This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json) Hash identifier: /ZuwTOY22/jcHWhtccuSP+OjSYvOHxxCji0cxLqxfxc= Subject key identifier: C6:64:31:10:90:9A:0B:27:19:C7:AB:57:EA:35:26:41:30:5C:B4:C1 Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3 Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3 Certificate serial: 019B3532FC4DFCDD92C36C6230563452900D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft Manifest number: AA Signing time: Fri 19 Dec 2025 06:01:32 +0000 Manifest this update: Fri 19 Dec 2025 06:01:32 +0000 Manifest next update: Sat 20 Dec 2025 06:01:32 +0000 Files and hashes: 1: GuyH86XUUME_chhdFNwgWR87nWY.roa (hash: AkV+gL0S5u4NFSo7a7yCWxTWlu4itSTOyYkBPLj5o3E=) 2: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: /XG2KpoOh+gkx9/Se9kzJHN6EvkL+8T2ZzRNkRSFwIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:fc:4d:fc:dd:92:c3:6c:62:30:56:34:52:90:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3 Validity Not Before: Dec 19 06:01:32 2025 GMT Not After : Dec 20 06:01:32 2025 GMT Subject: CN=c6643110909a0b2719c7ab57ea352641305cb4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:4c:21:b9:bd:23:72:ca:27:b8:ef:b6:da: 5c:d7:0c:a1:7a:d2:43:ae:d3:a2:73:24:c8:37:d2: d5:aa:54:02:be:73:fe:b0:a8:18:52:f2:16:47:b0: b2:e0:ce:92:8c:c9:aa:63:79:43:da:80:ea:65:11: dd:c7:3b:d5:1b:c3:37:8d:f7:38:08:67:51:dc:e4: f6:fa:4f:17:32:d1:77:66:a2:4c:ae:d8:95:59:c8: a3:45:69:01:53:78:b7:83:d9:09:0f:88:26:35:1d: ef:8a:6e:35:14:df:9b:16:63:bc:30:14:c7:99:36: 2c:64:e1:48:96:85:93:47:6e:05:1b:d3:e3:db:59: 6e:70:35:23:56:5e:83:61:15:c6:2c:16:c9:86:d8: f2:53:60:50:2e:90:df:60:df:ce:c6:2b:77:e2:df: dc:17:41:cc:5a:22:19:d1:a7:ad:33:26:6f:89:5d: 2b:f2:29:cf:92:aa:6b:90:04:43:70:33:56:05:49: 53:43:85:ac:de:b8:d2:0d:f7:a5:96:d4:52:12:b8: 0d:d5:ff:ef:a0:64:15:db:cc:58:12:c0:fe:6f:78: 42:0d:97:34:2b:7c:10:0b:4a:a3:29:59:88:a2:1a: 6c:0b:44:64:b5:88:4c:58:6f:fc:01:0c:59:be:9d: c4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:64:31:10:90:9A:0B:27:19:C7:AB:57:EA:35:26:41:30:5C:B4:C1 X509v3 Authority Key Identifier: keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:fd:39:1d:2a:db:1a:90:7f:7f:d0:ed:62:22:6d:33:40:7c: b0:15:1b:15:53:ae:90:29:80:ac:d1:cc:02:cf:08:8c:39:c5: ae:b7:1a:bf:ec:5a:f8:31:f7:9e:22:7b:c6:04:6e:9f:30:d5: 64:38:b1:45:b2:26:a2:31:82:10:fd:74:a0:fb:47:98:94:95: d9:98:18:be:b4:fd:f6:e6:80:7d:2e:b3:9d:24:10:f2:1c:d7: c2:af:cf:e6:fb:49:f1:21:19:31:da:46:45:5e:64:76:05:41: 06:bf:62:8a:cd:13:d6:a5:9d:d5:53:81:a1:27:b7:c9:f0:1b: f9:22:56:01:3c:44:d0:54:a3:1e:bb:1a:53:b7:9e:6e:59:21: 9f:bf:25:9b:77:0c:f3:73:23:7d:13:de:a6:a0:8b:e0:a2:60: 41:2c:64:b8:a0:05:51:16:61:d7:ef:60:c3:8b:c4:db:22:93: 20:ed:b6:79:db:ed:d7:dd:d9:af:84:f2:70:2c:b4:3e:e2:5e: b1:d9:46:cb:bf:5a:bb:d9:e3:7c:22:e9:44:55:c9:8a:64:ec: d2:60:9b:2c:91:ab:53:cb:f7:99:31:5e:4b:08:b9:d1:da:fe: 01:aa:b5:ff:ef:14:1a:4b:63:67:94:a6:ac:01:4b:4c:33:f3: e6:48:90:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MvxN/N2Sw2xiMFY0UpANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNTM5YTYxNGUwYWExY2ZhMTlmY2Y4ZWUwYmZhYTAzNDYz MTQzYzMwHhcNMjUxMjE5MDYwMTMyWhcNMjUxMjIwMDYwMTMyWjAzMTEwLwYDVQQD EyhjNjY0MzExMDkwOWEwYjI3MTljN2FiNTdlYTM1MjY0MTMwNWNiNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoBMIbm9I3LKJ7jvttpc1wyhetJD rtOicyTIN9LVqlQCvnP+sKgYUvIWR7Cy4M6SjMmqY3lD2oDqZRHdxzvVG8M3jfc4 CGdR3OT2+k8XMtF3ZqJMrtiVWcijRWkBU3i3g9kJD4gmNR3vim41FN+bFmO8MBTH mTYsZOFIloWTR24FG9Pj21lucDUjVl6DYRXGLBbJhtjyU2BQLpDfYN/Oxit34t/c F0HMWiIZ0aetMyZviV0r8inPkqprkARDcDNWBUlTQ4Ws3rjSDfelltRSErgN1f/v oGQV28xYEsD+b3hCDZc0K3wQC0qjKVmIohpsC0RktYhMWG/8AQxZvp3EhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZkMRCQmgsnGcerV+o1JkEwXLTBMB8GA1UdIwQY MBaAFB9TmmFOCqHPoZ/PjuC/qgNGMUPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MjdiZjEtNzk5OS00M2UxLWI3ZjUt YWJlMWUzNzkyNWNmLzEvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85MjdiZjEtNzk5OS00M2UxLWI3ZjUtYWJlMWUzNzkyNWNm LzEvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcP05HSrb GpB/f9DtYiJtM0B8sBUbFVOukCmArNHMAs8IjDnFrrcav+xa+DH3niJ7xgRunzDV ZDixRbImojGCEP10oPtHmJSV2ZgYvrT99uaAfS6znSQQ8hzXwq/P5vtJ8SEZMdpG RV5kdgVBBr9iis0T1qWd1VOBoSe3yfAb+SJWATxE0FSjHrsaU7eeblkhn78lm3cM 83MjfRPepqCL4KJgQSxkuKAFURZh1+9gw4vE2yKTIO22edvt193Zr4TycCy0PuJe sdlGy79au9njfCLpRFXJimTs0mCbLJGrU8v3mTFeSwi50dr+Aaq1/+8UGktjZ5Sm rAFLTDPz5kiQYw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:15:53 2025 by rpki-client