This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json) Hash identifier: ArMS+HRpMe9FrZJd0Uof8JxAQZULyh257mmRnXf/v/4= Subject key identifier: 4F:EB:A1:D1:A7:F9:D2:D6:26:E0:59:77:3B:22:88:56:6D:CB:34:DE Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35 Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35 Certificate serial: 019B3D59FFBF976E1DF8B248407BA8ECEB4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 20:01:06 +0000 Manifest this update: Sat 20 Dec 2025 20:01:06 +0000 Manifest next update: Sun 21 Dec 2025 20:01:06 +0000 Files and hashes: 1: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: mPrc6kJyuUNk+FxUt6suGTU5rbaZLfjFrI08RZLFqjg=) 2: PGC2gjbo2htZQJwYOmeelo5Z83Y.roa (hash: JFulXR+ljWTJG0RiuMIfac488bMeOxp9OF6JRC9SK3k=) 3: kTvVn_B76BHAkt21A667VWLx85c.roa (hash: RlO7Fkyzwvg6DOaLdLA5nagDWX7X86stBqbWJQSamrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:ff:bf:97:6e:1d:f8:b2:48:40:7b:a8:ec:eb:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35 Validity Not Before: Dec 20 20:01:06 2025 GMT Not After : Dec 21 20:01:06 2025 GMT Subject: CN=4feba1d1a7f9d2d626e059773b2288566dcb34de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0c:7e:2b:49:f3:15:e0:40:8a:44:1e:69:bd: a9:b0:d0:72:9e:1e:e5:ec:95:f5:64:a8:49:e5:87: ee:7a:a4:94:23:18:6c:77:8c:75:50:a2:8a:a1:a0: dd:56:53:14:dc:ee:7e:75:59:41:e2:18:65:80:9c: e4:89:96:f1:b1:83:c8:75:eb:3f:72:56:76:31:70: 14:ac:c8:c3:6e:98:61:54:d8:07:46:ee:42:d0:02: 41:78:45:cc:b8:94:a2:63:6d:12:0f:16:74:1c:0f: a1:4f:3a:7c:99:92:fc:40:a9:e8:d9:c3:3e:c5:5b: 31:12:50:52:99:46:0b:a1:93:b7:2a:72:64:f8:aa: c4:cb:f3:50:e8:6b:17:dc:5a:5b:f2:7f:fd:a6:d5: ca:58:df:ea:bf:a5:bb:40:4d:fc:6a:7f:44:97:1a: b6:32:3a:94:19:e6:51:c7:b2:e5:fe:e4:07:7e:55: 32:84:9b:d2:31:a6:1d:76:66:4d:eb:d1:d3:f6:94: a5:95:bf:d5:6e:11:65:27:a9:95:b9:91:d6:d1:0b: 7c:bc:2f:ba:32:e2:20:01:e4:8a:7e:00:45:fb:a7: aa:bf:a4:cb:e6:89:91:11:31:da:d8:a2:35:ce:bd: 81:f1:b3:ce:5f:03:26:c7:79:44:8c:98:50:86:a7: f8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EB:A1:D1:A7:F9:D2:D6:26:E0:59:77:3B:22:88:56:6D:CB:34:DE X509v3 Authority Key Identifier: keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3c:c4:f7:48:19:ee:7d:8b:d4:6f:54:04:d0:3a:c0:82:07: d7:6b:78:4e:0f:e7:a1:c5:4c:c4:4c:24:2e:5f:a2:64:bd:7c: cf:46:ca:8c:3c:9c:bb:9f:97:55:17:3a:79:18:4f:54:d9:dd: cd:71:7b:dd:71:6c:f3:d5:b1:98:89:f2:cb:e5:2f:9a:f5:fc: 17:66:0e:6c:4f:c5:d0:03:3a:b5:5a:1a:37:b6:4f:01:dc:fa: 8c:51:3f:2a:79:4d:b3:e2:91:eb:0f:f2:ad:37:a5:4c:56:7f: 6c:ba:36:06:59:48:0d:a7:b7:22:5a:6a:8e:f7:88:70:c5:ce: 84:dd:84:14:5f:0d:f6:f4:16:80:e0:b2:78:c3:0e:06:17:c7: 2a:ec:6e:33:ab:af:bc:bd:e6:20:6c:54:24:ff:a4:e7:ca:b8: 7e:5d:9e:61:9f:0f:84:f3:4f:b0:0f:c6:24:55:a1:67:5c:7d: 02:c6:3a:f8:c9:46:04:46:2e:d2:0a:d9:68:4e:b5:11:51:c5: 72:d6:8a:05:c6:3f:dc:f6:78:42:75:5e:67:63:b1:30:f1:3e: 14:8b:80:ad:a0:ed:cf:b5:a5:4c:53:56:7e:a2:71:9d:55:3f: bf:d4:7f:4a:83:8d:23:64:4f:92:1e:2e:b5:5c:ab:c3:0a:5e: 83:e1:3a:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wf+/l24d+LJIQHuo7OtKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODk2Y2QzZDhkMWEwNjk5ZGE1MjEwNTVkZmI1OGRjMDZk ZGRmMzUwHhcNMjUxMjIwMjAwMTA2WhcNMjUxMjIxMjAwMTA2WjAzMTEwLwYDVQQD Eyg0ZmViYTFkMWE3ZjlkMmQ2MjZlMDU5NzczYjIyODg1NjZkY2IzNGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywx+K0nzFeBAikQeab2psNBynh7l 7JX1ZKhJ5YfueqSUIxhsd4x1UKKKoaDdVlMU3O5+dVlB4hhlgJzkiZbxsYPIdes/ clZ2MXAUrMjDbphhVNgHRu5C0AJBeEXMuJSiY20SDxZ0HA+hTzp8mZL8QKno2cM+ xVsxElBSmUYLoZO3KnJk+KrEy/NQ6GsX3Fpb8n/9ptXKWN/qv6W7QE38an9Elxq2 MjqUGeZRx7Ll/uQHflUyhJvSMaYddmZN69HT9pSllb/VbhFlJ6mVuZHW0Qt8vC+6 MuIgAeSKfgBF+6eqv6TL5omRETHa2KI1zr2B8bPOXwMmx3lEjJhQhqf42QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/rodGn+dLWJuBZdzsiiFZtyzTeMB8GA1UdIwQY MBaAFB+JbNPY0aBpnaUhBV37WNwG3d81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2It YzMzMjc4MjJhMTM4LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2ItYzMzMjc4MjJhMTM4 LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDzE90gZ 7n2L1G9UBNA6wIIH12t4Tg/nocVMxEwkLl+iZL18z0bKjDycu5+XVRc6eRhPVNnd zXF73XFs89WxmInyy+UvmvX8F2YObE/F0AM6tVoaN7ZPAdz6jFE/KnlNs+KR6w/y rTelTFZ/bLo2BllIDae3IlpqjveIcMXOhN2EFF8N9vQWgOCyeMMOBhfHKuxuM6uv vL3mIGxUJP+k58q4fl2eYZ8PhPNPsA/GJFWhZ1x9AsY6+MlGBEYu0grZaE61EVHF ctaKBcY/3PZ4QnVeZ2OxMPE+FIuAraDtz7WlTFNWfqJxnVU/v9R/SoONI2RPkh4u tVyrwwpeg+E6yw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:57:50 2025 by rpki-client