This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json) Hash identifier: 87Q+eaWVj2uf7Wr1j8Y7ylSr1h2i+9FJf5rdxUEw7Qg= Subject key identifier: 86:DC:29:3D:03:6A:65:9B:28:9D:97:6E:6B:88:B3:59:C9:C4:D4:2F Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24 Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324 Certificate serial: 019B5AF6483ED66A6555C206D1C60EB9F42D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft Manifest number: 172B Signing time: Fri 26 Dec 2025 14:00:48 +0000 Manifest this update: Fri 26 Dec 2025 14:00:48 +0000 Manifest next update: Sat 27 Dec 2025 14:00:48 +0000 Files and hashes: 1: GYb1F3991igV-Xs-ZoTKTm-Vg7M.roa (hash: oDfsrWpPRTbFkqWOBaawHb+IseXIbMKYHakcvEvzdXQ=) 2: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: IMjLf1UZdUkWNBEmMernoENyqqnwIPHKwDYhMjqX/0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:48:3e:d6:6a:65:55:c2:06:d1:c6:0e:b9:f4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324 Validity Not Before: Dec 26 14:00:48 2025 GMT Not After : Dec 27 14:00:48 2025 GMT Subject: CN=86dc293d036a659b289d976e6b88b359c9c4d42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:55:43:55:78:7f:d8:e0:82:77:9f:1e:ea: 7b:de:12:af:27:5c:6d:83:1b:ab:dc:74:9a:0a:d4: f0:f6:42:d6:47:0c:61:e7:c2:f2:b6:c6:92:16:ce: 8d:4c:54:5d:0d:f4:7e:64:91:c4:6d:b3:06:dc:90: c3:df:99:1f:70:1c:c8:a7:19:f8:27:a5:23:09:9a: 33:eb:12:1c:6b:6f:f3:f9:04:ac:2a:b3:fc:02:3e: 7c:ab:91:56:27:0d:61:07:5c:30:6f:ee:3f:7d:f3: b0:8a:ae:2c:1d:d8:ac:29:96:e4:b0:a4:fd:bb:50: 1b:d1:94:47:71:72:62:52:23:1f:52:ee:16:d3:39: 83:d5:be:f0:fd:d1:c0:8a:4f:ab:4a:fc:31:a6:59: 62:12:65:a8:0b:a2:c8:99:05:20:17:29:ff:cf:bb: eb:6b:13:9b:01:94:bb:ff:61:58:1b:6c:b5:84:20: 60:87:ab:11:64:e4:22:86:57:2d:57:d5:d3:35:bb: 66:23:21:01:8a:c6:ea:78:d3:77:19:2c:0b:40:bb: 8b:77:8e:fe:fd:2f:16:1c:8e:c4:fc:5e:88:14:09: f6:96:34:fa:a3:f3:a7:07:5a:57:38:d9:64:ac:cf: 21:1e:03:35:cd:02:22:96:72:0a:08:58:14:15:38: 11:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DC:29:3D:03:6A:65:9B:28:9D:97:6E:6B:88:B3:59:C9:C4:D4:2F X509v3 Authority Key Identifier: keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b5:62:95:6d:a1:b8:42:73:ec:c8:05:81:2b:b5:b1:1b:dd: 0f:37:f4:1f:90:c8:dd:6d:d0:f7:44:6a:65:b6:f5:e6:4a:ae: c2:5d:6e:68:76:4f:bc:67:02:78:c7:1f:26:4d:6f:cf:9b:31: 88:50:2a:b4:d2:e7:22:9b:93:42:ca:a4:c4:a5:20:a3:6b:c2: b5:07:9b:44:39:74:6f:4f:fe:ce:20:84:7f:29:04:d6:33:7f: 27:d5:35:4e:76:5f:40:04:b8:b4:cf:c6:bb:b7:6b:ad:ba:a3: 63:1f:5a:ea:64:a1:6e:02:9a:39:3c:f4:15:03:04:71:a6:40: f6:e9:d5:78:37:8c:90:58:6c:d9:cc:72:ab:30:6a:ad:57:c6: 31:49:0b:ed:ee:bc:f3:96:14:be:87:dd:e0:ba:d5:29:5f:eb: 46:ba:07:a7:6d:93:d4:f9:9a:f3:11:ab:b6:2b:f5:55:8a:43: 44:a3:7a:58:6e:ac:1b:75:aa:0b:40:3f:59:9c:f3:1e:29:cc: 1e:f8:40:fa:17:2b:c5:15:f6:18:53:20:e1:5a:79:91:b0:d4: 76:71:61:a2:9d:3c:b4:f8:af:4a:d0:a0:f0:d1:b0:8e:fb:c7: 58:ab:9c:71:9b:80:dd:df:71:8b:a6:3e:97:44:d7:0d:bb:60: 46:28:96:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9kg+1mplVcIG0cYOufQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOWZmZDhlZTMyYjNlMzU3OTc4ZDljYjk5MjE2Y2NlODEz N2EzMjQwHhcNMjUxMjI2MTQwMDQ4WhcNMjUxMjI3MTQwMDQ4WjAzMTEwLwYDVQQD Eyg4NmRjMjkzZDAzNmE2NTliMjg5ZDk3NmU2Yjg4YjM1OWM5YzRkNDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEtVQ1V4f9jggnefHup73hKvJ1xt gxur3HSaCtTw9kLWRwxh58LytsaSFs6NTFRdDfR+ZJHEbbMG3JDD35kfcBzIpxn4 J6UjCZoz6xIca2/z+QSsKrP8Aj58q5FWJw1hB1wwb+4/ffOwiq4sHdisKZbksKT9 u1Ab0ZRHcXJiUiMfUu4W0zmD1b7w/dHAik+rSvwxplliEmWoC6LImQUgFyn/z7vr axObAZS7/2FYG2y1hCBgh6sRZOQihlctV9XTNbtmIyEBisbqeNN3GSwLQLuLd47+ /S8WHI7E/F6IFAn2ljT6o/OnB1pXONlkrM8hHgM1zQIilnIKCFgUFTgRjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbcKT0DamWbKJ2XbmuIs1nJxNQvMB8GA1UdIwQY MBaAFB+f/Y7jKz41eXjZy5khbM6BN6MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUt YWFlNjM4ZGJiMWMxLzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUtYWFlNjM4ZGJiMWMx LzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLVilW2h uEJz7MgFgSu1sRvdDzf0H5DI3W3Q90RqZbb15kquwl1uaHZPvGcCeMcfJk1vz5sx iFAqtNLnIpuTQsqkxKUgo2vCtQebRDl0b0/+ziCEfykE1jN/J9U1TnZfQAS4tM/G u7drrbqjYx9a6mShbgKaOTz0FQMEcaZA9unVeDeMkFhs2cxyqzBqrVfGMUkL7e68 85YUvofd4LrVKV/rRroHp22T1Pma8xGrtiv1VYpDRKN6WG6sG3WqC0A/WZzzHinM HvhA+hcrxRX2GFMg4Vp5kbDUdnFhop08tPivStCg8NGwjvvHWKuccZuA3d9xi6Y+ l0TXDbtgRiiWkw== -----END CERTIFICATE-----Generated at Fri Dec 26 21:20:31 2025 by rpki-client