This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json) Hash identifier: l/g0Jf8x3zqbUy7ZEwoyBtGWa2b++r/EsZ/RIvUIGQ8= Subject key identifier: BF:45:F2:7F:1A:98:8B:A7:4F:46:A4:A0:68:84:7B:1D:02:DA:76:4F Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36 Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36 Certificate serial: 019B3FED09746CE971E9F5C77E8BAF3DBB0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 08:00:57 +0000 Manifest this update: Sun 21 Dec 2025 08:00:57 +0000 Manifest next update: Mon 22 Dec 2025 08:00:57 +0000 Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: Tl4sdSt51okUydNXiIMOSGWRBDnsfSjgzrNC9Zy8Fzk=) 2: HUVkGsdlCFOUct2ob4-4pOtlsOM.roa (hash: IfkJT/mKBfcu6BevAktc/69QyZFWwDwWSgoOqzPD22M=) 3: dDCoImKQNrHXyasH5BqbAo27W3o.roa (hash: f48SfVN/nMYwPQ7yDQlyTF9yoojdYsN08X4hTrgTFDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:09:74:6c:e9:71:e9:f5:c7:7e:8b:af:3d:bb:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36 Validity Not Before: Dec 21 08:00:57 2025 GMT Not After : Dec 22 08:00:57 2025 GMT Subject: CN=bf45f27f1a988ba74f46a4a068847b1d02da764f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:ac:21:14:3e:ac:ee:d9:e0:d0:cf:7e:43: a5:a8:e7:29:4e:74:49:c5:01:c4:26:23:0d:1e:64: 8a:2d:79:da:ad:c4:dd:0e:de:d0:6e:13:fe:bb:ca: 21:95:8f:f9:60:ad:14:a6:5e:fb:54:69:0f:70:f9: 27:d4:36:65:df:3f:a3:25:54:b0:e3:43:c9:0d:40: b1:7e:e4:b7:a9:7a:da:d4:42:97:62:84:ce:a9:fd: ae:66:c8:8e:22:81:b9:08:c7:6c:35:22:3a:5d:ef: 52:9d:9a:ee:e5:18:99:1c:9f:00:c3:51:6f:0a:b1: bc:c8:8d:4f:fb:0a:69:52:af:ec:d5:b3:92:70:56: 7b:52:42:bb:e5:6a:27:49:a2:98:38:64:3e:6f:68: ab:d8:72:eb:7e:d7:fb:d4:2b:ba:8d:bb:e1:fe:0b: c4:37:13:9c:64:cc:75:5a:0b:eb:65:d3:65:45:7a: 60:cc:88:02:d4:f6:f3:81:40:e3:ca:55:b7:60:0b: 38:8e:91:bd:72:2d:1f:01:92:43:6e:9d:20:c4:7b: 78:87:f3:36:65:02:06:76:62:c1:9b:15:e4:3a:5a: bd:45:7a:82:3f:3a:3b:7d:c9:c0:4c:f7:6c:05:69: e1:1c:33:0c:01:18:01:b2:3e:05:26:53:31:7f:1c: 28:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:45:F2:7F:1A:98:8B:A7:4F:46:A4:A0:68:84:7B:1D:02:DA:76:4F X509v3 Authority Key Identifier: keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:69:5b:e5:50:4c:28:44:10:99:f1:45:f7:04:2e:5d:54:1a: 83:34:08:6d:d5:c1:07:5d:4e:c0:77:6b:f1:9f:e5:6d:69:db: f0:4d:11:11:60:d3:f0:e2:80:7f:2c:69:59:9a:e2:3b:2b:3b: dd:07:11:c5:ea:1e:45:37:ac:23:f3:24:c5:49:1b:a6:ea:11: 65:d3:9c:3b:d5:10:88:42:72:aa:62:f1:58:3e:68:23:8a:8b: 09:d9:f0:2f:b0:ea:ae:01:db:2a:a5:d9:67:92:c5:c3:21:d6: e7:10:5b:39:23:55:f4:00:7d:53:f2:c3:3b:39:78:d7:1e:46: de:c4:41:78:01:0c:36:b4:26:2c:18:fc:7f:32:86:9d:7d:5a: 4e:49:80:86:84:48:74:de:65:29:8e:96:af:f6:33:bf:8e:38: a4:c3:99:a6:dc:6b:56:52:c6:24:e2:83:d2:f6:b3:ad:13:c5: fd:53:e4:78:e8:fa:2a:cc:79:21:b6:3b:71:de:65:e7:e0:c9: ed:d4:13:49:ff:dc:37:07:85:6f:1c:49:64:7f:b6:1a:16:cd: 6a:d0:51:eb:cc:b4:1b:c0:a5:58:04:1a:d9:c2:59:97:af:37: 0d:96:28:66:80:ca:8b:4e:74:25:ba:08:c4:95:06:d7:a6:30: c2:29:b1:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7Ql0bOlx6fXHfouvPbsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNWNmNmQxMjBlMjgxMzhiMGFhMmZjODNjYmE5YjBlOTY3 OTZjMzYwHhcNMjUxMjIxMDgwMDU3WhcNMjUxMjIyMDgwMDU3WjAzMTEwLwYDVQQD EyhiZjQ1ZjI3ZjFhOTg4YmE3NGY0NmE0YTA2ODg0N2IxZDAyZGE3NjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiisIRQ+rO7Z4NDPfkOlqOcpTnRJ xQHEJiMNHmSKLXnarcTdDt7QbhP+u8ohlY/5YK0Upl77VGkPcPkn1DZl3z+jJVSw 40PJDUCxfuS3qXra1EKXYoTOqf2uZsiOIoG5CMdsNSI6Xe9SnZru5RiZHJ8Aw1Fv CrG8yI1P+wppUq/s1bOScFZ7UkK75WonSaKYOGQ+b2ir2HLrftf71Cu6jbvh/gvE NxOcZMx1WgvrZdNlRXpgzIgC1PbzgUDjylW3YAs4jpG9ci0fAZJDbp0gxHt4h/M2 ZQIGdmLBmxXkOlq9RXqCPzo7fcnATPdsBWnhHDMMARgBsj4FJlMxfxwojQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9F8n8amIunT0akoGiEex0C2nZPMB8GA1UdIwQY MBaAFB9c9tEg4oE4sKovyDy6mw6WeWw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wMGU4ZTEtYzIzNS00OWE5LTlmOTIt NjM4MzFhZTk1MWVmLzEvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wMGU4ZTEtYzIzNS00OWE5LTlmOTItNjM4MzFhZTk1MWVm LzEvSDF6MjBTRGlnVGl3cWlfSVBMcWJEcFo1YkRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2lb5VBM KEQQmfFF9wQuXVQagzQIbdXBB11OwHdr8Z/lbWnb8E0REWDT8OKAfyxpWZriOys7 3QcRxeoeRTesI/MkxUkbpuoRZdOcO9UQiEJyqmLxWD5oI4qLCdnwL7DqrgHbKqXZ Z5LFwyHW5xBbOSNV9AB9U/LDOzl41x5G3sRBeAEMNrQmLBj8fzKGnX1aTkmAhoRI dN5lKY6Wr/Yzv444pMOZptxrVlLGJOKD0vazrRPF/VPkeOj6Ksx5IbY7cd5l5+DJ 7dQTSf/cNweFbxxJZH+2GhbNatBR68y0G8ClWAQa2cJZl683DZYoZoDKi050JboI xJUG16YwwimxIQ== -----END CERTIFICATE-----Generated at Sun Dec 21 16:00:40 2025 by rpki-client