This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json) Hash identifier: bwbWMu9UF9G21JlTgcQWHbJWqvqvIowVoOaVgq0jaBg= Subject key identifier: 6F:A2:29:5D:02:8A:05:C4:CB:B6:B6:B1:85:BA:EF:D3:D9:98:31:21 Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61 Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61 Certificate serial: 019B35A0D2E2CD1012954BDF961C2821EF4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 08:01:30 +0000 Manifest this update: Fri 19 Dec 2025 08:01:30 +0000 Manifest next update: Sat 20 Dec 2025 08:01:30 +0000 Files and hashes: 1: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: pBmWIjazN6VvgFK8EcZxjJZsXRVITqMbORsbH1IXDuU=) 2: oyXaOgxI1N0gL-mT4wAa6DfHmfQ.roa (hash: 8sggfPG1wysa3rNvbgw+mJfeUSqlumTtEBYr1asLE8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:d2:e2:cd:10:12:95:4b:df:96:1c:28:21:ef:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61 Validity Not Before: Dec 19 08:01:30 2025 GMT Not After : Dec 20 08:01:30 2025 GMT Subject: CN=6fa2295d028a05c4cbb6b6b185baefd3d9983121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ee:d8:4e:a4:3e:a0:10:4c:dd:e2:a5:e2:d2: 6a:f5:21:3d:7c:c1:1b:2f:98:89:c1:0b:c4:17:0d: 15:7d:6f:ea:27:ad:2a:96:d5:04:3d:9b:85:31:82: f8:d9:e3:f5:c7:17:27:42:d6:61:2a:3e:58:b5:f9: 63:e3:dc:e7:48:dd:6f:fa:4d:96:f4:00:99:e1:ac: f5:13:e1:bc:be:9d:fa:54:bd:4c:6c:17:01:ba:ae: bd:eb:4b:95:ae:7e:50:08:f3:7a:e4:8f:7d:f4:79: 54:a1:bc:f7:ec:ba:4f:ca:b0:e7:d6:a9:73:6d:f6: 22:bc:64:ba:35:0d:b7:1b:59:b1:55:ca:1a:da:98: 78:91:2d:23:36:3a:7a:fd:0a:6a:6e:ac:71:c2:79: 87:b8:47:ef:c5:8a:5b:11:50:d0:bb:28:2e:de:ef: c1:7e:5d:58:29:32:50:f2:c2:de:39:97:56:48:2b: 16:ac:08:f4:03:93:4c:59:04:5d:9b:c9:d7:11:b5: 7c:4a:4e:ab:6a:86:0c:e1:b0:a7:3d:67:40:da:12: b1:10:0e:60:41:fb:2c:d0:b5:5b:4e:db:08:ab:46: b9:7c:fc:40:8f:fb:fc:71:5c:37:44:80:0b:b0:79: 28:73:13:33:07:fd:ff:73:a5:2d:8a:b1:7e:9c:aa: 97:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A2:29:5D:02:8A:05:C4:CB:B6:B6:B1:85:BA:EF:D3:D9:98:31:21 X509v3 Authority Key Identifier: keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ba:e1:eb:16:d4:90:f7:b8:9a:ed:27:bc:79:aa:76:12:15: f1:b6:31:d8:27:d1:18:3a:89:45:18:42:a9:83:f2:93:07:07: f3:fb:a4:d4:fb:da:e0:7c:50:cd:99:72:62:cb:59:98:e6:ce: 74:a7:61:da:37:25:95:a8:28:29:73:b5:44:04:fb:81:1b:09: 7f:a5:ed:3c:6a:7b:84:61:ae:8d:57:50:68:a5:cc:56:7f:1f: eb:21:b7:f3:b2:51:66:b6:8e:3d:23:5f:27:af:9a:4e:7f:1f: 1c:f8:30:c5:69:b5:5c:2e:75:a9:e8:f0:c8:8f:f0:3a:c1:9a: 5a:17:17:40:18:52:31:3f:fc:2e:75:d7:fa:c7:fb:af:53:4b: 4b:3e:4d:03:aa:1f:22:86:b9:f2:d0:76:04:91:ac:90:7c:64: b6:f5:47:a9:95:44:6e:57:14:b8:81:3a:f7:2e:cc:d1:e5:c9: b5:50:cc:ad:91:a6:26:99:06:95:b3:bb:d8:17:50:cc:e8:e2: 73:4e:ae:db:7d:ff:05:44:86:65:4c:e5:4c:97:ec:5b:2a:c2: f3:75:28:56:61:cb:05:96:30:34:72:0b:53:9d:71:0c:04:53: 6b:73:54:ba:63:2b:11:21:79:8c:0b:8f:f0:62:63:c7:5d:db: 39:b8:15:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oNLizRASlUvflhwoIe9OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjg4Zjk4NTdkOWU0NDBjMTA1OGRjODk1OWU0OWY4YjMx ODNmNjEwHhcNMjUxMjE5MDgwMTMwWhcNMjUxMjIwMDgwMTMwWjAzMTEwLwYDVQQD Eyg2ZmEyMjk1ZDAyOGEwNWM0Y2JiNmI2YjE4NWJhZWZkM2Q5OTgzMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8u7YTqQ+oBBM3eKl4tJq9SE9fMEb L5iJwQvEFw0VfW/qJ60qltUEPZuFMYL42eP1xxcnQtZhKj5Ytflj49znSN1v+k2W 9ACZ4az1E+G8vp36VL1MbBcBuq6960uVrn5QCPN65I999HlUobz37LpPyrDn1qlz bfYivGS6NQ23G1mxVcoa2ph4kS0jNjp6/QpqbqxxwnmHuEfvxYpbEVDQuygu3u/B fl1YKTJQ8sLeOZdWSCsWrAj0A5NMWQRdm8nXEbV8Sk6raoYM4bCnPWdA2hKxEA5g Qfss0LVbTtsIq0a5fPxAj/v8cVw3RIALsHkocxMzB/3/c6UtirF+nKqXswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+iKV0CigXEy7a2sYW679PZmDEhMB8GA1UdIwQY MBaAFB9oj5hX2eRAwQWNyJWeSfizGD9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUt MDIxYzJlMDczNWIxLzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUtMDIxYzJlMDczNWIx LzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrrh6xbU kPe4mu0nvHmqdhIV8bYx2CfRGDqJRRhCqYPykwcH8/uk1Pva4HxQzZlyYstZmObO dKdh2jcllagoKXO1RAT7gRsJf6XtPGp7hGGujVdQaKXMVn8f6yG387JRZraOPSNf J6+aTn8fHPgwxWm1XC51qejwyI/wOsGaWhcXQBhSMT/8LnXX+sf7r1NLSz5NA6of Ioa58tB2BJGskHxktvVHqZVEblcUuIE69y7M0eXJtVDMrZGmJpkGlbO72BdQzOji c06u233/BUSGZUzlTJfsWyrC83UoVmHLBZYwNHILU51xDARTa3NUumMrESF5jAuP 8GJjx13bObgVhQ== -----END CERTIFICATE-----Generated at Fri Dec 19 12:08:02 2025 by rpki-client