This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft File: H0MPwJpxOySayqdniRHo0eMjOv0.mft (raw, json) Hash identifier: Ew0hyXfEVTZz8Mbxf8c1lEt11i0mQgcFodF3TuqQJ70= Subject key identifier: 2F:C1:C9:1E:FE:A4:39:13:CA:18:0C:81:17:DD:A6:D5:3C:B5:AF:01 Authority key identifier: 1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD Certificate issuer: /CN=1f430fc09a713b249acaa7678911e8d1e3233afd Certificate serial: 019B20CFD1EF0FD1B860EEB63A163655B812 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft Manifest number: 15C4 Signing time: Mon 15 Dec 2025 07:00:49 +0000 Manifest this update: Mon 15 Dec 2025 07:00:49 +0000 Manifest next update: Tue 16 Dec 2025 07:00:49 +0000 Files and hashes: 1: H0MPwJpxOySayqdniRHo0eMjOv0.crl (hash: XTLvS1qCuIK+B3fquvIvLSmC9+3zL5swJR3yR7m4Ypw=) 2: z1mTOG8VE9-v8P-Co5yPmIlf6B0.roa (hash: qAv01E+pevkkYz421oysRUur++ptzgLO7RhPrCkAgu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:d1:ef:0f:d1:b8:60:ee:b6:3a:16:36:55:b8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f430fc09a713b249acaa7678911e8d1e3233afd Validity Not Before: Dec 15 07:00:49 2025 GMT Not After : Dec 16 07:00:49 2025 GMT Subject: CN=2fc1c91efea43913ca180c8117dda6d53cb5af01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:bc:4f:df:b0:b2:84:ab:f3:d1:52:b9:88: d1:14:ad:be:bd:89:52:be:8c:54:30:4b:a0:25:3b: 14:26:1a:c6:1e:7d:f4:bd:d2:17:18:b7:58:82:b3: 0f:7f:66:27:59:d8:d4:ea:35:43:79:f2:b6:54:bf: f3:d2:da:03:ac:eb:94:51:7a:4b:a6:ae:c0:b5:d6: 19:fa:4d:c1:4e:b7:0c:25:0e:1d:eb:cc:7c:6a:a3: da:26:98:0b:b1:ed:81:f6:01:0b:31:48:d7:94:9b: 86:50:f6:af:14:19:fd:3f:d9:3f:73:76:5d:07:c3: c4:35:4b:7f:98:46:4d:4a:dd:fe:8e:f6:c9:87:9a: d9:f5:23:39:bd:3c:ed:02:46:73:ce:21:e6:d3:a4: 32:74:63:fa:77:cf:4b:1c:46:ef:24:1f:91:a3:5b: a9:33:7e:22:8d:88:33:d1:1d:f3:93:73:95:f5:12: f3:da:95:82:e1:b4:91:da:63:39:d9:ed:43:10:6b: a5:ab:f1:70:ce:f6:8c:20:3d:f2:b2:d4:6d:1b:ea: ce:fd:14:a4:dd:15:d7:f5:20:54:57:00:d1:9d:73: c2:28:7d:11:59:40:4e:c5:6c:98:f8:4c:b5:48:38: 50:fd:e8:1f:e3:72:17:8b:84:29:2b:98:aa:51:51: 82:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C1:C9:1E:FE:A4:39:13:CA:18:0C:81:17:DD:A6:D5:3C:B5:AF:01 X509v3 Authority Key Identifier: keyid:1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:08:e7:88:80:11:99:fd:5e:bc:00:09:a4:8f:60:a2:26:d0: 98:ea:ec:57:37:08:bb:d7:f7:d5:e1:cc:bb:2f:93:c1:55:92: a1:5f:3c:4c:0d:98:07:5d:aa:5f:3c:1c:96:d9:d6:67:c8:69: 06:ad:d5:86:c8:96:86:cd:f3:74:28:79:9f:41:32:c0:24:51: 41:6d:dd:39:64:86:64:79:e6:43:c4:a1:70:72:60:6a:f7:bb: 04:b5:3c:ef:f9:97:97:c5:31:95:ab:80:4b:a0:d8:da:b1:40: 62:da:91:67:c5:9f:86:5e:d9:e9:58:f1:d7:da:23:d7:b1:1e: d4:f2:39:b3:bb:d6:2d:aa:e7:d0:ec:77:31:d1:16:b6:65:8a: 41:10:74:6d:0e:10:45:2b:2a:c5:b1:67:60:e5:67:de:a5:a6: ce:51:d0:ad:f0:97:3f:b2:22:35:43:92:eb:ff:ea:9e:60:fc: 3c:70:7e:3d:d1:e4:b2:de:3e:5b:9b:91:13:1d:ce:53:15:5f: 33:7f:3a:f3:24:8a:4c:13:f3:1d:31:54:92:1a:93:bd:19:74: ff:93:fa:94:92:65:6d:2d:44:9a:96:69:bc:b9:44:06:48:5a: 94:ec:c3:a3:a4:5c:a2:3a:b6:b6:d1:68:46:4b:14:8c:ef:3b: bf:25:88:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz9HvD9G4YO62OhY2VbgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDMwZmMwOWE3MTNiMjQ5YWNhYTc2Nzg5MTFlOGQxZTMy MzNhZmQwHhcNMjUxMjE1MDcwMDQ5WhcNMjUxMjE2MDcwMDQ5WjAzMTEwLwYDVQQD EygyZmMxYzkxZWZlYTQzOTEzY2ExODBjODExN2RkYTZkNTNjYjVhZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7+8T9+wsoSr89FSuYjRFK2+vYlS voxUMEugJTsUJhrGHn30vdIXGLdYgrMPf2YnWdjU6jVDefK2VL/z0toDrOuUUXpL pq7AtdYZ+k3BTrcMJQ4d68x8aqPaJpgLse2B9gELMUjXlJuGUPavFBn9P9k/c3Zd B8PENUt/mEZNSt3+jvbJh5rZ9SM5vTztAkZzziHm06QydGP6d89LHEbvJB+Ro1up M34ijYgz0R3zk3OV9RLz2pWC4bSR2mM52e1DEGulq/FwzvaMID3ystRtG+rO/RSk 3RXX9SBUVwDRnXPCKH0RWUBOxWyY+Ey1SDhQ/egf43IXi4QpK5iqUVGCNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/ByR7+pDkTyhgMgRfdptU8ta8BMB8GA1UdIwQY MBaAFB9DD8CacTskmsqnZ4kR6NHjIzr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBNUHdKcHhPeVNheXFkbmlSSG8wZU1qT3YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yNjc2MWUtN2M2Zi00ODhlLWEyMWQt YmUzOTE3YzVlMmY3LzEvSDBNUHdKcHhPeVNheXFkbmlSSG8wZU1qT3YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yNjc2MWUtN2M2Zi00ODhlLWEyMWQtYmUzOTE3YzVlMmY3 LzEvSDBNUHdKcHhPeVNheXFkbmlSSG8wZU1qT3YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAjniIAR mf1evAAJpI9goibQmOrsVzcIu9f31eHMuy+TwVWSoV88TA2YB12qXzwcltnWZ8hp Bq3VhsiWhs3zdCh5n0EywCRRQW3dOWSGZHnmQ8ShcHJgave7BLU87/mXl8UxlauA S6DY2rFAYtqRZ8Wfhl7Z6Vjx19oj17Ee1PI5s7vWLarn0Ox3MdEWtmWKQRB0bQ4Q RSsqxbFnYOVn3qWmzlHQrfCXP7IiNUOS6//qnmD8PHB+PdHkst4+W5uREx3OUxVf M3868ySKTBPzHTFUkhqTvRl0/5P6lJJlbS1EmpZpvLlEBkhalOzDo6Rcojq2ttFo RksUjO87vyWIxw== -----END CERTIFICATE-----Generated at Mon Dec 15 16:48:46 2025 by rpki-client