This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: ZHxFsG7S2H70wMzM4BqurpeUJ4Fxxmei6e7i1FlA24U= Subject key identifier: 71:6A:64:0F:EF:7C:D1:49:7C:75:B3:A9:06:A4:FC:71:31:0E:98:23 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019B0E5C0608E43F0D050ED93DD76484F8F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1799 Signing time: Thu 11 Dec 2025 17:01:10 +0000 Manifest this update: Thu 11 Dec 2025 17:01:10 +0000 Manifest next update: Fri 12 Dec 2025 17:01:10 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: XGsqdJxuUe5KDF3kR2s2GSteeA4xgGM35Qlp0YrY0/k=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:06:08:e4:3f:0d:05:0e:d9:3d:d7:64:84:f8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Dec 11 17:01:10 2025 GMT Not After : Dec 12 17:01:10 2025 GMT Subject: CN=716a640fef7cd1497c75b3a906a4fc71310e9823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:a5:0e:57:5f:d4:6c:cc:17:c2:d9:c5:d1: ad:5d:cb:50:7e:b6:a4:91:72:df:2a:97:ad:5f:37: c3:04:c0:fd:56:65:f1:3c:5e:1b:f6:06:7e:5f:a1: b7:88:f9:d5:f1:73:02:e5:61:a1:0b:93:8f:ea:5f: 04:c7:ff:f6:e3:83:64:4e:73:07:a1:fd:ad:1e:19: e3:31:9c:1d:2e:7a:45:bf:3f:bf:11:60:ac:9d:d1: fa:30:c7:27:3c:b8:b6:bd:c0:a6:17:72:46:b3:9e: 05:f8:62:95:b3:fd:ac:e6:d9:df:54:50:16:c3:c2: be:78:3a:ce:f3:40:c6:1e:49:c1:b9:5d:32:f9:b1: 64:2f:d6:8c:b2:d1:ed:a7:41:42:43:19:29:3b:b4: 9f:09:8d:ba:08:75:ba:23:9c:e5:92:86:e0:18:81: 1c:0e:8c:3f:d1:f6:b0:c8:51:2a:38:b9:bf:fc:19: b3:bd:0b:dd:df:11:1d:c3:17:c6:22:7e:d6:21:e0: 24:c0:bb:2a:68:7d:5c:e9:b7:71:c0:a1:27:b5:d1: 58:4f:2d:9e:5f:9e:ee:92:ee:b1:a5:e0:34:f4:08: a7:39:b9:95:0a:0d:d4:f9:b3:ed:d4:10:7a:53:28: 64:90:36:9e:f4:0d:cd:5e:38:3d:eb:90:78:20:05: 85:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6A:64:0F:EF:7C:D1:49:7C:75:B3:A9:06:A4:FC:71:31:0E:98:23 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d8:3f:17:be:1e:05:c3:0a:3f:b1:ef:7a:3e:84:16:dc:2f: 4f:d9:de:59:93:05:83:a2:53:82:fb:00:6f:5f:87:14:63:73: 92:99:67:7d:6e:27:ee:3b:ea:67:57:17:2f:6b:bd:48:72:ef: 16:d3:10:be:4a:fa:1f:96:b7:b6:bb:97:02:d8:90:b7:bc:8d: 11:32:62:c2:c3:09:26:c6:f4:d4:2c:e5:27:52:e4:af:d9:ab: 46:52:e4:21:81:b1:f9:e6:0a:2b:ed:00:1f:3f:4b:04:ee:44: 39:4f:c2:f8:9f:8f:e2:67:71:70:2e:52:8c:71:2c:08:0f:54: df:36:3c:bd:31:28:5f:8f:89:f3:ef:9e:d5:dd:93:e7:35:be: 2d:08:3a:9e:01:18:8c:30:c5:a4:8d:9a:35:38:6a:90:dc:be: 91:3b:39:2a:ef:43:ca:88:9a:a3:d0:51:08:28:0b:46:53:5b: 7e:67:9c:0d:31:c6:f0:98:d9:4e:b1:2e:8c:3a:96:3b:d4:a0: 9c:b3:b4:f2:b4:94:a2:fa:ac:8a:f8:62:96:0c:3d:75:f9:b6: b3:bf:12:75:b6:a0:7e:ce:89:55:24:e9:2a:72:6d:48:37:c8: 10:55:2b:3a:11:18:e8:75:1d:0f:7d:a8:9a:ec:33:1c:68:93: df:e6:9c:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXAYI5D8NBQ7ZPddkhPj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUxMjExMTcwMTEwWhcNMjUxMjEyMTcwMTEwWjAzMTEwLwYDVQQD Eyg3MTZhNjQwZmVmN2NkMTQ5N2M3NWIzYTkwNmE0ZmM3MTMxMGU5ODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4mlDldf1GzMF8LZxdGtXctQfrak kXLfKpetXzfDBMD9VmXxPF4b9gZ+X6G3iPnV8XMC5WGhC5OP6l8Ex//244NkTnMH of2tHhnjMZwdLnpFvz+/EWCsndH6MMcnPLi2vcCmF3JGs54F+GKVs/2s5tnfVFAW w8K+eDrO80DGHknBuV0y+bFkL9aMstHtp0FCQxkpO7SfCY26CHW6I5zlkobgGIEc Dow/0fawyFEqOLm//BmzvQvd3xEdwxfGIn7WIeAkwLsqaH1c6bdxwKEntdFYTy2e X57uku6xpeA09AinObmVCg3U+bPt1BB6UyhkkDae9A3NXjg965B4IAWFLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFqZA/vfNFJfHWzqQak/HExDpgjMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9g/F74e BcMKP7Hvej6EFtwvT9neWZMFg6JTgvsAb1+HFGNzkplnfW4n7jvqZ1cXL2u9SHLv FtMQvkr6H5a3truXAtiQt7yNETJiwsMJJsb01CzlJ1Lkr9mrRlLkIYGx+eYKK+0A Hz9LBO5EOU/C+J+P4mdxcC5SjHEsCA9U3zY8vTEoX4+J8++e1d2T5zW+LQg6ngEY jDDFpI2aNThqkNy+kTs5Ku9Dyoiao9BRCCgLRlNbfmecDTHG8JjZTrEujDqWO9Sg nLO08rSUovqsivhilgw9dfm2s78Sdbagfs6JVSTpKnJtSDfIEFUrOhEY6HUdD32o muwzHGiT3+acCw== -----END CERTIFICATE-----Generated at Thu Dec 11 20:08:19 2025 by rpki-client