This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft File: H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json) Hash identifier: PnE+EB91RiMstFu/aDP00CojNO3z59KjfEPBdktiYYE= Subject key identifier: C1:A6:8D:69:F0:22:49:02:51:28:68:4B:D8:51:25:8B:54:7E:0F:DA Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF Certificate issuer: /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf Certificate serial: 019B4438473CAD2345ADFDD2975D9B8C838C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft Manifest number: 0FC1 Signing time: Mon 22 Dec 2025 04:01:37 +0000 Manifest this update: Mon 22 Dec 2025 04:01:37 +0000 Manifest next update: Tue 23 Dec 2025 04:01:37 +0000 Files and hashes: 1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: QDPtgxcvp36v7CUU/Zu9c2UmJwJ1a4Dh1ZLlpm4SNHs=) 2: HG7ydsUTNCZ_p5tjqM9MAsrHmMo.roa (hash: YwMcAmzd1JHv5zjJMKIlR+Jtl9zncuOvMBHEZcetMIA=) 3: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (hash: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:47:3c:ad:23:45:ad:fd:d2:97:5d:9b:8c:83:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf Validity Not Before: Dec 22 04:01:37 2025 GMT Not After : Dec 23 04:01:37 2025 GMT Subject: CN=c1a68d69f02249025128684bd851258b547e0fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:09:5e:a5:c9:1f:8a:fb:9b:54:5b:f9:23:b4: 1d:6b:59:7f:59:cc:08:0d:20:23:5d:f6:dd:e2:6e: fa:9e:34:48:36:1a:7d:bb:6f:67:e1:0f:99:58:eb: 20:18:99:92:b5:72:7e:65:7d:45:c4:79:42:64:5a: 9e:d3:25:7b:8c:38:e7:d5:5f:0c:a0:d9:41:1d:34: 08:06:1b:3c:df:78:15:67:71:dc:0b:f5:93:25:86: 25:f2:a0:00:a9:06:a5:50:07:b2:b0:49:69:81:88: 2e:0c:6c:6a:3e:d9:90:e2:f7:39:08:0e:25:0e:9f: 60:bb:ea:69:4b:10:22:31:83:34:69:f2:96:3c:ea: 6f:95:32:b1:14:f8:80:6e:18:3f:f1:18:69:91:6a: b8:4d:23:2e:50:79:63:42:4d:64:54:18:4a:37:0d: 3e:ff:db:05:6a:21:42:50:05:53:ab:08:64:e7:c9: 7a:6b:fd:25:2b:e6:1a:93:dd:2f:9b:ee:9d:28:41: 38:2f:45:33:48:59:07:69:1e:10:36:c9:a2:19:7d: f3:39:db:d6:e8:e5:cd:16:a6:c3:9f:67:85:bb:e7: de:7b:ba:21:8d:27:4f:45:fa:18:b5:73:96:2f:a2: c4:fd:aa:82:17:5a:c3:56:89:5f:32:62:92:3d:1e: 28:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A6:8D:69:F0:22:49:02:51:28:68:4B:D8:51:25:8B:54:7E:0F:DA X509v3 Authority Key Identifier: keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:89:3c:64:e5:6a:fb:67:e8:4c:27:7b:48:b3:eb:a5:58:de: 93:ab:02:66:c3:25:ac:6e:a5:4b:68:68:c0:97:3d:e1:c0:2b: eb:a9:68:f5:19:27:6f:4b:32:a6:89:ee:fb:df:9e:5a:6e:c6: c2:00:cd:f8:0c:be:08:76:cc:cd:f5:83:4c:bb:63:e0:2e:e6: 10:0f:47:14:90:51:1b:e4:57:19:44:c1:c7:20:9f:10:b6:20: 64:25:26:c6:2e:75:fe:e4:d1:5a:b9:bb:dc:69:08:a4:82:bf: c9:9a:be:c5:06:d2:3d:61:2a:77:c1:20:68:fd:78:83:98:aa: e6:c2:8c:77:58:86:dc:95:9b:c7:f5:45:e5:bc:68:98:4a:65: 34:3b:d4:bf:96:a1:e1:6f:32:c7:8a:52:4f:a1:5b:49:2c:7e: 0f:da:b5:2f:c9:82:05:b6:79:44:59:d6:f7:7c:4c:a6:79:11: 80:ae:7f:9f:c6:68:0a:c9:d2:75:a3:04:a8:85:3f:93:59:3c: 40:88:2b:03:5f:d3:38:6b:1b:19:17:0d:7c:03:f8:f0:ee:5d: 47:fb:85:b0:e2:b5:99:11:33:c6:34:e5:fc:17:a5:c9:1e:5b: 10:34:d4:e3:c0:c8:cb:0f:57:49:30:6a:33:a0:c8:63:9a:b4: 81:3a:61:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOEc8rSNFrf3Sl12bjIOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOTRkMTM1NGU3MjMwNmE5ZjdmOTUxZjkzZjUyZThkMTNh NDBhYmYwHhcNMjUxMjIyMDQwMTM3WhcNMjUxMjIzMDQwMTM3WjAzMTEwLwYDVQQD EyhjMWE2OGQ2OWYwMjI0OTAyNTEyODY4NGJkODUxMjU4YjU0N2UwZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAlepckfivubVFv5I7Qda1l/WcwI DSAjXfbd4m76njRINhp9u29n4Q+ZWOsgGJmStXJ+ZX1FxHlCZFqe0yV7jDjn1V8M oNlBHTQIBhs833gVZ3HcC/WTJYYl8qAAqQalUAeysElpgYguDGxqPtmQ4vc5CA4l Dp9gu+ppSxAiMYM0afKWPOpvlTKxFPiAbhg/8RhpkWq4TSMuUHljQk1kVBhKNw0+ /9sFaiFCUAVTqwhk58l6a/0lK+Yak90vm+6dKEE4L0UzSFkHaR4QNsmiGX3zOdvW 6OXNFqbDn2eFu+fee7ohjSdPRfoYtXOWL6LE/aqCF1rDVolfMmKSPR4ofwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGmjWnwIkkCUShoS9hRJYtUfg/aMB8GA1UdIwQY MBaAFB+U0TVOcjBqn3+VH5P1Lo0TpAq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kZjk2YTUtMzE1Ny00ODgzLTgwODMt MjEyZjg5M2ZjODM1LzEvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kZjk2YTUtMzE1Ny00ODgzLTgwODMtMjEyZjg5M2ZjODM1 LzEvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYk8ZOVq +2foTCd7SLPrpVjek6sCZsMlrG6lS2howJc94cAr66lo9Rknb0syponu+9+eWm7G wgDN+Ay+CHbMzfWDTLtj4C7mEA9HFJBRG+RXGUTBxyCfELYgZCUmxi51/uTRWrm7 3GkIpIK/yZq+xQbSPWEqd8EgaP14g5iq5sKMd1iG3JWbx/VF5bxomEplNDvUv5ah 4W8yx4pST6FbSSx+D9q1L8mCBbZ5RFnW93xMpnkRgK5/n8ZoCsnSdaMEqIU/k1k8 QIgrA1/TOGsbGRcNfAP48O5dR/uFsOK1mREzxjTl/BelyR5bEDTU48DIyw9XSTBq M6DIY5q0gTphHA== -----END CERTIFICATE-----Generated at Mon Dec 22 05:30:22 2025 by rpki-client