This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft File: H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json) Hash identifier: Ns2IYfw0+4MLx3d1reJflyEFfr6trJDGksKxJ0KBXpU= Subject key identifier: 9E:38:65:89:CE:E3:AC:DD:A4:6E:40:3F:85:16:14:17:C5:75:39:C1 Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34 Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34 Certificate serial: 019B435C0E484C6FAD3D46FB77DE7E8D004B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft Manifest number: 17A4 Signing time: Mon 22 Dec 2025 00:01:04 +0000 Manifest this update: Mon 22 Dec 2025 00:01:04 +0000 Manifest next update: Tue 23 Dec 2025 00:01:04 +0000 Files and hashes: 1: BSSjKlHFChUEI7UNPGcgVGQIMGQ.roa (hash: gAyHnonUZ3YhlZs8Bw/b4nOc3ZBRTxJbg4YBiYurlLc=) 2: Du67LuSR--FTZRs33JDJ1Yh_Yqc.roa (hash: Uq3e+EYwHhZpPWXp5ry3+fcpGqjbo+HY9H6K+cMEsOA=) 3: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: 86IaI9wtTSI/1LnKTQ3hcIzsMepFNPNTPF+ZR2IOjPE=) 4: KKoRgXzLVxX8M0ge-PzEa-7tJn8.roa (hash: ZB5HW8dKxDtda/UB5dE3fN6v3EtscnOQiCRsaguyfYs=) 5: vPm_UYg8wre_NolD1hu0Cx9JGzE.roa (hash: Rws+EnLA4ahX/aasRkr6vitQH/K/D1I71mx2gpcNmkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 00:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:0e:48:4c:6f:ad:3d:46:fb:77:de:7e:8d:00:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34 Validity Not Before: Dec 22 00:01:04 2025 GMT Not After : Dec 23 00:01:04 2025 GMT Subject: CN=9e386589cee3acdda46e403f85161417c57539c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:48:e5:77:0f:e4:5a:ac:55:33:9b:ca:2c:4e: f7:47:4b:7a:92:02:da:49:44:0f:96:2a:de:88:ee: 55:26:d9:97:97:18:05:65:2b:f6:b0:65:9c:1f:ee: af:4a:40:fa:92:e8:94:14:98:26:48:90:42:83:e8: 0d:14:53:c7:00:fd:66:65:08:02:6e:f2:89:08:d9: 4b:be:d5:92:05:7e:f6:c6:83:4c:2d:6f:73:5a:08: a4:0c:14:ed:01:ca:87:12:19:4e:77:8e:06:79:f4: 1f:40:c0:1d:43:9c:a8:dd:42:d3:0e:e6:ef:ec:de: b9:f9:a4:c0:49:64:b3:97:4a:41:88:fe:33:c8:6a: 10:a2:d2:e6:15:02:03:27:ab:da:40:c2:5c:33:60: 00:a3:1f:25:c8:87:21:7d:f8:f9:ad:10:43:0c:85: ce:f8:b1:16:b8:24:71:2d:e1:7f:8e:18:cb:5b:63: 62:e4:8e:fb:1d:3a:38:a4:d6:35:ff:6e:af:95:ad: e3:a5:79:38:86:84:49:60:e0:41:e2:7f:3e:c7:0d: f1:54:e1:b3:64:e3:99:e5:2f:41:02:a8:89:9b:25: a5:04:08:1c:25:20:fa:e9:85:85:13:13:cd:60:21: 8b:c5:e1:32:8c:2e:ee:fc:0e:53:38:f2:8b:39:ff: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:38:65:89:CE:E3:AC:DD:A4:6E:40:3F:85:16:14:17:C5:75:39:C1 X509v3 Authority Key Identifier: keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:bc:10:10:6a:79:69:89:09:c1:d9:8d:55:9f:b2:49:88:73: 45:cd:c9:d6:a6:04:2c:0f:53:a9:cc:5f:bc:d1:79:92:9a:e0: 41:b3:3d:98:92:50:70:21:a6:28:4d:bd:c6:ae:6f:72:22:80: be:36:9f:ca:92:e4:15:27:cb:ba:23:89:d8:ad:e3:1b:9b:2f: ab:08:8f:91:30:17:45:1f:6a:7e:9c:96:6a:d0:8a:0f:21:96: d3:53:eb:a7:3b:18:66:9f:c4:95:0f:04:e1:2a:ac:f7:4a:32: f9:ab:3f:e7:9c:64:b8:e4:f1:81:9b:23:c5:43:71:01:c8:52: da:5b:49:ed:dc:3f:61:86:89:90:2c:a8:16:db:80:d0:56:2f: b9:46:ca:5a:de:9a:47:71:84:0a:74:82:7d:68:54:58:c6:4f: f3:35:22:10:a9:0b:68:76:09:20:04:5c:8d:66:6a:6a:ce:fb: 6e:6c:40:c8:5a:5e:98:91:af:36:b5:cd:b6:40:08:24:6c:b8: db:8f:6b:ae:a5:0f:d7:af:0b:64:cd:8c:79:eb:14:62:ef:f4: c8:d6:da:f2:0a:49:f2:de:7b:26:ae:20:cf:80:5f:9b:2f:e7: 70:c0:01:e5:5d:00:60:30:75:8f:ac:9e:bf:c0:2b:1f:a6:11: 99:24:49:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXA5ITG+tPUb7d95+jQBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjFhYTVkMWJlZmQ3YTBmZTNlNGRmZTNhYThkYTczZWZj ZmJhMzQwHhcNMjUxMjIyMDAwMTA0WhcNMjUxMjIzMDAwMTA0WjAzMTEwLwYDVQQD Eyg5ZTM4NjU4OWNlZTNhY2RkYTQ2ZTQwM2Y4NTE2MTQxN2M1NzUzOWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEjldw/kWqxVM5vKLE73R0t6kgLa SUQPlireiO5VJtmXlxgFZSv2sGWcH+6vSkD6kuiUFJgmSJBCg+gNFFPHAP1mZQgC bvKJCNlLvtWSBX72xoNMLW9zWgikDBTtAcqHEhlOd44GefQfQMAdQ5yo3ULTDubv 7N65+aTASWSzl0pBiP4zyGoQotLmFQIDJ6vaQMJcM2AAox8lyIchffj5rRBDDIXO +LEWuCRxLeF/jhjLW2Ni5I77HTo4pNY1/26vla3jpXk4hoRJYOBB4n8+xw3xVOGz ZOOZ5S9BAqiJmyWlBAgcJSD66YWFExPNYCGLxeEyjC7u/A5TOPKLOf8NRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ44ZYnO46zdpG5AP4UWFBfFdTnBMB8GA1UdIwQY MBaAFB9hql0b79eg/j5N/jqo2nPvz7o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUt YzYyMWU4ZGY5NWZmLzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUtYzYyMWU4ZGY5NWZm LzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLwQEGp5 aYkJwdmNVZ+ySYhzRc3J1qYELA9TqcxfvNF5kprgQbM9mJJQcCGmKE29xq5vciKA vjafypLkFSfLuiOJ2K3jG5svqwiPkTAXRR9qfpyWatCKDyGW01PrpzsYZp/ElQ8E 4Sqs90oy+as/55xkuOTxgZsjxUNxAchS2ltJ7dw/YYaJkCyoFtuA0FYvuUbKWt6a R3GECnSCfWhUWMZP8zUiEKkLaHYJIARcjWZqas77bmxAyFpemJGvNrXNtkAIJGy4 249rrqUP168LZM2MeesUYu/0yNba8gpJ8t57Jq4gz4Bfmy/ncMAB5V0AYDB1j6ye v8ArH6YRmSRJmw== -----END CERTIFICATE-----Generated at Mon Dec 22 08:49:04 2025 by rpki-client