This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json) Hash identifier: J0ZS5Z5baQqc9FRj0NZl2Jd2hTFPkSYGUwr+POLsSXc= Subject key identifier: E0:34:B3:00:2F:E0:FE:A0:B9:9E:BD:FE:A1:A1:13:E0:EF:BD:7C:D7 Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41 Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941 Certificate serial: 019B26645A27F84DD5E7CF4B65861B3D6091 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft Manifest number: 0E6E Signing time: Tue 16 Dec 2025 09:01:09 +0000 Manifest this update: Tue 16 Dec 2025 09:01:09 +0000 Manifest next update: Wed 17 Dec 2025 09:01:09 +0000 Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: SNTOkv4vxeXL2nlonCUNOsic4TmwcPQ36GucxeWC/0c=) 2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:5a:27:f8:4d:d5:e7:cf:4b:65:86:1b:3d:60:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941 Validity Not Before: Dec 16 09:01:09 2025 GMT Not After : Dec 17 09:01:09 2025 GMT Subject: CN=e034b3002fe0fea0b99ebdfea1a113e0efbd7cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:72:02:d0:e8:c1:13:8a:5a:a0:76:23:d9: 12:1f:86:34:1a:fd:62:ac:3c:af:24:85:6c:46:6c: 9b:1b:8f:99:b0:4a:88:38:b3:9e:db:e3:db:0a:20: 7b:8a:45:b7:ec:cd:22:ac:b6:c8:d9:e1:d7:12:f8: ca:24:f8:4e:62:b0:78:11:6b:bc:18:cd:44:97:7c: 08:fc:0e:40:3e:34:c3:81:ff:e6:10:da:ff:4b:08: b4:8e:51:0e:52:d6:b3:a2:b3:c7:7c:08:e8:03:13: bc:5a:10:5d:86:6c:a1:ed:5c:bc:16:65:67:3c:f8: 27:1a:fb:10:e8:56:a7:48:9f:4f:10:81:0f:6d:69: 5e:f4:19:ca:a5:b0:7b:2e:60:8a:8f:55:74:8e:a3: 16:31:e6:8b:83:ed:c4:19:6b:d8:11:2d:76:37:04: 26:5f:62:3c:ed:92:b8:14:2b:e2:5b:a1:64:62:6d: ba:e6:04:2e:bb:c3:fb:94:c4:71:12:3e:85:45:93: 5c:45:1d:48:d1:65:8d:f0:df:a1:9d:1a:e4:42:f0: d6:13:dd:46:95:5e:05:4e:bc:0b:42:c3:b9:eb:84: 7a:e5:6f:98:be:f5:fa:55:6d:5d:44:15:53:83:fd: 5b:68:05:24:a6:13:ab:60:65:de:2e:84:2c:67:7f: 6b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:34:B3:00:2F:E0:FE:A0:B9:9E:BD:FE:A1:A1:13:E0:EF:BD:7C:D7 X509v3 Authority Key Identifier: keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c7:d1:5a:9d:a3:19:75:ef:e4:dd:01:c0:e8:29:14:42:01: a7:6e:f8:3a:41:bb:00:72:b5:a1:c2:17:cf:01:bb:42:24:23: ee:8e:31:d7:1f:42:d5:a2:9a:d7:13:78:4c:e9:de:33:86:e9: a6:77:4b:c0:d2:c5:f9:d3:e0:eb:37:a8:eb:b2:16:f7:3f:8d: 5d:cf:05:da:89:0d:bd:44:74:8b:d4:ea:3d:49:4f:92:27:fc: 94:31:4f:60:ad:77:17:e0:a1:a0:6a:bc:c9:b6:95:f9:14:a8: bd:c9:47:2f:fb:ec:7e:0c:f6:cf:d8:d0:57:ad:0d:6b:54:23: 5e:9a:33:50:51:b5:41:62:41:b9:0c:ce:ff:63:d4:1f:ba:7e: f7:cb:d7:59:16:9b:2a:35:7e:27:f1:44:31:a9:20:8a:0e:88: 4a:c1:b5:36:31:31:f4:70:a2:9a:50:5b:e3:b9:68:d6:00:e1: fd:4c:83:ba:84:1d:48:e0:b4:e2:9b:a2:73:a6:15:bf:43:4e: f6:3e:f6:1c:27:86:be:11:1d:52:9e:70:ad:fd:db:90:69:66: a4:fe:6b:61:8f:f4:da:c3:ac:53:9e:51:f9:6a:4e:a2:89:2c: b6:40:0d:6b:38:d2:23:a0:e6:59:f5:b2:fe:60:f1:a5:23:c4: 92:79:1d:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZFon+E3V589LZYYbPWCRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDU2Y2M1YjdjZTNjMjA3OWY3ODZmZWMxZGZiY2IyNTI0 Mzk5NDEwHhcNMjUxMjE2MDkwMTA5WhcNMjUxMjE3MDkwMTA5WjAzMTEwLwYDVQQD EyhlMDM0YjMwMDJmZTBmZWEwYjk5ZWJkZmVhMWExMTNlMGVmYmQ3Y2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8RyAtDowROKWqB2I9kSH4Y0Gv1i rDyvJIVsRmybG4+ZsEqIOLOe2+PbCiB7ikW37M0irLbI2eHXEvjKJPhOYrB4EWu8 GM1El3wI/A5APjTDgf/mENr/Swi0jlEOUtazorPHfAjoAxO8WhBdhmyh7Vy8FmVn PPgnGvsQ6FanSJ9PEIEPbWle9BnKpbB7LmCKj1V0jqMWMeaLg+3EGWvYES12NwQm X2I87ZK4FCviW6FkYm265gQuu8P7lMRxEj6FRZNcRR1I0WWN8N+hnRrkQvDWE91G lV4FTrwLQsO564R65W+YvvX6VW1dRBVTg/1baAUkphOrYGXeLoQsZ39rpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOA0swAv4P6guZ69/qGhE+DvvXzXMB8GA1UdIwQY MBaAFB9FbMW3zjwgefeG/sHfvLJSQ5lBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzIt YmQ3ZDM0NTFhYTY2LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzItYmQ3ZDM0NTFhYTY2 LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcfRWp2j GXXv5N0BwOgpFEIBp274OkG7AHK1ocIXzwG7QiQj7o4x1x9C1aKa1xN4TOneM4bp pndLwNLF+dPg6zeo67IW9z+NXc8F2okNvUR0i9TqPUlPkif8lDFPYK13F+ChoGq8 ybaV+RSovclHL/vsfgz2z9jQV60Na1QjXpozUFG1QWJBuQzO/2PUH7p+98vXWRab KjV+J/FEMakgig6ISsG1NjEx9HCimlBb47lo1gDh/UyDuoQdSOC04puic6YVv0NO 9j72HCeGvhEdUp5wrf3bkGlmpP5rYY/02sOsU55R+WpOookstkANazjSI6DmWfWy /mDxpSPEknkdog== -----END CERTIFICATE-----Generated at Tue Dec 16 14:02:58 2025 by rpki-client