This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json) Hash identifier: pKkCxvIKf0ERN3C+wJSOKzZc1H2TRlYG2fNKJNuewIw= Subject key identifier: 00:96:B4:B6:DB:B4:57:A9:06:02:D3:32:DE:C0:E3:DA:AB:F7:67:5F Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3 Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3 Certificate serial: 019B372165B0340BB1FE2E634F89446FCD29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft Manifest number: AB Signing time: Fri 19 Dec 2025 15:01:34 +0000 Manifest this update: Fri 19 Dec 2025 15:01:34 +0000 Manifest next update: Sat 20 Dec 2025 15:01:34 +0000 Files and hashes: 1: GuyH86XUUME_chhdFNwgWR87nWY.roa (hash: AkV+gL0S5u4NFSo7a7yCWxTWlu4itSTOyYkBPLj5o3E=) 2: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: LwDiPJTLzKtXTyaBcYiClwxpw/DT4E5NCmuFF2KBd0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:65:b0:34:0b:b1:fe:2e:63:4f:89:44:6f:cd:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3 Validity Not Before: Dec 19 15:01:34 2025 GMT Not After : Dec 20 15:01:34 2025 GMT Subject: CN=0096b4b6dbb457a90602d332dec0e3daabf7675f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:94:e3:30:42:26:a0:80:be:a3:11:90:77: 36:54:20:93:eb:0d:f5:17:6a:85:4c:30:b7:04:3b: ba:49:6b:cf:2d:f9:b5:48:3a:9e:49:a9:8c:6c:04: c6:49:5a:57:e4:e2:cb:b6:6b:c6:6f:2a:29:e0:5f: 71:3f:8a:7c:38:3f:0a:fe:58:b4:d9:12:d9:41:0b: ba:aa:05:62:cc:4c:2d:ea:2d:6f:40:28:a9:2f:43: 9e:0c:e6:96:63:a4:2e:de:ff:0f:f3:db:58:4a:54: 46:48:9a:03:52:34:25:e2:f7:19:07:2c:95:f3:45: d2:55:01:3e:e6:cd:4b:6d:ad:6b:0a:97:69:7e:24: b8:26:8c:6f:52:28:ae:e3:37:28:7e:f8:ba:d9:cf: ec:e5:5a:5d:db:f7:c0:51:de:5e:e5:d3:48:31:37: 84:25:d8:19:f1:6e:2b:63:62:b5:b8:c1:0b:bf:e0: 2e:1c:fa:84:c9:3e:97:86:e7:22:98:06:34:4b:16: bf:ae:90:38:f3:42:76:42:d5:89:9f:a9:2b:11:48: 4f:33:bf:1f:5d:52:b2:73:40:81:5d:11:f1:00:70: 3d:b4:16:41:58:69:ee:3e:77:15:a3:46:1e:2c:85: b0:2e:af:85:c0:aa:1c:99:cb:27:b8:1f:0b:14:57: 44:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:96:B4:B6:DB:B4:57:A9:06:02:D3:32:DE:C0:E3:DA:AB:F7:67:5F X509v3 Authority Key Identifier: keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6f:dd:2e:13:47:49:4e:34:9d:22:1f:aa:df:bc:22:a3:57: 9f:3a:d1:84:42:7c:af:c4:fe:a8:17:00:41:32:b1:54:8f:4e: d5:8f:20:97:17:6f:67:41:da:c1:57:0d:07:d4:44:44:24:f3: 18:02:c3:e1:c1:ad:24:05:57:ec:36:cc:60:85:0c:f5:16:7b: b8:52:0f:d2:17:86:3a:1d:e5:0c:28:3d:26:95:e8:d0:ec:9f: 88:ac:82:b8:19:42:f2:79:8c:fa:ff:d9:83:4d:23:38:dc:8b: ce:4e:6d:2a:a6:03:e8:f0:29:68:f9:4a:75:ca:a2:6f:2b:b1: 17:0f:a1:96:1f:a2:37:ee:2b:a6:3d:43:d1:d9:5a:3a:47:36: 55:c2:25:cf:82:1a:89:ec:e1:b6:4d:a0:fd:36:f5:01:60:72: dd:99:94:52:90:ab:5f:c8:e0:cc:2e:59:fd:45:3e:ca:07:f0: 71:ad:17:c2:42:d9:61:1a:8a:fb:00:55:9d:7b:d7:ae:ba:6a: db:4f:ab:7d:d4:65:d7:bc:1d:24:ad:23:76:0e:9a:83:8a:e3: 82:5a:03:89:30:71:e6:4b:10:1f:f6:f0:b9:a0:1a:c4:bc:8a: 52:07:f8:95:b8:b1:bd:ad:49:57:8c:09:44:d9:b0:cb:ff:62: 20:97:1b:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IWWwNAux/i5jT4lEb80pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNTM5YTYxNGUwYWExY2ZhMTlmY2Y4ZWUwYmZhYTAzNDYz MTQzYzMwHhcNMjUxMjE5MTUwMTM0WhcNMjUxMjIwMTUwMTM0WjAzMTEwLwYDVQQD EygwMDk2YjRiNmRiYjQ1N2E5MDYwMmQzMzJkZWMwZTNkYWFiZjc2NzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMCU4zBCJqCAvqMRkHc2VCCT6w31 F2qFTDC3BDu6SWvPLfm1SDqeSamMbATGSVpX5OLLtmvGbyop4F9xP4p8OD8K/li0 2RLZQQu6qgVizEwt6i1vQCipL0OeDOaWY6Qu3v8P89tYSlRGSJoDUjQl4vcZByyV 80XSVQE+5s1Lba1rCpdpfiS4JoxvUiiu4zcofvi62c/s5Vpd2/fAUd5e5dNIMTeE JdgZ8W4rY2K1uMELv+AuHPqEyT6XhucimAY0Sxa/rpA480J2QtWJn6krEUhPM78f XVKyc0CBXRHxAHA9tBZBWGnuPncVo0YeLIWwLq+FwKocmcsnuB8LFFdEtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACWtLbbtFepBgLTMt7A49qr92dfMB8GA1UdIwQY MBaAFB9TmmFOCqHPoZ/PjuC/qgNGMUPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MjdiZjEtNzk5OS00M2UxLWI3ZjUt YWJlMWUzNzkyNWNmLzEvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85MjdiZjEtNzk5OS00M2UxLWI3ZjUtYWJlMWUzNzkyNWNm LzEvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEG/dLhNH SU40nSIfqt+8IqNXnzrRhEJ8r8T+qBcAQTKxVI9O1Y8glxdvZ0HawVcNB9RERCTz GALD4cGtJAVX7DbMYIUM9RZ7uFIP0heGOh3lDCg9JpXo0OyfiKyCuBlC8nmM+v/Z g00jONyLzk5tKqYD6PApaPlKdcqibyuxFw+hlh+iN+4rpj1D0dlaOkc2VcIlz4Ia iezhtk2g/Tb1AWBy3ZmUUpCrX8jgzC5Z/UU+ygfwca0XwkLZYRqK+wBVnXvXrrpq 20+rfdRl17wdJK0jdg6ag4rjgloDiTBx5ksQH/bwuaAaxLyKUgf4lbixva1JV4wJ RNmwy/9iIJcbDA== -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:50 2025 by rpki-client