This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json) Hash identifier: evt2An8a5SjzfCqnU1TjVj4s6ZtGdQ+bFEPVglqwoD4= Subject key identifier: 0A:09:E1:E9:A4:C6:FA:1E:A3:6E:B5:F8:70:3D:02:19:E9:E5:5A:DD Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb Certificate serial: 019B59E450698643D69D6585C0D298542658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft Manifest number: 1442 Signing time: Fri 26 Dec 2025 09:01:33 +0000 Manifest this update: Fri 26 Dec 2025 09:01:33 +0000 Manifest next update: Sat 27 Dec 2025 09:01:33 +0000 Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: pM1YMiOG5k1NZ3lplSU2fo0Jny4gHEuHJhQmv5NqkZQ=) 2: YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa (hash: UwEIySf0ujQ0bIXU2dedyQ3b/IuoBDp7UIw7LsZq4qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:50:69:86:43:d6:9d:65:85:c0:d2:98:54:26:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb Validity Not Before: Dec 26 09:01:33 2025 GMT Not After : Dec 27 09:01:33 2025 GMT Subject: CN=0a09e1e9a4c6fa1ea36eb5f8703d0219e9e55add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:80:7d:e2:57:8f:7c:48:03:53:76:9d:ca:71: 4e:7b:dd:e2:d5:bf:97:58:c9:17:ad:ee:a7:59:17: a2:12:08:64:4c:19:e4:8b:00:18:1d:e6:1b:da:c3: 59:95:5d:d0:8f:52:73:57:fe:4b:38:28:e6:d6:2e: 27:e9:f0:5e:53:6b:53:7f:ad:f0:7c:4d:b5:c3:7e: 29:36:a9:cc:e4:a1:4a:9f:be:a2:7a:5a:58:02:3b: 37:a3:cd:1e:41:1a:f4:73:61:35:5c:d8:3b:81:fc: 3f:d1:81:22:f2:b5:e1:e8:ed:3a:b6:5d:10:0e:06: e9:fb:d2:ad:24:b7:bc:d2:f5:38:96:98:05:2a:67: af:ba:99:88:5d:8f:8b:53:c4:86:81:f6:ef:b3:ca: 68:94:d8:b0:64:8e:bb:d3:0e:a5:77:ec:9c:72:ed: 86:cf:c3:25:cd:c5:72:d3:b1:f9:2d:07:e4:38:27: a4:a5:74:84:38:ab:48:35:7a:8f:49:b0:6d:b0:c5: 1e:02:9e:bf:cf:e7:28:67:fa:4e:58:70:6e:6f:39: 7f:cf:49:be:23:1b:bc:76:fc:e4:07:6f:b9:d5:af: d0:a8:74:b7:93:d4:2d:bd:f2:3e:35:ed:6a:ac:b8: fe:9b:59:32:5c:af:dc:af:c9:40:14:a0:2c:87:1a: c0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:09:E1:E9:A4:C6:FA:1E:A3:6E:B5:F8:70:3D:02:19:E9:E5:5A:DD X509v3 Authority Key Identifier: keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:dc:db:b7:8f:19:ac:93:e8:15:a6:4f:52:19:f1:12:4c:b5: 17:fe:dc:cb:fb:a6:50:89:96:23:dd:7f:b1:a8:4c:ab:41:4d: 11:b7:f5:49:19:3f:11:89:e1:e5:e8:46:e9:9c:f7:e8:57:b1: 63:fc:ef:f7:66:69:b4:2c:1f:8a:e6:55:da:9c:d3:89:f7:b9: 6e:0b:f1:70:a4:95:a6:f7:7b:5a:63:98:3b:28:c2:22:fa:d9: e6:60:59:fe:06:38:7e:b2:65:b8:38:c2:82:ed:a4:6e:9d:60: 59:5e:2a:45:ae:ab:64:d8:15:2d:d1:20:ad:3e:b6:0b:31:c9: e9:a7:44:da:d1:df:c7:9b:e2:c2:6b:1c:5a:97:13:85:48:73: 4d:87:a1:71:38:39:92:1d:eb:3a:2b:e9:12:e7:bd:f7:96:e2: 8e:5d:c6:6d:94:b9:da:bb:7c:78:57:5b:60:46:ec:d0:17:48: c7:b7:78:fa:ce:12:59:5d:f3:d1:64:eb:fe:b8:bf:19:da:88: 08:95:f7:11:bc:47:0a:3f:5d:c7:e5:d9:d6:b6:91:07:be:cc: 9e:0e:3c:79:35:3f:63:3f:b4:5f:62:55:51:d4:16:2b:bc:04: a6:ae:9f:b3:d4:8b:fe:6b:a9:db:5d:19:7b:28:61:21:36:23: 55:17:0f:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5FBphkPWnWWFwNKYVCZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOTRkMWEyOWNjZTI2MTUzYjkzNGZiNDdjMmVlMjE2NzRi Yjg1Y2IwHhcNMjUxMjI2MDkwMTMzWhcNMjUxMjI3MDkwMTMzWjAzMTEwLwYDVQQD EygwYTA5ZTFlOWE0YzZmYTFlYTM2ZWI1Zjg3MDNkMDIxOWU5ZTU1YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IB94lePfEgDU3adynFOe93i1b+X WMkXre6nWReiEghkTBnkiwAYHeYb2sNZlV3Qj1JzV/5LOCjm1i4n6fBeU2tTf63w fE21w34pNqnM5KFKn76ielpYAjs3o80eQRr0c2E1XNg7gfw/0YEi8rXh6O06tl0Q Dgbp+9KtJLe80vU4lpgFKmevupmIXY+LU8SGgfbvs8polNiwZI670w6ld+yccu2G z8MlzcVy07H5LQfkOCekpXSEOKtINXqPSbBtsMUeAp6/z+coZ/pOWHBubzl/z0m+ Ixu8dvzkB2+51a/QqHS3k9QtvfI+Ne1qrLj+m1kyXK/cr8lAFKAshxrAgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoJ4emkxvoeo261+HA9Ahnp5VrdMB8GA1UdIwQY MBaAFB+U0aKcziYVO5NPtHwu4hZ0u4XLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUt NTU0Y2FiYjlhZDA1LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUtNTU0Y2FiYjlhZDA1 LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatzbt48Z rJPoFaZPUhnxEky1F/7cy/umUImWI91/sahMq0FNEbf1SRk/EYnh5ehG6Zz36Fex Y/zv92ZptCwfiuZV2pzTife5bgvxcKSVpvd7WmOYOyjCIvrZ5mBZ/gY4frJluDjC gu2kbp1gWV4qRa6rZNgVLdEgrT62CzHJ6adE2tHfx5viwmscWpcThUhzTYehcTg5 kh3rOivpEue995bijl3GbZS52rt8eFdbYEbs0BdIx7d4+s4SWV3z0WTr/ri/GdqI CJX3EbxHCj9dx+XZ1raRB77Mng48eTU/Yz+0X2JVUdQWK7wEpq6fs9SL/mup210Z eyhhITYjVRcPKA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:36 2025 by rpki-client