This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft File: H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json) Hash identifier: GdhpsiBrmQonzLrfzEBMWE/9/DwU4WkRSpicajccvG8= Subject key identifier: 4F:75:5B:93:2A:B2:B4:2C:93:55:C7:E8:E6:32:88:A6:9B:0B:80:D5 Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f Certificate serial: 019B3343EF7B3EA3732309A3115D765564AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 21:00:48 +0000 Manifest this update: Thu 18 Dec 2025 21:00:48 +0000 Manifest next update: Fri 19 Dec 2025 21:00:48 +0000 Files and hashes: 1: 1YHm_89mdmO3B6rQNuElV51RHnc.roa (hash: MnfHwqRrOYbX1ON7yZ7M8gI0u2brRrZRizU4+uQlZVo=) 2: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: HBg0j0R6xpQcigMdFjaoTRzpzna9emdfaaHYCEImwjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:ef:7b:3e:a3:73:23:09:a3:11:5d:76:55:64:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f Validity Not Before: Dec 18 21:00:48 2025 GMT Not After : Dec 19 21:00:48 2025 GMT Subject: CN=4f755b932ab2b42c9355c7e8e63288a69b0b80d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:74:19:22:1c:39:ea:12:98:17:46:81:b6: 10:08:82:f2:ee:2d:30:d0:43:8b:bd:7d:2a:c4:de: 15:b7:20:37:e3:4c:8d:6f:d3:54:05:7f:16:54:1b: 4b:c2:35:95:29:72:68:33:64:f2:d1:2a:07:09:9b: ed:39:75:77:ae:71:f1:9f:68:5b:8f:c0:e6:91:17: 37:64:c5:83:3e:14:cc:c7:bf:32:3e:c0:a8:71:05: 83:ae:a8:44:33:de:46:b0:c2:30:82:7e:10:76:eb: 8a:2e:93:30:39:4e:56:c0:75:3d:0f:08:c7:78:77: 98:50:2b:e5:de:51:fc:3e:e7:66:17:aa:8b:d8:7c: b3:b8:1c:e3:ac:55:57:ab:36:b9:2e:e6:da:1e:1e: cf:8f:f8:f0:aa:af:2d:8c:50:00:5b:c6:a5:10:d7: 7d:7d:62:d6:1d:67:19:35:68:ba:c6:40:5c:00:07: d1:67:4c:fd:28:8b:45:b8:02:d0:24:b9:3f:f2:57: b8:f1:96:e3:00:0e:6e:4c:00:e8:3c:22:e8:74:c1: a8:5a:3c:4d:54:9f:1f:94:19:92:8f:eb:36:df:a1: 54:ba:6d:f8:4c:99:a6:c3:4a:b4:24:d9:8f:39:c5: 19:3a:16:0f:31:5d:49:b7:bc:59:50:7e:c6:93:60: a8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:75:5B:93:2A:B2:B4:2C:93:55:C7:E8:E6:32:88:A6:9B:0B:80:D5 X509v3 Authority Key Identifier: keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:17:aa:0f:36:5f:0c:45:bc:fd:cd:b4:c4:af:5a:39:04:b1: 01:e8:10:e1:28:cc:02:3a:bd:74:ff:2a:b0:93:40:f5:0f:d6: a4:dd:ae:8f:b8:a2:67:a8:e7:0f:89:6b:5f:06:10:e1:45:5e: a9:8d:dc:c0:6f:e6:d9:c3:1e:cd:85:52:18:77:73:d6:5d:d1: 19:55:4d:af:d6:b0:7c:81:f1:4c:4f:b2:2b:5b:69:3c:c8:fb: 5b:88:bc:4b:e4:06:b0:c7:73:22:d2:5a:98:1f:25:8e:88:81: 4b:71:a9:15:91:3a:1e:39:13:17:64:7c:e5:83:85:75:aa:a5: c6:1f:bf:36:da:56:6f:97:35:bb:f6:d5:67:23:05:ed:e8:85: a7:e9:2a:26:6d:97:86:32:12:4e:ad:31:7b:4c:c5:b6:24:f0: 4d:64:2a:a8:7e:b0:b2:b7:92:7b:15:32:5c:b6:53:fe:81:eb: 9e:1d:9b:bf:b8:50:9b:b9:a0:c7:7e:7f:b3:78:eb:d0:86:d2: 28:df:83:2a:ee:aa:fa:da:54:60:3e:f3:68:5f:de:30:66:70: 3b:3c:9d:66:e1:64:79:89:28:8c:d7:5a:af:99:fc:d3:c9:1d: b5:a4:2d:c2:db:6e:b6:44:b9:1c:1f:5d:ac:29:57:34:25:ea: 4d:f3:18:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ+97PqNzIwmjEV12VWSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNTA0YjFiYjcxNjhlNjgwYjE5NTQyZjhmNzMwMzg2MTQ0 YzhhNWYwHhcNMjUxMjE4MjEwMDQ4WhcNMjUxMjE5MjEwMDQ4WjAzMTEwLwYDVQQD Eyg0Zjc1NWI5MzJhYjJiNDJjOTM1NWM3ZThlNjMyODhhNjliMGI4MGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsh0GSIcOeoSmBdGgbYQCILy7i0w 0EOLvX0qxN4VtyA340yNb9NUBX8WVBtLwjWVKXJoM2Ty0SoHCZvtOXV3rnHxn2hb j8DmkRc3ZMWDPhTMx78yPsCocQWDrqhEM95GsMIwgn4QduuKLpMwOU5WwHU9DwjH eHeYUCvl3lH8PudmF6qL2HyzuBzjrFVXqza5LubaHh7Pj/jwqq8tjFAAW8alENd9 fWLWHWcZNWi6xkBcAAfRZ0z9KItFuALQJLk/8le48ZbjAA5uTADoPCLodMGoWjxN VJ8flBmSj+s236FUum34TJmmw0q0JNmPOcUZOhYPMV1Jt7xZUH7Gk2CoEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE91W5MqsrQsk1XH6OYyiKabC4DVMB8GA1UdIwQY MBaAFB9QSxu3Fo5oCxlUL49zA4YUTIpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYt MzViYjYwZWEwN2MxLzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYtMzViYjYwZWEwN2Mx LzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjReqDzZf DEW8/c20xK9aOQSxAegQ4SjMAjq9dP8qsJNA9Q/WpN2uj7iiZ6jnD4lrXwYQ4UVe qY3cwG/m2cMezYVSGHdz1l3RGVVNr9awfIHxTE+yK1tpPMj7W4i8S+QGsMdzItJa mB8ljoiBS3GpFZE6HjkTF2R85YOFdaqlxh+/NtpWb5c1u/bVZyMF7eiFp+kqJm2X hjISTq0xe0zFtiTwTWQqqH6wsreSexUyXLZT/oHrnh2bv7hQm7mgx35/s3jr0IbS KN+DKu6q+tpUYD7zaF/eMGZwOzydZuFkeYkojNdar5n808kdtaQtwttutkS5HB9d rClXNCXqTfMY8w== -----END CERTIFICATE-----Generated at Thu Dec 18 22:37:49 2025 by rpki-client