This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft File: H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json) Hash identifier: 84lfyWYfSXZb2lqozXVwb/kcAkZy9PPGZL9wMktA0Os= Subject key identifier: DC:BA:1E:07:C3:43:30:E9:4D:05:BE:AA:6E:36:5A:2D:B7:29:27:EB Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66 Certificate issuer: /CN=1f6fe007917eb6327be3061a9af6ec548d353066 Certificate serial: 019B4926C0109F7C32DCA84D9904DD8F09B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft Manifest number: 084C Signing time: Tue 23 Dec 2025 03:00:34 +0000 Manifest this update: Tue 23 Dec 2025 03:00:34 +0000 Manifest next update: Wed 24 Dec 2025 03:00:34 +0000 Files and hashes: 1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: yaFEeKBWxUb6aSb1D0b9WQpK0ysYQHrBYBkWo1nRcr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:c0:10:9f:7c:32:dc:a8:4d:99:04:dd:8f:09:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066 Validity Not Before: Dec 23 03:00:34 2025 GMT Not After : Dec 24 03:00:34 2025 GMT Subject: CN=dcba1e07c34330e94d05beaa6e365a2db72927eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:34:d9:8d:47:5d:65:9b:b3:a7:e5:50:66:fb: e1:a2:ac:5d:ae:9e:98:88:e9:b6:59:c0:52:d8:22: 6a:9d:10:7b:f7:b7:e6:65:47:91:13:91:7d:c5:d4: de:64:d4:d6:65:2c:5a:03:99:1e:87:49:18:b2:49: f7:bc:6b:18:bc:09:96:41:4a:91:2e:c5:20:7c:70: 77:5a:12:03:07:bc:ac:12:86:74:46:d3:a2:f5:f6: a6:1f:13:87:7f:95:c9:ff:fa:57:d5:9d:de:f9:b3: b9:7f:bd:62:67:50:78:b1:8f:25:eb:70:57:2a:ed: 64:8b:7f:c9:49:c8:1f:08:11:24:86:65:24:80:28: 9e:40:5f:57:3d:e6:4d:ec:38:fd:f8:09:0b:36:05: f2:ca:a4:71:ba:95:cc:c6:b5:3c:3d:85:f3:ff:80: 1a:79:b9:43:09:8b:ad:21:0b:e6:23:82:13:d0:0c: 06:30:0c:3d:7b:26:4f:dd:00:79:83:16:02:1d:9c: 28:7e:9d:ec:1d:bd:34:02:0e:d1:f4:51:69:48:64: 4e:64:46:07:bd:b1:57:3b:89:02:c5:e2:fa:73:cb: 02:ae:75:2b:70:84:88:b7:02:9d:2e:37:47:59:b6: a9:58:4d:39:98:a3:12:66:77:f7:13:be:23:e5:7f: 1e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BA:1E:07:C3:43:30:E9:4D:05:BE:AA:6E:36:5A:2D:B7:29:27:EB X509v3 Authority Key Identifier: keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ba:90:92:97:0c:53:2a:00:61:3d:b5:17:d5:8d:7b:1e:4d: 0e:46:66:91:33:de:94:02:72:de:53:6e:44:44:b6:2b:1b:08: 0e:ab:76:db:49:ed:28:94:0c:01:2e:88:93:5c:91:55:9d:54: e9:bc:1f:88:e1:b6:8d:6d:9b:98:b4:45:17:be:f9:f6:30:5f: 86:3d:62:fc:1b:ce:f0:b6:05:89:1c:ea:27:80:85:28:f6:d2: 85:33:c3:49:9a:22:09:94:12:7c:01:4f:a8:d2:a9:83:55:44: 23:8f:99:9c:eb:e5:64:fa:fb:8b:28:86:64:61:c8:79:22:6c: 9b:db:fb:f5:2e:84:3e:83:e6:ba:18:e4:d7:af:77:a3:78:4d: b5:33:20:b8:d4:e0:a4:99:01:e6:cb:e4:a9:eb:41:45:7f:d4: 8a:aa:3d:10:b3:da:9f:5d:8b:22:9a:34:1a:de:33:80:d7:1b: e4:9c:ec:47:49:de:77:a1:18:a3:aa:53:bc:ed:d6:34:3a:54: d2:11:a5:44:05:e9:5b:3f:a0:54:32:0a:e3:48:27:a6:0d:fb: ed:de:ac:76:f6:65:d1:48:69:79:45:28:3b:e8:c0:d2:f6:60: 13:b0:c4:10:47:aa:49:84:b0:4c:38:36:7f:a3:e8:82:92:5e: bb:da:10:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJsAQn3wy3KhNmQTdjwm1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNmZlMDA3OTE3ZWI2MzI3YmUzMDYxYTlhZjZlYzU0OGQz NTMwNjYwHhcNMjUxMjIzMDMwMDM0WhcNMjUxMjI0MDMwMDM0WjAzMTEwLwYDVQQD EyhkY2JhMWUwN2MzNDMzMGU5NGQwNWJlYWE2ZTM2NWEyZGI3MjkyN2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojTZjUddZZuzp+VQZvvhoqxdrp6Y iOm2WcBS2CJqnRB797fmZUeRE5F9xdTeZNTWZSxaA5keh0kYskn3vGsYvAmWQUqR LsUgfHB3WhIDB7ysEoZ0RtOi9famHxOHf5XJ//pX1Z3e+bO5f71iZ1B4sY8l63BX Ku1ki3/JScgfCBEkhmUkgCieQF9XPeZN7Dj9+AkLNgXyyqRxupXMxrU8PYXz/4Aa eblDCYutIQvmI4IT0AwGMAw9eyZP3QB5gxYCHZwofp3sHb00Ag7R9FFpSGROZEYH vbFXO4kCxeL6c8sCrnUrcISItwKdLjdHWbapWE05mKMSZnf3E74j5X8eowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNy6HgfDQzDpTQW+qm42Wi23KSfrMB8GA1UdIwQY MBaAFB9v4AeRfrYye+MGGpr27FSNNTBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJfZ0I1Ri10ako3NHdZYW12YnNWSTAxTUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xNTU1YjgtODUzZC00M2Q2LTgxMjQt MDliM2I4NzIyNjg4LzEvSDJfZ0I1Ri10ako3NHdZYW12YnNWSTAxTUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xNTU1YjgtODUzZC00M2Q2LTgxMjQtMDliM2I4NzIyNjg4 LzEvSDJfZ0I1Ri10ako3NHdZYW12YnNWSTAxTUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrqQkpcM UyoAYT21F9WNex5NDkZmkTPelAJy3lNuRES2KxsIDqt220ntKJQMAS6Ik1yRVZ1U 6bwfiOG2jW2bmLRFF7759jBfhj1i/BvO8LYFiRzqJ4CFKPbShTPDSZoiCZQSfAFP qNKpg1VEI4+ZnOvlZPr7iyiGZGHIeSJsm9v79S6EPoPmuhjk1693o3hNtTMguNTg pJkB5svkqetBRX/Uiqo9ELPan12LIpo0Gt4zgNcb5JzsR0ned6EYo6pTvO3WNDpU 0hGlRAXpWz+gVDIK40gnpg377d6sdvZl0UhpeUUoO+jA0vZgE7DEEEeqSYSwTDg2 f6PogpJeu9oQpg== -----END CERTIFICATE-----Generated at Tue Dec 23 11:06:33 2025 by rpki-client