This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft File: H6eVFn0tn7QglB8XKHvfPF7tjfk.mft (raw, json) Hash identifier: L1JAML0FHFjvvgMmitaej8vkel38ujARNEewbl/4rio= Subject key identifier: BF:24:73:72:2B:4E:DD:F6:53:25:1D:96:65:DF:33:AD:E4:C5:86:12 Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9 Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9 Certificate serial: 019B20D05C14D9FFE56B158B02F0AA8B1470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft Manifest number: 0893 Signing time: Mon 15 Dec 2025 07:01:24 +0000 Manifest this update: Mon 15 Dec 2025 07:01:24 +0000 Manifest next update: Tue 16 Dec 2025 07:01:24 +0000 Files and hashes: 1: 34L0qge2tNB4WEjnnevARD_mNUU.roa (hash: ry58BGExakUgGHZ3z3Fi8XcJ02SF1yHnFqs3N6sRqHc=) 2: 43gEJXLRZhBLeSI-aOiwsJo8t18.roa (hash: hJ2/LJzxG3xhi0jErGx6Rimn7Tgu+B52/B5v7PqA0Q4=) 3: FySTZF5XmiRgffP_0Q1bU_jIQpg.roa (hash: GbwThYD6w19HqYzAx38shdLTpkIXF4U5UQypl5TKy7s=) 4: H6eVFn0tn7QglB8XKHvfPF7tjfk.crl (hash: vdQmqMo8bu1c6MhTpPyU5nljhdLR0VPIXaDIqPmn4no=) 5: aSAbXtaRyXcPhRakK1aghIwRn3g.roa (hash: up2cOGYfGLooX0y47JfJVek/1Cnxd7U8E51loywLrVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:5c:14:d9:ff:e5:6b:15:8b:02:f0:aa:8b:14:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9 Validity Not Before: Dec 15 07:01:24 2025 GMT Not After : Dec 16 07:01:24 2025 GMT Subject: CN=bf2473722b4eddf653251d9665df33ade4c58612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:94:8e:d2:e2:c8:56:ec:54:aa:7b:dc:cf:53: dc:e1:e8:c8:a2:8f:7c:62:aa:fd:6d:0d:c5:2f:95: 1f:ef:97:c1:71:4a:3e:60:69:f1:99:b5:85:ce:4f: aa:3c:8d:f2:7c:c3:74:b6:fe:7e:ca:a3:09:4b:78: 59:fc:d1:c4:dd:06:da:ed:d9:46:78:07:b2:73:b2: 06:c4:f7:2e:42:c9:8d:f3:24:8e:c7:06:aa:8d:1c: 34:41:0f:27:00:d6:4d:d4:50:c0:3f:f0:4d:4d:cd: c1:89:fd:c2:f6:fc:25:c1:a4:58:30:75:a4:43:ae: e1:03:6d:6d:7d:f7:ec:eb:bc:81:14:da:96:03:15: 15:34:89:fa:40:9f:82:1d:71:21:04:68:cb:4a:a7: 1e:b6:9b:67:dd:5f:d1:59:f1:b5:53:08:a1:60:4e: 5d:4d:de:21:75:90:76:69:30:6e:be:bf:f9:9b:6c: 84:8d:eb:c8:a6:d3:3a:8e:96:a5:9c:f7:70:ae:c0: 0a:5a:2b:1d:df:41:03:f2:20:04:d6:3d:dd:71:db: 81:2c:f9:66:c6:d5:8e:8a:8e:3b:b1:cb:4c:6c:86: cf:2a:2b:69:86:22:9a:b6:ce:6c:eb:dc:70:70:4a: 8f:e1:20:e1:b1:e7:02:2f:65:b5:bd:81:b9:be:b9: 40:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:24:73:72:2B:4E:DD:F6:53:25:1D:96:65:DF:33:AD:E4:C5:86:12 X509v3 Authority Key Identifier: keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f8:fd:b8:3e:2d:bc:14:da:6c:86:be:9d:10:25:d7:8c:72: 25:56:58:8b:6d:41:d0:a7:e7:20:a5:8c:48:21:ec:ff:e1:3e: 2d:95:ac:dc:fb:7a:98:d3:2d:fe:dc:dc:66:2e:b0:46:7d:c3: 91:6b:fc:68:5b:88:76:a8:30:4d:8e:07:f3:f2:86:60:87:ae: 6a:7a:aa:17:03:97:61:c4:ac:81:3c:49:14:4c:0a:7a:ed:8c: ac:db:7e:89:99:9d:3e:4b:10:9c:f2:cc:fe:3a:7d:0c:b5:bf: 51:7d:f0:7a:1a:d8:5c:95:a4:f8:99:27:dd:4f:53:5e:82:cc: 9e:4b:fc:7c:8d:3e:99:ed:a5:41:0c:7b:5a:52:72:25:1c:b8: a6:db:46:63:6e:d2:d2:60:a2:9c:ce:5c:f7:d7:b1:ed:ca:ec: 0b:99:c2:fb:5f:ad:df:b9:b8:17:c7:20:c9:c6:d9:d0:5c:73: 15:ef:99:b3:21:03:76:8d:5e:2f:d8:e9:e4:38:65:ff:2e:29: 16:0c:84:25:fd:ef:f0:c6:91:1d:ee:ff:23:ad:7e:25:39:cb: d3:66:9f:25:ef:b9:33:7e:e7:01:8b:28:e5:30:96:49:54:90: bc:3b:dd:0c:9e:21:ab:30:7a:98:c3:13:c3:db:41:66:0f:b6: 86:e6:40:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0FwU2f/laxWLAvCqixRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYTc5NTE2N2QyZDlmYjQyMDk0MWYxNzI4N2JkZjNjNWVl ZDhkZjkwHhcNMjUxMjE1MDcwMTI0WhcNMjUxMjE2MDcwMTI0WjAzMTEwLwYDVQQD EyhiZjI0NzM3MjJiNGVkZGY2NTMyNTFkOTY2NWRmMzNhZGU0YzU4NjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipSO0uLIVuxUqnvcz1Pc4ejIoo98 Yqr9bQ3FL5Uf75fBcUo+YGnxmbWFzk+qPI3yfMN0tv5+yqMJS3hZ/NHE3Qba7dlG eAeyc7IGxPcuQsmN8ySOxwaqjRw0QQ8nANZN1FDAP/BNTc3Bif3C9vwlwaRYMHWk Q67hA21tfffs67yBFNqWAxUVNIn6QJ+CHXEhBGjLSqcetptn3V/RWfG1UwihYE5d Td4hdZB2aTBuvr/5m2yEjevIptM6jpalnPdwrsAKWisd30ED8iAE1j3dcduBLPlm xtWOio47sctMbIbPKitphiKats5s69xwcEqP4SDhsecCL2W1vYG5vrlAnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8kc3IrTt32UyUdlmXfM63kxYYSMB8GA1UdIwQY MBaAFB+nlRZ9LZ+0IJQfFyh73zxe7Y35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MzUzNWEtZTFiZC00ZmI3LTlmMDkt N2I3ZTk3NmM4NDEyLzEvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MzUzNWEtZTFiZC00ZmI3LTlmMDktN2I3ZTk3NmM4NDEy LzEvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPj9uD4t vBTabIa+nRAl14xyJVZYi21B0KfnIKWMSCHs/+E+LZWs3Pt6mNMt/tzcZi6wRn3D kWv8aFuIdqgwTY4H8/KGYIeuanqqFwOXYcSsgTxJFEwKeu2MrNt+iZmdPksQnPLM /jp9DLW/UX3wehrYXJWk+Jkn3U9TXoLMnkv8fI0+me2lQQx7WlJyJRy4pttGY27S 0mCinM5c99ex7crsC5nC+1+t37m4F8cgycbZ0FxzFe+ZsyEDdo1eL9jp5Dhl/y4p FgyEJf3v8MaRHe7/I61+JTnL02afJe+5M37nAYso5TCWSVSQvDvdDJ4hqzB6mMMT w9tBZg+2huZA4Q== -----END CERTIFICATE-----Generated at Mon Dec 15 09:17:43 2025 by rpki-client