This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json) Hash identifier: u9x8C/YFZJOAGMlkNpRk81vqFFtBNKaMRGp8Qi8i42Q= Subject key identifier: FF:8C:AE:82:B3:34:D5:84:6A:9C:0D:40:DA:CB:4F:A9:9B:08:72:98 Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Certificate serial: 019AF276B11A8FDD7911004DAA58B9D5E692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft Manifest number: 0EF4 Signing time: Sat 06 Dec 2025 07:00:56 +0000 Manifest this update: Sat 06 Dec 2025 07:00:56 +0000 Manifest next update: Sun 07 Dec 2025 07:00:56 +0000 Files and hashes: 1: 1-NOojewDd9utfznujBymNMOVe5o.roa (hash: X2kKFux/YKAN46Gj+j+YVyBua6uxGC7NabYTrscJFb0=) 2: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: hgNq4or9J6L3PmRoMmg5oDZD8oymt09uOwo70pzyzbs=) 3: QjuxJ6qQtAfkxBg368Hm1m7WVg4.roa (hash: t8EQkQ4/YMRDclHW8vhweaMsa94SAKvAmv2jUXhwu6A=) 4: V6VlaWA1K-C9MyNU228wIIvdWko.roa (hash: 1CcDBQN60ZlZdF+oTvwDg2BxgmLENhu2Ibg8dddCRwg=) 5: VniS5GV6pMehwAD691_j3TcBoAA.roa (hash: +vOLB8fvZmysfQ2OW1z955SFLMU+xQAMgao9QD3s580=) 6: _zdlWhEi_N0gWHtAVPgkNsc9mR4.roa (hash: 3JxJU5VxNcGspDTOSPWFbdh4BiX6viLLu85SaLzaPnc=) 7: giTh8Ebv-slnkkaTofMNpLbZvzM.roa (hash: bO2clbkcE8o6+abtqVuqTC73svDuw3XhC1F4AhqNJOA=) 8: pj_r37O8ymvyjuC6uSrXOKsAL0o.roa (hash: wt8kJLWKI7jt1DkUmOJ01bIYni4fTUbSQrDjjyaL96c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b1:1a:8f:dd:79:11:00:4d:aa:58:b9:d5:e6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Validity Not Before: Dec 6 07:00:56 2025 GMT Not After : Dec 7 07:00:56 2025 GMT Subject: CN=ff8cae82b334d5846a9c0d40dacb4fa99b087298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:17:71:8e:fc:80:3a:13:67:1c:92:d8:be:5a: 5c:30:77:55:6a:20:32:bb:a7:1b:82:d9:c5:04:c8: c0:e7:49:a3:24:d8:bd:1b:35:7e:21:44:f1:66:57: bd:de:fd:9c:df:12:a3:31:4d:f5:9d:05:4b:e1:d8: dc:52:2f:cf:6d:e3:80:5e:d6:d5:10:65:06:39:1f: c5:0b:25:71:df:f1:52:ff:5b:46:86:d5:68:db:0f: 13:79:2e:d7:21:46:ef:26:99:d6:1d:b4:a3:31:01: 38:5a:ce:2c:16:c1:63:1a:c3:95:9b:d9:58:e3:1e: dd:17:14:3f:b7:a0:4a:40:f9:0b:e1:00:ef:ba:0f: 7b:16:54:94:7a:5b:4b:96:40:96:7f:6c:ba:e4:5c: 39:7f:79:71:2d:c5:5b:02:dc:e0:c1:19:f8:ee:e9: 80:c8:c7:c6:c4:22:a8:7b:cf:b5:bb:c8:12:a4:d8: 64:98:37:99:7d:b7:81:33:fd:14:cd:1c:b3:6d:f9: 3e:fe:1c:d7:5c:b1:2b:c7:e1:07:9c:7a:44:11:3d: d8:61:1d:67:96:9c:69:d6:86:d4:e1:c9:14:85:ee: e3:6d:23:91:4a:69:11:c3:25:28:b4:5f:d5:80:52: d6:03:07:26:0a:89:4a:d6:ce:ad:29:6c:6d:3e:0f: e2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8C:AE:82:B3:34:D5:84:6A:9C:0D:40:DA:CB:4F:A9:9B:08:72:98 X509v3 Authority Key Identifier: keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0a:ee:62:d1:92:88:6d:3c:ca:04:fd:a6:57:77:38:90:6f: 49:7c:21:aa:bd:c7:4b:f8:1f:e9:da:65:64:d8:4a:3f:50:08: 46:60:4e:50:38:74:2f:51:14:af:54:8e:02:23:63:08:49:ef: eb:91:1f:e0:82:a9:03:4e:dc:29:38:31:b7:7b:0f:e8:f7:11: f8:16:71:04:56:09:cd:c8:aa:52:5e:ef:76:20:9b:16:c2:8f: 98:70:cd:14:43:de:ce:6a:17:4f:74:16:cc:35:2a:09:ea:13: 87:38:25:e9:0d:23:7e:f1:b7:32:39:20:1e:77:b0:51:48:44: 9c:d5:e2:c7:2a:b3:4c:50:d8:65:79:e7:67:da:04:c3:22:51: 6c:1d:f4:d1:ad:ce:39:5f:e9:43:62:6c:5c:42:4f:0f:3a:02: ef:d9:f4:56:15:9c:0d:d1:14:5f:a0:61:fb:d0:7d:8c:10:ef: d2:c3:4b:e0:2c:45:53:95:2d:26:cd:35:c5:14:1c:b6:86:ec: 6c:8d:6d:48:df:37:cf:54:44:c3:50:0c:2d:00:a2:16:87:60: df:01:7f:b1:23:9b:62:2c:92:d1:ad:43:04:c0:fe:48:e5:d3: 13:e4:ce:84:00:55:70:ae:f8:78:a5:29:05:ba:32:59:45:99: ff:b4:46:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrEaj915EQBNqli51eaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODEwY2MzZmQyMjgzMzhkOWI5Njk3MjVkOTViYjMzYzRl NjVhNDgwHhcNMjUxMjA2MDcwMDU2WhcNMjUxMjA3MDcwMDU2WjAzMTEwLwYDVQQD EyhmZjhjYWU4MmIzMzRkNTg0NmE5YzBkNDBkYWNiNGZhOTliMDg3Mjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhdxjvyAOhNnHJLYvlpcMHdVaiAy u6cbgtnFBMjA50mjJNi9GzV+IUTxZle93v2c3xKjMU31nQVL4djcUi/PbeOAXtbV EGUGOR/FCyVx3/FS/1tGhtVo2w8TeS7XIUbvJpnWHbSjMQE4Ws4sFsFjGsOVm9lY 4x7dFxQ/t6BKQPkL4QDvug97FlSUeltLlkCWf2y65Fw5f3lxLcVbAtzgwRn47umA yMfGxCKoe8+1u8gSpNhkmDeZfbeBM/0UzRyzbfk+/hzXXLErx+EHnHpEET3YYR1n lpxp1obU4ckUhe7jbSORSmkRwyUotF/VgFLWAwcmColK1s6tKWxtPg/i8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+MroKzNNWEapwNQNrLT6mbCHKYMB8GA1UdIwQY MBaAFB+BDMP9IoM42blpcl2VuzPE5lpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUt ZjljMTgwYmE0ODAxLzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUtZjljMTgwYmE0ODAx LzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgruYtGS iG08ygT9pld3OJBvSXwhqr3HS/gf6dplZNhKP1AIRmBOUDh0L1EUr1SOAiNjCEnv 65Ef4IKpA07cKTgxt3sP6PcR+BZxBFYJzciqUl7vdiCbFsKPmHDNFEPezmoXT3QW zDUqCeoThzgl6Q0jfvG3MjkgHnewUUhEnNXixyqzTFDYZXnnZ9oEwyJRbB300a3O OV/pQ2JsXEJPDzoC79n0VhWcDdEUX6Bh+9B9jBDv0sNL4CxFU5UtJs01xRQctobs bI1tSN83z1REw1AMLQCiFodg3wF/sSObYiyS0a1DBMD+SOXTE+TOhABVcK74eKUp BboyWUWZ/7RGCw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:25 2025 by rpki-client