This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft File: 1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json) Hash identifier: iRVs+6qHRdmae39bE8JEaJ1vzu0TpsNarJ5jV/fJwqU= Subject key identifier: EB:9D:6F:D6:E4:DF:22:C0:AD:82:3C:A7:41:83:FF:7D:B1:AE:F8:35 Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9 Certificate issuer: /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9 Certificate serial: 019B04EA9541602B7529EB752526A5E8CF06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft Manifest number: 0380 Signing time: Tue 09 Dec 2025 21:00:41 +0000 Manifest this update: Tue 09 Dec 2025 21:00:41 +0000 Manifest next update: Wed 10 Dec 2025 21:00:41 +0000 Files and hashes: 1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: 9IrYFSPRM77NtdmX8vXqveoH5nGRoFCSyH8SxxZ8JDE=) 2: oL3YqmLZNQTklrYCVBkqoxnVPVE.roa (hash: vNB411x6DGxlKgUop3xuDcnHI37Ap9OjrZ9OIS8r31M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:ea:95:41:60:2b:75:29:eb:75:25:26:a5:e8:cf:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9 Validity Not Before: Dec 9 21:00:41 2025 GMT Not After : Dec 10 21:00:41 2025 GMT Subject: CN=eb9d6fd6e4df22c0ad823ca74183ff7db1aef835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:ff:da:bd:43:a0:7f:6e:bf:24:b9:e6:18: 61:d9:c7:d2:ab:37:dc:d8:49:4c:71:4a:f6:5a:3b: 05:ec:b6:6d:5c:cd:93:ed:da:70:2d:55:02:87:1f: 2e:f0:c6:40:73:84:58:4b:d3:4c:b2:b0:f7:32:a0: 7f:04:a6:0d:07:e5:af:ae:d1:aa:e4:3f:a9:a0:34: c5:d5:07:be:67:0f:03:79:07:da:35:25:98:65:b6: 28:27:1c:30:67:62:3e:de:bc:3b:66:a8:c1:4b:01: 1e:74:29:84:13:70:f0:35:c2:66:0b:03:f8:ae:09: 22:d5:d7:8f:19:9a:26:0b:88:2f:97:a0:3d:9c:c0: 10:29:4a:d9:7c:c3:d8:f5:89:b8:aa:eb:c3:c4:9f: 2d:cd:6c:cd:52:98:9b:f4:10:9c:fd:db:d7:a9:f3: 8d:02:e7:4a:1a:22:36:c3:d5:72:e6:8f:93:4b:5f: 77:4d:16:32:78:48:56:58:1e:ed:cd:d2:37:10:02: 7e:4f:8f:98:ce:08:c6:0b:c4:bb:8c:60:4a:0b:db: 06:3d:5e:10:be:5c:1b:c7:0e:37:da:18:a6:52:c5: 86:26:3c:ba:56:13:f4:a9:5c:33:04:92:77:f5:7f: 44:27:05:16:8e:33:62:8e:6e:d0:8d:ce:34:ad:72: c8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9D:6F:D6:E4:DF:22:C0:AD:82:3C:A7:41:83:FF:7D:B1:AE:F8:35 X509v3 Authority Key Identifier: keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:90:d2:74:28:3a:01:cb:00:56:77:58:9a:df:bf:01:75:c8: bf:87:d3:fa:0d:22:a5:27:0c:af:73:b6:b8:46:7b:bd:4d:be: 52:2c:6c:80:75:9d:ea:20:e7:94:c7:b5:d8:90:4b:92:e1:d6: de:1e:3c:63:a9:b9:62:08:31:a4:9e:1e:ab:cf:a9:1b:7b:16: d1:fe:c3:9c:11:9b:a6:1f:39:26:dc:e4:93:1a:63:92:2d:d6: fc:f0:0d:96:e1:a3:c5:d4:79:da:39:5d:db:af:76:9c:87:4d: be:23:96:99:61:8d:88:09:df:e3:4b:c9:a6:90:03:e4:9d:f8: b9:33:ac:15:2b:6c:9e:ba:97:7c:1b:df:3b:6c:7d:a5:71:be: 2d:25:39:54:d2:0c:fe:da:ae:97:95:51:c5:41:9a:ee:38:3c: f4:c3:8e:d4:7a:5b:52:eb:88:81:e5:50:6c:e2:a2:12:4f:fc: 4e:c4:dc:e5:f8:41:ae:d0:b4:64:93:8a:79:a6:f0:62:47:df: f6:60:82:99:59:0a:c0:41:c5:42:2b:6f:b7:36:44:4e:8f:dd: 73:79:42:35:27:ac:77:1d:a1:a6:1d:a3:40:df:2e:cb:32:dc: 3e:92:57:e8:5e:28:74:be:67:0d:9c:c2:99:5c:17:d3:da:51: a0:be:69:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsE6pVBYCt1Ket1JSal6M8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0N2Q4YWFhMTBlZGNmNWQwODE0MDM5MTUzOTk3YmZiZjRk MzViYTkwHhcNMjUxMjA5MjEwMDQxWhcNMjUxMjEwMjEwMDQxWjAzMTEwLwYDVQQD EyhlYjlkNmZkNmU0ZGYyMmMwYWQ4MjNjYTc0MTgzZmY3ZGIxYWVmODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD7/2r1DoH9uvyS55hhh2cfSqzfc 2ElMcUr2WjsF7LZtXM2T7dpwLVUChx8u8MZAc4RYS9NMsrD3MqB/BKYNB+WvrtGq 5D+poDTF1Qe+Zw8DeQfaNSWYZbYoJxwwZ2I+3rw7ZqjBSwEedCmEE3DwNcJmCwP4 rgki1dePGZomC4gvl6A9nMAQKUrZfMPY9Ym4quvDxJ8tzWzNUpib9BCc/dvXqfON AudKGiI2w9Vy5o+TS193TRYyeEhWWB7tzdI3EAJ+T4+YzgjGC8S7jGBKC9sGPV4Q vlwbxw432himUsWGJjy6VhP0qVwzBJJ39X9EJwUWjjNijm7Qjc40rXLIDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOudb9bk3yLArYI8p0GD/32xrvg1MB8GA1UdIwQY MBaAFNR9iqoQ7c9dCBQDkVOZe/v001upMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUgyS3FoRHR6MTBJRkFPUlU1bDctX1RUVzZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZGNjNTAtMDI1Yy00YzIwLTg2OTkt YmNlZDU3OWMwYjdiLzEvMUgyS3FoRHR6MTBJRkFPUlU1bDctX1RUVzZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy82ZGNjNTAtMDI1Yy00YzIwLTg2OTktYmNlZDU3OWMwYjdi LzEvMUgyS3FoRHR6MTBJRkFPUlU1bDctX1RUVzZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZDSdCg6 AcsAVndYmt+/AXXIv4fT+g0ipScMr3O2uEZ7vU2+UixsgHWd6iDnlMe12JBLkuHW 3h48Y6m5YggxpJ4eq8+pG3sW0f7DnBGbph85Jtzkkxpjki3W/PANluGjxdR52jld 2692nIdNviOWmWGNiAnf40vJppAD5J34uTOsFStsnrqXfBvfO2x9pXG+LSU5VNIM /tqul5VRxUGa7jg89MOO1HpbUuuIgeVQbOKiEk/8TsTc5fhBrtC0ZJOKeabwYkff 9mCCmVkKwEHFQitvtzZETo/dc3lCNSesdx2hph2jQN8uyzLcPpJX6F4odL5nDZzC mVwX09pRoL5pgw== -----END CERTIFICATE-----Generated at Wed Dec 10 01:05:28 2025 by rpki-client