This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft File: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json) Hash identifier: AWl5zSl6g/cKX6/F2pPatnPZjwbcIYIfambzXtEUEao= Subject key identifier: 7D:36:F7:A3:36:90:1E:4F:6D:DC:07:EC:13:40:EF:EC:89:3B:05:64 Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D Certificate issuer: /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d Certificate serial: 019B2852BB137186D9831849F6D69FB36529 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft Manifest number: 0504 Signing time: Tue 16 Dec 2025 18:01:08 +0000 Manifest this update: Tue 16 Dec 2025 18:01:08 +0000 Manifest next update: Wed 17 Dec 2025 18:01:08 +0000 Files and hashes: 1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: o5BCfB8HV3JJkcapWeEJhk6GJ04OLzTDrTWrQQDjHJY=) 2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:bb:13:71:86:d9:83:18:49:f6:d6:9f:b3:65:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d Validity Not Before: Dec 16 18:01:08 2025 GMT Not After : Dec 17 18:01:08 2025 GMT Subject: CN=7d36f7a336901e4f6ddc07ec1340efec893b0564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:85:11:ba:7c:9b:a7:a9:c8:b1:54:d1:cf: 4f:8b:ca:85:f1:82:ad:da:f5:66:01:f3:ec:a5:bb: b6:e1:96:b1:48:81:c8:a0:87:bd:f4:88:46:d6:eb: 06:ba:3b:ea:c5:3e:36:29:d0:77:76:ef:3c:8c:43: e0:87:70:b2:21:61:89:92:8b:de:77:17:4d:3a:2d: 84:3e:02:00:b7:bc:26:63:6b:8e:24:3c:50:de:62: 77:e3:52:ed:82:b4:cd:4d:22:11:dc:1a:5a:ef:8e: fd:66:f8:11:ff:09:38:01:aa:d2:ed:6c:f8:32:4b: bf:76:c3:9c:b1:6b:ad:d6:04:bb:21:86:12:46:24: f2:58:03:d2:9b:e2:17:b1:8f:49:3d:78:28:ea:94: b6:91:57:92:3e:61:18:33:5d:50:63:f1:94:b8:8a: 5c:96:ce:65:0a:aa:f8:33:14:49:21:07:1d:a7:85: 79:7d:03:91:86:34:08:69:b0:7c:39:4e:80:f0:f6: 18:29:60:86:d8:44:38:14:8f:20:50:83:85:bb:dd: 56:ef:ad:5d:79:7a:a9:4c:77:a3:f6:29:a7:ff:6d: 04:2b:1f:70:27:de:d1:42:31:3f:85:94:8c:25:a0: 5d:3c:cf:f1:f8:a5:c8:7a:6d:d4:54:f5:78:2e:71: 0f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:36:F7:A3:36:90:1E:4F:6D:DC:07:EC:13:40:EF:EC:89:3B:05:64 X509v3 Authority Key Identifier: keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:37:c0:6f:0e:96:00:61:9c:e6:be:80:e9:46:aa:01:a6:ca: 94:b3:bf:22:a8:91:9f:81:0c:c9:a8:66:55:1c:42:e6:bf:e2: 81:a1:0d:91:87:05:7e:b7:c3:44:c7:84:aa:90:32:d3:40:43: f8:9c:db:8a:bb:a4:9e:e3:8d:36:f1:f9:86:75:38:c4:2c:05: bc:96:d0:3a:df:76:10:cf:1b:54:5d:44:68:8f:e5:df:24:ea: d0:d7:ca:f4:9e:db:06:e0:3f:24:32:89:11:a3:bb:15:ca:d4: b9:57:2a:4c:7d:40:75:c2:ea:2a:e5:ae:52:82:c9:ea:30:43: d5:f3:f7:83:ea:88:c9:26:9e:08:04:fd:01:4d:a8:46:2d:d3: 3f:8d:ce:67:fe:3c:04:22:80:7c:4e:b1:04:a1:c0:89:10:de: c9:05:77:87:c2:f8:25:e9:7e:ea:b3:b5:54:aa:6d:95:17:3e: bb:73:b8:77:0b:43:70:49:a7:12:e7:26:4b:53:69:2f:3d:d1: b1:94:4b:5b:ad:34:7b:b4:6f:43:8a:93:63:45:aa:b8:4f:04: 4a:09:fc:97:d6:6f:1b:50:94:fd:ba:94:6a:69:1b:3d:fe:aa: ff:56:72:f7:b9:ef:b3:52:f9:4e:d5:5e:d6:36:22:78:ac:2d: 3f:66:5a:01 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsoUrsTcYbZgxhJ9tafs2UpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMTFjOTU2MGZhOTEwNWU2YmRjNGI0OTJlZmFiNjQxYWI1 MDgwMWQwHhcNMjUxMjE2MTgwMTA4WhcNMjUxMjE3MTgwMTA4WjAzMTEwLwYDVQQD Eyg3ZDM2ZjdhMzM2OTAxZTRmNmRkYzA3ZWMxMzQwZWZlYzg5M2IwNTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF2FEbp8m6epyLFU0c9Pi8qF8YKt 2vVmAfPspbu24ZaxSIHIoIe99IhG1usGujvqxT42KdB3du88jEPgh3CyIWGJkove dxdNOi2EPgIAt7wmY2uOJDxQ3mJ341LtgrTNTSIR3Bpa7479ZvgR/wk4AarS7Wz4 Mku/dsOcsWut1gS7IYYSRiTyWAPSm+IXsY9JPXgo6pS2kVeSPmEYM11QY/GUuIpc ls5lCqr4MxRJIQcdp4V5fQORhjQIabB8OU6A8PYYKWCG2EQ4FI8gUIOFu91W761d eXqpTHej9imn/20EKx9wJ97RQjE/hZSMJaBdPM/x+KXIem3UVPV4LnEPDQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH0296M2kB5PbdwH7BNA7+yJOwVkMB8GA1UdIwQY MBaAFPoRyVYPqRBea9xLSS76tkGrUIAdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oSEpWZy1wRUY1cjNFdEpMdnEyUWF0UWdCMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvMDBlZTZhLTVlOTUtNGUxMC04ZWU2 LTdlMjIyYmZlY2M5MC8xLzEtaEhKVmctcEVGNXIzRXRKTHZxMlFhdFFnQjAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I4LzAwZWU2YS01ZTk1LTRlMTAtOGVlNi03ZTIyMmJmZWNj OTAvMS8xLWhISlZnLXBFRjVyM0V0Skx2cTJRYXRRZ0IwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjfA bw6WAGGc5r6A6UaqAabKlLO/IqiRn4EMyahmVRxC5r/igaENkYcFfrfDRMeEqpAy 00BD+JzbiruknuONNvH5hnU4xCwFvJbQOt92EM8bVF1EaI/l3yTq0NfK9J7bBuA/ JDKJEaO7FcrUuVcqTH1AdcLqKuWuUoLJ6jBD1fP3g+qIySaeCAT9AU2oRi3TP43O Z/48BCKAfE6xBKHAiRDeyQV3h8L4Jel+6rO1VKptlRc+u3O4dwtDcEmnEucmS1Np Lz3RsZRLW600e7RvQ4qTY0WquE8ESgn8l9ZvG1CU/bqUamkbPf6q/1Zy97nvs1L5 TtVe1jYieKwtP2ZaAQ== -----END CERTIFICATE-----Generated at Tue Dec 16 23:00:37 2025 by rpki-client