This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json) Hash identifier: qa7U+Z6QI59D8wrdVgbO/harsRVMVMXs1lWiXFCOASw= Subject key identifier: FA:4B:D8:9C:5B:9A:E0:A0:3F:53:7B:15:BD:F2:F7:A1:75:5E:03:62 Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66 Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466 Certificate serial: 019B5908685B991E39AE54FB2248D5DA5EB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft Manifest number: 0EA0 Signing time: Fri 26 Dec 2025 05:01:21 +0000 Manifest this update: Fri 26 Dec 2025 05:01:21 +0000 Manifest next update: Sat 27 Dec 2025 05:01:21 +0000 Files and hashes: 1: 9LtCAwdvQTxrsgjAgJBXTY-dexQ.roa (hash: YbPa7xrFRquA6rkXPn/4oW9xs5SCR/ZWuuJuhONwhvc=) 2: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: sGINbuuaGWKN0jR0sFdyZgw0BrS78G6oNrbgr9gtAA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:68:5b:99:1e:39:ae:54:fb:22:48:d5:da:5e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466 Validity Not Before: Dec 26 05:01:21 2025 GMT Not After : Dec 27 05:01:21 2025 GMT Subject: CN=fa4bd89c5b9ae0a03f537b15bdf2f7a1755e0362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:89:d7:1e:d2:6f:ec:3b:b2:46:11:18:c7: aa:b6:cd:71:8f:a6:eb:41:db:2f:61:cf:60:da:b2: dc:82:09:b5:0a:ac:35:57:f2:bd:0a:40:e1:c7:6c: 34:29:b7:b0:64:7b:c6:45:74:5e:de:ea:fd:ab:4a: 3a:f1:fa:ba:cb:a3:f1:40:56:23:6f:b9:ea:12:e0: 10:3f:a3:4b:a8:e1:ad:dc:39:98:ce:a8:3f:e1:a4: 80:2f:97:eb:8b:c4:bf:d5:67:87:ca:cb:6f:81:ca: e2:d3:36:6d:c7:f8:17:de:5f:a4:b2:8b:f4:8c:e3: fb:c8:92:d8:1f:ee:89:5d:31:f1:1a:47:e0:8d:37: f4:3c:5e:40:63:ac:83:78:5c:a6:ff:4b:d1:33:7a: 7b:8b:66:48:77:99:1e:ce:bd:f6:4e:ee:ea:2d:d1: 34:dd:73:23:9a:57:80:f5:5e:3c:d6:fb:64:50:aa: 26:12:a9:dd:81:65:66:78:c9:06:58:26:60:d7:1a: fe:a7:b9:23:32:01:5b:0f:16:7e:a5:b8:f5:80:14: 67:c7:d7:86:7b:7a:b8:d0:23:38:13:cf:df:e0:19: ef:a6:c1:2b:31:7a:42:df:f1:9b:a9:e8:32:b7:26: 74:5c:69:d6:88:ca:dd:32:7b:7e:7f:a1:bd:9b:7c: 35:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4B:D8:9C:5B:9A:E0:A0:3F:53:7B:15:BD:F2:F7:A1:75:5E:03:62 X509v3 Authority Key Identifier: keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:9f:3c:ce:42:72:bf:91:87:33:2e:38:76:7f:08:f0:b9:3a: c2:b2:a8:ac:1a:37:87:4a:41:40:00:d7:21:f6:d5:78:b0:fc: d3:58:7f:10:c3:e2:7a:be:83:75:72:88:f5:8a:6e:90:be:3b: 0d:d7:42:13:ed:37:d2:ec:01:8a:11:83:7c:2f:82:95:12:5e: 8a:c4:f8:5e:7d:49:7a:61:22:96:37:8f:17:29:17:ac:33:81: 67:4e:02:55:cb:81:f7:3d:55:4e:0e:db:d0:b0:2f:ea:11:aa: 37:af:8e:57:fd:0d:71:ef:a9:9e:0e:97:19:80:1b:50:5e:3c: 4c:4e:1f:f3:3e:88:53:d3:a0:ab:a6:2d:44:50:49:40:95:63: 8c:e5:59:b2:28:d1:bd:a4:c8:59:bb:88:73:dc:c6:11:03:25: 33:b9:ee:ae:4f:b2:42:fd:7e:b6:15:9b:ef:50:7e:98:9c:a6: 99:87:52:d7:d8:61:e7:38:e3:9a:0e:50:2f:a9:ab:87:ae:63: b6:f3:ff:0e:01:77:10:08:08:84:ba:02:d3:78:29:63:4b:fe: cf:00:13:0b:e7:18:21:95:aa:44:7f:dd:00:c2:d4:01:6e:79: 80:6c:7b:21:3e:d8:f0:d1:5f:81:44:33:cf:19:40:3b:a3:36: 9c:53:6e:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCGhbmR45rlT7IkjV2l61MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOTc1OTlmNjNkNzg3YzY1YjJlZjlmZjcwZGQ2MzY1Mjc0 MDQ0NjYwHhcNMjUxMjI2MDUwMTIxWhcNMjUxMjI3MDUwMTIxWjAzMTEwLwYDVQQD EyhmYTRiZDg5YzViOWFlMGEwM2Y1MzdiMTViZGYyZjdhMTc1NWUwMzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvSJ1x7Sb+w7skYRGMeqts1xj6br QdsvYc9g2rLcggm1Cqw1V/K9CkDhx2w0KbewZHvGRXRe3ur9q0o68fq6y6PxQFYj b7nqEuAQP6NLqOGt3DmYzqg/4aSAL5fri8S/1WeHystvgcri0zZtx/gX3l+ksov0 jOP7yJLYH+6JXTHxGkfgjTf0PF5AY6yDeFym/0vRM3p7i2ZId5kezr32Tu7qLdE0 3XMjmleA9V481vtkUKomEqndgWVmeMkGWCZg1xr+p7kjMgFbDxZ+pbj1gBRnx9eG e3q40CM4E8/f4BnvpsErMXpC3/GbqegytyZ0XGnWiMrdMnt+f6G9m3w1UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpL2JxbmuCgP1N7Fb3y96F1XgNiMB8GA1UdIwQY MBaAFB+XWZ9j14fGWy75/3DdY2UnQERmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjct N2VjZTdkMDczNjUxLzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjctN2VjZTdkMDczNjUx LzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJ88zkJy v5GHMy44dn8I8Lk6wrKorBo3h0pBQADXIfbVeLD801h/EMPier6DdXKI9YpukL47 DddCE+030uwBihGDfC+ClRJeisT4Xn1JemEiljePFykXrDOBZ04CVcuB9z1VTg7b 0LAv6hGqN6+OV/0Nce+png6XGYAbUF48TE4f8z6IU9Ogq6YtRFBJQJVjjOVZsijR vaTIWbuIc9zGEQMlM7nurk+yQv1+thWb71B+mJymmYdS19hh5zjjmg5QL6mrh65j tvP/DgF3EAgIhLoC03gpY0v+zwATC+cYIZWqRH/dAMLUAW55gGx7IT7Y8NFfgUQz zxlAO6M2nFNuZQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:40 2025 by rpki-client