This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json) Hash identifier: WI0oD7SPz+QAO+BXGZUlAIxWBtrwANx7kmD9EQGL17E= Subject key identifier: 40:B9:73:25:BB:13:CD:05:84:FA:C3:FD:79:EE:C0:F0:F1:CE:27:88 Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3 Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3 Certificate serial: 019B3CEC95D0CAF79D251DF28F0FF0BCF1F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft Manifest number: AE Signing time: Sat 20 Dec 2025 18:01:36 +0000 Manifest this update: Sat 20 Dec 2025 18:01:36 +0000 Manifest next update: Sun 21 Dec 2025 18:01:36 +0000 Files and hashes: 1: GuyH86XUUME_chhdFNwgWR87nWY.roa (hash: AkV+gL0S5u4NFSo7a7yCWxTWlu4itSTOyYkBPLj5o3E=) 2: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: yv9Ofzlvm5FGSxc3RVusa23qF0E93/0sf4DoCskrxqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:95:d0:ca:f7:9d:25:1d:f2:8f:0f:f0:bc:f1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3 Validity Not Before: Dec 20 18:01:36 2025 GMT Not After : Dec 21 18:01:36 2025 GMT Subject: CN=40b97325bb13cd0584fac3fd79eec0f0f1ce2788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:14:75:41:96:87:ec:56:ce:d2:e7:c0:c8: 71:15:f2:c4:bd:47:dd:3d:f3:b3:50:a8:4a:3f:42: 24:69:d1:c9:0a:38:43:0b:e3:25:d8:d7:19:82:f3: 60:85:c6:1c:68:f3:1f:a7:68:e3:7b:c8:46:88:95: 4f:b9:cb:64:32:bc:ff:e5:f3:cf:4c:7d:7c:c5:eb: a6:b3:ad:fc:d9:06:89:de:7f:51:8a:93:68:74:89: 5c:e2:98:8d:b0:45:aa:aa:78:90:94:e3:c4:e3:34: 04:38:e6:9e:d7:ab:59:7e:c3:a8:e8:89:2e:0e:7c: 8d:8e:9f:72:64:59:d7:86:fd:f7:32:6d:63:01:08: 0c:e7:e0:9d:ad:36:c4:ee:67:8a:3d:d5:ca:1a:37: c1:4c:18:26:89:0a:ff:00:3f:d0:a5:93:59:79:58: c2:2b:90:f1:63:15:bb:c7:5d:84:97:53:33:61:33: 41:eb:df:fd:72:48:02:77:ee:cc:db:1f:7c:c8:1a: 49:79:9d:d9:2e:98:62:9e:ed:da:f6:12:88:e2:68: b5:5b:67:e4:42:1d:fb:a1:45:bc:22:57:7d:51:e4: 7c:6c:cd:e4:a9:25:e4:d1:81:a0:00:93:ef:41:26: 79:6a:86:74:3d:5b:55:55:c9:8f:70:28:50:a5:fe: a9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B9:73:25:BB:13:CD:05:84:FA:C3:FD:79:EE:C0:F0:F1:CE:27:88 X509v3 Authority Key Identifier: keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ff:7b:66:80:01:49:bb:bd:be:a7:da:c3:a0:62:b2:89:da: 9e:df:91:8f:bb:4c:51:d2:7e:10:74:5e:c0:ff:8a:0e:1c:3c: 5c:5e:93:8b:52:21:67:0e:a7:16:d4:48:3b:93:a4:43:d0:ec: 9e:66:6d:24:fe:b2:8e:c7:03:75:ec:d2:0a:2d:b1:21:c6:37: f1:f4:0e:1d:71:8b:06:19:45:7f:40:8b:7c:7e:a9:3f:cc:d9: 12:36:0e:5a:d1:f1:b7:6d:85:99:8d:1b:c5:7c:36:59:04:aa: 69:a4:99:09:c2:aa:32:77:dc:35:7f:76:1d:a5:dd:cf:d2:cd: fa:b2:b7:88:f7:e7:fe:84:e9:09:9d:c3:6a:fe:57:96:8d:09: 3d:54:b8:9b:c5:b5:03:99:73:8e:41:10:e4:a4:24:1b:d3:13: 0e:e4:5b:46:dd:09:85:ed:e5:32:c3:11:3f:50:d8:95:80:bd: 56:1d:d9:54:7a:26:cb:ad:41:ed:9b:d3:4e:af:c8:a5:9e:96: 5d:b9:6e:ea:2a:0c:60:00:73:f0:38:5a:36:b3:26:74:1c:00: 5c:88:db:51:b8:1c:f0:89:d0:81:f2:60:6f:0f:3e:68:be:2b: 71:98:4c:5f:cd:ad:fe:a4:c5:2a:f0:fe:e0:9b:b8:1c:97:ee: f4:a9:46:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87JXQyvedJR3yjw/wvPH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNTM5YTYxNGUwYWExY2ZhMTlmY2Y4ZWUwYmZhYTAzNDYz MTQzYzMwHhcNMjUxMjIwMTgwMTM2WhcNMjUxMjIxMTgwMTM2WjAzMTEwLwYDVQQD Eyg0MGI5NzMyNWJiMTNjZDA1ODRmYWMzZmQ3OWVlYzBmMGYxY2UyNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbcUdUGWh+xWztLnwMhxFfLEvUfd PfOzUKhKP0IkadHJCjhDC+Ml2NcZgvNghcYcaPMfp2jje8hGiJVPuctkMrz/5fPP TH18xeums6382QaJ3n9RipNodIlc4piNsEWqqniQlOPE4zQEOOae16tZfsOo6Iku DnyNjp9yZFnXhv33Mm1jAQgM5+CdrTbE7meKPdXKGjfBTBgmiQr/AD/QpZNZeVjC K5DxYxW7x12El1MzYTNB69/9ckgCd+7M2x98yBpJeZ3ZLphinu3a9hKI4mi1W2fk Qh37oUW8Ild9UeR8bM3kqSXk0YGgAJPvQSZ5aoZ0PVtVVcmPcChQpf6pGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEC5cyW7E80FhPrD/XnuwPDxzieIMB8GA1UdIwQY MBaAFB9TmmFOCqHPoZ/PjuC/qgNGMUPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MjdiZjEtNzk5OS00M2UxLWI3ZjUt YWJlMWUzNzkyNWNmLzEvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85MjdiZjEtNzk5OS00M2UxLWI3ZjUtYWJlMWUzNzkyNWNm LzEvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABf97ZoAB Sbu9vqfaw6Bisonant+Rj7tMUdJ+EHRewP+KDhw8XF6Ti1IhZw6nFtRIO5OkQ9Ds nmZtJP6yjscDdezSCi2xIcY38fQOHXGLBhlFf0CLfH6pP8zZEjYOWtHxt22FmY0b xXw2WQSqaaSZCcKqMnfcNX92HaXdz9LN+rK3iPfn/oTpCZ3Dav5Xlo0JPVS4m8W1 A5lzjkEQ5KQkG9MTDuRbRt0Jhe3lMsMRP1DYlYC9Vh3ZVHomy61B7ZvTTq/IpZ6W Xblu6ioMYABz8DhaNrMmdBwAXIjbUbgc8InQgfJgbw8+aL4rcZhMX82t/qTFKvD+ 4Ju4HJfu9KlGLQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:26:20 2025 by rpki-client