YTUyNTJiNzQ1OGZkYWYxNmYxMDE5MTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTKlveadZtvdzJU84GPSJTbkSmPO gvNejTbMwtMIWl3WWsxbbu8CdEqK8AXvzu1X6pWW0tTVtRmkpW8uKQWMoogdS9qd XiaSQTI2vTltqZ/rmp0zjKFvQWUxJ8/aIKoc7b98iPZtN2dKuXMIIsmznUhMHHj9 FD0C2IpKPYWndkxnEaMEPy3jSlwpP3lioCKaswWOEofZ6QUB2gQXNfLIwTHVxnNk koy7Zg3XmDMxAQeBjZ7VkWOM7OXxSPGOVMCE8fAYDA6TQNoCLD3YUqk7vKPd+576 6dl20YQdhcgTXJtvE9GOy9iycdygO1aOlTuKsF2uy9sUVWU1i2UjN84eFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKAPZxVlppEpSUrdFj9rxbxAZFGMB8GA1UdIwQY MBaAFB9nzxyi3qMvzZcC3SUQ62vytoYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zY2I0ZDYtZjMyYy00MTMwLWFlMGUt YmFkYmU4NDA5NzdlLzEvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zY2I0ZDYtZjMyYy00MTMwLWFlMGUtYmFkYmU4NDA5Nzdl LzEvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9xFSVvP U+AVbWLHABKRVN3HTn4pt4abWlLLmXNtQ5tXBFQ4yjsxhoMKZT/07a2EzuhBhjTs dZTvr75veEnWSPQ9NyPZ4k/ME9YevcwKADQ0qZWDH6O3qqOs5k62N2IfaNdlo6OG +W6n32Ue509DhIAHgVGHhj6xS3V+r5HDPCclaoYi36q+EgK6+lRWjrpP8/HUD3sH zkbdskwuA1QJel2oXeGZ+WGxJx/Ynnv7G4aCDzEnxwGNPtiByx8b7zH32CziV4SF d7efj3AIitlfPgHc30MW6/wzyq7auYkzR23DaWH3zJFQg9OE5TnxhSk4H/KlQGGL ljvschxwr2xqWw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:16:02 2025 by rpki-client