This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft File: rHI58-_bN5H1vlVSmbXYFpfz0BI.mft (raw, json) Hash identifier: ulbkL0WHp3OLVnt2QUkXWnOkBDu/uUtdzWTE9dVI7SE= Subject key identifier: CE:83:38:BA:80:0A:5B:8C:13:66:50:87:98:FD:71:9E:F1:8F:9C:50 Authority key identifier: AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12 Certificate issuer: /CN=ac7239f3efdb3791f5be555299b5d81697f3d012 Certificate serial: 019B503BE96F12AED3D264ACD5B5D1D6A456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft Manifest number: 134E Signing time: Wed 24 Dec 2025 12:01:02 +0000 Manifest this update: Wed 24 Dec 2025 12:01:02 +0000 Manifest next update: Thu 25 Dec 2025 12:01:02 +0000 Files and hashes: 1: rHI58-_bN5H1vlVSmbXYFpfz0BI.crl (hash: a0E7FvEzHEO4UqX8lQdeul7Dgpkn+nqnzi2S8BOmzxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3b:e9:6f:12:ae:d3:d2:64:ac:d5:b5:d1:d6:a4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7239f3efdb3791f5be555299b5d81697f3d012 Validity Not Before: Dec 24 12:01:02 2025 GMT Not After : Dec 25 12:01:02 2025 GMT Subject: CN=ce8338ba800a5b8c1366508798fd719ef18f9c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:8a:c6:fc:f5:b6:24:64:11:b1:63:65:24: dd:90:7b:75:c5:d1:70:03:80:0f:46:02:17:65:04: 60:d2:90:00:d8:b5:cf:c1:39:3b:b6:14:d2:34:88: 96:42:ee:1b:e7:7e:f1:2a:f2:3a:e6:19:ff:73:7d: bf:09:84:15:d4:95:b7:2e:4f:26:fd:27:1a:2b:57: 80:8e:c3:11:f8:91:f7:68:81:b6:86:08:65:3d:00: 2f:72:2f:49:28:03:38:f6:36:39:df:da:56:b5:24: 96:86:7c:67:26:f2:ec:b0:6b:a0:fa:3b:37:6f:28: 49:32:39:fc:a4:a7:b7:23:b0:97:2e:12:f4:4e:6e: 8d:66:3d:15:89:f0:78:61:e4:10:94:ca:28:8e:58: c8:37:52:0c:80:dc:18:b1:59:90:ac:be:15:c2:12: 88:c6:bc:3c:e3:e4:9e:76:b6:fa:43:c3:0c:b6:dd: fb:db:9e:49:ba:b3:c6:ae:0f:4b:59:3c:fe:da:e9: 47:cb:4d:f8:f0:ab:6b:3a:7a:5d:fc:c7:50:8c:c1: cb:10:1d:b0:f2:4a:07:6d:f1:4a:dc:18:c3:03:bb: c5:57:b4:49:e4:65:b9:08:ae:29:c1:05:f5:ff:73: 68:b0:ad:db:a2:ad:bb:92:38:4f:cd:3d:8b:eb:26: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:83:38:BA:80:0A:5B:8C:13:66:50:87:98:FD:71:9E:F1:8F:9C:50 X509v3 Authority Key Identifier: keyid:AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:1c:3f:f6:01:03:95:93:43:a5:47:0a:1d:4e:06:79:1c:dc: ef:6f:eb:82:1b:1f:6c:f2:f5:e1:90:3c:42:96:98:18:2c:a8: e3:20:0b:a1:6a:2b:32:10:59:28:2f:9e:9e:5a:5d:50:21:3e: a0:57:31:8f:20:34:ba:61:0a:d7:bf:a4:c5:86:f9:5d:71:d2: 80:33:0e:86:a0:82:89:fd:ac:a0:65:8b:f5:92:9b:90:47:db: 76:5b:c8:e3:8e:79:73:ba:e6:91:63:3d:1e:4f:68:85:18:a0: 81:22:f3:e4:aa:ab:d8:5e:0d:11:eb:f2:15:2c:af:59:80:c0: dd:56:73:12:94:2e:9a:c5:a9:0b:f3:9d:64:84:d3:2c:6f:47: d5:3c:99:c9:ec:10:2d:38:23:2c:2d:cf:95:ae:76:ea:ac:82: f9:04:c3:e3:3c:c7:d9:6f:48:25:25:4f:60:a4:01:cd:d8:9e: 83:85:95:b4:48:90:00:e6:c5:86:03:e5:82:36:f6:05:a3:0d: 82:dd:d6:52:fc:cd:11:59:15:d3:91:fa:fc:7b:5f:be:54:bf: 00:ca:2d:95:56:6d:4c:3a:b9:1a:98:8e:e6:e7:41:86:cb:15: 70:84:d6:fb:5c:d6:47:98:fa:c1:44:e8:60:6f:a2:13:39:a4: fd:d7:1e:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQO+lvEq7T0mSs1bXR1qRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNzIzOWYzZWZkYjM3OTFmNWJlNTU1Mjk5YjVkODE2OTdm M2QwMTIwHhcNMjUxMjI0MTIwMTAyWhcNMjUxMjI1MTIwMTAyWjAzMTEwLwYDVQQD EyhjZTgzMzhiYTgwMGE1YjhjMTM2NjUwODc5OGZkNzE5ZWYxOGY5YzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr96Kxvz1tiRkEbFjZSTdkHt1xdFw A4APRgIXZQRg0pAA2LXPwTk7thTSNIiWQu4b537xKvI65hn/c32/CYQV1JW3Lk8m /ScaK1eAjsMR+JH3aIG2hghlPQAvci9JKAM49jY539pWtSSWhnxnJvLssGug+js3 byhJMjn8pKe3I7CXLhL0Tm6NZj0VifB4YeQQlMoojljIN1IMgNwYsVmQrL4VwhKI xrw84+Sedrb6Q8MMtt37255JurPGrg9LWTz+2ulHy0348KtrOnpd/MdQjMHLEB2w 8koHbfFK3BjDA7vFV7RJ5GW5CK4pwQX1/3NosK3boq27kjhPzT2L6yY3bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6DOLqACluME2ZQh5j9cZ7xj5xQMB8GA1UdIwQY MBaAFKxyOfPv2zeR9b5VUpm12BaX89ASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckhJNTgtX2JONUgxdmxWU21iWFlGcGZ6MEJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jODkwZmMtMmNmOC00MDc1LTg3NWQt Y2NmYzdmMDdiOWNiLzEvckhJNTgtX2JONUgxdmxWU21iWFlGcGZ6MEJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9jODkwZmMtMmNmOC00MDc1LTg3NWQtY2NmYzdmMDdiOWNi LzEvckhJNTgtX2JONUgxdmxWU21iWFlGcGZ6MEJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxw/9gED lZNDpUcKHU4GeRzc72/rghsfbPL14ZA8QpaYGCyo4yALoWorMhBZKC+enlpdUCE+ oFcxjyA0umEK17+kxYb5XXHSgDMOhqCCif2soGWL9ZKbkEfbdlvI4455c7rmkWM9 Hk9ohRiggSLz5Kqr2F4NEevyFSyvWYDA3VZzEpQumsWpC/OdZITTLG9H1TyZyewQ LTgjLC3Pla526qyC+QTD4zzH2W9IJSVPYKQBzdieg4WVtEiQAObFhgPlgjb2BaMN gt3WUvzNEVkV05H6/HtfvlS/AMotlVZtTDq5GpiO5udBhssVcITW+1zWR5j6wUTo YG+iEzmk/dcefw== -----END CERTIFICATE-----Generated at Wed Dec 24 17:00:27 2025 by rpki-client