This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json) Hash identifier: 38CrlYcxhlF+JdeAG2ql95iiJs1wLpJIrVNISAB9wqM= Subject key identifier: A9:21:A4:54:CA:AE:6F:27:B5:0A:D7:28:5B:37:A4:02:A3:6D:2B:A2 Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22 Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922 Certificate serial: 019B0E93374FD7DE18107E31F1E00E52832D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft Manifest number: 131C Signing time: Thu 11 Dec 2025 18:01:27 +0000 Manifest this update: Thu 11 Dec 2025 18:01:27 +0000 Manifest next update: Fri 12 Dec 2025 18:01:27 +0000 Files and hashes: 1: EgrdXaLN-vc8C2zZS8RN3DywvDo.roa (hash: hzm54PDUPW3onP/qtSLZRsQOvKv3wuQ4riGx7IRQcQA=) 2: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: JDTBTgvPsdC5SCzVdC3PLkuEQj4D6V2Lz/7oQPfS8HM=) 3: rAaiXMvO9i5snovqluPbyo_QCN0.roa (hash: pt3vDzVbNzSpy4PSZ8+XX3gpZBn6uEG/ZRILx9TbDQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:37:4f:d7:de:18:10:7e:31:f1:e0:0e:52:83:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922 Validity Not Before: Dec 11 18:01:27 2025 GMT Not After : Dec 12 18:01:27 2025 GMT Subject: CN=a921a454caae6f27b50ad7285b37a402a36d2ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:c7:41:12:8c:9d:5d:ec:ca:0d:d0:2b:14: b1:c1:48:58:7e:5a:26:13:9e:9d:5b:3f:94:43:cf: 23:c3:78:47:97:79:ca:b4:63:57:6d:da:a5:22:a1: 7c:e1:33:41:52:ed:4d:00:6d:d3:c1:31:47:d3:d3: de:8c:81:0f:24:32:b0:cc:4b:53:59:f6:ec:ae:71: 5f:35:b8:b2:92:55:d8:e7:59:b3:90:53:b0:8a:02: 78:3e:62:15:fa:05:77:19:7c:b2:fc:9f:c1:0c:c1: 59:00:46:6a:41:41:93:d6:b4:79:9e:41:73:2e:0d: 63:c0:f9:de:2b:50:b0:5f:ac:39:75:99:ac:3f:0c: 12:b8:ca:c0:2a:a6:65:aa:19:2b:e6:0f:62:e4:fa: c9:c6:cd:50:5c:79:29:81:a5:c4:cf:de:90:c9:a9: d4:1b:84:37:7d:19:3e:cd:13:fe:6e:1a:d9:7e:00: 81:f4:db:51:c7:9c:e6:c8:e5:35:82:c0:49:d1:db: b8:e0:63:52:5b:3f:ad:7f:7a:96:64:52:a9:50:61: f1:9a:5d:c4:db:66:f9:e4:2b:3e:77:d6:7c:7f:e2: 0a:02:4b:a7:2d:67:67:5d:16:d0:0b:38:2c:ee:a1: 6a:c1:6b:7a:9a:53:7f:52:96:4f:dc:d0:3d:c4:fe: 9e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:21:A4:54:CA:AE:6F:27:B5:0A:D7:28:5B:37:A4:02:A3:6D:2B:A2 X509v3 Authority Key Identifier: keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:5c:17:82:e7:98:35:0a:23:b6:d1:c8:05:48:1a:f0:6c:38: a3:b4:bb:cf:df:05:da:54:47:cc:b7:d6:5a:4a:34:e8:f6:9d: cb:c2:91:4b:7a:2b:08:bb:2d:89:58:99:51:02:59:a9:4e:fe: 95:f8:6f:a9:bf:87:7b:83:1f:5e:92:0e:83:aa:53:43:ec:50: 01:15:d4:a1:41:b3:30:bf:03:93:a0:ba:2a:48:89:2c:97:8c: 13:d4:cf:90:c3:6c:e4:19:b5:40:94:5a:ad:63:82:b4:f3:9a: 2d:95:e7:fe:22:bb:c1:9a:aa:e0:33:0f:1b:d4:cd:94:d4:9e: 44:ad:d9:f4:ff:92:be:f6:c5:e0:28:e8:9b:c7:0b:6a:12:92: 12:fe:f0:e2:43:73:ab:83:cc:1f:9c:9f:79:e2:e6:aa:8d:1d: 18:79:b2:0e:87:ad:6a:c2:c2:b5:f8:6c:64:1e:df:6c:8e:dd: d6:b7:0e:a0:ee:d7:8b:cf:08:79:a3:79:c3:db:aa:40:c7:c2: 9c:74:4c:38:63:6e:9f:0e:e8:42:c3:9a:17:d5:7c:3a:f4:05: cf:18:ab:8e:88:74:55:4c:fa:83:b0:b6:e0:f4:41:ad:1e:53: 18:7a:bc:2d:33:ed:48:15:e6:9b:86:f3:06:29:84:78:99:09: e5:1e:d7:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkzdP194YEH4x8eAOUoMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MWQ0ZTM0ZDRlNDg1MzljMTcwNDUxZDRlMjYxMzg4ODdm NmU5MjIwHhcNMjUxMjExMTgwMTI3WhcNMjUxMjEyMTgwMTI3WjAzMTEwLwYDVQQD EyhhOTIxYTQ1NGNhYWU2ZjI3YjUwYWQ3Mjg1YjM3YTQwMmEzNmQyYmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOHHQRKMnV3syg3QKxSxwUhYflom E56dWz+UQ88jw3hHl3nKtGNXbdqlIqF84TNBUu1NAG3TwTFH09PejIEPJDKwzEtT WfbsrnFfNbiyklXY51mzkFOwigJ4PmIV+gV3GXyy/J/BDMFZAEZqQUGT1rR5nkFz Lg1jwPneK1CwX6w5dZmsPwwSuMrAKqZlqhkr5g9i5PrJxs1QXHkpgaXEz96QyanU G4Q3fRk+zRP+bhrZfgCB9NtRx5zmyOU1gsBJ0du44GNSWz+tf3qWZFKpUGHxml3E 22b55Cs+d9Z8f+IKAkunLWdnXRbQCzgs7qFqwWt6mlN/UpZP3NA9xP6eJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkhpFTKrm8ntQrXKFs3pAKjbSuiMB8GA1UdIwQY MBaAFIUdTjTU5IU5wXBFHU4mE4iH9ukiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYt ODFjNDA1NTE0OGUwLzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYtODFjNDA1NTE0OGUw LzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVwXgueY NQojttHIBUga8Gw4o7S7z98F2lRHzLfWWko06Pady8KRS3orCLstiViZUQJZqU7+ lfhvqb+He4MfXpIOg6pTQ+xQARXUoUGzML8Dk6C6KkiJLJeME9TPkMNs5Bm1QJRa rWOCtPOaLZXn/iK7wZqq4DMPG9TNlNSeRK3Z9P+SvvbF4Cjom8cLahKSEv7w4kNz q4PMH5yfeeLmqo0dGHmyDoetasLCtfhsZB7fbI7d1rcOoO7Xi88IeaN5w9uqQMfC nHRMOGNunw7oQsOaF9V8OvQFzxirjoh0VUz6g7C24PRBrR5TGHq8LTPtSBXmm4bz BimEeJkJ5R7X3Q== -----END CERTIFICATE-----Generated at Fri Dec 12 00:58:04 2025 by rpki-client