This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json) Hash identifier: 4vNhUk8lFkh5zmTbMKOxJAd5NgO/dLnRKeEgMJJtVg8= Subject key identifier: 93:30:65:53:6D:BA:27:8F:F7:A9:87:E8:EF:D5:00:D2:4E:94:4C:9C Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2 Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2 Certificate serial: 019B0B23849991D2376416294CE21C0476DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft Manifest number: 070C Signing time: Thu 11 Dec 2025 02:00:35 +0000 Manifest this update: Thu 11 Dec 2025 02:00:35 +0000 Manifest next update: Fri 12 Dec 2025 02:00:35 +0000 Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: 9C0kE7IpjLgdR0yU9r+fJ77XVeAzMP/0KVEgNwn9Xx4=) 2: neQhSGrd27w6Xn2chZDgwEsCrLI.roa (hash: 1tkSubS/cwYJgj12QwQ+XvFzRT5l/tNW9QOj+Oo5EeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:23:84:99:91:d2:37:64:16:29:4c:e2:1c:04:76:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2 Validity Not Before: Dec 11 02:00:35 2025 GMT Not After : Dec 12 02:00:35 2025 GMT Subject: CN=933065536dba278ff7a987e8efd500d24e944c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:44:0a:cb:83:60:f7:66:fc:69:e3:38:dc:54: 74:95:f5:b1:4f:c9:40:b3:a2:3d:63:08:ca:e5:08: 1f:6a:4d:29:dd:22:0e:d1:3f:5a:dc:2e:ff:89:f0: 9a:3c:be:8d:09:18:f3:33:4b:c7:67:ac:72:31:53: 31:44:9b:ff:bd:cd:50:21:af:2d:a3:c2:48:2e:5b: 33:00:20:96:5e:08:5d:32:b0:82:0b:22:75:44:e2: fa:0e:32:05:ea:24:71:0b:bb:a5:8f:e2:81:bd:de: 0e:b3:0e:2a:ae:5d:b5:99:99:2a:3d:f4:e0:28:74: 5b:ac:e7:63:f7:82:70:20:20:d0:72:bb:41:52:6c: e6:3a:eb:92:9a:42:2d:8d:73:65:36:8b:40:ee:5a: 19:e6:6e:4c:b4:53:85:98:f4:a2:a0:ef:a8:b1:54: 26:b7:1c:2b:34:78:d0:b8:00:46:3f:1f:41:8a:8d: 99:71:ce:6e:71:bc:93:30:57:c3:73:4b:f1:12:d8: 17:93:d9:fc:23:a4:a9:b2:26:01:07:77:7a:15:bc: a5:0c:9a:6e:dc:59:ca:3e:f3:ca:35:93:15:bc:4b: a4:1f:87:3c:47:b9:a4:35:f1:0e:31:71:7a:fa:d6: 1e:04:45:3e:c4:7d:d0:f9:c6:5e:3d:a3:79:6d:2b: ba:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:30:65:53:6D:BA:27:8F:F7:A9:87:E8:EF:D5:00:D2:4E:94:4C:9C X509v3 Authority Key Identifier: keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:2b:04:28:0b:7b:78:5f:1c:7a:c3:65:6b:41:9c:37:9a:c3: 22:cc:29:e9:37:cc:fb:1e:a2:f3:e8:9e:4a:eb:7c:b1:16:f5: 91:fa:87:73:cd:39:11:43:4d:76:a4:60:d8:c7:32:45:61:33: 79:a5:d5:6b:e2:a2:01:1e:2c:a2:b9:8b:78:7f:a2:51:0b:76: e5:22:96:bd:3e:1e:ac:37:58:5e:78:10:72:a8:24:5e:21:3c: c8:2f:df:aa:24:be:2c:1f:38:24:05:05:89:8e:72:54:64:be: 5f:62:4e:e4:c7:a4:f6:0f:84:a4:87:fb:31:dc:37:2a:39:de: ad:03:d7:c1:66:6c:f5:ed:e5:63:13:c8:04:da:80:0d:4a:f4: 6e:e2:e4:db:2f:ca:75:0f:df:ec:f0:f6:bc:28:3b:76:c3:76: 0e:95:8d:d0:74:db:c0:d7:46:e7:50:ca:07:d5:a6:cd:92:b1: 84:a0:d8:eb:55:86:30:da:f1:cb:be:1b:e7:e6:26:d3:ae:be: b1:c9:73:33:c6:70:f7:32:08:99:1e:73:1d:a5:ed:0e:9f:67: 7e:eb:0b:82:6f:87:40:cc:ef:74:11:df:28:36:4f:32:1a:f5: 07:a9:81:b2:14:c6:a1:a5:1b:a1:df:95:7f:5c:89:4a:e0:01: ac:d5:cc:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLI4SZkdI3ZBYpTOIcBHbfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NWY0MTJhZGIxOGQ0MmZhZGQwYTg1ODczNzE4ZGFkYTkz MWQxYzIwHhcNMjUxMjExMDIwMDM1WhcNMjUxMjEyMDIwMDM1WjAzMTEwLwYDVQQD Eyg5MzMwNjU1MzZkYmEyNzhmZjdhOTg3ZThlZmQ1MDBkMjRlOTQ0YzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkQKy4Ng92b8aeM43FR0lfWxT8lA s6I9YwjK5Qgfak0p3SIO0T9a3C7/ifCaPL6NCRjzM0vHZ6xyMVMxRJv/vc1QIa8t o8JILlszACCWXghdMrCCCyJ1ROL6DjIF6iRxC7ulj+KBvd4Osw4qrl21mZkqPfTg KHRbrOdj94JwICDQcrtBUmzmOuuSmkItjXNlNotA7loZ5m5MtFOFmPSioO+osVQm txwrNHjQuABGPx9Bio2Zcc5ucbyTMFfDc0vxEtgXk9n8I6SpsiYBB3d6FbylDJpu 3FnKPvPKNZMVvEukH4c8R7mkNfEOMXF6+tYeBEU+xH3Q+cZePaN5bSu61QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMwZVNtuieP96mH6O/VANJOlEycMB8GA1UdIwQY MBaAFIdfQSrbGNQvrdCoWHNxja2pMdHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iODQxY2MtZDY2My00NjMzLTljNDkt MTQ3ZTM4NmMwMTUwLzEvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iODQxY2MtZDY2My00NjMzLTljNDktMTQ3ZTM4NmMwMTUw LzEvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuCsEKAt7 eF8cesNla0GcN5rDIswp6TfM+x6i8+ieSut8sRb1kfqHc805EUNNdqRg2McyRWEz eaXVa+KiAR4sormLeH+iUQt25SKWvT4erDdYXngQcqgkXiE8yC/fqiS+LB84JAUF iY5yVGS+X2JO5Mek9g+EpIf7Mdw3KjnerQPXwWZs9e3lYxPIBNqADUr0buLk2y/K dQ/f7PD2vCg7dsN2DpWN0HTbwNdG51DKB9WmzZKxhKDY61WGMNrxy74b5+Ym066+ sclzM8Zw9zIImR5zHaXtDp9nfusLgm+HQMzvdBHfKDZPMhr1B6mBshTGoaUbod+V f1yJSuABrNXM6Q== -----END CERTIFICATE-----Generated at Thu Dec 11 05:20:22 2025 by rpki-client