This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json) Hash identifier: wErxHx0XCTJREUd1Q3KLqdSNwulss33ymshcSwVELN4= Subject key identifier: 27:78:30:29:1D:C0:22:6F:6E:7E:B4:A9:33:95:15:AF:73:98:0F:D8 Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2 Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2 Certificate serial: 019B47023DDC9EA6EEDFE366B4889BD135B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft Manifest number: 072B Signing time: Mon 22 Dec 2025 17:01:27 +0000 Manifest this update: Mon 22 Dec 2025 17:01:27 +0000 Manifest next update: Tue 23 Dec 2025 17:01:27 +0000 Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: ot93LptWFDsvyk2lhNlSVV03dNrUa0+TLBFC3kkMxf8=) 2: neQhSGrd27w6Xn2chZDgwEsCrLI.roa (hash: 1tkSubS/cwYJgj12QwQ+XvFzRT5l/tNW9QOj+Oo5EeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:3d:dc:9e:a6:ee:df:e3:66:b4:88:9b:d1:35:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2 Validity Not Before: Dec 22 17:01:27 2025 GMT Not After : Dec 23 17:01:27 2025 GMT Subject: CN=277830291dc0226f6e7eb4a9339515af73980fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:24:b3:4b:b1:e5:23:32:6c:a9:a7:77:fb: e3:8d:a3:80:f2:f1:01:19:53:d9:30:e1:ed:d3:b0: 54:98:e5:69:f2:79:57:35:0d:ff:fd:0d:e2:b8:ea: 55:dc:ea:09:77:e7:a6:d4:5f:6d:c9:a6:8b:df:96: be:e3:ac:5b:ce:b2:7c:b7:f7:51:49:84:a0:d5:c2: 53:36:24:98:3c:b5:d7:57:af:c0:d9:46:d0:c9:0c: 9d:f7:54:c8:56:a7:53:ff:25:0c:6c:be:66:cf:fc: 80:82:d8:45:a4:4c:99:47:5a:32:59:85:4d:15:a0: 02:61:0c:16:35:03:9f:26:85:0a:ee:9c:4c:7e:1e: ea:06:e9:5e:bc:c4:f1:d7:45:08:64:bf:26:25:c1: 64:56:d6:24:be:bd:7f:eb:cf:a3:40:47:c1:72:30: d4:7d:92:f3:a3:b7:11:53:ef:d6:da:dc:92:b3:b8: d3:47:e8:5c:6a:76:f9:e3:53:82:b9:bd:58:a2:3a: fd:2e:cd:94:95:23:ef:cb:da:ba:88:a7:70:7c:1e: d1:d7:b8:cd:a5:49:6e:e9:33:cf:fe:8d:9e:38:7a: 66:4b:4c:2e:0b:71:a8:90:13:68:45:4d:ef:4b:f9: 11:81:76:12:ce:41:4a:cc:b1:c1:c2:04:ed:c3:75: 64:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:78:30:29:1D:C0:22:6F:6E:7E:B4:A9:33:95:15:AF:73:98:0F:D8 X509v3 Authority Key Identifier: keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:6d:5b:f0:2d:b2:50:31:7e:ba:e9:43:82:0a:71:b5:06:b8: d0:7d:fc:5c:20:80:d4:fc:38:6b:36:1b:75:7c:35:73:08:6f: 53:67:d3:2c:f6:70:c3:6a:1a:39:56:60:fe:4d:a6:a5:3c:59: 3d:95:98:26:7e:52:81:5c:ce:42:d9:6b:c8:0e:49:9f:e9:20: d6:6e:81:02:17:04:55:5a:81:2f:b6:74:1e:31:81:29:a2:0f: f5:01:7b:77:8e:6b:20:05:42:c8:55:10:f1:4c:9e:ea:0f:9a: 79:3e:40:b7:98:db:80:45:b3:52:55:fc:1b:e9:f3:dd:82:be: 53:42:d1:ed:a0:85:31:b1:5b:96:1a:67:b1:85:0d:43:6d:c5: a1:54:ad:21:62:e9:6a:c2:af:21:08:62:ed:0f:f8:a6:4a:a8: af:d7:e1:82:18:49:8f:d2:b9:10:2a:9a:fe:c4:b1:38:28:ec: b0:f8:5a:76:b9:3b:5c:c0:16:ab:b5:be:7f:37:76:8c:3f:79: 89:6f:f0:85:cb:4e:1d:fe:17:e8:fd:7e:38:c1:17:f7:83:a2: d9:c3:01:27:2a:4b:a5:7c:39:67:83:6d:11:28:b4:32:48:1e: 5f:f1:12:d4:e8:66:a2:66:a3:11:e2:db:9b:2b:d9:5c:73:eb: 38:09:30:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAj3cnqbu3+NmtIib0TW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NWY0MTJhZGIxOGQ0MmZhZGQwYTg1ODczNzE4ZGFkYTkz MWQxYzIwHhcNMjUxMjIyMTcwMTI3WhcNMjUxMjIzMTcwMTI3WjAzMTEwLwYDVQQD EygyNzc4MzAyOTFkYzAyMjZmNmU3ZWI0YTkzMzk1MTVhZjczOTgwZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2cks0ux5SMybKmnd/vjjaOA8vEB GVPZMOHt07BUmOVp8nlXNQ3//Q3iuOpV3OoJd+em1F9tyaaL35a+46xbzrJ8t/dR SYSg1cJTNiSYPLXXV6/A2UbQyQyd91TIVqdT/yUMbL5mz/yAgthFpEyZR1oyWYVN FaACYQwWNQOfJoUK7pxMfh7qBulevMTx10UIZL8mJcFkVtYkvr1/68+jQEfBcjDU fZLzo7cRU+/W2tySs7jTR+hcanb541OCub1Yojr9Ls2UlSPvy9q6iKdwfB7R17jN pUlu6TPP/o2eOHpmS0wuC3GokBNoRU3vS/kRgXYSzkFKzLHBwgTtw3VkuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCd4MCkdwCJvbn60qTOVFa9zmA/YMB8GA1UdIwQY MBaAFIdfQSrbGNQvrdCoWHNxja2pMdHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iODQxY2MtZDY2My00NjMzLTljNDkt MTQ3ZTM4NmMwMTUwLzEvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iODQxY2MtZDY2My00NjMzLTljNDktMTQ3ZTM4NmMwMTUw LzEvaDE5Qkt0c1kxQy10MEtoWWMzR05yYWt4MGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg21b8C2y UDF+uulDggpxtQa40H38XCCA1Pw4azYbdXw1cwhvU2fTLPZww2oaOVZg/k2mpTxZ PZWYJn5SgVzOQtlryA5Jn+kg1m6BAhcEVVqBL7Z0HjGBKaIP9QF7d45rIAVCyFUQ 8Uye6g+aeT5At5jbgEWzUlX8G+nz3YK+U0LR7aCFMbFblhpnsYUNQ23FoVStIWLp asKvIQhi7Q/4pkqor9fhghhJj9K5ECqa/sSxOCjssPhadrk7XMAWq7W+fzd2jD95 iW/whctOHf4X6P1+OMEX94Oi2cMBJypLpXw5Z4NtESi0MkgeX/ES1OhmomajEeLb myvZXHPrOAkwFQ== -----END CERTIFICATE-----Generated at Tue Dec 23 02:07:15 2025 by rpki-client