This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json) Hash identifier: AI/AcpPS5U+LdbeW6birx89AF1VSXfiYaiGJ5RM6E6I= Subject key identifier: 16:F8:A9:E3:49:89:7D:8D:49:24:F5:62:D7:C6:FE:26:CF:15:F4:20 Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81 Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81 Certificate serial: 019B413691C4B0F0C33AB9C5A3C1745209FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 14:00:53 +0000 Manifest this update: Sun 21 Dec 2025 14:00:53 +0000 Manifest next update: Mon 22 Dec 2025 14:00:53 +0000 Files and hashes: 1: DLMTOoacedomtvAfOo_wUgsg7ZM.roa (hash: CuMafo/kjG1kejlU1ti10/bQ5ADJP+5OLOjwOYxRNqo=) 2: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: u2a8L84RtP3tu7yEubfemOygD8vlFTAF12UHHzne4v4=) 3: KySbiR-MGliV0HnEusiYoVPq_Tw.roa (hash: Tom90ESsjuLbQCudFU+oOzUxWbGr9ZgqEwEe4qv+gmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:91:c4:b0:f0:c3:3a:b9:c5:a3:c1:74:52:09:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81 Validity Not Before: Dec 21 14:00:53 2025 GMT Not After : Dec 22 14:00:53 2025 GMT Subject: CN=16f8a9e349897d8d4924f562d7c6fe26cf15f420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:54:42:ed:26:44:ad:81:84:8c:94:f5:d3: ab:c7:f2:2a:e6:ca:a4:88:8a:70:dc:56:69:1d:0a: 77:28:9d:d4:5c:9b:79:18:b7:2d:be:de:ce:e3:0f: d0:61:14:66:ec:59:30:92:67:fa:7e:55:a1:33:77: f8:7d:9c:a5:73:93:a6:79:54:78:9f:f8:84:8b:a7: 8d:d5:7a:09:dc:86:d2:32:02:5e:85:8d:0b:75:e6: 18:d4:46:1f:60:fe:4b:d9:d2:32:f4:9f:90:d2:bb: ea:9b:16:20:d7:ea:1c:70:77:0d:20:db:6a:b4:8b: b6:4a:61:76:ac:a1:2f:00:30:7b:f6:ae:3a:e2:02: f9:40:fa:76:90:4a:d8:c5:00:0a:13:aa:b2:9b:1e: 68:08:65:5f:42:ba:c3:ad:47:38:6e:72:44:2d:cb: 6d:93:26:a2:33:ca:96:fa:d7:26:c1:83:38:be:15: 4d:b0:f0:65:cf:b8:3b:15:2e:49:e8:ef:7d:bd:06: 35:79:2e:8d:19:e6:bd:e8:6e:d2:63:39:c4:8d:fc: a8:05:ab:9e:02:47:0d:d1:ea:f1:45:d5:c3:40:95: 00:5b:44:a5:a2:4e:a7:3f:b3:1b:a0:49:fc:52:30: 24:b9:aa:c7:dd:a7:49:6f:23:9c:82:99:14:60:3b: ea:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F8:A9:E3:49:89:7D:8D:49:24:F5:62:D7:C6:FE:26:CF:15:F4:20 X509v3 Authority Key Identifier: keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:1c:a0:a6:05:70:c6:18:f2:74:6e:f1:41:c0:98:5f:29:5b: 46:96:de:7e:12:05:0a:5d:0a:98:33:cf:b0:3c:53:ab:14:44: 80:35:d8:3f:9a:1c:98:af:84:f6:af:89:c4:11:93:7c:6d:48: e4:6b:3f:85:9e:a7:b0:94:0f:d7:41:20:f8:1c:93:15:95:14: 55:d4:96:e7:2b:9d:c6:26:24:64:62:f5:1f:2b:f2:52:9a:52: 99:aa:11:ec:77:4b:d0:99:c5:44:82:6a:94:36:19:0a:a1:f9: 98:78:60:60:e3:4a:aa:57:e2:8d:d6:44:44:78:12:a1:b7:c8: 7f:15:b1:b0:29:b8:6f:3b:18:f3:a4:0e:bb:5e:e6:4c:5f:92: 0e:1e:3a:9a:18:44:49:10:99:9a:26:2a:36:cc:47:80:a6:d5: d6:98:7c:48:84:62:35:c3:61:62:45:a6:da:0d:33:e6:ce:f3: b2:4d:71:81:aa:1f:6c:92:03:57:da:cf:b7:1f:7a:e8:e6:91: ce:42:32:38:d5:0d:c9:f7:f2:af:58:80:b3:34:ef:65:3b:20: bf:08:3e:09:20:16:77:ec:27:40:c4:29:5b:09:a4:89:73:bf: a6:20:5b:13:9d:59:b9:ec:56:80:2a:70:59:61:b2:72:46:ef: ef:2e:90:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNpHEsPDDOrnFo8F0Ugn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZDVmZWY2OTJiNGMyZDIyYmRkMDMxZmFiZmE3MTEwYjdi MzZlODEwHhcNMjUxMjIxMTQwMDUzWhcNMjUxMjIyMTQwMDUzWjAzMTEwLwYDVQQD EygxNmY4YTllMzQ5ODk3ZDhkNDkyNGY1NjJkN2M2ZmUyNmNmMTVmNDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA041UQu0mRK2BhIyU9dOrx/Iq5sqk iIpw3FZpHQp3KJ3UXJt5GLctvt7O4w/QYRRm7Fkwkmf6flWhM3f4fZylc5OmeVR4 n/iEi6eN1XoJ3IbSMgJehY0LdeYY1EYfYP5L2dIy9J+Q0rvqmxYg1+occHcNINtq tIu2SmF2rKEvADB79q464gL5QPp2kErYxQAKE6qymx5oCGVfQrrDrUc4bnJELctt kyaiM8qW+tcmwYM4vhVNsPBlz7g7FS5J6O99vQY1eS6NGea96G7SYznEjfyoBaue AkcN0erxRdXDQJUAW0Slok6nP7MboEn8UjAkuarH3adJbyOcgpkUYDvqBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBb4qeNJiX2NSST1YtfG/ibPFfQgMB8GA1UdIwQY MBaAFB/V/vaStMLSK90DH6v6cRC3s26BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2Qt NTEwMWJlNWRkNjE1LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2QtNTEwMWJlNWRkNjE1 LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERygpgVw xhjydG7xQcCYXylbRpbefhIFCl0KmDPPsDxTqxREgDXYP5ocmK+E9q+JxBGTfG1I 5Gs/hZ6nsJQP10Eg+ByTFZUUVdSW5yudxiYkZGL1HyvyUppSmaoR7HdL0JnFRIJq lDYZCqH5mHhgYONKqlfijdZERHgSobfIfxWxsCm4bzsY86QOu17mTF+SDh46mhhE SRCZmiYqNsxHgKbV1ph8SIRiNcNhYkWm2g0z5s7zsk1xgaofbJIDV9rPtx966OaR zkIyONUNyffyr1iAszTvZTsgvwg+CSAWd+wnQMQpWwmkiXO/piBbE51ZuexWgCpw WWGyckbv7y6QDw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:39:36 2025 by rpki-client