This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json) Hash identifier: JS4gNjcDF9rjJlc6QB8c4V+sdtYG5tPB39WXYjbGDAw= Subject key identifier: 5B:64:7A:5B:BA:1C:16:82:A8:DE:76:AB:73:C1:50:13:88:C6:C7:76 Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41 Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941 Certificate serial: 019B3BA2369DDA165C714E46D27A617F859B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft Manifest number: 0E79 Signing time: Sat 20 Dec 2025 12:00:45 +0000 Manifest this update: Sat 20 Dec 2025 12:00:45 +0000 Manifest next update: Sun 21 Dec 2025 12:00:45 +0000 Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: ZSTDPn96LJNCQ+K0ZoyMrRDUal8cY5vmFGDqhn43EA0=) 2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:36:9d:da:16:5c:71:4e:46:d2:7a:61:7f:85:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941 Validity Not Before: Dec 20 12:00:45 2025 GMT Not After : Dec 21 12:00:45 2025 GMT Subject: CN=5b647a5bba1c1682a8de76ab73c1501388c6c776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:5c:67:da:41:93:96:dc:b8:bf:1f:e3:a7: a5:00:7d:63:14:f6:0a:69:c4:b7:84:56:58:9b:fc: b7:ce:67:51:69:28:01:d4:be:7b:00:ed:72:fb:7f: 88:71:c5:79:2f:80:0b:d0:5c:e7:17:19:e6:a0:4a: 4f:d1:62:7c:a7:5d:9d:41:88:2c:b8:18:34:1a:62: 2e:1a:bc:12:34:5f:27:e1:70:6d:c5:84:95:dc:d8: c6:45:8a:61:6c:56:36:61:17:dc:02:3d:e8:07:e0: c8:15:12:09:8f:89:59:60:27:63:de:8a:cd:5d:f9: 8a:4e:62:22:31:e5:c7:68:84:dd:0e:14:84:50:34: 09:53:bd:73:8e:2d:0b:a8:00:64:bf:b1:19:24:c9: 61:2f:78:80:72:8d:e0:a3:5a:7b:3d:eb:02:95:41: ad:80:82:ac:92:ca:08:13:da:d7:84:c7:7f:7f:1c: 92:24:5e:0f:d7:6c:f2:a8:2e:90:8e:45:b2:27:ce: c7:75:7f:30:5b:61:59:58:d2:da:a6:56:eb:be:35: 16:6a:16:56:fa:f7:88:c9:8b:e0:85:13:6b:d7:89: b8:f6:45:c7:94:8e:d4:36:4f:82:d3:0f:93:68:8d: 99:7f:0a:b9:a1:92:df:e7:b6:c2:e4:c3:d2:43:a9: bb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:64:7A:5B:BA:1C:16:82:A8:DE:76:AB:73:C1:50:13:88:C6:C7:76 X509v3 Authority Key Identifier: keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:20:e3:6b:5a:46:b6:34:72:79:b5:67:8c:bd:f6:b3:7f:05: e0:25:71:c1:02:3f:c8:f8:fc:48:3e:e9:94:69:45:79:3d:fe: a0:f1:55:67:10:73:3f:9f:0e:48:c3:54:00:88:b9:49:28:9e: 0f:2d:f7:4d:17:69:49:84:07:55:a4:23:d3:bb:22:0b:09:15: 1b:3b:fb:5f:82:1c:a2:b9:37:90:15:c1:b7:ff:08:bf:3f:d5: 3f:d0:6e:b1:04:3f:a2:26:29:1f:f3:37:e1:e7:4a:6d:10:d3: b0:f3:c5:ec:cf:60:6a:8b:a2:63:15:c9:3c:03:62:50:9c:ea: f3:c8:cd:70:d6:93:d3:3c:fa:ac:7f:5e:fb:e6:27:e0:60:7e: 75:d2:e0:78:36:a4:d5:37:de:f8:1a:b8:a4:70:5d:1e:9b:06: 25:fb:76:d4:21:35:b6:1a:cf:11:78:6d:9f:b9:1d:f4:8a:3e: ff:6a:3a:23:77:dc:c5:ad:f5:0d:b8:e1:64:21:17:f8:a5:70: 94:9b:ad:85:c3:6e:f0:aa:37:5d:26:47:a0:e8:a7:0a:f6:d7: 80:b7:e4:f6:19:2e:35:3a:0b:6e:2d:bc:d1:4f:1d:ba:6e:c0: 11:c6:31:f9:60:a3:d9:74:14:df:f0:99:08:b6:66:4f:bd:e8: eb:9f:b8:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ojad2hZccU5G0nphf4WbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDU2Y2M1YjdjZTNjMjA3OWY3ODZmZWMxZGZiY2IyNTI0 Mzk5NDEwHhcNMjUxMjIwMTIwMDQ1WhcNMjUxMjIxMTIwMDQ1WjAzMTEwLwYDVQQD Eyg1YjY0N2E1YmJhMWMxNjgyYThkZTc2YWI3M2MxNTAxMzg4YzZjNzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRNcZ9pBk5bcuL8f46elAH1jFPYK acS3hFZYm/y3zmdRaSgB1L57AO1y+3+IccV5L4AL0FznFxnmoEpP0WJ8p12dQYgs uBg0GmIuGrwSNF8n4XBtxYSV3NjGRYphbFY2YRfcAj3oB+DIFRIJj4lZYCdj3orN XfmKTmIiMeXHaITdDhSEUDQJU71zji0LqABkv7EZJMlhL3iAco3go1p7PesClUGt gIKsksoIE9rXhMd/fxySJF4P12zyqC6QjkWyJ87HdX8wW2FZWNLaplbrvjUWahZW +veIyYvghRNr14m49kXHlI7UNk+C0w+TaI2Zfwq5oZLf57bC5MPSQ6m7aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtkelu6HBaCqN52q3PBUBOIxsd2MB8GA1UdIwQY MBaAFB9FbMW3zjwgefeG/sHfvLJSQ5lBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzIt YmQ3ZDM0NTFhYTY2LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzItYmQ3ZDM0NTFhYTY2 LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCDja1pG tjRyebVnjL32s38F4CVxwQI/yPj8SD7plGlFeT3+oPFVZxBzP58OSMNUAIi5SSie Dy33TRdpSYQHVaQj07siCwkVGzv7X4Icork3kBXBt/8Ivz/VP9BusQQ/oiYpH/M3 4edKbRDTsPPF7M9gaouiYxXJPANiUJzq88jNcNaT0zz6rH9e++Yn4GB+ddLgeDak 1Tfe+Bq4pHBdHpsGJft21CE1thrPEXhtn7kd9Io+/2o6I3fcxa31DbjhZCEX+KVw lJuthcNu8Ko3XSZHoOinCvbXgLfk9hkuNToLbi280U8dum7AEcYx+WCj2XQU3/CZ CLZmT73o65+4DQ== -----END CERTIFICATE-----Generated at Sat Dec 20 13:14:05 2025 by rpki-client