This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json) Hash identifier: 5xt2vQ5YGgxxVtMeqb36k6WppIDkG5wDw5IQ1P656Fo= Subject key identifier: 22:9A:4A:36:B8:00:C0:28:87:33:1A:1B:5B:C7:2D:B4:B4:D4:61:98 Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61 Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61 Certificate serial: 019B3B6B91E535ACAE82E5092FAAA2A2D334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 11:01:04 +0000 Manifest this update: Sat 20 Dec 2025 11:01:04 +0000 Manifest next update: Sun 21 Dec 2025 11:01:04 +0000 Files and hashes: 1: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: 7tLsSG408dwsV3XoeLr8zLRMr6e6N9JjV+QbF5htiLE=) 2: oyXaOgxI1N0gL-mT4wAa6DfHmfQ.roa (hash: 8sggfPG1wysa3rNvbgw+mJfeUSqlumTtEBYr1asLE8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:91:e5:35:ac:ae:82:e5:09:2f:aa:a2:a2:d3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61 Validity Not Before: Dec 20 11:01:04 2025 GMT Not After : Dec 21 11:01:04 2025 GMT Subject: CN=229a4a36b800c02887331a1b5bc72db4b4d46198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:fb:e3:29:cc:eb:ab:7b:c9:ab:c3:73:ce: 0a:c8:f9:2a:c5:67:7a:50:35:bf:40:d1:a4:4f:66: 13:02:51:33:18:1e:05:30:87:3d:ea:81:91:e5:51: 84:a6:de:72:73:40:a1:30:47:18:3b:a4:52:31:b3: db:39:3c:f6:fb:e4:34:d0:45:bf:6e:cc:d0:be:e0: c0:ee:3a:83:fc:9d:fb:ff:a9:0b:83:5a:e1:6b:f4: e8:19:b2:7c:23:b0:fe:03:05:23:fe:95:72:3f:ae: bc:d0:d4:d0:78:8d:bc:ab:c6:3f:92:8d:e2:da:e6: c6:18:b9:71:0d:a8:0d:e5:46:e1:a6:66:78:9e:e7: 64:b3:68:c0:ce:58:68:3e:55:0b:0d:b7:f0:0e:e7: 40:2c:88:9d:98:a3:f4:05:20:56:9f:37:1f:15:b0: f1:de:c0:66:27:36:0d:26:0b:6a:1a:41:d2:a3:97: f0:f4:2b:84:e9:33:bb:75:74:dd:e4:58:0e:5e:f4: 47:55:5c:65:25:87:23:c3:f1:ef:ea:f1:59:e0:54: 3c:2c:5f:c1:7d:8a:2f:d2:62:a2:cc:8c:a0:55:85: 9b:a6:c1:75:c6:0d:f3:a0:b5:e5:dd:f6:e1:10:80: ff:ff:d6:ab:15:6e:94:f6:f6:68:99:84:74:cf:78: d7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9A:4A:36:B8:00:C0:28:87:33:1A:1B:5B:C7:2D:B4:B4:D4:61:98 X509v3 Authority Key Identifier: keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:86:65:d4:73:86:bd:36:4c:12:86:89:02:cf:9a:e4:9f:f9: 5b:40:cb:e0:45:8e:f9:59:e6:6c:64:62:85:da:85:37:74:e6: e0:f4:bd:e6:67:e3:76:cb:17:58:ef:5a:f4:f0:02:ee:e8:90: ec:9a:06:7c:78:9c:29:a7:2f:94:41:bb:70:9e:ff:d0:52:d8: 30:ab:0c:7f:d4:27:54:77:13:dc:26:b6:93:5d:7a:47:dd:78: c9:76:ed:bf:4d:1d:b3:fd:69:cd:ef:f7:26:e5:77:62:75:8c: 89:e9:31:42:41:94:42:f0:7f:e1:f2:ce:03:54:25:5c:30:2d: c9:c6:57:b0:0f:16:d5:0b:82:49:e5:ab:bf:0b:b3:2e:11:d2: ec:99:a4:31:82:91:21:60:ae:26:6f:29:80:de:a1:d6:a6:17: 66:8b:33:5e:96:e1:c2:81:ca:e5:f1:60:1f:f9:d2:b9:9c:df: d9:20:cf:41:bf:cb:74:c1:75:94:66:05:df:13:ca:e4:00:c1: 7a:2b:b6:7a:59:a1:b2:5f:0a:d8:4e:89:19:53:70:e8:f0:d9: 39:b9:99:1a:70:08:c1:98:86:02:72:33:91:56:29:cb:ef:1d: 9a:81:6a:89:3e:a7:e4:a0:01:52:3b:9b:83:c8:4a:41:b8:e5: 63:ca:c9:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a5HlNayuguUJL6qiotM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjg4Zjk4NTdkOWU0NDBjMTA1OGRjODk1OWU0OWY4YjMx ODNmNjEwHhcNMjUxMjIwMTEwMTA0WhcNMjUxMjIxMTEwMTA0WjAzMTEwLwYDVQQD EygyMjlhNGEzNmI4MDBjMDI4ODczMzFhMWI1YmM3MmRiNGI0ZDQ2MTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl/74ynM66t7yavDc84KyPkqxWd6 UDW/QNGkT2YTAlEzGB4FMIc96oGR5VGEpt5yc0ChMEcYO6RSMbPbOTz2++Q00EW/ bszQvuDA7jqD/J37/6kLg1rha/ToGbJ8I7D+AwUj/pVyP6680NTQeI28q8Y/ko3i 2ubGGLlxDagN5UbhpmZ4nudks2jAzlhoPlULDbfwDudALIidmKP0BSBWnzcfFbDx 3sBmJzYNJgtqGkHSo5fw9CuE6TO7dXTd5FgOXvRHVVxlJYcjw/Hv6vFZ4FQ8LF/B fYov0mKizIygVYWbpsF1xg3zoLXl3fbhEID//9arFW6U9vZomYR0z3jX6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKaSja4AMAohzMaG1vHLbS01GGYMB8GA1UdIwQY MBaAFB9oj5hX2eRAwQWNyJWeSfizGD9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUt MDIxYzJlMDczNWIxLzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUtMDIxYzJlMDczNWIx LzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4Zl1HOG vTZMEoaJAs+a5J/5W0DL4EWO+VnmbGRihdqFN3Tm4PS95mfjdssXWO9a9PAC7uiQ 7JoGfHicKacvlEG7cJ7/0FLYMKsMf9QnVHcT3Ca2k116R914yXbtv00ds/1pze/3 JuV3YnWMiekxQkGUQvB/4fLOA1QlXDAtycZXsA8W1QuCSeWrvwuzLhHS7JmkMYKR IWCuJm8pgN6h1qYXZoszXpbhwoHK5fFgH/nSuZzf2SDPQb/LdMF1lGYF3xPK5ADB eiu2elmhsl8K2E6JGVNw6PDZObmZGnAIwZiGAnIzkVYpy+8dmoFqiT6n5KABUjub g8hKQbjlY8rJtQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:00:43 2025 by rpki-client