This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft File: H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft (raw, json) Hash identifier: 18bNzXeXgjTJNWU7eHQyvMcPFU/11aTjz4M0xlKJ15g= Subject key identifier: BE:3C:8F:80:B9:85:1E:A3:65:FA:46:AB:F2:6B:E6:BC:F7:EE:94:E1 Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E Certificate issuer: /CN=1f4439c757b6b646df16844f5a529ee27520736e Certificate serial: 019B451331F26BFAC65227F4AEDEA9BD3C9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft Manifest number: 0653 Signing time: Mon 22 Dec 2025 08:00:44 +0000 Manifest this update: Mon 22 Dec 2025 08:00:44 +0000 Manifest next update: Tue 23 Dec 2025 08:00:44 +0000 Files and hashes: 1: H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl (hash: qrZAouWpXAfUQJhEi+Ia+zRpz9rU9jU/BjGGDJmqczw=) 2: y-Jj6DyqKWn6BYWapkymjYaL5QU.roa (hash: gn98KweekT80SkX3KfiuOUzbXsngJC/J9zd5eWO66No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:31:f2:6b:fa:c6:52:27:f4:ae:de:a9:bd:3c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e Validity Not Before: Dec 22 08:00:44 2025 GMT Not After : Dec 23 08:00:44 2025 GMT Subject: CN=be3c8f80b9851ea365fa46abf26be6bcf7ee94e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:50:f1:21:ad:61:26:80:f0:9d:d4:6e:1f:d3: ea:f3:48:fb:bd:a3:f7:5c:5e:93:88:73:18:33:2e: ce:3c:e5:12:e5:e2:2f:3e:13:49:db:ad:94:6c:29: 4b:46:2f:91:d3:7a:ed:0a:6f:77:fd:eb:5b:35:e4: 97:d8:cb:98:8e:23:7c:71:b9:fa:41:f7:2d:59:4b: 1c:89:cf:b9:bd:b9:45:9d:06:32:ca:aa:1b:0d:12: 22:52:94:7a:ca:c0:f7:a7:e1:3a:41:61:3c:82:85: 96:04:9f:dd:a9:d4:ca:79:69:4b:a7:0d:2a:32:f3: 2c:e9:f7:c5:ef:ae:75:f9:2f:fe:25:f9:af:1a:22: 15:1c:a0:56:e3:fb:d1:c1:eb:ed:79:0f:f1:e3:aa: 43:86:86:ce:fe:52:87:ca:b0:9d:0d:d5:32:a4:1a: 21:25:e1:bc:2b:52:4d:bb:e8:c6:bd:86:eb:ec:59: c5:3d:43:d7:c6:5a:b9:2c:51:42:5f:8f:b5:a0:b2: 7e:b6:88:12:80:32:08:51:20:d5:bb:83:5b:75:f6: 5e:4c:b1:28:5f:a6:71:3e:46:fc:ea:60:b2:59:e9: 50:42:3b:0e:57:39:48:a4:16:f3:b7:c2:93:18:ba: fc:96:39:a3:17:0f:fc:3d:20:b3:bd:cc:90:c5:d4: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3C:8F:80:B9:85:1E:A3:65:FA:46:AB:F2:6B:E6:BC:F7:EE:94:E1 X509v3 Authority Key Identifier: keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:29:9a:b0:ca:e3:4b:1e:fa:fc:72:93:a8:7b:5f:9e:9f:2a: 39:49:98:95:07:9f:68:d5:c9:65:e7:f6:04:e0:b6:3e:dd:11: 15:ac:45:5f:a6:42:68:76:7c:ae:84:69:f1:1a:aa:15:b8:24: 8e:e4:09:f6:33:83:4b:c8:48:11:7b:ab:12:91:80:86:21:60: af:58:5d:b5:3e:6f:c3:d7:11:c6:8f:45:7c:c6:44:9f:89:37: b9:1d:58:9c:ac:6a:ff:07:ba:52:94:f6:c1:48:5b:a0:cf:d4: c2:6e:f2:27:64:6c:80:64:f9:b4:77:b7:fb:73:2f:35:e7:14: cc:93:81:1b:d2:6c:ea:68:05:34:36:1b:5b:67:1c:b3:aa:ed: e1:fd:46:38:ab:1e:2e:75:47:27:32:95:c9:b8:a6:57:d8:39: b0:6c:86:39:04:3a:a6:7a:b1:0b:c5:33:45:f1:ba:71:f2:cf: 7c:6d:93:a9:54:e2:ef:39:00:12:d5:fd:20:8c:31:2e:fe:b6: 2e:cd:f5:39:f4:07:fb:ba:28:f1:e8:e8:36:a3:3b:31:be:a3: 13:02:0c:7e:57:e5:d7:16:d1:88:e3:83:7a:8a:00:bc:d5:e7: 2d:bc:96:c2:3a:9f:b2:f3:c3:70:8a:c7:f1:29:80:4a:32:cd: 7d:40:95:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFEzHya/rGUif0rt6pvTyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDQzOWM3NTdiNmI2NDZkZjE2ODQ0ZjVhNTI5ZWUyNzUy MDczNmUwHhcNMjUxMjIyMDgwMDQ0WhcNMjUxMjIzMDgwMDQ0WjAzMTEwLwYDVQQD EyhiZTNjOGY4MGI5ODUxZWEzNjVmYTQ2YWJmMjZiZTZiY2Y3ZWU5NGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVDxIa1hJoDwndRuH9Pq80j7vaP3 XF6TiHMYMy7OPOUS5eIvPhNJ262UbClLRi+R03rtCm93/etbNeSX2MuYjiN8cbn6 QfctWUscic+5vblFnQYyyqobDRIiUpR6ysD3p+E6QWE8goWWBJ/dqdTKeWlLpw0q MvMs6ffF7651+S/+JfmvGiIVHKBW4/vRwevteQ/x46pDhobO/lKHyrCdDdUypBoh JeG8K1JNu+jGvYbr7FnFPUPXxlq5LFFCX4+1oLJ+togSgDIIUSDVu4NbdfZeTLEo X6ZxPkb86mCyWelQQjsOVzlIpBbzt8KTGLr8ljmjFw/8PSCzvcyQxdRqFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL48j4C5hR6jZfpGq/Jr5rz37pThMB8GA1UdIwQY MBaAFB9EOcdXtrZG3xaET1pSnuJ1IHNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mZTllYjMtM2IxYi00ZmY0LWEzNzQt NWE1ZDBiZDg3NjBlLzEvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mZTllYjMtM2IxYi00ZmY0LWEzNzQtNWE1ZDBiZDg3NjBl LzEvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlimasMrj Sx76/HKTqHtfnp8qOUmYlQefaNXJZef2BOC2Pt0RFaxFX6ZCaHZ8roRp8RqqFbgk juQJ9jODS8hIEXurEpGAhiFgr1hdtT5vw9cRxo9FfMZEn4k3uR1YnKxq/we6UpT2 wUhboM/Uwm7yJ2RsgGT5tHe3+3MvNecUzJOBG9Js6mgFNDYbW2ccs6rt4f1GOKse LnVHJzKVybimV9g5sGyGOQQ6pnqxC8UzRfG6cfLPfG2TqVTi7zkAEtX9IIwxLv62 Ls31OfQH+7oo8ejoNqM7Mb6jEwIMflfl1xbRiOODeooAvNXnLbyWwjqfsvPDcIrH 8SmASjLNfUCVuA== -----END CERTIFICATE-----Generated at Mon Dec 22 16:37:02 2025 by rpki-client