This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft File: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json) Hash identifier: e/uO+boo/rl/cZkpfh2T6QrAH4kCzOVgbOHIf2OU/aM= Subject key identifier: 59:9E:26:0F:BC:73:B2:61:F5:26:2B:C4:A3:DC:32:40:EC:46:4D:B9 Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5 Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5 Certificate serial: 019B43927C4E679416ABA0D7C9167345060F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft Manifest number: 0C90 Signing time: Mon 22 Dec 2025 01:00:32 +0000 Manifest this update: Mon 22 Dec 2025 01:00:32 +0000 Manifest next update: Tue 23 Dec 2025 01:00:32 +0000 Files and hashes: 1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: viXkCkYVp4ZrjwD2TWLmZdPROTRaOQ2lcsOKcWAxva0=) 2: ntEteGeDZu85wNJOAqgjTrUSx54.roa (hash: Q0TMKcR9tSI7oBt+FGXWaqYBj7j3GPsfDK87Fv5h+YM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:7c:4e:67:94:16:ab:a0:d7:c9:16:73:45:06:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5 Validity Not Before: Dec 22 01:00:32 2025 GMT Not After : Dec 23 01:00:32 2025 GMT Subject: CN=599e260fbc73b261f5262bc4a3dc3240ec464db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:07:0a:c0:3f:c3:56:34:f9:ff:39:45:52: 96:ee:10:16:1d:d5:68:d5:26:41:60:c2:21:37:11: fc:a0:ea:85:d3:c2:74:5c:a6:15:93:97:e0:f0:fe: 9c:cf:ca:ec:20:ea:ff:78:24:14:a0:d9:ed:a5:2e: 3c:d3:77:0c:28:f2:4b:c8:f3:c6:31:92:5b:4a:37: 1f:07:af:e3:e7:12:9b:f7:e1:43:fd:94:49:e1:1a: e9:4b:3c:06:b6:0a:2f:74:96:8a:50:13:22:82:81: 0a:e5:e9:b8:bb:f8:6a:18:30:20:35:81:79:48:9c: c8:f1:f9:14:40:ba:29:2d:81:c9:27:ac:3f:c2:6a: 62:db:6e:34:1b:e8:b8:d1:f8:6f:b6:bd:91:ab:f8: b6:18:8f:10:00:38:67:82:10:cf:12:40:8a:d1:b2: c6:90:a0:f1:02:c1:40:67:0d:1a:b8:3a:7f:08:da: 7a:0f:c5:b3:e5:25:73:f2:f8:94:ea:1c:83:01:02: e0:80:46:65:f1:2c:01:4e:59:e3:e3:99:5e:e8:3c: ba:da:8b:11:9c:89:ad:5a:c1:6a:8c:7b:dd:9c:b4: 08:96:9a:ee:5d:ae:73:15:24:d9:d3:f7:07:a4:c3: e4:0e:1a:8b:89:2a:c4:f5:6c:b9:8a:8a:c4:7d:d5: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9E:26:0F:BC:73:B2:61:F5:26:2B:C4:A3:DC:32:40:EC:46:4D:B9 X509v3 Authority Key Identifier: keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3c:bc:57:d9:2c:67:cf:70:d5:e1:3c:23:72:ab:f6:a9:e7: 63:8d:67:60:ef:d9:e2:9c:54:3d:28:8a:49:56:4c:2f:41:cf: 4b:1a:c3:ba:64:c0:6b:ba:bb:7a:a8:f5:5d:a7:34:a4:1f:82: ce:b0:4d:c3:fb:c9:29:82:a1:37:72:dd:fa:2d:74:a3:72:99: ad:17:72:ff:4c:10:dd:82:8b:17:20:dc:97:02:eb:76:be:d5: ae:e9:d1:30:9c:55:3e:ea:6a:3c:41:f7:5f:8d:d7:d2:a9:f8: 97:b2:af:ad:ff:f1:65:6a:09:4e:2f:8d:1f:05:12:cb:bf:96: d7:89:8c:ac:1e:f9:8e:c3:43:b9:25:07:86:12:88:36:e8:9c: 88:a1:77:76:56:be:0c:e4:63:19:99:38:24:39:af:e9:6a:8d: b6:17:55:96:32:9d:fe:09:21:a1:aa:14:d5:63:f9:40:83:b5: d1:ab:22:6c:6b:02:aa:11:19:44:da:0b:a5:95:3e:45:cf:89: 5c:eb:4e:69:c7:f7:37:17:b0:64:da:94:53:58:7b:2c:90:8b: 16:73:53:36:5c:54:32:47:a2:36:dc:4b:99:0a:8b:94:a2:49: fb:4e:44:f7:6a:9a:18:72:9b:b5:5a:d5:e0:0d:f2:30:32:79: a6:02:88:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDknxOZ5QWq6DXyRZzRQYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOTAwNGVhMDUzOGM3M2MyM2EzZDFkZmRjMTIxZjBlNjAw YWNkZjUwHhcNMjUxMjIyMDEwMDMyWhcNMjUxMjIzMDEwMDMyWjAzMTEwLwYDVQQD Eyg1OTllMjYwZmJjNzNiMjYxZjUyNjJiYzRhM2RjMzI0MGVjNDY0ZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOkHCsA/w1Y0+f85RVKW7hAWHdVo 1SZBYMIhNxH8oOqF08J0XKYVk5fg8P6cz8rsIOr/eCQUoNntpS4803cMKPJLyPPG MZJbSjcfB6/j5xKb9+FD/ZRJ4RrpSzwGtgovdJaKUBMigoEK5em4u/hqGDAgNYF5 SJzI8fkUQLopLYHJJ6w/wmpi2240G+i40fhvtr2Rq/i2GI8QADhnghDPEkCK0bLG kKDxAsFAZw0auDp/CNp6D8Wz5SVz8viU6hyDAQLggEZl8SwBTlnj45le6Dy62osR nImtWsFqjHvdnLQIlpruXa5zFSTZ0/cHpMPkDhqLiSrE9Wy5iorEfdV8awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmeJg+8c7Jh9SYrxKPcMkDsRk25MB8GA1UdIwQY MBaAFB+QBOoFOMc8I6PR39wSHw5gCs31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yM2Q3YjctNWFlNi00NjMxLWIxNDIt NDk2YWJlZTdjZTc5LzEvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yM2Q3YjctNWFlNi00NjMxLWIxNDItNDk2YWJlZTdjZTc5 LzEvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTy8V9ks Z89w1eE8I3Kr9qnnY41nYO/Z4pxUPSiKSVZML0HPSxrDumTAa7q7eqj1Xac0pB+C zrBNw/vJKYKhN3Ld+i10o3KZrRdy/0wQ3YKLFyDclwLrdr7VrunRMJxVPupqPEH3 X43X0qn4l7Kvrf/xZWoJTi+NHwUSy7+W14mMrB75jsNDuSUHhhKINuiciKF3dla+ DORjGZk4JDmv6WqNthdVljKd/gkhoaoU1WP5QIO10asibGsCqhEZRNoLpZU+Rc+J XOtOacf3NxewZNqUU1h7LJCLFnNTNlxUMkeiNtxLmQqLlKJJ+05E92qaGHKbtVrV 4A3yMDJ5pgKI2A== -----END CERTIFICATE-----Generated at Mon Dec 22 05:35:45 2025 by rpki-client