This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json) Hash identifier: kpL9oVuu223wyydg8O4nSTCSx3gUEmPWL2034nKtmK0= Subject key identifier: A6:5C:E8:B4:1F:67:1F:33:A0:85:08:C8:38:66:75:94:98:C6:2F:4E Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Certificate serial: 019B0F37552D9D93CEF876B982F61AF88578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft Manifest number: 11FA Signing time: Thu 11 Dec 2025 21:00:43 +0000 Manifest this update: Thu 11 Dec 2025 21:00:43 +0000 Manifest next update: Fri 12 Dec 2025 21:00:43 +0000 Files and hashes: 1: 7q0WrWMejy7wbR787YAaoWGbJFQ.roa (hash: wvukoKMYamTKrvVMIAVFKbPLx57mG8Vi2Twko2h+BGA=) 2: 9N4nOv3tg3sEbPyzZf0it1Hq25E.roa (hash: IJnSS5a9u+7nIpL38LijT/DvQkKhhTmKcLRcnn9ZFq4=) 3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: LrZV5OKS8SUlj6vMD7lzwdawXa/Sli+iIR/h0SlmXe4=) 4: HFw-x8czfBceHHrxWFsisFaU53k.roa (hash: cYh9OngZxsihRjHnYd3zU3o4mbQkOgFi9+M2bbApN3k=) 5: X8AY7TE63_MLYw5qzgUDNFtz5p0.roa (hash: X2a5upeXUq+OfzrT3NEfhOg+ntOWBbajp/Ueexg9I2s=) 6: lZMuhPvtZ2azCXBKPog94p3v2Xw.roa (hash: xEuRWjb3WfY9qNirTUGj3ZWp2yVhhUygTy4CswJMg3c=) 7: uIXD9TM7mcGL2h8D_v3d0KyzT9E.roa (hash: N8tk1k3ctTBw3mBa+DDHR+60L2fh+aJO68VY7R3S2T4=) 8: vlexF02dkqJLD0WdrTxwGKUdE4I.roa (hash: cuDkI790X0jMiu+jzLtuqyGyt6ox4BybHkrBEnZriww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:55:2d:9d:93:ce:f8:76:b9:82:f6:1a:f8:85:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Validity Not Before: Dec 11 21:00:43 2025 GMT Not After : Dec 12 21:00:43 2025 GMT Subject: CN=a65ce8b41f671f33a08508c83866759498c62f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:5f:b4:17:0e:26:e8:6b:b7:e0:e1:2c:6e: 3e:a6:99:c3:90:f1:89:5b:c7:6e:23:ee:d3:23:d5: 59:99:cd:fd:44:b3:ea:af:8a:dc:f8:86:02:2a:92: ab:0d:f8:06:f1:4f:3e:fc:e2:aa:29:54:0c:79:6f: 83:96:ad:06:ab:1e:33:99:dd:30:9d:6a:97:67:fc: 0b:b4:e3:75:26:6c:7d:c4:22:a7:13:e0:c9:29:fe: a9:07:2e:b2:26:85:ba:12:21:07:8b:99:4a:f7:51: d4:bf:0e:da:c8:2d:c8:50:9d:f4:92:20:0e:92:8c: 3b:02:fd:7c:56:73:50:9e:f7:cb:d9:d8:bc:af:db: 02:c4:7a:43:50:51:cc:56:7a:2d:08:05:9f:4c:09: 6e:d9:7b:2d:0f:f4:1b:68:3e:47:af:74:9c:68:7c: 12:28:71:8a:0a:d1:31:2b:24:2c:d2:53:55:1c:18: c2:24:31:bb:d8:0c:c8:ae:37:46:52:a2:09:91:28: 51:d4:ae:27:63:10:b0:5f:b0:fb:7c:c7:c0:45:da: e5:41:fa:3a:5c:ad:2b:4b:5b:46:72:8a:6e:94:65: 24:29:49:23:eb:96:c1:25:8d:37:08:b5:31:35:28: 09:c8:de:1b:c0:a1:d3:d2:0b:41:06:46:1e:61:8b: 65:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5C:E8:B4:1F:67:1F:33:A0:85:08:C8:38:66:75:94:98:C6:2F:4E X509v3 Authority Key Identifier: keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:76:89:00:6a:6a:65:4a:f1:ee:34:f4:9d:8a:fa:14:4d:19: 95:ed:d6:44:88:8a:5f:e3:94:0a:e6:06:bc:ab:cd:e5:b7:fd: b9:3e:69:c6:a7:7e:d2:d4:38:76:b3:3d:56:a2:d6:83:fd:c8: 24:16:66:39:ca:a8:9b:ab:1f:e6:a4:7a:1b:55:d8:e0:68:40: 29:4d:c1:d6:42:13:13:e8:b3:29:7f:2d:d5:3d:fa:3c:3a:69: 49:a7:b4:9e:9b:ee:c0:bd:e0:4f:f0:45:b3:fc:96:1d:d8:44: eb:c9:d6:5b:af:d2:1c:d9:c1:9b:fa:31:89:09:3e:d9:fe:e9: 80:02:8e:28:df:76:eb:4e:33:6b:ce:e3:74:dd:26:f6:08:10: 11:3c:f9:da:6d:11:8b:ed:dd:9c:7c:6d:e0:05:48:e4:49:0f: de:90:ff:b7:6c:1f:b6:ff:0d:10:a2:28:20:17:15:c6:7f:97: 83:b1:c2:fd:b2:07:4c:37:37:1a:d7:cb:9a:19:a9:78:a5:05: 98:e7:20:bc:d1:0a:e3:ce:0a:c0:fd:2d:dd:78:8d:4b:4f:12: bd:4e:42:64:84:48:d5:f8:c4:9b:ae:78:9c:fe:15:c5:f9:29: 70:39:1a:d6:ec:03:ff:16:a1:31:88:08:1d:16:a2:71:7e:73: 1e:b3:29:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN1UtnZPO+Ha5gvYa+IV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYzQ5MjdhYjE5NGFlMTIzN2ZkZTJkM2JlZjY5MDM4ODkz ZjBkYzUwHhcNMjUxMjExMjEwMDQzWhcNMjUxMjEyMjEwMDQzWjAzMTEwLwYDVQQD EyhhNjVjZThiNDFmNjcxZjMzYTA4NTA4YzgzODY2NzU5NDk4YzYyZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWFftBcOJuhrt+DhLG4+ppnDkPGJ W8duI+7TI9VZmc39RLPqr4rc+IYCKpKrDfgG8U8+/OKqKVQMeW+Dlq0Gqx4zmd0w nWqXZ/wLtON1Jmx9xCKnE+DJKf6pBy6yJoW6EiEHi5lK91HUvw7ayC3IUJ30kiAO kow7Av18VnNQnvfL2di8r9sCxHpDUFHMVnotCAWfTAlu2XstD/QbaD5Hr3ScaHwS KHGKCtExKyQs0lNVHBjCJDG72AzIrjdGUqIJkShR1K4nYxCwX7D7fMfARdrlQfo6 XK0rS1tGcopulGUkKUkj65bBJY03CLUxNSgJyN4bwKHT0gtBBkYeYYtlywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZc6LQfZx8zoIUIyDhmdZSYxi9OMB8GA1UdIwQY MBaAFB/EknqxlK4SN/3i0772kDiJPw3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODIt OGI4YTAxYmQ3NDE0LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODItOGI4YTAxYmQ3NDE0 LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXaJAGpq ZUrx7jT0nYr6FE0Zle3WRIiKX+OUCuYGvKvN5bf9uT5pxqd+0tQ4drM9VqLWg/3I JBZmOcqom6sf5qR6G1XY4GhAKU3B1kITE+izKX8t1T36PDppSae0npvuwL3gT/BF s/yWHdhE68nWW6/SHNnBm/oxiQk+2f7pgAKOKN92604za87jdN0m9ggQETz52m0R i+3dnHxt4AVI5EkP3pD/t2wftv8NEKIoIBcVxn+Xg7HC/bIHTDc3GtfLmhmpeKUF mOcgvNEK484KwP0t3XiNS08SvU5CZIRI1fjEm654nP4VxfkpcDka1uwD/xahMYgI HRaicX5zHrMp/g== -----END CERTIFICATE-----Generated at Fri Dec 12 03:38:28 2025 by rpki-client