This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json) Hash identifier: Fc4AdztakuS9yUMkJN5eEMGI7pT4uYH/y24MFkd2TAM= Subject key identifier: 02:51:FC:37:DE:6A:CE:0D:7B:44:B3:1E:9F:2B:1B:2C:52:E8:40:F0 Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81 Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81 Certificate serial: 019B0F00860D0EF3B7B12D547295356DC783 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 20:00:51 +0000 Manifest this update: Thu 11 Dec 2025 20:00:51 +0000 Manifest next update: Fri 12 Dec 2025 20:00:51 +0000 Files and hashes: 1: DLMTOoacedomtvAfOo_wUgsg7ZM.roa (hash: CuMafo/kjG1kejlU1ti10/bQ5ADJP+5OLOjwOYxRNqo=) 2: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: ytkkDLn6KqMtGAZ09v0NzbW5fm2EyIDKcE3UTcrSBIM=) 3: KySbiR-MGliV0HnEusiYoVPq_Tw.roa (hash: Tom90ESsjuLbQCudFU+oOzUxWbGr9ZgqEwEe4qv+gmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:86:0d:0e:f3:b7:b1:2d:54:72:95:35:6d:c7:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81 Validity Not Before: Dec 11 20:00:51 2025 GMT Not After : Dec 12 20:00:51 2025 GMT Subject: CN=0251fc37de6ace0d7b44b31e9f2b1b2c52e840f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:3e:67:e6:b2:f0:b8:bc:5b:67:a6:64:58: f7:0b:a3:13:2c:19:01:85:ed:38:50:82:5a:01:3c: 07:61:07:dd:11:a1:e8:7e:f3:89:b5:4e:d5:ce:19: 6b:e5:43:a2:c5:0f:ea:21:a1:76:64:aa:e7:8f:c3: a2:06:11:0a:d6:3e:d7:58:88:6a:1b:c9:b4:4b:62: 2f:98:a1:7d:f6:ab:76:9b:79:01:b5:8e:c4:e3:e3: 50:26:2a:2d:e9:c2:03:a1:2b:0f:52:93:73:28:01: 15:e1:5f:a0:8d:93:44:54:fb:01:e2:24:31:2c:09: 15:b8:18:da:ac:1d:15:04:c4:38:39:ad:42:a2:64: db:ab:63:80:62:de:25:ee:18:84:0e:9b:2a:44:6e: 57:f4:99:0a:79:66:d8:40:be:b7:22:cc:44:d4:c8: 2f:40:42:64:b1:74:67:f0:3f:d5:70:d2:16:fd:b2: 0b:7d:2f:30:c1:f8:46:15:e9:2a:c6:4a:d8:32:be: 6c:f3:77:67:1b:db:93:d0:59:dd:cf:ca:c4:ce:fb: 44:4b:c6:55:92:88:c5:c1:3c:44:33:73:8c:22:05: be:05:16:aa:58:47:b5:d9:ef:e8:83:b2:7f:d6:db: db:b4:92:cc:db:bd:81:39:dc:43:b3:2d:54:8b:53: f8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:51:FC:37:DE:6A:CE:0D:7B:44:B3:1E:9F:2B:1B:2C:52:E8:40:F0 X509v3 Authority Key Identifier: keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:48:14:31:53:3c:a5:7a:d0:fa:ea:85:85:de:45:5b:5e:97: 27:02:06:69:c9:e5:20:50:74:44:77:f5:b1:3a:f1:e4:b3:26: f9:e2:20:8c:37:a2:c6:83:8f:e1:ff:8b:cf:e0:45:0c:29:c1: 5a:b6:48:a2:10:35:ac:ff:9a:06:b3:5b:e4:09:79:5d:6d:44: 78:d1:12:55:67:e4:16:ab:40:69:e3:5e:1a:1a:a6:5d:3c:e7: bc:01:f3:7a:c6:42:74:7f:77:5c:92:c2:2d:fd:88:9c:cd:af: b0:cf:f2:6f:3a:69:a2:a5:01:b4:70:69:a9:da:f7:9a:bd:78: 37:3b:f7:1d:af:03:97:62:e3:2c:5a:f5:94:32:a5:12:ef:50: c0:90:07:0b:44:e9:2f:6f:5f:ac:d0:66:ca:7a:d5:83:d4:a5: 78:04:e5:90:82:3b:7b:f1:5a:b5:da:f6:91:c4:3b:a6:4b:35: 62:77:f7:e3:6c:cf:a9:ad:92:9f:80:d4:34:27:8b:50:1d:41: c3:de:ed:bd:88:6b:6a:f4:92:36:5a:76:43:5d:23:c1:38:54: e4:88:17:34:e7:dd:2c:fd:02:d0:e7:be:26:40:d6:d1:3c:9b: ee:c8:d5:70:d1:f0:c0:2d:bc:f5:34:ce:ff:95:1a:5a:80:f0: c8:a0:b9:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAIYNDvO3sS1UcpU1bceDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZDVmZWY2OTJiNGMyZDIyYmRkMDMxZmFiZmE3MTEwYjdi MzZlODEwHhcNMjUxMjExMjAwMDUxWhcNMjUxMjEyMjAwMDUxWjAzMTEwLwYDVQQD EygwMjUxZmMzN2RlNmFjZTBkN2I0NGIzMWU5ZjJiMWIyYzUyZTg0MGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqls+Z+ay8Li8W2emZFj3C6MTLBkB he04UIJaATwHYQfdEaHofvOJtU7Vzhlr5UOixQ/qIaF2ZKrnj8OiBhEK1j7XWIhq G8m0S2IvmKF99qt2m3kBtY7E4+NQJiot6cIDoSsPUpNzKAEV4V+gjZNEVPsB4iQx LAkVuBjarB0VBMQ4Oa1ComTbq2OAYt4l7hiEDpsqRG5X9JkKeWbYQL63IsxE1Mgv QEJksXRn8D/VcNIW/bILfS8wwfhGFekqxkrYMr5s83dnG9uT0Fndz8rEzvtES8ZV kojFwTxEM3OMIgW+BRaqWEe12e/og7J/1tvbtJLM272BOdxDsy1Ui1P44wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJR/Dfeas4Ne0SzHp8rGyxS6EDwMB8GA1UdIwQY MBaAFB/V/vaStMLSK90DH6v6cRC3s26BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2Qt NTEwMWJlNWRkNjE1LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2QtNTEwMWJlNWRkNjE1 LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikgUMVM8 pXrQ+uqFhd5FW16XJwIGacnlIFB0RHf1sTrx5LMm+eIgjDeixoOP4f+Lz+BFDCnB WrZIohA1rP+aBrNb5Al5XW1EeNESVWfkFqtAaeNeGhqmXTznvAHzesZCdH93XJLC Lf2InM2vsM/ybzppoqUBtHBpqdr3mr14Nzv3Ha8Dl2LjLFr1lDKlEu9QwJAHC0Tp L29frNBmynrVg9SleATlkII7e/Fatdr2kcQ7pks1Ynf342zPqa2Sn4DUNCeLUB1B w97tvYhravSSNlp2Q10jwThU5IgXNOfdLP0C0Oe+JkDW0Tyb7sjVcNHwwC289TTO /5UaWoDwyKC5Mg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:34:24 2025 by rpki-client