This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft File: H7XBu67UTItq4_K1ZtAcwljfws4.mft (raw, json) Hash identifier: pOEPVoxONLv+95ZuefdDR+0V6dgmDk4uvnsgF4/dYgY= Subject key identifier: D7:E4:BE:25:E6:EB:E6:C0:34:8B:5B:21:8E:53:F8:7D:00:E1:33:D8 Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE Certificate issuer: /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce Certificate serial: 019AF3F756A8B01E79CEFAB977C784FA47A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft Manifest number: 12E9 Signing time: Sat 06 Dec 2025 14:01:04 +0000 Manifest this update: Sat 06 Dec 2025 14:01:04 +0000 Manifest next update: Sun 07 Dec 2025 14:01:04 +0000 Files and hashes: 1: H7XBu67UTItq4_K1ZtAcwljfws4.crl (hash: aMids0s4msMwa3qCrmrp32ZhQnQr4SS17gFpcDY65Nc=) 2: MEWWY0epwShfEJbfHo9y4r51GYY.roa (hash: SGRcwmohz12gMReH4Cn9V8oKzsRQ7LvpKURqTZBMtCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:56:a8:b0:1e:79:ce:fa:b9:77:c7:84:fa:47:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce Validity Not Before: Dec 6 14:01:04 2025 GMT Not After : Dec 7 14:01:04 2025 GMT Subject: CN=d7e4be25e6ebe6c0348b5b218e53f87d00e133d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:83:c7:de:65:5d:f7:f4:31:1e:bf:4e:3e: b4:e9:b3:89:b8:2b:97:79:19:c7:c3:32:e9:ba:02: 02:47:47:cb:86:4f:e4:dc:9e:b2:cb:07:90:41:0b: bc:62:4b:f8:3a:b0:3a:76:da:e5:e3:be:c8:7b:9e: 7a:b6:4a:2e:7d:a3:63:22:a7:31:51:91:38:17:60: e1:8f:74:4b:23:53:c1:f0:bb:03:1a:b2:e5:20:ad: fa:16:e9:64:f7:2d:34:c5:13:ed:cc:56:66:67:a5: 74:49:5a:ea:7a:18:c5:1b:7c:82:8f:b8:fe:e4:2f: 3e:89:f4:08:05:89:d2:e8:f9:7a:b4:89:93:f0:02: 75:a3:9c:23:4c:a1:b9:81:ac:ef:bd:ad:a4:1b:56: 79:2c:44:09:b0:95:2c:99:3f:88:11:46:db:b7:83: 63:1f:da:7b:f7:53:83:15:66:9e:b1:d6:71:c7:c0: 75:d6:3a:b7:ae:ef:9e:cb:eb:68:90:ff:ea:c8:0c: b3:68:ce:35:ad:bc:f7:56:3d:8b:1c:d0:35:13:44: 33:8b:ac:35:a0:94:b6:80:4f:27:c5:a2:18:ef:46: db:5b:e6:29:e1:cd:38:4b:fd:f8:e6:52:ea:5d:7c: ec:81:41:5a:f0:e5:44:8a:17:f6:bd:c8:ab:15:bc: 16:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E4:BE:25:E6:EB:E6:C0:34:8B:5B:21:8E:53:F8:7D:00:E1:33:D8 X509v3 Authority Key Identifier: keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:35:65:b0:12:35:01:ce:9f:5d:bd:71:e5:a7:bb:d7:19:89: 82:da:29:b1:c9:df:89:f7:c6:cf:d5:84:93:b7:2a:dc:3f:42: 26:8a:9b:ba:08:2f:9f:68:9d:f3:a3:54:aa:e2:6f:73:dc:f9: 9a:08:d8:a8:23:93:e2:a4:9a:61:c8:f7:14:cd:8d:ad:30:5b: 2c:b1:04:7d:ff:43:9b:7e:e5:ae:f3:e3:d7:30:4e:a8:1a:37: e2:70:55:8a:1b:de:71:56:f3:da:bb:2d:6d:7e:81:4b:fb:dc: b6:e6:b3:e3:c7:9e:3d:5f:d7:e6:f8:54:bd:d8:eb:6a:c5:10: 99:ea:1d:7b:ef:41:56:75:ca:53:df:02:9b:d9:4a:e3:1b:ad: 36:c8:0e:8d:a8:61:1a:a5:40:f3:21:e6:fc:d5:25:9d:65:e5: 4b:0d:c5:ec:2b:32:56:e2:b5:8a:da:09:b4:8f:3d:63:35:6b: 18:cd:a5:10:a8:d6:d8:bb:21:a2:5d:7b:cc:30:11:ea:51:04: 64:14:70:06:c5:31:97:50:a2:65:10:a7:24:87:88:8c:00:11: 4d:91:2f:3f:9f:de:53:49:34:21:db:47:83:75:53:7f:3b:71: 35:3c:ec:67:34:58:c6:d7:c3:07:07:08:3b:a6:25:48:0c:70: 5f:72:58:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91aosB55zvq5d8eE+kegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYjVjMWJiYWVkNDRjOGI2YWUzZjJiNTY2ZDAxY2MyNThk ZmMyY2UwHhcNMjUxMjA2MTQwMTA0WhcNMjUxMjA3MTQwMTA0WjAzMTEwLwYDVQQD EyhkN2U0YmUyNWU2ZWJlNmMwMzQ4YjViMjE4ZTUzZjg3ZDAwZTEzM2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou2Dx95lXff0MR6/Tj606bOJuCuX eRnHwzLpugICR0fLhk/k3J6yyweQQQu8Ykv4OrA6dtrl477Ie556tkoufaNjIqcx UZE4F2Dhj3RLI1PB8LsDGrLlIK36Fulk9y00xRPtzFZmZ6V0SVrqehjFG3yCj7j+ 5C8+ifQIBYnS6Pl6tImT8AJ1o5wjTKG5gazvva2kG1Z5LEQJsJUsmT+IEUbbt4Nj H9p791ODFWaesdZxx8B11jq3ru+ey+tokP/qyAyzaM41rbz3Vj2LHNA1E0Qzi6w1 oJS2gE8nxaIY70bbW+Yp4c04S/345lLqXXzsgUFa8OVEihf2vcirFbwWUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfkviXm6+bANItbIY5T+H0A4TPYMB8GA1UdIwQY MBaAFB+1wbuu1EyLauPytWbQHMJY38LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDdYQnU2N1VUSXRxNF9LMVp0QWN3bGpmd3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zYzRiNTMtZWNhMy00NTk5LTlkOTQt ZDcxZmM5MGM3YjE2LzEvSDdYQnU2N1VUSXRxNF9LMVp0QWN3bGpmd3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8zYzRiNTMtZWNhMy00NTk5LTlkOTQtZDcxZmM5MGM3YjE2 LzEvSDdYQnU2N1VUSXRxNF9LMVp0QWN3bGpmd3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTVlsBI1 Ac6fXb1x5ae71xmJgtopscnfiffGz9WEk7cq3D9CJoqbuggvn2id86NUquJvc9z5 mgjYqCOT4qSaYcj3FM2NrTBbLLEEff9Dm37lrvPj1zBOqBo34nBVihvecVbz2rst bX6BS/vctuaz48eePV/X5vhUvdjrasUQmeode+9BVnXKU98Cm9lK4xutNsgOjahh GqVA8yHm/NUlnWXlSw3F7CsyVuK1itoJtI89YzVrGM2lEKjW2Lshol17zDAR6lEE ZBRwBsUxl1CiZRCnJIeIjAARTZEvP5/eU0k0IdtHg3VTfztxNTzsZzRYxtfDBwcI O6YlSAxwX3JYQA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:06:29 2025 by rpki-client