This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft File: H6EtaHxiehgvgdTMyz8yIBhh9nc.mft (raw, json) Hash identifier: 9kDI2thMXBpoD83BTiw6y3ZEeQiGXBcch3T5Ae4kYRI= Subject key identifier: FB:C2:57:B2:89:6B:DD:22:69:1E:A7:34:95:FC:BA:8C:E4:52:31:5E Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77 Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677 Certificate serial: 019B5AF61F503892AA8D9E777D298C8F6695 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft Manifest number: 179F Signing time: Fri 26 Dec 2025 14:00:37 +0000 Manifest this update: Fri 26 Dec 2025 14:00:37 +0000 Manifest next update: Sat 27 Dec 2025 14:00:37 +0000 Files and hashes: 1: H6EtaHxiehgvgdTMyz8yIBhh9nc.crl (hash: g8KWwzg1TMsPwX2gCOGZwd0MkkLhscz9EYXTNLvwIr8=) 2: TYWepdwzCmiIVwEz7K8yZe03CRw.roa (hash: Gskq7xmpmSlLRwYuMMpLlLQSUWpIBfZkyQHS0PN6dOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:1f:50:38:92:aa:8d:9e:77:7d:29:8c:8f:66:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677 Validity Not Before: Dec 26 14:00:37 2025 GMT Not After : Dec 27 14:00:37 2025 GMT Subject: CN=fbc257b2896bdd22691ea73495fcba8ce452315e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:c0:52:35:af:65:26:d1:39:60:e8:40:76: 83:84:97:ec:9f:de:bb:1a:b3:db:e3:70:88:e8:82: ab:93:d8:af:1e:a4:c1:4e:82:72:0d:cb:d8:c3:0e: 7e:96:fe:4f:8a:68:a1:49:91:2e:e5:7a:e3:4e:9a: ae:95:90:b6:bc:30:11:3d:88:7c:ab:c5:17:a4:5f: 08:94:89:e5:1e:dd:f6:a7:55:5c:9e:f4:5a:5d:86: f2:b6:da:35:1a:93:b8:11:73:9d:69:19:53:13:9c: 5a:51:f5:e3:e8:97:8a:24:d8:97:23:87:c3:33:c6: 3c:c1:3a:fc:a7:ac:e7:33:fa:af:14:e0:67:9c:58: d9:52:72:1a:d1:48:c2:92:96:b0:1f:01:5f:52:30: e7:64:7c:38:9e:13:f2:b5:79:17:6d:15:8c:d8:10: f3:4d:c3:eb:0d:d4:34:39:26:93:ed:5e:ae:2c:f8: 48:a6:4b:ad:40:6f:9c:07:21:0b:2e:87:cd:82:17: fb:23:f7:74:db:4a:81:c1:f4:2a:72:9c:de:8a:80: 64:bf:2c:5c:27:9c:cd:e6:67:8c:3d:48:89:46:4d: b7:54:2d:41:4e:02:43:71:47:2f:55:a7:1f:a4:26: be:74:ba:b5:65:3f:74:4b:10:a7:71:04:d0:3e:be: c6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C2:57:B2:89:6B:DD:22:69:1E:A7:34:95:FC:BA:8C:E4:52:31:5E X509v3 Authority Key Identifier: keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:dd:ce:04:08:9f:c1:a4:a3:1e:d0:f8:7b:bf:db:40:df:a3: 92:39:41:76:58:69:7f:24:d9:02:d5:1d:c9:52:3b:b5:5c:2b: 20:08:98:0c:26:21:f3:72:23:0e:0f:90:53:5f:95:f8:e8:28: f7:bf:0c:4d:07:d4:b2:8d:59:d2:03:a7:2d:67:45:52:8e:3d: 89:f1:64:8b:02:64:2e:4a:a4:1d:28:9c:79:65:52:5c:eb:a0: a5:ea:00:c6:ad:3b:1a:95:2e:63:c2:b7:b4:cd:61:89:8e:d8: fa:5a:ab:e5:b8:66:38:0c:4c:a9:f3:b8:ea:f0:d5:27:8a:39: b1:f8:9a:38:5c:37:67:1c:5b:56:06:f0:e6:e2:f6:28:18:bb: 05:b6:39:ab:3f:77:1e:27:d3:ed:b6:a1:f1:bd:13:95:7f:29: 82:1d:50:9e:97:e1:7a:1f:72:39:05:34:de:65:88:e5:30:52: 8e:e5:b9:a7:25:5f:8b:15:87:5e:31:21:4f:72:57:21:3c:8b: 7d:a0:ce:e7:59:9e:11:a9:09:71:3e:bf:42:3e:0f:89:5c:dc: 68:de:15:1e:0a:5a:aa:81:46:67:3c:4b:44:5d:cd:e6:9e:0e: e0:ab:03:3d:1d:ac:ca:fc:de:37:8c:bf:b7:da:47:98:31:95: dc:b7:ba:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9h9QOJKqjZ53fSmMj2aVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYTEyZDY4N2M2MjdhMTgyZjgxZDRjY2NiM2YzMjIwMTg2 MWY2NzcwHhcNMjUxMjI2MTQwMDM3WhcNMjUxMjI3MTQwMDM3WjAzMTEwLwYDVQQD EyhmYmMyNTdiMjg5NmJkZDIyNjkxZWE3MzQ5NWZjYmE4Y2U0NTIzMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHPAUjWvZSbROWDoQHaDhJfsn967 GrPb43CI6IKrk9ivHqTBToJyDcvYww5+lv5PimihSZEu5XrjTpqulZC2vDARPYh8 q8UXpF8IlInlHt32p1VcnvRaXYbytto1GpO4EXOdaRlTE5xaUfXj6JeKJNiXI4fD M8Y8wTr8p6znM/qvFOBnnFjZUnIa0UjCkpawHwFfUjDnZHw4nhPytXkXbRWM2BDz TcPrDdQ0OSaT7V6uLPhIpkutQG+cByELLofNghf7I/d020qBwfQqcpzeioBkvyxc J5zN5meMPUiJRk23VC1BTgJDcUcvVacfpCa+dLq1ZT90SxCncQTQPr7GNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvCV7KJa90iaR6nNJX8uozkUjFeMB8GA1UdIwQY MBaAFB+hLWh8YnoYL4HUzMs/MiAYYfZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80YzI5ZDAtNThlYS00OGU4LWJhYzct ODljY2MyZDQ1NjNiLzEvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC80YzI5ZDAtNThlYS00OGU4LWJhYzctODljY2MyZDQ1NjNi LzEvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEt3OBAif waSjHtD4e7/bQN+jkjlBdlhpfyTZAtUdyVI7tVwrIAiYDCYh83IjDg+QU1+V+Ogo 978MTQfUso1Z0gOnLWdFUo49ifFkiwJkLkqkHSiceWVSXOugpeoAxq07GpUuY8K3 tM1hiY7Y+lqr5bhmOAxMqfO46vDVJ4o5sfiaOFw3ZxxbVgbw5uL2KBi7BbY5qz93 HifT7bah8b0TlX8pgh1Qnpfheh9yOQU03mWI5TBSjuW5pyVfixWHXjEhT3JXITyL faDO51meEakJcT6/Qj4PiVzcaN4VHgpaqoFGZzxLRF3N5p4O4KsDPR2syvzeN4y/ t9pHmDGV3Le6yg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:38 2025 by rpki-client