This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft File: H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft (raw, json) Hash identifier: tjnc/09coaSN08zozfIL0cHF78HJIVBm/+E4K7DE7Z8= Subject key identifier: E4:DD:3D:39:76:0A:98:C0:E9:01:06:01:CC:11:5C:DA:1C:7B:07:3E Authority key identifier: 1F:D9:D9:E8:5D:C2:57:1F:D3:6B:1B:47:46:30:F5:8E:B9:0C:FF:26 Certificate issuer: /CN=1fd9d9e85dc2571fd36b1b474630f58eb90cff26 Certificate serial: 019B3A8FD90CF8C8BC0FFF50CB9B94D03814 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft Manifest number: 1783 Signing time: Sat 20 Dec 2025 07:01:04 +0000 Manifest this update: Sat 20 Dec 2025 07:01:04 +0000 Manifest next update: Sun 21 Dec 2025 07:01:04 +0000 Files and hashes: 1: H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl (hash: oOBRO+bkTV8Qo/4xFDehtkreJdSTD7YRwpcVaaRSfGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:d9:0c:f8:c8:bc:0f:ff:50:cb:9b:94:d0:38:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fd9d9e85dc2571fd36b1b474630f58eb90cff26 Validity Not Before: Dec 20 07:01:04 2025 GMT Not After : Dec 21 07:01:04 2025 GMT Subject: CN=e4dd3d39760a98c0e9010601cc115cda1c7b073e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cd:7a:39:13:b0:23:09:5d:b8:27:96:1b:1d: e3:e8:8e:a6:bb:4b:04:13:54:ff:78:5e:9b:75:e9: f5:de:07:51:c6:d9:bb:73:ce:e9:68:70:cf:a6:67: 9f:02:79:46:e3:8d:4d:b5:9d:4e:04:e0:34:cd:3d: 73:86:aa:f0:a2:fd:9c:5e:97:24:39:21:f4:a1:fb: 46:9f:95:57:34:3d:85:3d:57:c5:b5:26:80:71:3a: 34:ce:91:7d:0d:f7:c7:25:64:64:43:7c:15:94:6e: 64:4c:59:68:ce:8d:16:30:77:59:46:e6:e4:ea:f0: dd:82:ff:67:f1:52:f5:27:c2:b0:dd:c2:cb:d3:1c: f0:93:94:68:61:ff:da:44:31:a6:33:99:67:d0:fd: b6:c4:58:9e:0a:6f:7f:cf:5c:fe:2b:85:39:50:1b: 49:8c:b3:92:6f:b9:af:e5:25:1e:1f:04:b7:b1:fa: 05:c4:27:6a:99:da:c0:e0:79:79:0e:a8:73:73:8e: d2:e0:1b:f4:4b:02:d2:04:6b:0f:37:89:1f:b7:6a: 98:e2:f9:73:01:a1:27:69:5a:02:55:c4:6d:ba:1d: 4c:82:0a:35:a4:e9:ba:ba:ab:a5:6e:9a:0d:be:34: 0a:d9:81:b6:c6:01:9b:64:c5:da:3b:92:a1:10:3f: b3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DD:3D:39:76:0A:98:C0:E9:01:06:01:CC:11:5C:DA:1C:7B:07:3E X509v3 Authority Key Identifier: keyid:1F:D9:D9:E8:5D:C2:57:1F:D3:6B:1B:47:46:30:F5:8E:B9:0C:FF:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:8d:87:1f:f2:d9:12:e2:9c:17:d2:17:1c:ee:2d:7e:33:0d: 85:a5:a3:f6:49:a1:5e:51:75:b8:86:92:3a:2a:33:0e:e6:8e: 16:8b:90:9b:58:f7:d2:d7:8c:4f:02:8b:fb:f8:cd:3f:15:cd: 9d:6a:80:86:95:c0:90:2e:44:ec:57:07:22:91:8b:76:9e:be: 09:bd:86:08:4f:e4:76:a3:5d:7e:33:ce:0e:31:b0:c2:8b:02: 17:40:58:96:56:69:71:4d:d8:ab:36:1f:38:17:68:cc:b2:5d: 33:35:8d:9e:6a:16:72:58:b6:03:72:31:e7:8a:b5:9e:ba:1d: 41:c3:ef:23:f3:81:dd:f5:0c:c4:02:ee:e6:ef:af:0f:ad:c3: 68:48:18:71:bb:64:5b:ee:76:2c:5b:49:04:2e:fb:2c:ba:60: c8:11:24:c3:d6:28:29:0b:16:2e:9f:58:59:c4:78:63:69:a7: 90:72:cc:13:12:7a:9a:05:bc:c5:d4:6c:fc:8d:f4:62:f5:cf: 4d:43:63:da:f7:82:2b:b8:52:b1:c5:42:7f:a9:82:b8:c0:25: c3:60:de:3a:00:4a:a8:f2:51:ca:de:6b:0d:fd:84:82:43:44: c3:82:cd:71:32:3c:e5:4b:88:bd:42:20:bc:33:2f:fd:fe:d4: a7:ba:c3:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j9kM+Mi8D/9Qy5uU0DgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZDlkOWU4NWRjMjU3MWZkMzZiMWI0NzQ2MzBmNThlYjkw Y2ZmMjYwHhcNMjUxMjIwMDcwMTA0WhcNMjUxMjIxMDcwMTA0WjAzMTEwLwYDVQQD EyhlNGRkM2QzOTc2MGE5OGMwZTkwMTA2MDFjYzExNWNkYTFjN2IwNzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM16OROwIwlduCeWGx3j6I6mu0sE E1T/eF6bden13gdRxtm7c87paHDPpmefAnlG441NtZ1OBOA0zT1zhqrwov2cXpck OSH0oftGn5VXND2FPVfFtSaAcTo0zpF9DffHJWRkQ3wVlG5kTFlozo0WMHdZRubk 6vDdgv9n8VL1J8Kw3cLL0xzwk5RoYf/aRDGmM5ln0P22xFieCm9/z1z+K4U5UBtJ jLOSb7mv5SUeHwS3sfoFxCdqmdrA4Hl5Dqhzc47S4Bv0SwLSBGsPN4kft2qY4vlz AaEnaVoCVcRtuh1Mggo1pOm6uqulbpoNvjQK2YG2xgGbZMXaO5KhED+zwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTdPTl2CpjA6QEGAcwRXNocewc+MB8GA1UdIwQY MBaAFB/Z2ehdwlcf02sbR0Yw9Y65DP8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDluWjZGM0NWeF9UYXh0SFJqRDFqcmtNX3lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8yNmFmYTItNjQzNi00NDNjLWI3YWYt YzA4YjE3Zjk5OTkzLzEvSDluWjZGM0NWeF9UYXh0SFJqRDFqcmtNX3lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8yNmFmYTItNjQzNi00NDNjLWI3YWYtYzA4YjE3Zjk5OTkz LzEvSDluWjZGM0NWeF9UYXh0SFJqRDFqcmtNX3lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJo2HH/LZ EuKcF9IXHO4tfjMNhaWj9kmhXlF1uIaSOiozDuaOFouQm1j30teMTwKL+/jNPxXN nWqAhpXAkC5E7FcHIpGLdp6+Cb2GCE/kdqNdfjPODjGwwosCF0BYllZpcU3YqzYf OBdozLJdMzWNnmoWcli2A3Ix54q1nrodQcPvI/OB3fUMxALu5u+vD63DaEgYcbtk W+52LFtJBC77LLpgyBEkw9YoKQsWLp9YWcR4Y2mnkHLMExJ6mgW8xdRs/I30YvXP TUNj2veCK7hSscVCf6mCuMAlw2DeOgBKqPJRyt5rDf2EgkNEw4LNcTI85UuIvUIg vDMv/f7Up7rD4A== -----END CERTIFICATE-----Generated at Sat Dec 20 12:19:58 2025 by rpki-client