This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft File: H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json) Hash identifier: WS1C15AxI0A9+RybrocOJnJI7ADWbuwMOxnmbwdicXE= Subject key identifier: 9E:24:C0:75:F9:69:B3:38:88:F8:75:9D:41:02:67:C1:D6:AE:DC:8F Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f Certificate serial: 019B522A123D2BA20D467D6E05AC99A57106 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 21:00:47 +0000 Manifest this update: Wed 24 Dec 2025 21:00:47 +0000 Manifest next update: Thu 25 Dec 2025 21:00:47 +0000 Files and hashes: 1: 1YHm_89mdmO3B6rQNuElV51RHnc.roa (hash: MnfHwqRrOYbX1ON7yZ7M8gI0u2brRrZRizU4+uQlZVo=) 2: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: OVcIsqoyxOjlF8YXYiTsKgjQolOYYe1SFCQ6qUbrhVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:12:3d:2b:a2:0d:46:7d:6e:05:ac:99:a5:71:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f Validity Not Before: Dec 24 21:00:47 2025 GMT Not After : Dec 25 21:00:47 2025 GMT Subject: CN=9e24c075f969b33888f8759d410267c1d6aedc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:f3:ea:1d:8c:e5:59:e8:aa:03:57:9a:1f: d1:e1:fe:98:a2:2e:61:cc:b0:f7:2a:4f:6b:c2:f4: 06:08:79:95:46:ae:ad:cb:18:e2:48:e8:fa:20:86: 6b:04:11:8e:66:25:df:53:8d:70:f4:af:b3:d2:d1: 15:a4:f2:09:95:05:82:d0:b8:f3:6d:d2:64:06:03: a1:67:8a:a1:a6:48:15:67:88:56:13:a2:46:59:18: 30:7a:cf:53:41:e1:e1:ef:c8:38:96:e4:84:92:b4: 68:d8:b0:e6:d7:20:11:3a:13:b3:a8:f3:ef:15:66: f3:c9:57:fd:80:12:40:51:76:9e:71:bf:79:d3:84: 3f:79:d4:59:7a:44:b5:2a:ec:f4:88:4b:42:c1:88: 2d:01:5a:46:68:3d:09:f3:3b:d4:dc:b3:37:91:bc: 52:8d:e9:6c:7e:b8:ef:e4:6a:28:20:76:e8:8f:e2: a9:1e:11:06:66:36:fb:ac:c0:9f:9d:c3:9b:5f:59: 50:6e:73:d3:7a:49:cc:60:3b:b5:50:83:d8:28:82: 51:ce:e4:08:0b:8c:43:c7:5e:a2:b7:5a:47:06:84: d3:8e:58:f1:02:e3:1a:55:da:21:27:ac:b0:4f:22: df:9a:fd:f1:24:ab:02:7b:cb:21:c9:0a:24:3b:b8: 68:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:24:C0:75:F9:69:B3:38:88:F8:75:9D:41:02:67:C1:D6:AE:DC:8F X509v3 Authority Key Identifier: keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:c4:91:3b:d2:af:00:ac:ab:e1:4d:47:07:2b:b6:a8:27:a0: d4:33:f8:20:99:15:65:f6:0c:5f:92:b3:90:ca:59:a1:ee:b7: 07:54:20:9c:f7:80:37:74:9a:04:e2:bb:4e:c9:64:91:66:5d: fe:fa:2f:6c:75:3a:7a:fb:a1:64:f0:51:c0:e7:85:98:79:91: 79:38:5a:28:a8:be:30:45:37:3a:fc:f5:a0:d8:29:b2:ca:4d: 0e:77:3c:bf:68:6b:e5:76:e6:30:ab:bf:34:d5:4d:e6:8e:69: 6f:b5:7b:e9:6e:67:31:40:b9:59:83:10:f5:71:74:33:4e:46: b5:e2:6d:9e:7f:3a:f3:cf:06:aa:09:19:b7:60:48:4e:f9:8d: 12:93:93:12:fc:10:f7:c4:83:21:02:61:60:1c:dd:ff:66:cb: f6:4c:a3:0d:52:a2:83:ae:d5:91:f5:04:8c:7b:40:5a:b6:8a: 74:be:e4:9e:da:4d:0b:ed:c7:2f:b8:48:68:59:a8:ac:fa:b4: 15:2b:db:4a:9f:55:fc:4c:89:7e:f8:1e:12:c6:d2:9d:d9:de: cd:53:f5:66:d0:41:96:48:8a:42:b5:46:c6:e7:bd:f3:1d:ad: 42:0c:dd:f1:63:e6:50:c0:01:45:71:8c:6d:13:01:ee:ba:b1: f5:24:c2:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKhI9K6INRn1uBayZpXEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNTA0YjFiYjcxNjhlNjgwYjE5NTQyZjhmNzMwMzg2MTQ0 YzhhNWYwHhcNMjUxMjI0MjEwMDQ3WhcNMjUxMjI1MjEwMDQ3WjAzMTEwLwYDVQQD Eyg5ZTI0YzA3NWY5NjliMzM4ODhmODc1OWQ0MTAyNjdjMWQ2YWVkYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5fz6h2M5VnoqgNXmh/R4f6Yoi5h zLD3Kk9rwvQGCHmVRq6tyxjiSOj6IIZrBBGOZiXfU41w9K+z0tEVpPIJlQWC0Ljz bdJkBgOhZ4qhpkgVZ4hWE6JGWRgwes9TQeHh78g4luSEkrRo2LDm1yAROhOzqPPv FWbzyVf9gBJAUXaecb9504Q/edRZekS1Kuz0iEtCwYgtAVpGaD0J8zvU3LM3kbxS jelsfrjv5GooIHboj+KpHhEGZjb7rMCfncObX1lQbnPTeknMYDu1UIPYKIJRzuQI C4xDx16it1pHBoTTjljxAuMaVdohJ6ywTyLfmv3xJKsCe8shyQokO7ho0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4kwHX5abM4iPh1nUECZ8HWrtyPMB8GA1UdIwQY MBaAFB9QSxu3Fo5oCxlUL49zA4YUTIpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYt MzViYjYwZWEwN2MxLzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYtMzViYjYwZWEwN2Mx LzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcSRO9Kv AKyr4U1HByu2qCeg1DP4IJkVZfYMX5KzkMpZoe63B1QgnPeAN3SaBOK7TslkkWZd /vovbHU6evuhZPBRwOeFmHmReThaKKi+MEU3Ovz1oNgpsspNDnc8v2hr5XbmMKu/ NNVN5o5pb7V76W5nMUC5WYMQ9XF0M05GteJtnn86888GqgkZt2BITvmNEpOTEvwQ 98SDIQJhYBzd/2bL9kyjDVKig67VkfUEjHtAWraKdL7kntpNC+3HL7hIaFmorPq0 FSvbSp9V/EyJfvgeEsbSndnezVP1ZtBBlkiKQrVGxue98x2tQgzd8WPmUMABRXGM bRMB7rqx9STCHA== -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:21 2025 by rpki-client