This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json) Hash identifier: GuAgXWjhm5U2rmdy/bK71+nrMTjwtO4Dd/d5PEb4HpE= Subject key identifier: C4:91:1A:D7:45:F2:61:86:F4:5D:6C:35:C1:FB:2F:C2:72:AF:6A:47 Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13 Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713 Certificate serial: 019B3BD959E7C7F35EC8A97199E6B50431DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft Manifest number: 0604 Signing time: Sat 20 Dec 2025 13:00:58 +0000 Manifest this update: Sat 20 Dec 2025 13:00:58 +0000 Manifest next update: Sun 21 Dec 2025 13:00:58 +0000 Files and hashes: 1: 2IUVrUcX57wEcebuPBNhbM7rtII.roa (hash: xFARryMWCZ7xJebZzJ48q6NyTNbF+EONupkOj48G4Zc=) 2: 3mgL5kmPTE1KzgmolBjYNrOCQw4.roa (hash: 4p0hGsG00DucWMHppeS8f+vIw114RVg7ok5Btqh+zyQ=) 3: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: V/NB5omsyjV8aXrn9/IuAHTrAvg0VgxB5CKq4Mzovl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:59:e7:c7:f3:5e:c8:a9:71:99:e6:b5:04:31:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713 Validity Not Before: Dec 20 13:00:58 2025 GMT Not After : Dec 21 13:00:58 2025 GMT Subject: CN=c4911ad745f26186f45d6c35c1fb2fc272af6a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:9b:c0:9e:01:fb:02:b7:e8:84:e9:09:49: 39:76:9c:4a:84:55:b4:22:46:ea:b0:e4:76:9d:e0: 24:2c:52:7b:8d:90:81:13:cc:ae:a6:36:ba:85:35: c6:14:75:26:42:33:fe:6a:3d:7f:15:a0:4c:b7:a6: f5:82:1e:c9:0f:2d:ad:86:17:a4:32:3b:fa:5b:d5: 9c:f7:16:07:dd:13:13:cf:37:eb:38:24:d5:55:d7: 9d:16:60:b3:c7:ff:4e:6a:c5:b5:8a:48:4e:5e:c0: ac:30:e5:f5:ea:dd:11:da:be:f0:23:a3:bb:12:ba: f8:16:97:d0:5a:5e:05:cc:b2:5f:37:00:ff:81:00: 19:15:3c:d7:d7:75:89:b3:b9:e3:e2:ac:26:e8:43: d6:03:5c:95:de:73:b3:92:0c:5b:12:48:aa:f7:2f: 5d:77:ed:27:59:0c:7e:a3:08:fd:c7:03:1f:b1:26: 7f:2d:5e:38:ba:60:7c:7b:46:a3:45:12:1d:69:27: 98:19:42:6b:b7:07:4e:7b:bd:41:c1:04:70:73:e1: f8:07:8f:f3:39:99:f3:8f:7c:12:cd:8c:4a:3b:19: 5f:07:4e:65:71:76:a7:33:29:65:4a:11:c8:79:24: dc:0a:c1:72:55:2c:75:4b:76:fc:6c:0c:53:7c:11: a0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:91:1A:D7:45:F2:61:86:F4:5D:6C:35:C1:FB:2F:C2:72:AF:6A:47 X509v3 Authority Key Identifier: keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c1:19:08:65:58:9c:13:17:89:5d:95:b2:bb:86:e9:53:89: 3c:6a:be:9b:0d:f2:6d:ca:9f:3d:77:85:d8:90:7c:7e:1f:07: 2b:ed:6b:92:bb:74:84:f3:cb:97:43:43:41:f8:67:b3:1b:6f: 3c:7e:a2:39:ae:ed:af:60:28:37:eb:44:84:da:7d:a8:ef:49: de:17:ce:42:09:56:c0:05:31:48:2f:cc:9c:c5:79:45:ca:22: 7c:06:b8:0d:a9:ee:22:d9:a1:c7:64:1c:26:c6:56:13:a4:37: 1f:6a:d6:fc:a5:20:f9:da:39:79:6d:9e:d6:e8:ba:89:80:7e: b9:0d:6f:72:e8:76:c8:d1:cf:5f:05:68:ee:58:6d:b8:a5:7b: ca:e9:1f:86:9e:ed:5b:28:fa:1f:7e:a2:23:76:a8:84:4c:34: d4:69:37:72:9d:cd:3e:5d:93:c6:10:5f:7d:fb:c7:86:9e:7e: 6c:e6:68:49:65:25:a5:e9:b6:04:1c:0e:7e:4e:7e:ca:db:c7: 98:a2:ea:9f:6a:f0:e7:eb:51:f7:10:26:51:75:ad:70:be:b8: f1:71:07:a6:50:2e:0b:90:97:98:43:c5:78:09:e8:61:bd:32: fd:72:31:ee:3c:92:d5:94:5c:72:d8:e2:de:42:9f:2c:95:37: fd:94:13:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Vnnx/NeyKlxmea1BDHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlY2I5YmQ1ZWQ5NmU2OWRkYThmYzJhMWZlMDIxNDdhZGFl OGY3MTMwHhcNMjUxMjIwMTMwMDU4WhcNMjUxMjIxMTMwMDU4WjAzMTEwLwYDVQQD EyhjNDkxMWFkNzQ1ZjI2MTg2ZjQ1ZDZjMzVjMWZiMmZjMjcyYWY2YTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhubwJ4B+wK36ITpCUk5dpxKhFW0 IkbqsOR2neAkLFJ7jZCBE8yupja6hTXGFHUmQjP+aj1/FaBMt6b1gh7JDy2thhek Mjv6W9Wc9xYH3RMTzzfrOCTVVdedFmCzx/9OasW1ikhOXsCsMOX16t0R2r7wI6O7 Err4FpfQWl4FzLJfNwD/gQAZFTzX13WJs7nj4qwm6EPWA1yV3nOzkgxbEkiq9y9d d+0nWQx+owj9xwMfsSZ/LV44umB8e0ajRRIdaSeYGUJrtwdOe71BwQRwc+H4B4/z OZnzj3wSzYxKOxlfB05lcXanMyllShHIeSTcCsFyVSx1S3b8bAxTfBGgVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSRGtdF8mGG9F1sNcH7L8Jyr2pHMB8GA1UdIwQY MBaAFB7Lm9Xtluad2o/Cof4CFHra6PcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHN1YjFlMlc1cDNhajhLaF9nSVVldHJvOXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jMzQxNTAtNTkxMi00OTBjLWIzNWIt ZjU0ZmJmNjkxN2JjLzEvSHN1YjFlMlc1cDNhajhLaF9nSVVldHJvOXhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9jMzQxNTAtNTkxMi00OTBjLWIzNWItZjU0ZmJmNjkxN2Jj LzEvSHN1YjFlMlc1cDNhajhLaF9nSVVldHJvOXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8EZCGVY nBMXiV2VsruG6VOJPGq+mw3ybcqfPXeF2JB8fh8HK+1rkrt0hPPLl0NDQfhnsxtv PH6iOa7tr2AoN+tEhNp9qO9J3hfOQglWwAUxSC/MnMV5RcoifAa4DanuItmhx2Qc JsZWE6Q3H2rW/KUg+do5eW2e1ui6iYB+uQ1vcuh2yNHPXwVo7lhtuKV7yukfhp7t Wyj6H36iI3aohEw01Gk3cp3NPl2TxhBfffvHhp5+bOZoSWUlpem2BBwOfk5+ytvH mKLqn2rw5+tR9xAmUXWtcL648XEHplAuC5CXmEPFeAnoYb0y/XIx7jyS1ZRcctji 3kKfLJU3/ZQTFg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:31 2025 by rpki-client