This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json) Hash identifier: 3UCgnrEcQpj6CPg9JW/xvdVBz9Ig+P+Up/XCfgNVdP4= Subject key identifier: 9F:02:0E:58:1C:46:21:AD:B7:B8:F3:D3:DA:3A:8F:62:25:73:5D:74 Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10 Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610 Certificate serial: 019AF3521EF8EFC991B8A638D22E46F5F2AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft Manifest number: 0704 Signing time: Sat 06 Dec 2025 11:00:36 +0000 Manifest this update: Sat 06 Dec 2025 11:00:36 +0000 Manifest next update: Sun 07 Dec 2025 11:00:36 +0000 Files and hashes: 1: 39yFNcs_aiMECPSY8yer3c7rqfs.roa (hash: kt8DxoHHJV7b65racNqYI0+ZGEt7nNXcd8uoIQ2X++s=) 2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: 1NumW8x/HHynCU9btvd1x4kbD1++8Bnda3t/+xNEfes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:1e:f8:ef:c9:91:b8:a6:38:d2:2e:46:f5:f2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610 Validity Not Before: Dec 6 11:00:36 2025 GMT Not After : Dec 7 11:00:36 2025 GMT Subject: CN=9f020e581c4621adb7b8f3d3da3a8f6225735d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:87:52:35:6a:d7:a1:b8:05:1d:f3:a2:81:95: 05:f3:7f:c4:b7:da:2f:fc:4d:a3:a4:c2:e6:46:6f: 6c:85:ac:5c:39:f3:c5:ee:ff:c7:9c:0c:cd:7b:1b: 78:88:03:a6:11:c4:1e:d7:6b:7f:d6:b4:54:38:bc: 4c:b7:46:08:18:3e:65:08:73:24:8d:50:8b:b8:9e: ad:9d:49:83:a1:3b:c2:77:ae:59:d9:24:ec:75:81: f0:9d:69:3e:4e:08:e2:6b:e5:c8:b4:b4:df:ef:3b: 2c:2d:35:d7:77:73:d0:e3:da:08:98:98:5a:d5:7e: ce:38:9c:2d:5e:26:65:98:05:9c:38:ad:02:3a:51: a2:24:af:e4:0e:ae:ea:4e:32:e8:65:92:98:fc:9e: ba:97:c1:7b:d7:b3:c6:26:3c:93:6c:ed:91:b7:a2: 19:c0:f8:9f:9f:20:79:94:f9:99:f4:01:2c:70:45: e7:10:24:b7:22:ff:99:02:08:d3:fc:f7:5e:95:f5: cc:5f:5a:40:5f:54:1b:8d:19:0f:cf:f2:7b:2d:95: 01:49:3c:8e:ae:b0:46:30:8d:12:a2:88:ac:77:44: e3:8e:5c:88:51:06:5c:ff:7d:d4:21:d5:49:1f:74: 94:de:41:5f:cf:83:24:10:3d:8d:16:01:c2:ea:60: b7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:02:0E:58:1C:46:21:AD:B7:B8:F3:D3:DA:3A:8F:62:25:73:5D:74 X509v3 Authority Key Identifier: keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b3:a7:c3:46:64:78:a1:26:13:d8:e0:11:4d:9a:2b:ae:dc: a3:0c:20:f1:ac:19:8d:b0:8c:5f:c9:c6:5c:cf:0f:e6:84:ad: 26:71:45:68:d3:76:27:6f:0a:01:77:5c:d0:f4:1c:d2:03:13: ff:01:82:2e:b0:8d:49:77:64:ea:7e:c9:5d:12:d8:fb:48:5a: 44:4b:79:5f:d4:18:b6:19:a4:16:fc:e8:a1:5f:a8:99:1e:53: 50:a7:f3:ee:0f:f9:77:72:31:88:34:22:1e:aa:8b:45:cc:f3: dd:9c:ce:0a:74:c7:95:80:e0:55:33:3d:9c:c1:76:35:e4:70: 7b:57:76:cf:4a:20:15:70:65:aa:64:e5:83:9c:8d:33:51:f5: 2b:45:33:22:44:99:28:e5:6b:f1:e3:26:1a:fa:43:8c:bb:bc: c4:51:a0:7c:ab:b2:ba:09:63:96:26:56:d6:c3:9b:49:04:a7: 9a:eb:82:e5:d1:a8:89:d8:cb:b9:29:97:9d:2c:8c:93:40:f6: 80:b8:03:58:25:8d:78:db:ce:2b:0d:09:ee:70:9d:8a:c5:6f: f1:c6:94:2a:9c:ea:1a:0a:21:13:3d:a1:d1:af:62:92:24:2c: e9:fe:90:4b:3f:b5:31:90:80:9a:7d:b3:64:13:53:4e:a7:74: e0:f4:40:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUh7478mRuKY40i5G9fKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjdjZjFjYTJkZWEzMmZjZDk3MDJkZDI1MTBlYjZiZjJi Njg2MTAwHhcNMjUxMjA2MTEwMDM2WhcNMjUxMjA3MTEwMDM2WjAzMTEwLwYDVQQD Eyg5ZjAyMGU1ODFjNDYyMWFkYjdiOGYzZDNkYTNhOGY2MjI1NzM1ZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24dSNWrXobgFHfOigZUF83/Et9ov /E2jpMLmRm9shaxcOfPF7v/HnAzNext4iAOmEcQe12t/1rRUOLxMt0YIGD5lCHMk jVCLuJ6tnUmDoTvCd65Z2STsdYHwnWk+Tgjia+XItLTf7zssLTXXd3PQ49oImJha 1X7OOJwtXiZlmAWcOK0COlGiJK/kDq7qTjLoZZKY/J66l8F717PGJjyTbO2Rt6IZ wPifnyB5lPmZ9AEscEXnECS3Iv+ZAgjT/PdelfXMX1pAX1QbjRkPz/J7LZUBSTyO rrBGMI0Sooisd0TjjlyIUQZc/33UIdVJH3SU3kFfz4MkED2NFgHC6mC3GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8CDlgcRiGtt7jz09o6j2Ilc110MB8GA1UdIwQY MBaAFB9nzxyi3qMvzZcC3SUQ62vytoYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zY2I0ZDYtZjMyYy00MTMwLWFlMGUt YmFkYmU4NDA5NzdlLzEvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zY2I0ZDYtZjMyYy00MTMwLWFlMGUtYmFkYmU4NDA5Nzdl LzEvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrOnw0Zk eKEmE9jgEU2aK67cowwg8awZjbCMX8nGXM8P5oStJnFFaNN2J28KAXdc0PQc0gMT /wGCLrCNSXdk6n7JXRLY+0haREt5X9QYthmkFvzooV+omR5TUKfz7g/5d3IxiDQi HqqLRczz3ZzOCnTHlYDgVTM9nMF2NeRwe1d2z0ogFXBlqmTlg5yNM1H1K0UzIkSZ KOVr8eMmGvpDjLu8xFGgfKuyugljliZW1sObSQSnmuuC5dGoidjLuSmXnSyMk0D2 gLgDWCWNeNvOKw0J7nCdisVv8caUKpzqGgohEz2h0a9ikiQs6f6QSz+1MZCAmn2z ZBNTTqd04PRANw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:20 2025 by rpki-client