This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: q+wrLubWhAj5hkpGVTnPrN+vV6TMZvOITAITd6HcJ4U= Subject key identifier: FD:38:05:86:FD:D5:AE:6E:41:B4:02:A8:EA:73:84:57:2B:C2:AE:DB Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B1E061E2A7FF8A13F5D78445DD159B38C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 1796 Signing time: Sun 14 Dec 2025 18:01:15 +0000 Manifest this update: Sun 14 Dec 2025 18:01:15 +0000 Manifest next update: Mon 15 Dec 2025 18:01:15 +0000 Files and hashes: 1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=) 2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=) 3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=) 4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=) 5: 9-BujRyAiG67GPBXPyZf0-ILLF4.roa (hash: KkFtXt5WRV9VBYy3IBvnda5CkZe910L5RSJzKX/5FFY=) 6: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=) 7: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=) 8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=) 9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=) 10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=) 11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: XgtIN9/cGG8UKBOgkZ3Tn8Bg0Wm23eP+v9Ch/4+qTNc=) 12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=) 13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=) 14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=) 15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=) 16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=) 17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=) 18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=) 19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=) 20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=) 21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=) 22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=) 23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=) 24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=) 25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=) 26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=) 27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=) 28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=) 29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=) 30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=) 31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=) 32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=) 33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=) 34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:06:1e:2a:7f:f8:a1:3f:5d:78:44:5d:d1:59:b3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Dec 14 18:01:15 2025 GMT Not After : Dec 15 18:01:15 2025 GMT Subject: CN=fd380586fdd5ae6e41b402a8ea7384572bc2aedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:15:9d:c6:73:82:01:60:c1:28:ac:d9:13:b3: c5:79:ff:39:fe:d5:ab:24:69:96:5f:08:ad:2e:6f: e5:49:8c:9a:0e:50:ac:68:2d:f3:9e:51:e9:40:a1: 87:55:2f:91:ad:a0:12:56:79:ee:f2:87:71:3c:7d: 0c:02:5f:d3:58:af:0c:33:42:6b:13:a1:67:f4:4b: f2:78:cc:b5:ce:2f:02:f1:dc:c6:e7:3d:25:a6:cf: b7:44:5e:ce:23:74:99:89:37:4f:c4:1b:1f:22:eb: f7:f2:3d:1e:15:b7:e1:a4:43:d9:6f:77:81:e0:97: 86:0b:21:99:75:37:cc:53:b2:5e:38:b1:54:2d:3d: 24:c6:94:67:dd:d7:41:19:a6:15:04:fd:9c:b7:e3: 3e:d4:f5:13:9c:26:8c:66:35:8d:8c:8e:51:fa:cc: e5:f7:7f:b6:b8:3e:e0:11:6a:42:9d:d8:c4:c2:9a: 4d:dd:17:a6:1d:e5:5a:82:9f:56:b0:cd:f8:cd:b8: 5a:d2:a8:07:7c:f7:2e:e5:1d:cf:1c:d0:a6:06:96: 41:4c:c6:02:f2:1b:9b:7a:31:e8:80:c7:03:d9:9a: 72:0d:17:b4:2f:8a:0e:3f:4f:4b:0f:ce:44:dc:94: ea:03:26:b0:a0:dd:ba:17:34:d8:dc:6e:68:58:af: cd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:38:05:86:FD:D5:AE:6E:41:B4:02:A8:EA:73:84:57:2B:C2:AE:DB X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:4c:9f:6d:b1:db:55:39:9f:e5:85:f4:90:76:44:fa:15:da: c2:c8:65:12:fc:fe:a5:2f:12:70:ec:00:d2:c5:d4:e2:fe:10: 9e:a6:57:21:e9:52:3f:ff:76:3d:91:6e:67:30:16:5b:d3:ad: 11:00:62:98:af:44:0b:5c:03:ce:21:4e:f6:9b:85:37:ef:e4: 6e:12:05:49:3a:a8:8b:38:bf:34:a8:c5:1e:df:2d:be:ab:72: d3:dc:cb:9f:d9:4c:e4:81:1c:9d:c4:f7:f8:07:b2:b8:57:05: 73:88:ac:e9:ed:2b:3d:2e:d5:4d:c7:f7:c6:17:12:86:10:69: 5c:33:79:f5:7a:a7:6a:39:13:26:c8:31:bd:27:8f:6e:3f:ec: 50:67:75:ae:c7:60:64:5b:6c:50:99:3d:cb:f9:46:29:25:d8: 6a:8f:54:ff:63:23:dd:a9:c5:96:a1:49:4d:91:9c:d7:cc:8a: c2:5a:b1:a2:e2:5a:59:1e:c7:d9:db:14:60:4d:55:76:59:bd: 60:79:e8:4d:3e:6b:34:24:7a:7e:a8:b4:dc:67:2a:3c:dc:c3: d4:5d:85:a3:bb:af:83:d8:5c:63:61:ff:9b:de:f5:20:8d:b6: f0:5f:75:a3:1c:7a:d1:bf:cb:0c:d0:36:a3:34:5d:4f:67:a7: 7e:b7:00:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBh4qf/ihP114RF3RWbOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjUxMjE0MTgwMTE1WhcNMjUxMjE1MTgwMTE1WjAzMTEwLwYDVQQD EyhmZDM4MDU4NmZkZDVhZTZlNDFiNDAyYThlYTczODQ1NzJiYzJhZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BWdxnOCAWDBKKzZE7PFef85/tWr JGmWXwitLm/lSYyaDlCsaC3znlHpQKGHVS+RraASVnnu8odxPH0MAl/TWK8MM0Jr E6Fn9EvyeMy1zi8C8dzG5z0lps+3RF7OI3SZiTdPxBsfIuv38j0eFbfhpEPZb3eB 4JeGCyGZdTfMU7JeOLFULT0kxpRn3ddBGaYVBP2ct+M+1PUTnCaMZjWNjI5R+szl 93+2uD7gEWpCndjEwppN3RemHeVagp9WsM34zbha0qgHfPcu5R3PHNCmBpZBTMYC 8hubejHogMcD2ZpyDRe0L4oOP09LD85E3JTqAyawoN26FzTY3G5oWK/NTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP04BYb91a5uQbQCqOpzhFcrwq7bMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUyfbbHb VTmf5YX0kHZE+hXawshlEvz+pS8ScOwA0sXU4v4QnqZXIelSP/92PZFuZzAWW9Ot EQBimK9EC1wDziFO9puFN+/kbhIFSTqoizi/NKjFHt8tvqty09zLn9lM5IEcncT3 +AeyuFcFc4is6e0rPS7VTcf3xhcShhBpXDN59XqnajkTJsgxvSePbj/sUGd1rsdg ZFtsUJk9y/lGKSXYao9U/2Mj3anFlqFJTZGc18yKwlqxouJaWR7H2dsUYE1Vdlm9 YHnoTT5rNCR6fqi03GcqPNzD1F2Fo7uvg9hcY2H/m971II228F91oxx60b/LDNA2 ozRdT2enfrcAHw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:08 2025 by rpki-client