This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft File: H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json) Hash identifier: SqR8RtHDf2eegzfKnobzZd4+8iWQ/vnrURfX6/zE0zI= Subject key identifier: E0:83:DE:3E:8E:EA:D0:86:81:44:C0:AE:35:5B:7C:8D:7C:5D:5E:6E Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd Certificate serial: 019B424A7FC9F6EDACEAF0F62855FCE84854 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft Manifest number: 07E2 Signing time: Sun 21 Dec 2025 19:02:16 +0000 Manifest this update: Sun 21 Dec 2025 19:02:16 +0000 Manifest next update: Mon 22 Dec 2025 19:02:16 +0000 Files and hashes: 1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: d+8Cj2xtJMcRyQCIvPmQn4fM+PFGCji5QigNHhtGSd8=) 2: HcCGVf1c2Ti9Q8GpR181zKxoK-4.roa (hash: epMyekEuNY8Rw5EQGjHEPi8q6cf4LUx00XdGU4u6gyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:7f:c9:f6:ed:ac:ea:f0:f6:28:55:fc:e8:48:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd Validity Not Before: Dec 21 19:02:16 2025 GMT Not After : Dec 22 19:02:16 2025 GMT Subject: CN=e083de3e8eead0868144c0ae355b7c8d7c5d5e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ba:6e:54:a6:f8:86:74:5d:7b:4d:10:c8:ef: cf:0f:61:eb:8f:69:56:0d:be:ef:4d:87:22:36:29: 13:af:8a:74:c3:06:7d:af:71:04:d7:0e:75:d9:87: ed:73:d3:24:c0:b4:ba:63:31:11:45:74:c2:fb:0d: 6f:3c:b5:0f:1d:f5:65:aa:d4:7d:5b:92:9d:43:43: 24:09:b3:a2:50:8b:04:cc:9c:d1:6f:4d:8f:9b:5f: 3e:b0:f5:9b:88:0a:b5:57:da:6a:04:8c:f7:b9:3f: e4:eb:e0:91:c8:08:8a:dc:d0:33:60:8b:ad:15:24: 37:f5:ec:df:f2:cc:87:9b:92:d5:a5:ac:5b:8f:b2: a2:75:fb:ff:37:9d:72:54:7c:98:51:bb:e7:62:6e: d4:a4:74:8c:de:62:9c:a7:4a:8a:55:0c:b2:81:45: e4:29:3f:b4:cd:5d:1a:cf:98:a4:94:47:54:84:5c: f9:7b:4b:2b:9c:b1:e6:13:6f:68:df:b6:ca:ce:25: 35:60:2a:7e:67:4a:2e:e4:02:f8:39:11:37:c2:dc: c2:d2:a9:70:87:5e:8d:fa:8d:81:27:5a:d1:50:54: 84:70:a1:94:9c:c3:79:eb:8f:9d:4d:51:8e:b7:ad: 7f:cc:b9:83:d2:d1:b7:9e:94:97:cb:73:c2:e7:8e: 12:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:83:DE:3E:8E:EA:D0:86:81:44:C0:AE:35:5B:7C:8D:7C:5D:5E:6E X509v3 Authority Key Identifier: keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:e5:3f:c4:20:65:df:5a:c0:16:d2:2e:f8:01:71:39:05:68: ca:3d:28:7b:9d:30:bb:6c:65:c4:01:75:b5:6c:1a:c7:57:12: be:8e:7d:32:34:c2:74:67:4e:1b:42:f4:c9:16:86:33:28:6d: dc:9d:18:00:fa:cb:9e:45:5f:52:fc:95:1e:63:8e:c5:f3:5d: a0:21:43:5e:66:b2:31:f0:d7:f2:25:0a:4c:22:9f:11:a2:86: f2:2e:b7:d5:84:e1:bb:f6:7b:0c:87:11:3c:9d:f5:af:72:15: 19:f7:cc:77:5f:5c:f4:44:7e:e3:e8:f2:ed:c4:aa:01:45:e9: eb:70:db:31:41:29:fc:af:02:13:d0:79:58:aa:ab:08:43:8e: 4c:4c:36:03:86:6c:8b:05:bd:93:cc:a9:c9:d5:6e:5d:08:c2: a6:93:c9:fa:59:47:74:e4:61:32:22:c6:11:47:bd:3b:fe:0c: 21:06:ea:ec:f5:78:ae:07:c6:da:79:7b:ee:1c:f5:56:5e:27: 27:52:36:1d:a3:8c:29:14:44:12:f7:38:4e:0d:12:64:e4:27: 17:7a:e2:d8:d3:7f:b2:57:1f:b9:36:26:0a:f0:2b:24:73:51: ae:bc:fb:0f:62:76:ab:e4:35:ec:f1:ac:37:ad:d3:10:91:c2: 28:71:61:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSn/J9u2s6vD2KFX86EhUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYWZjYTUzYWM1NGU1N2U1MmMwMTAxMzhhMjEyNzk0YzY3 MGUwY2QwHhcNMjUxMjIxMTkwMjE2WhcNMjUxMjIyMTkwMjE2WjAzMTEwLwYDVQQD EyhlMDgzZGUzZThlZWFkMDg2ODE0NGMwYWUzNTViN2M4ZDdjNWQ1ZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybpuVKb4hnRde00QyO/PD2Hrj2lW Db7vTYciNikTr4p0wwZ9r3EE1w512Yftc9MkwLS6YzERRXTC+w1vPLUPHfVlqtR9 W5KdQ0MkCbOiUIsEzJzRb02Pm18+sPWbiAq1V9pqBIz3uT/k6+CRyAiK3NAzYIut FSQ39ezf8syHm5LVpaxbj7Kidfv/N51yVHyYUbvnYm7UpHSM3mKcp0qKVQyygUXk KT+0zV0az5iklEdUhFz5e0srnLHmE29o37bKziU1YCp+Z0ou5AL4ORE3wtzC0qlw h16N+o2BJ1rRUFSEcKGUnMN564+dTVGOt61/zLmD0tG3npSXy3PC544SNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCD3j6O6tCGgUTArjVbfI18XV5uMB8GA1UdIwQY MBaAFB+vylOsVOV+UsAQE4ohJ5TGcODNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYt Yzk5NWQyZWM5ZTk0LzEvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYtYzk5NWQyZWM5ZTk0 LzEvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+U/xCBl 31rAFtIu+AFxOQVoyj0oe50wu2xlxAF1tWwax1cSvo59MjTCdGdOG0L0yRaGMyht 3J0YAPrLnkVfUvyVHmOOxfNdoCFDXmayMfDX8iUKTCKfEaKG8i631YThu/Z7DIcR PJ31r3IVGffMd19c9ER+4+jy7cSqAUXp63DbMUEp/K8CE9B5WKqrCEOOTEw2A4Zs iwW9k8ypydVuXQjCppPJ+llHdORhMiLGEUe9O/4MIQbq7PV4rgfG2nl77hz1Vl4n J1I2HaOMKRREEvc4Tg0SZOQnF3ri2NN/slcfuTYmCvArJHNRrrz7D2J2q+Q17PGs N63TEJHCKHFhGQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:43:51 2025 by rpki-client