This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json) Hash identifier: Ut97S4iBp3gjdjQVvHDNaMBdZ4bMwdp5qgNqVcz96uo= Subject key identifier: 0C:F2:78:9D:26:7D:5C:B8:C4:DD:8A:E6:62:DC:35:DD:1F:AC:F4:2B Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Certificate serial: 019B07B5A56DEC6C4083ACB2124798D79396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft Manifest number: 0EFF Signing time: Wed 10 Dec 2025 10:01:43 +0000 Manifest this update: Wed 10 Dec 2025 10:01:43 +0000 Manifest next update: Thu 11 Dec 2025 10:01:43 +0000 Files and hashes: 1: 1-NOojewDd9utfznujBymNMOVe5o.roa (hash: X2kKFux/YKAN46Gj+j+YVyBua6uxGC7NabYTrscJFb0=) 2: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: 5v2nu06brN4Q2ja6csYjXEKkzWab9cqYGo9J/4hwHoo=) 3: QjuxJ6qQtAfkxBg368Hm1m7WVg4.roa (hash: t8EQkQ4/YMRDclHW8vhweaMsa94SAKvAmv2jUXhwu6A=) 4: V6VlaWA1K-C9MyNU228wIIvdWko.roa (hash: 1CcDBQN60ZlZdF+oTvwDg2BxgmLENhu2Ibg8dddCRwg=) 5: VniS5GV6pMehwAD691_j3TcBoAA.roa (hash: +vOLB8fvZmysfQ2OW1z955SFLMU+xQAMgao9QD3s580=) 6: _zdlWhEi_N0gWHtAVPgkNsc9mR4.roa (hash: 3JxJU5VxNcGspDTOSPWFbdh4BiX6viLLu85SaLzaPnc=) 7: giTh8Ebv-slnkkaTofMNpLbZvzM.roa (hash: bO2clbkcE8o6+abtqVuqTC73svDuw3XhC1F4AhqNJOA=) 8: pj_r37O8ymvyjuC6uSrXOKsAL0o.roa (hash: wt8kJLWKI7jt1DkUmOJ01bIYni4fTUbSQrDjjyaL96c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:a5:6d:ec:6c:40:83:ac:b2:12:47:98:d7:93:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Validity Not Before: Dec 10 10:01:43 2025 GMT Not After : Dec 11 10:01:43 2025 GMT Subject: CN=0cf2789d267d5cb8c4dd8ae662dc35dd1facf42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a9:fe:2e:ea:b1:a3:fb:a7:02:ca:cf:95:01: 3d:ab:92:50:59:9d:af:4a:16:3f:f7:ca:f6:0d:97: 2c:23:12:20:3d:ea:de:46:12:8a:8c:72:32:6c:7d: 89:23:fb:0b:43:d7:fc:09:21:22:fa:c5:60:ad:6f: 0d:fd:78:8f:e3:b4:ed:5d:4c:f4:93:62:02:8a:b7: 6d:04:d2:cf:31:04:38:97:41:17:4d:ce:e9:17:9e: 79:24:20:d8:09:61:c6:ec:95:8c:e6:7a:6c:a7:91: bc:5c:c9:42:49:6a:a7:cb:9c:c5:8e:8c:41:8d:46: 88:a4:e6:0b:c2:83:ca:f2:81:ae:dd:f1:39:36:1c: 44:53:ed:32:ed:cb:fb:4a:6b:1c:c0:c1:34:78:d5: f7:f1:52:ca:ed:df:86:30:56:bc:1d:42:2e:7f:37: eb:09:fa:8c:6f:75:08:bb:f8:0d:5d:62:4a:f7:f5: 65:6f:bb:57:4e:1a:9f:ee:b4:1e:2a:9f:85:70:69: 84:24:de:d5:e7:c7:3a:79:54:ce:de:14:04:3a:a6: 13:1b:ea:4b:1e:b1:92:c6:32:ba:32:4f:fa:10:3a: da:94:3a:80:1f:ae:80:05:c8:f1:42:ae:e6:e2:40: a1:d3:a5:0e:e0:8b:61:61:2f:ea:9d:a4:7f:a1:0e: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F2:78:9D:26:7D:5C:B8:C4:DD:8A:E6:62:DC:35:DD:1F:AC:F4:2B X509v3 Authority Key Identifier: keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:03:d3:77:07:2c:e2:1c:de:60:88:92:42:78:14:3d:d1:39: 42:1d:30:ce:1c:e6:12:24:0b:aa:da:0d:b5:74:c1:99:55:5c: 1f:07:52:30:f4:d5:90:9a:30:9f:14:70:38:ed:de:0e:d4:22: d3:ba:a3:bd:a8:54:22:a7:65:69:d2:02:e9:73:a6:01:21:62: 7b:15:f2:1b:52:4f:94:e1:88:0c:79:90:8b:48:ae:51:18:ba: 94:d1:7a:68:40:a3:a3:45:27:6f:29:61:5f:fb:b1:b5:6c:8d: 2a:7a:3e:f6:5d:fd:47:20:fc:3f:b4:5e:f5:e6:1c:81:1f:91: f4:39:89:cb:90:bb:76:80:52:60:f8:0f:2d:75:7a:40:ad:8e: f8:63:89:60:71:83:a7:11:de:a6:17:2e:93:8e:24:8f:7f:b2: a9:39:60:69:23:e2:c3:b3:b8:b2:22:40:ec:23:6a:24:ec:15: fa:72:84:da:2d:cc:70:07:02:80:9f:ba:b2:45:fb:c0:e0:67: 8d:8a:27:a3:b0:9b:7d:d7:31:61:76:8c:4a:02:13:06:26:1b: 51:d3:35:8c:65:a4:cc:68:73:2b:ac:84:ba:4e:77:19:15:70: 80:75:96:fd:4e:16:ae:e2:82:5a:3a:b3:ac:90:b8:28:f6:35: 11:83:ad:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtaVt7GxAg6yyEkeY15OWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODEwY2MzZmQyMjgzMzhkOWI5Njk3MjVkOTViYjMzYzRl NjVhNDgwHhcNMjUxMjEwMTAwMTQzWhcNMjUxMjExMTAwMTQzWjAzMTEwLwYDVQQD EygwY2YyNzg5ZDI2N2Q1Y2I4YzRkZDhhZTY2MmRjMzVkZDFmYWNmNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnan+Luqxo/unAsrPlQE9q5JQWZ2v ShY/98r2DZcsIxIgPereRhKKjHIybH2JI/sLQ9f8CSEi+sVgrW8N/XiP47TtXUz0 k2ICirdtBNLPMQQ4l0EXTc7pF555JCDYCWHG7JWM5npsp5G8XMlCSWqny5zFjoxB jUaIpOYLwoPK8oGu3fE5NhxEU+0y7cv7SmscwME0eNX38VLK7d+GMFa8HUIufzfr CfqMb3UIu/gNXWJK9/Vlb7tXThqf7rQeKp+FcGmEJN7V58c6eVTO3hQEOqYTG+pL HrGSxjK6Mk/6EDralDqAH66ABcjxQq7m4kCh06UO4IthYS/qnaR/oQ5cGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzyeJ0mfVy4xN2K5mLcNd0frPQrMB8GA1UdIwQY MBaAFB+BDMP9IoM42blpcl2VuzPE5lpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUt ZjljMTgwYmE0ODAxLzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUtZjljMTgwYmE0ODAx LzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1APTdwcs 4hzeYIiSQngUPdE5Qh0wzhzmEiQLqtoNtXTBmVVcHwdSMPTVkJownxRwOO3eDtQi 07qjvahUIqdladIC6XOmASFiexXyG1JPlOGIDHmQi0iuURi6lNF6aECjo0Unbylh X/uxtWyNKno+9l39RyD8P7Re9eYcgR+R9DmJy5C7doBSYPgPLXV6QK2O+GOJYHGD pxHephcuk44kj3+yqTlgaSPiw7O4siJA7CNqJOwV+nKE2i3McAcCgJ+6skX7wOBn jYono7CbfdcxYXaMSgITBiYbUdM1jGWkzGhzK6yEuk53GRVwgHWW/U4WruKCWjqz rJC4KPY1EYOttQ== -----END CERTIFICATE-----Generated at Wed Dec 10 18:27:00 2025 by rpki-client