This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft File: H0n8ab9uujufoFF9AGKSchDk6Mo.mft (raw, json) Hash identifier: i4r705l3Klja3ZKWUFzndxR+vjNHX7RfWfoUmUw5DIk= Subject key identifier: 63:6B:80:30:91:A0:47:62:54:1B:3F:53:EF:BD:38:B2:28:52:E8:2D Authority key identifier: 1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA Certificate issuer: /CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca Certificate serial: 019B19BC34FBD6D0135606826F70994E87A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft Manifest number: 0641 Signing time: Sat 13 Dec 2025 22:02:03 +0000 Manifest this update: Sat 13 Dec 2025 22:02:03 +0000 Manifest next update: Sun 14 Dec 2025 22:02:03 +0000 Files and hashes: 1: H0n8ab9uujufoFF9AGKSchDk6Mo.crl (hash: ItU+OuQb+/YKf3zNWJwfzCYK0aUge4upfWw7M3UAnIQ=) 2: Uer55Veb_ut1JsDk-7JNWBypePA.roa (hash: mFvrHyTdVgwfq1zEyZ5X8BtK4+uJoolM6yDZ19bRhfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:34:fb:d6:d0:13:56:06:82:6f:70:99:4e:87:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca Validity Not Before: Dec 13 22:02:03 2025 GMT Not After : Dec 14 22:02:03 2025 GMT Subject: CN=636b803091a04762541b3f53efbd38b22852e82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:a4:7f:ab:0b:3a:d1:6c:b2:65:9d:7e:9c: e8:fc:ae:c5:6c:ea:6c:81:0b:19:55:a0:7b:40:75: b8:db:c2:ad:ee:f1:f0:42:8a:b4:5c:fe:23:ca:1b: e4:96:d9:a6:10:61:ea:dd:ae:24:99:09:a0:f5:74: eb:a6:a3:da:35:04:31:eb:23:7d:fe:46:89:3a:b0: 83:06:bb:4f:cd:86:eb:01:ed:2f:2e:42:09:c8:15: 72:89:a6:d4:3c:b2:05:bf:5f:78:59:d6:62:a0:b2: bf:85:70:1e:9f:33:df:50:b1:f2:a1:86:1a:09:10: 7c:60:a3:2c:35:f2:8d:58:95:0a:f0:32:09:0d:b8: 89:c1:ac:bb:b8:fc:fe:cc:ab:b7:11:c9:5e:15:63: 8d:2d:3c:b6:e0:a0:9f:75:0f:39:7e:cd:01:3e:f3: 87:b0:2e:1b:58:6d:cb:62:ad:95:5f:ab:29:c3:74: 3c:63:9a:48:5f:68:12:72:fc:ba:5f:b4:ef:11:5c: fc:1f:8a:ff:b5:b1:cb:c0:0a:d7:07:d7:45:19:1c: b1:f1:97:2f:98:38:84:bf:a1:27:10:21:cf:4c:85: da:ea:4c:35:9a:91:c8:7e:bb:55:1f:4a:2c:1b:de: 39:cb:78:48:1f:61:1c:fc:e6:1a:bc:44:f4:2d:ef: 5f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6B:80:30:91:A0:47:62:54:1B:3F:53:EF:BD:38:B2:28:52:E8:2D X509v3 Authority Key Identifier: keyid:1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:35:76:b4:31:fc:d3:31:57:53:f7:03:64:e9:fd:f2:d4:f0: 95:f8:75:e4:6e:f9:93:4c:2d:4d:8e:89:09:5c:0c:d3:df:a3: af:f8:b0:7b:6e:30:c0:83:63:0c:69:a1:ed:20:ff:c5:91:da: b7:16:5a:c1:cf:4f:62:98:9a:a5:a0:64:94:37:1a:82:06:ba: 90:05:f9:be:cb:47:04:d6:5e:9f:3d:bd:f4:de:01:18:f1:30: c7:0a:16:61:2c:26:17:dd:8b:2e:c8:d4:6e:60:db:d3:73:f5: 15:74:5c:95:f1:87:bf:90:f6:53:71:3c:b2:43:d0:c8:c4:3c: cb:51:f8:5e:22:cf:30:0b:40:bf:39:ba:0c:64:42:98:a3:f6: af:59:bc:be:83:0a:b2:dd:73:9c:40:c0:78:53:b6:cf:8d:64: 9e:a3:15:f9:52:60:4f:cd:c4:7d:0c:21:99:0e:f7:8a:30:eb: a7:04:1f:14:bd:1a:1c:93:fd:03:35:d7:0f:de:66:7d:1b:4c: eb:56:69:3d:a0:4d:cd:d8:6c:45:bd:9c:37:f6:ac:ba:72:35: a4:ce:e5:cc:0f:c8:d1:71:b2:5f:bf:b4:c7:12:d8:e2:29:3f: b3:6e:ac:10:8d:f6:7d:c1:8f:38:17:ce:49:f0:ea:2b:15:b8: b8:5d:85:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvDT71tATVgaCb3CZToenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDlmYzY5YmY2ZWJhM2I5ZmEwNTE3ZDAwNjI5MjcyMTBl NGU4Y2EwHhcNMjUxMjEzMjIwMjAzWhcNMjUxMjE0MjIwMjAzWjAzMTEwLwYDVQQD Eyg2MzZiODAzMDkxYTA0NzYyNTQxYjNmNTNlZmJkMzhiMjI4NTJlODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrCkf6sLOtFssmWdfpzo/K7FbOps gQsZVaB7QHW428Kt7vHwQoq0XP4jyhvkltmmEGHq3a4kmQmg9XTrpqPaNQQx6yN9 /kaJOrCDBrtPzYbrAe0vLkIJyBVyiabUPLIFv194WdZioLK/hXAenzPfULHyoYYa CRB8YKMsNfKNWJUK8DIJDbiJway7uPz+zKu3EcleFWONLTy24KCfdQ85fs0BPvOH sC4bWG3LYq2VX6spw3Q8Y5pIX2gScvy6X7TvEVz8H4r/tbHLwArXB9dFGRyx8Zcv mDiEv6EnECHPTIXa6kw1mpHIfrtVH0osG945y3hIH2Ec/OYavET0Le9fNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNrgDCRoEdiVBs/U++9OLIoUugtMB8GA1UdIwQY MBaAFB9J/Gm/bro7n6BRfQBiknIQ5OjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBuOGFiOXV1anVmb0ZGOUFHS1NjaERrNk1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83YjZiYjAtZWRmZi00ZmQzLTg2NGYt ZjZjYzBjNmYxMmI0LzEvSDBuOGFiOXV1anVmb0ZGOUFHS1NjaERrNk1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83YjZiYjAtZWRmZi00ZmQzLTg2NGYtZjZjYzBjNmYxMmI0 LzEvSDBuOGFiOXV1anVmb0ZGOUFHS1NjaERrNk1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDV2tDH8 0zFXU/cDZOn98tTwlfh15G75k0wtTY6JCVwM09+jr/iwe24wwINjDGmh7SD/xZHa txZawc9PYpiapaBklDcagga6kAX5vstHBNZenz299N4BGPEwxwoWYSwmF92LLsjU bmDb03P1FXRclfGHv5D2U3E8skPQyMQ8y1H4XiLPMAtAvzm6DGRCmKP2r1m8voMK st1znEDAeFO2z41knqMV+VJgT83EfQwhmQ73ijDrpwQfFL0aHJP9AzXXD95mfRtM 61ZpPaBNzdhsRb2cN/asunI1pM7lzA/I0XGyX7+0xxLY4ik/s26sEI32fcGPOBfO SfDqKxW4uF2FAg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:32:19 2025 by rpki-client