This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json) Hash identifier: VyUGdKepaqohVy1os0wL1lLE/85YUBV3d8P6ikpgAWo= Subject key identifier: DA:02:F9:0A:1E:83:5D:DA:F4:B2:E0:88:DF:AA:16:E6:FA:32:15:1A Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10 Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610 Certificate serial: 019AB96255D8227DE54BC6AD424FC0305EC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft Manifest number: 06E6 Signing time: Tue 25 Nov 2025 05:00:20 +0000 Manifest this update: Tue 25 Nov 2025 05:00:20 +0000 Manifest next update: Wed 26 Nov 2025 05:00:20 +0000 Files and hashes: 1: 39yFNcs_aiMECPSY8yer3c7rqfs.roa (hash: kt8DxoHHJV7b65racNqYI0+ZGEt7nNXcd8uoIQ2X++s=) 2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: TfAM6Wqxi1UDsK9lw9sLbrv1/O2dj0mIy/ov2eczZVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 05:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:62:55:d8:22:7d:e5:4b:c6:ad:42:4f:c0:30:5e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610 Validity Not Before: Nov 25 05:00:20 2025 GMT Not After : Nov 26 05:00:20 2025 GMT Subject: CN=da02f90a1e835ddaf4b2e088dfaa16e6fa32151a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:88:4f:fe:ae:d4:c3:4d:0d:e6:71:40:7d: 69:6f:03:4d:2f:67:40:d9:2c:e4:9c:99:3b:b2:89: a2:b5:fa:89:7f:d7:2f:c7:4a:e6:b0:82:d0:ea:6e: a4:85:09:67:7e:b9:65:6a:ae:4a:4c:96:77:3c:5c: 73:cd:00:da:4a:95:89:c3:3f:73:dd:ca:22:f7:7b: d7:9d:de:b4:01:c1:30:50:39:9e:57:82:c2:b3:db: c5:69:23:ba:b8:35:ea:ff:40:cf:fe:50:43:23:22: 38:89:db:79:88:0c:73:71:96:87:65:ba:e4:d2:f5: 35:b4:02:07:9f:11:4f:4e:d9:54:7d:77:0d:e5:bc: a8:18:e6:f3:b9:a5:0b:c9:63:ce:49:08:8b:12:0b: 29:66:4e:67:28:b1:e6:58:c0:58:4c:84:95:56:54: 3f:d4:3a:83:43:18:23:49:fc:79:9d:2c:e9:e2:1a: de:49:ff:e3:af:1d:11:04:ce:01:98:f0:7d:65:f0: ee:89:0e:12:47:59:71:a6:b4:2e:18:29:10:c4:4e: 5d:4d:02:45:46:63:c4:35:d3:a7:c0:fd:19:f5:59: 9d:d4:42:5d:83:4d:ad:03:f3:81:d0:d4:be:9a:9d: ed:92:22:55:60:3d:5c:95:08:a9:99:7e:32:e5:85: 50:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:02:F9:0A:1E:83:5D:DA:F4:B2:E0:88:DF:AA:16:E6:FA:32:15:1A X509v3 Authority Key Identifier: keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:2e:1a:0f:7a:32:34:01:34:73:da:29:22:e4:fe:c9:21:69: 03:b6:77:7d:80:1c:be:98:34:c0:ff:0e:96:d6:86:47:f7:e8: 9e:ff:9a:04:32:07:cc:2b:d3:34:c3:c4:33:f9:ac:f9:d8:56: 15:2d:78:b0:6b:ea:85:86:39:15:9d:9c:b2:e0:83:e6:16:52: e0:b5:07:7b:20:a7:8e:33:2a:b1:5b:d0:8e:e3:5c:42:2c:7f: 5c:3b:e9:13:ce:f5:69:e5:0d:95:f6:42:f4:60:7a:58:c2:78: 5f:a7:40:8c:2d:df:da:1a:30:d1:64:01:5d:d4:2b:d7:ed:e8: b1:bd:95:25:2a:11:d0:18:57:fc:23:ce:cf:b7:6c:b5:6b:99: 81:d6:14:b0:f0:08:2b:12:e1:fa:a3:4f:5e:a0:97:30:a4:cc: 10:76:9d:bf:8e:56:ca:b3:ee:45:02:99:98:d1:a9:f8:f1:1f: f4:57:d0:5a:e0:68:99:9d:89:e2:c8:c8:15:06:20:cb:0d:d5: 92:55:8b:f7:1d:31:14:df:3f:1e:33:1d:43:06:54:fc:dc:e0: b7:7e:82:0a:2e:a0:c0:46:3a:22:72:c5:3a:60:0a:7d:1a:fa: c1:3a:39:13:03:6d:bb:36:51:e1:57:3f:1e:c5:3f:14:27:cb: 95:4e:80:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq5YlXYIn3lS8atQk/AMF7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjdjZjFjYTJkZWEzMmZjZDk3MDJkZDI1MTBlYjZiZjJi Njg2MTAwHhcNMjUxMTI1MDUwMDIwWhcNMjUxMTI2MDUwMDIwWjAzMTEwLwYDVQQD EyhkYTAyZjkwYTFlODM1ZGRhZjRiMmUwODhkZmFhMTZlNmZhMzIxNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP+IT/6u1MNNDeZxQH1pbwNNL2dA 2SzknJk7somitfqJf9cvx0rmsILQ6m6khQlnfrllaq5KTJZ3PFxzzQDaSpWJwz9z 3coi93vXnd60AcEwUDmeV4LCs9vFaSO6uDXq/0DP/lBDIyI4idt5iAxzcZaHZbrk 0vU1tAIHnxFPTtlUfXcN5byoGObzuaULyWPOSQiLEgspZk5nKLHmWMBYTISVVlQ/ 1DqDQxgjSfx5nSzp4hreSf/jrx0RBM4BmPB9ZfDuiQ4SR1lxprQuGCkQxE5dTQJF RmPENdOnwP0Z9Vmd1EJdg02tA/OB0NS+mp3tkiJVYD1clQipmX4y5YVQYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoC+Qoeg13a9LLgiN+qFub6MhUaMB8GA1UdIwQY MBaAFB9nzxyi3qMvzZcC3SUQ62vytoYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zY2I0ZDYtZjMyYy00MTMwLWFlMGUt YmFkYmU4NDA5NzdlLzEvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zY2I0ZDYtZjMyYy00MTMwLWFlMGUtYmFkYmU4NDA5Nzdl LzEvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMi4aD3oy NAE0c9opIuT+ySFpA7Z3fYAcvpg0wP8OltaGR/fonv+aBDIHzCvTNMPEM/ms+dhW FS14sGvqhYY5FZ2csuCD5hZS4LUHeyCnjjMqsVvQjuNcQix/XDvpE871aeUNlfZC 9GB6WMJ4X6dAjC3f2how0WQBXdQr1+3osb2VJSoR0BhX/CPOz7dstWuZgdYUsPAI KxLh+qNPXqCXMKTMEHadv45WyrPuRQKZmNGp+PEf9FfQWuBomZ2J4sjIFQYgyw3V klWL9x0xFN8/HjMdQwZU/Nzgt36CCi6gwEY6InLFOmAKfRr6wTo5EwNtuzZR4Vc/ HsU/FCfLlU6AEw== -----END CERTIFICATE-----Generated at Tue Nov 25 14:31:20 2025 by rpki-client