This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json) Hash identifier: /ZMoB6R9mkd+lhCwtU2tAymMSyFkPQclZ52gprf6BT4= Subject key identifier: DB:0A:75:69:61:B8:2C:C7:AF:E5:00:30:95:2F:26:BA:06:5A:2A:B5 Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc Certificate serial: 019AACB98A21FA18482B0EDA59B3C92D052D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft Manifest number: 173D Signing time: Sat 22 Nov 2025 18:00:31 +0000 Manifest this update: Sat 22 Nov 2025 18:00:31 +0000 Manifest next update: Sun 23 Nov 2025 18:00:31 +0000 Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: 0KOCxOO1WYfRlRHw97Fbb01EBXtO8g7+umnNjq+5GW4=) 2: I-qnYe3pCJJC6GLKlhRXNSOnj7Q.roa (hash: MvvvcuaQB3Ptunhg27MnEt55o6So5bq1V197PASnWPY=) 3: mMhmcSnBtPYU48zDanAOHPsakbk.roa (hash: Q7SwxYVQV3nbpcnCiOpdRYrjGyoIJC6VBvUMsqX3OXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:8a:21:fa:18:48:2b:0e:da:59:b3:c9:2d:05:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc Validity Not Before: Nov 22 18:00:31 2025 GMT Not After : Nov 23 18:00:31 2025 GMT Subject: CN=db0a756961b82cc7afe50030952f26ba065a2ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:26:9f:8c:a3:03:ee:9e:f0:e9:c3:86:06:e2: 58:97:69:7a:da:29:b7:81:8b:19:bb:e3:31:fb:24: 20:bb:4f:84:19:41:b4:4d:ee:4e:fa:79:33:f8:2a: a0:f7:2e:93:9f:92:5d:fd:22:e0:4b:3c:e7:c6:b8: f5:89:95:56:01:bc:41:6c:3d:83:e2:1c:42:14:49: 81:5f:a5:44:16:6a:99:2d:90:f7:31:e2:f3:d1:24: 3b:c2:d3:65:d4:4e:c4:24:a1:2a:90:11:76:4d:8d: 7e:ea:53:e8:f7:ac:37:43:dc:cc:db:36:40:66:0a: 09:8c:5a:f7:dc:8e:70:87:31:34:70:57:3f:cf:c2: f7:27:96:a3:27:ce:de:83:1d:da:65:09:12:a0:ff: a7:7e:08:78:5c:33:f1:96:97:68:28:60:16:4a:ad: dd:68:ab:e6:00:f0:62:f3:dd:64:30:b8:49:d8:33: a5:32:87:03:21:9d:10:fd:80:a4:1f:e0:8e:fa:6e: d1:db:c5:4f:c6:2a:2c:9d:02:86:4a:8a:86:8a:c1: 85:cd:04:41:75:da:d9:56:28:57:9b:32:b8:7b:46: 11:ed:aa:dd:50:c0:2f:aa:4f:86:d8:cd:ea:50:3a: a1:d8:a2:20:78:a3:0a:93:c0:e8:b2:8b:d0:a8:51: 91:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0A:75:69:61:B8:2C:C7:AF:E5:00:30:95:2F:26:BA:06:5A:2A:B5 X509v3 Authority Key Identifier: keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:22:49:ed:03:78:7a:53:c1:82:f8:b3:76:6b:e2:8e:fe:7d: ed:5a:50:65:d5:88:04:d5:11:b3:b3:b9:8c:84:ef:8f:0e:fd: f6:a1:d7:c5:35:c4:75:24:5b:ac:27:b4:4e:84:94:28:44:26: ab:9c:38:98:50:85:22:ca:10:95:46:ae:37:32:81:a8:a7:bd: b0:aa:27:0f:8c:b8:d6:ac:16:40:52:0a:85:c1:c6:cd:a3:aa: ab:c4:47:c4:0d:65:f0:fb:83:43:b5:9d:32:64:b7:76:60:6a: 08:95:fe:c1:98:e6:ea:4f:e6:91:ac:73:f6:31:3e:3d:83:82: e8:76:f0:df:e7:f9:5b:d2:b4:5c:77:66:b9:82:77:d0:97:0d: 27:59:6f:53:ae:3f:05:8a:36:dd:b4:7a:9d:ce:64:be:3b:86: 2b:7f:32:bc:dc:c4:9f:9c:19:aa:c7:59:64:0d:71:bf:3d:ff: ef:27:6a:e9:a0:bb:d8:01:c2:18:82:8a:3d:03:4b:b6:06:25: b2:2d:67:12:26:8b:88:98:89:30:3c:af:1f:d1:70:56:09:67: 0e:97:20:da:de:3d:3d:b5:a0:4e:7c:79:2a:2b:29:ec:e7:8a: 47:de:1b:fa:15:82:33:41:5a:65:d5:f9:23:0a:be:a7:8c:5d: 18:b7:2e:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsuYoh+hhIKw7aWbPJLQUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYzU5NTU5NDBiYmQ3NTU1ZGYwYTJlNDE3Mzc5ZmM0NDdl ZjBjZGMwHhcNMjUxMTIyMTgwMDMxWhcNMjUxMTIzMTgwMDMxWjAzMTEwLwYDVQQD EyhkYjBhNzU2OTYxYjgyY2M3YWZlNTAwMzA5NTJmMjZiYTA2NWEyYWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSafjKMD7p7w6cOGBuJYl2l62im3 gYsZu+Mx+yQgu0+EGUG0Te5O+nkz+Cqg9y6Tn5Jd/SLgSzznxrj1iZVWAbxBbD2D 4hxCFEmBX6VEFmqZLZD3MeLz0SQ7wtNl1E7EJKEqkBF2TY1+6lPo96w3Q9zM2zZA ZgoJjFr33I5whzE0cFc/z8L3J5ajJ87egx3aZQkSoP+nfgh4XDPxlpdoKGAWSq3d aKvmAPBi891kMLhJ2DOlMocDIZ0Q/YCkH+CO+m7R28VPxiosnQKGSoqGisGFzQRB ddrZVihXmzK4e0YR7ardUMAvqk+G2M3qUDqh2KIgeKMKk8DosovQqFGRIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsKdWlhuCzHr+UAMJUvJroGWiq1MB8GA1UdIwQY MBaAFB/FlVlAu9dVXfCi5Bc3n8RH7wzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDhXVldVQzcxMVZkOEtMa0Z6ZWZ4RWZ2RE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYzg4OTYtN2JlMi00MmNkLTkxMWYt MmZkYjdhYjY1ZDUyLzEvSDhXVldVQzcxMVZkOEtMa0Z6ZWZ4RWZ2RE53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xYzg4OTYtN2JlMi00MmNkLTkxMWYtMmZkYjdhYjY1ZDUy LzEvSDhXVldVQzcxMVZkOEtMa0Z6ZWZ4RWZ2RE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvyJJ7QN4 elPBgvizdmvijv597VpQZdWIBNURs7O5jITvjw799qHXxTXEdSRbrCe0ToSUKEQm q5w4mFCFIsoQlUauNzKBqKe9sKonD4y41qwWQFIKhcHGzaOqq8RHxA1l8PuDQ7Wd MmS3dmBqCJX+wZjm6k/mkaxz9jE+PYOC6Hbw3+f5W9K0XHdmuYJ30JcNJ1lvU64/ BYo23bR6nc5kvjuGK38yvNzEn5wZqsdZZA1xvz3/7ydq6aC72AHCGIKKPQNLtgYl si1nEiaLiJiJMDyvH9FwVglnDpcg2t49PbWgTnx5Kisp7OeKR94b+hWCM0FaZdX5 Iwq+p4xdGLcuHw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:27 2025 by rpki-client