This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json) Hash identifier: kgWwqrBYgqSG7pJBQK8zhe6ZBkoG9e0oZhNFFgcdavo= Subject key identifier: E5:FA:13:47:B0:2B:60:42:80:42:A4:2C:56:E4:DA:BC:A7:3C:4F:A4 Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2 Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2 Certificate serial: 019B48F06072DE369B632F63E998B353F346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft Manifest number: 072C Signing time: Tue 23 Dec 2025 02:01:11 +0000 Manifest this update: Tue 23 Dec 2025 02:01:11 +0000 Manifest next update: Wed 24 Dec 2025 02:01:11 +0000 Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: c465rLCeYPdNq/eDlua+1pr4mzqyA2e0zw+U93CDsrk=) 2: neQhSGrd27w6Xn2chZDgwEsCrLI.roa (hash: 1tkSubS/cwYJgj12QwQ+XvFzRT5l/tNW9QOj+Oo5EeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:60:72:de:36:9b:63:2f:63:e9:98:b3:53:f3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2 Validity Not Before: Dec 23 02:01:11 2025 GMT Not After : Dec 24 02:01:11 2025 GMT Subject: CN=e5fa1347b02b60428042a42c56e4dabca73c4fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:97:b9:cc:ec:d3:de:fe:91:20:f4:14:d1:9c: d7:34:02:db:e1:f6:7b:75:a2:99:1a:00:02:03:1c: c0:69:36:2d:cf:6b:e7:48:2b:26:73:92:99:af:88: 69:67:af:e9:82:3d:da:8f:6e:fa:1d:36:1c:c1:6e: 23:a9:90:36:c8:d2:cc:19:a8:ff:15:76:8d:ce:5b: fe:4e:ed:54:78:5d:77:76:91:e0:49:b8:d0:ce:0a: f2:72:85:37:9a:63:20:16:fa:fc:0a:b5:34:92:d6: ff:5c:05:db:da:10:5f:7a:3e:c7:e8:2c:fd:af:5e: 3e:77:ad:c2:a4:b9:87:54:35:a7:51:7f:9e:2c:fe: 9f:2e:17:99:9b:0a:45:ac:f4:02:d2:80:5c:40:e3: 87:38:46:4a:54:a4:ec:12:4e:5a:c9:5f:4d:2b:26: 23:8f:2d:e5:eb:7d:96:84:9b:39:79:04:ca:77:33: 82:ac:3c:c0:45:1d:ab:91:8e:bf:06:ca:58:fc:a4: 8b:c3:8e:c8:af:e2:57:5a:06:35:3e:0e:26:ae:c5: da:eb:9c:5d:83:a3:cc:78:b5:37:60:06:4c:7b:a8: b3:89:51:2b:73:c0:a8:0e:85:05:35:60:4f:8b:e6: 6a:c7:e2:27:cd:f7:32:45:18:df:f7:61:8c:f0:ac: 44:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FA:13:47:B0:2B:60:42:80:42:A4:2C:56:E4:DA:BC:A7:3C:4F:A4 X509v3 Authority Key Identifier: keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:46:88:9f:16:23:b1:5e:fb:79:df:93:bb:98:ee:41:48:85: 9e:e7:fb:61:a6:c4:7b:f4:18:94:ab:f7:81:57:bb:43:74:ce: 04:93:ee:7e:d5:85:6a:6a:f7:5a:25:48:d3:41:15:6a:d0:08: 06:66:91:fa:d9:0f:64:84:17:9f:58:77:63:6b:f4:f9:d3:cc: 32:c4:db:ba:b9:2d:9f:22:51:2d:12:cd:cd:92:80:63:f5:46: db:5a:c3:65:e4:2a:f2:29:63:3a:38:f8:35:b7:03:83:f9:60: 01:07:b4:af:37:2f:27:ac:db:cb:86:10:73:48:41:53:32:71: 5b:68:81:34:1e:e3:da:e2:68:d8:7d:4d:03:a3:55:77:02:d4: 78:ef:4c:44:f0:65:82:7f:3e:e2:2e:84:a6:67:46:41:74:fa: 94:d1:ac:3f:18:df:65:6f:cc:1f:81:78:8d:fc:41:f5:e8:67: c8:2b:dc:a7:4c:3a:53:0d:3f:74:7a:90:cb:4c:fb:f7:4b:36: 2e:d2:00:56:2f:6e:a5:b6:a3:fe:91:24:89:31:25:c4:fc:91: 95:29:ee:bb:33:e6:88:53:d8:42:31:24:dd:3a:2e:a5:d8:3b: d7:94:55:65:56:65:1b:59:df:b2:e0:4d:10:b9:03:19:a1:42: 55:f6:7c:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8GBy3jabYy9j6ZizU/NGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NWY0MTJhZGIxOGQ0MmZhZGQwYTg1ODczNzE4ZGFkYTkz MWQxYzIwHhcNMjUxMjIzMDIwMTExWhcNMjUxMjI0MDIwMTExWjAzMTEwLwYDVQQD EyhlNWZhMTM0N2IwMmI2MDQyODA0MmE0MmM1NmU0ZGFiY2E3M2M0ZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJe5zOzT3v6RIPQU0ZzXNALb4fZ7 daKZGgACAxzAaTYtz2vnSCsmc5KZr4hpZ6/pgj3aj276HTYcwW4jqZA2yNLMGaj/ FXaNzlv+Tu1UeF13dpHgSbjQzgrycoU3mmMgFvr8CrU0ktb/XAXb2hBfej7H6Cz9 r14+d63CpLmHVDWnUX+eLP6fLheZmwpFrPQC0oBcQOOHOEZKVKTsEk5ayV9NKyYj jy3l632WhJs5eQTKdzOCrDzARR2rkY6/BspY/KSLw47Ir+JXWgY1Pg4mrsXa65xd g6PMeLU3YAZMe6iziVErc8CoDoUFNWBPi+Zqx+InzfcyRRjf92GM8KxETQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOX6E0ewK2BCgEKkLFbk2rynPE+kMB8GA1UdIwQY MBaAFIdfQSrbGNQvrdCoWHNxja2pMdHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iODQxY2MtZDY2My00NjMzLTljNDkt MTQ3ZTM4NmMwMTUwLzEvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iODQxY2MtZDY2My00NjMzLTljNDktMTQ3ZTM4NmMwMTUw LzEvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEaInxYj sV77ed+Tu5juQUiFnuf7YabEe/QYlKv3gVe7Q3TOBJPuftWFamr3WiVI00EVatAI BmaR+tkPZIQXn1h3Y2v0+dPMMsTburktnyJRLRLNzZKAY/VG21rDZeQq8iljOjj4 NbcDg/lgAQe0rzcvJ6zby4YQc0hBUzJxW2iBNB7j2uJo2H1NA6NVdwLUeO9MRPBl gn8+4i6EpmdGQXT6lNGsPxjfZW/MH4F4jfxB9ehnyCvcp0w6Uw0/dHqQy0z790s2 LtIAVi9upbaj/pEkiTElxPyRlSnuuzPmiFPYQjEk3Toupdg715RVZVZlG1nfsuBN ELkDGaFCVfZ83g== -----END CERTIFICATE-----Generated at Tue Dec 23 07:50:57 2025 by rpki-client