This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json) Hash identifier: W3fKNDfVQAECEhvGjrXPELt5MSnymYRES+fBDfVFPgI= Subject key identifier: 61:78:E1:27:8A:A0:04:E4:4C:55:48:CE:EC:AB:7B:04:DC:AF:3D:03 Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36 Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36 Certificate serial: 019B1D2A4778225F8FC3F7B2DE6AE03FDB2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 14:01:08 +0000 Manifest this update: Sun 14 Dec 2025 14:01:08 +0000 Manifest next update: Mon 15 Dec 2025 14:01:08 +0000 Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: CfzASZwfnBrN+gh/T0LlPJ6Pa5R8AZgXeSOAvLoPJ8g=) 2: HUVkGsdlCFOUct2ob4-4pOtlsOM.roa (hash: IfkJT/mKBfcu6BevAktc/69QyZFWwDwWSgoOqzPD22M=) 3: dDCoImKQNrHXyasH5BqbAo27W3o.roa (hash: f48SfVN/nMYwPQ7yDQlyTF9yoojdYsN08X4hTrgTFDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:2a:47:78:22:5f:8f:c3:f7:b2:de:6a:e0:3f:db:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36 Validity Not Before: Dec 14 14:01:08 2025 GMT Not After : Dec 15 14:01:08 2025 GMT Subject: CN=6178e1278aa004e44c5548ceecab7b04dcaf3d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:b6:6f:b1:f9:38:45:f4:12:4b:cb:26:e0: c8:3b:f1:43:b0:ee:0f:75:fd:19:c7:3c:5c:9b:61: cd:66:de:4b:84:49:a2:41:07:43:ea:af:ce:ab:c6: 5c:d2:87:8f:d9:f7:59:70:b4:ba:53:94:a3:cc:28: 80:b2:cf:a9:83:38:66:83:11:f9:93:95:9a:00:23: b1:73:ee:d4:4d:d5:91:22:bd:5e:58:18:0f:8c:fb: a7:e3:79:bf:71:d9:d5:1d:03:94:01:66:63:e0:9e: 3e:75:48:27:07:ed:f7:e7:57:57:56:dc:00:2e:0b: 1d:98:c5:bb:6b:e4:1d:1a:df:38:44:93:2d:4c:12: 8e:96:74:52:08:b4:e7:12:d3:c3:e7:e2:b9:42:77: f0:aa:08:66:51:4e:52:6d:8e:05:fa:11:b6:2b:47: d4:45:fe:fa:87:e4:b5:43:95:f3:fb:df:7e:f0:35: 41:a8:96:c3:f8:b5:33:fd:c5:7f:11:fd:53:c6:a7: e7:ff:75:63:a6:74:fb:1f:55:fc:f7:e4:ff:33:4f: dc:d2:25:78:b3:91:d4:59:19:04:69:78:ce:f5:82: a9:a1:09:1b:df:12:7d:18:05:18:bf:75:46:05:11: af:de:eb:c9:6c:88:de:17:c7:bf:9f:d4:17:94:81: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:78:E1:27:8A:A0:04:E4:4C:55:48:CE:EC:AB:7B:04:DC:AF:3D:03 X509v3 Authority Key Identifier: keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d9:f9:54:3a:d2:93:3e:99:9f:29:40:a7:c3:0e:4d:fc:a6: 52:5b:ed:b3:33:37:8d:6a:69:b4:71:cd:47:bb:74:3c:19:d7: 05:99:ff:25:40:d5:fc:fa:a6:1a:bc:16:63:ae:71:c6:d1:2d: 26:1b:52:14:e1:c1:1f:c2:8e:18:dd:49:01:9a:3e:a1:97:4f: d8:0c:e8:fc:6e:47:9b:63:68:4c:59:a4:78:a9:62:8f:09:37: 8a:63:a0:2b:2c:6b:5c:56:23:c8:5e:f1:73:91:1e:be:fb:40: 66:bf:bf:33:c2:48:c1:bc:ac:5b:a5:fe:82:44:96:5d:82:59: ce:8f:da:b5:b1:f6:b1:83:d4:e6:ba:7d:e4:0f:5d:8f:79:a6: b1:42:0d:08:c7:ee:62:24:18:0e:e1:91:9e:e2:b8:f9:16:01: 6e:41:4d:ca:15:2b:33:0b:90:e3:a8:2c:30:aa:a0:e0:42:68: f0:1f:ed:25:5d:29:a6:3c:31:86:96:65:59:56:a2:88:b8:c5: b5:35:30:5a:14:7c:3c:8a:02:4d:84:5e:1a:f8:ab:f9:f1:08: fb:52:43:48:1c:09:87:ef:ac:fe:3e:d8:50:0d:21:fd:46:30: 87:61:38:1a:94:3f:d2:be:18:ee:c0:2e:41:21:55:bb:30:d9: d0:85:da:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKkd4Il+Pw/ey3mrgP9svMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNWNmNmQxMjBlMjgxMzhiMGFhMmZjODNjYmE5YjBlOTY3 OTZjMzYwHhcNMjUxMjE0MTQwMTA4WhcNMjUxMjE1MTQwMTA4WjAzMTEwLwYDVQQD Eyg2MTc4ZTEyNzhhYTAwNGU0NGM1NTQ4Y2VlY2FiN2IwNGRjYWYzZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydm2b7H5OEX0EkvLJuDIO/FDsO4P df0Zxzxcm2HNZt5LhEmiQQdD6q/Oq8Zc0oeP2fdZcLS6U5SjzCiAss+pgzhmgxH5 k5WaACOxc+7UTdWRIr1eWBgPjPun43m/cdnVHQOUAWZj4J4+dUgnB+3351dXVtwA LgsdmMW7a+QdGt84RJMtTBKOlnRSCLTnEtPD5+K5QnfwqghmUU5SbY4F+hG2K0fU Rf76h+S1Q5Xz+99+8DVBqJbD+LUz/cV/Ef1Txqfn/3VjpnT7H1X89+T/M0/c0iV4 s5HUWRkEaXjO9YKpoQkb3xJ9GAUYv3VGBRGv3uvJbIjeF8e/n9QXlIFMTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGF44SeKoATkTFVIzuyrewTcrz0DMB8GA1UdIwQY MBaAFB9c9tEg4oE4sKovyDy6mw6WeWw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wMGU4ZTEtYzIzNS00OWE5LTlmOTIt NjM4MzFhZTk1MWVmLzEvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wMGU4ZTEtYzIzNS00OWE5LTlmOTItNjM4MzFhZTk1MWVm LzEvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9n5VDrS kz6ZnylAp8MOTfymUlvtszM3jWpptHHNR7t0PBnXBZn/JUDV/PqmGrwWY65xxtEt JhtSFOHBH8KOGN1JAZo+oZdP2Azo/G5Hm2NoTFmkeKlijwk3imOgKyxrXFYjyF7x c5EevvtAZr+/M8JIwbysW6X+gkSWXYJZzo/atbH2sYPU5rp95A9dj3mmsUINCMfu YiQYDuGRnuK4+RYBbkFNyhUrMwuQ46gsMKqg4EJo8B/tJV0ppjwxhpZlWVaiiLjF tTUwWhR8PIoCTYReGvir+fEI+1JDSBwJh++s/j7YUA0h/UYwh2E4GpQ/0r4Y7sAu QSFVuzDZ0IXamw== -----END CERTIFICATE-----Generated at Mon Dec 15 00:14:44 2025 by rpki-client