This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json) Hash identifier: eyfUjbGQAyvohlY39VLGqumefHJG4UAz2NZdK6oOlQ0= Subject key identifier: 6D:E3:C0:43:6F:34:92:10:01:75:E1:7B:78:FC:B7:AF:A6:C4:5C:60 Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61 Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61 Certificate serial: 019B3F48525A86C4CC9390CDE53A437297B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 05:01:02 +0000 Manifest this update: Sun 21 Dec 2025 05:01:02 +0000 Manifest next update: Mon 22 Dec 2025 05:01:02 +0000 Files and hashes: 1: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: IM59ErtLl6wLl8kQdaAbCfyJcP3P1E6ZvN+nmF0Z02w=) 2: oyXaOgxI1N0gL-mT4wAa6DfHmfQ.roa (hash: 8sggfPG1wysa3rNvbgw+mJfeUSqlumTtEBYr1asLE8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:52:5a:86:c4:cc:93:90:cd:e5:3a:43:72:97:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61 Validity Not Before: Dec 21 05:01:02 2025 GMT Not After : Dec 22 05:01:02 2025 GMT Subject: CN=6de3c0436f3492100175e17b78fcb7afa6c45c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:84:a8:63:53:5d:5a:41:68:f8:b4:1a:c6:d6: 04:69:a6:e4:54:bf:21:4a:0e:c5:5c:48:68:d1:d7: 20:3a:d9:a6:32:da:77:f5:e4:fd:21:15:4d:19:aa: e7:40:17:c2:f0:07:be:19:b9:5e:45:d3:9a:8e:0a: 2e:9a:cb:1d:34:e1:f4:2f:fa:0d:a6:d9:34:e7:82: 91:86:e2:3b:3e:d6:d5:f7:99:5b:46:a9:b3:4b:a3: 3d:e1:92:42:d3:9a:41:99:05:a1:8e:cf:ed:1c:84: 27:24:ae:59:8b:90:4c:1d:53:9b:d7:92:27:b0:d7: cc:ea:76:39:8a:16:71:b3:18:5f:fe:53:c7:04:60: 1f:08:25:19:cb:d6:ae:6d:ed:66:17:2d:d4:d0:d1: 37:8b:17:3b:5c:9b:a9:77:2e:fb:4d:13:83:58:39: 37:5a:4f:e9:ad:0f:e7:29:60:77:dc:aa:22:63:f7: f1:ed:8d:23:72:be:cb:13:7b:de:e3:02:45:80:02: 1d:d9:d4:39:b0:df:63:96:47:f1:7f:d6:d8:8f:79: 58:85:e5:4c:c3:25:cb:68:68:8f:62:3e:22:9f:44: 77:e1:08:c0:6b:09:04:a2:8a:3e:15:ba:48:b4:2f: 9b:1d:bc:24:99:7c:6a:82:35:60:86:51:51:23:65: 93:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E3:C0:43:6F:34:92:10:01:75:E1:7B:78:FC:B7:AF:A6:C4:5C:60 X509v3 Authority Key Identifier: keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:75:b2:3e:0c:22:07:e5:a7:7c:cd:66:bd:05:15:c3:24:e6: 29:c0:89:95:c2:bf:97:f9:c6:f7:91:c2:7b:09:1e:1a:b9:98: 30:cb:ef:34:71:a9:4c:bf:d4:23:98:1c:26:e7:51:8e:a6:f3: 17:47:84:d3:c2:83:a1:6d:36:c5:16:22:01:5a:38:8b:64:f5: 2e:a5:35:99:dc:33:31:a5:71:bf:f1:e6:ee:c1:71:e8:b3:a2: ca:9f:b4:53:2b:36:93:5a:41:9c:b1:1a:f3:b6:20:68:b9:9a: 37:10:e9:86:41:94:63:a4:13:a8:28:a3:e8:51:f9:1c:54:d5: 03:88:8b:08:89:2c:ca:66:c9:5e:ad:5b:a9:72:a1:14:cc:19: 7f:34:8e:a6:cd:db:a6:99:de:54:ef:0f:fa:bb:92:75:f3:03: 3e:24:95:01:01:ef:18:56:28:f8:db:d3:36:87:06:20:62:5f: a6:6d:2f:e2:26:fb:dc:bf:23:31:40:e7:26:49:14:a3:85:e9: a3:9e:18:5e:e0:e2:bf:75:97:a0:79:d0:63:58:ac:18:0b:bc: 0e:92:2c:65:f0:e6:4e:ad:b3:f9:f8:79:17:6f:b3:ae:53:08: 0a:4c:69:28:6b:f5:3a:2d:f6:75:3e:09:9e:f2:49:dc:9d:85: 29:66:7b:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SFJahsTMk5DN5TpDcpe5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjg4Zjk4NTdkOWU0NDBjMTA1OGRjODk1OWU0OWY4YjMx ODNmNjEwHhcNMjUxMjIxMDUwMTAyWhcNMjUxMjIyMDUwMTAyWjAzMTEwLwYDVQQD Eyg2ZGUzYzA0MzZmMzQ5MjEwMDE3NWUxN2I3OGZjYjdhZmE2YzQ1YzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoSoY1NdWkFo+LQaxtYEaabkVL8h Sg7FXEho0dcgOtmmMtp39eT9IRVNGarnQBfC8Ae+GbleRdOajgoumssdNOH0L/oN ptk054KRhuI7PtbV95lbRqmzS6M94ZJC05pBmQWhjs/tHIQnJK5Zi5BMHVOb15In sNfM6nY5ihZxsxhf/lPHBGAfCCUZy9aube1mFy3U0NE3ixc7XJupdy77TRODWDk3 Wk/prQ/nKWB33KoiY/fx7Y0jcr7LE3ve4wJFgAId2dQ5sN9jlkfxf9bYj3lYheVM wyXLaGiPYj4in0R34QjAawkEooo+FbpItC+bHbwkmXxqgjVghlFRI2WTcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3jwENvNJIQAXXhe3j8t6+mxFxgMB8GA1UdIwQY MBaAFB9oj5hX2eRAwQWNyJWeSfizGD9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUt MDIxYzJlMDczNWIxLzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUtMDIxYzJlMDczNWIx LzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXWyPgwi B+WnfM1mvQUVwyTmKcCJlcK/l/nG95HCewkeGrmYMMvvNHGpTL/UI5gcJudRjqbz F0eE08KDoW02xRYiAVo4i2T1LqU1mdwzMaVxv/Hm7sFx6LOiyp+0Uys2k1pBnLEa 87YgaLmaNxDphkGUY6QTqCij6FH5HFTVA4iLCIksymbJXq1bqXKhFMwZfzSOps3b ppneVO8P+ruSdfMDPiSVAQHvGFYo+NvTNocGIGJfpm0v4ib73L8jMUDnJkkUo4Xp o54YXuDiv3WXoHnQY1isGAu8DpIsZfDmTq2z+fh5F2+zrlMICkxpKGv1Oi32dT4J nvJJ3J2FKWZ75A== -----END CERTIFICATE-----Generated at Sun Dec 21 06:45:55 2025 by rpki-client