This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json) Hash identifier: +uojo/FvUGCT8fDUHrURiqtnelTSb92QY7/CRI/kMP0= Subject key identifier: 24:F8:72:A0:1B:76:C4:7C:CA:78:BD:20:24:90:DC:28:56:F2:40:00 Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61 Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61 Certificate serial: 019B6BB30654E12A247541E02A0994E28B67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 20:00:53 +0000 Manifest this update: Mon 29 Dec 2025 20:00:53 +0000 Manifest next update: Tue 30 Dec 2025 20:00:53 +0000 Files and hashes: 1: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: O/8K5+elL7TCjklKGXeIaRlsU7URItdP39Z5VbQz8zk=) 2: oyXaOgxI1N0gL-mT4wAa6DfHmfQ.roa (hash: 8sggfPG1wysa3rNvbgw+mJfeUSqlumTtEBYr1asLE8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b3:06:54:e1:2a:24:75:41:e0:2a:09:94:e2:8b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61 Validity Not Before: Dec 29 20:00:53 2025 GMT Not After : Dec 30 20:00:53 2025 GMT Subject: CN=24f872a01b76c47cca78bd202490dc2856f24000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:97:19:b0:2c:5a:9f:ae:36:73:84:5a:d2:30: 8b:44:80:54:09:aa:a9:6c:53:d3:8e:79:ea:e7:e1: ec:53:f2:5a:91:fd:8a:f3:52:18:88:ed:e8:c4:ae: d7:2c:47:e3:c5:f4:08:0e:dd:6b:5e:94:43:82:b2: e3:3d:3e:8c:22:97:5d:bb:0b:9a:c3:b1:53:e3:ba: d5:a3:63:79:2d:d1:f8:7a:67:ac:72:fa:5b:29:43: f3:93:9d:18:f9:0c:b2:e3:59:06:45:6d:c5:20:37: 7a:d2:04:10:1f:57:4c:a3:63:2b:92:f8:9c:95:e8: 5e:60:d5:39:88:db:38:3d:ec:24:68:5f:4d:a4:db: 48:c2:f4:f7:f6:df:b1:db:3a:c4:9c:d8:c4:bb:a1: bd:c2:14:6b:62:fe:55:16:50:77:97:d7:f9:98:4e: ff:fd:be:bc:6c:7c:e7:ea:21:3f:7c:28:41:db:1b: 0b:19:a0:ed:20:64:1d:15:6b:d1:72:6c:67:2f:2e: fc:0f:4c:30:33:a9:f9:80:5f:31:c2:82:67:2b:eb: bf:03:d5:4c:9e:88:d9:a5:0d:84:1e:e4:1c:9d:8c: e0:8d:47:b1:a8:94:2c:5f:4d:1e:e7:15:17:34:15: f9:ed:48:8c:13:f2:90:31:5e:77:ae:9c:88:89:fe: db:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F8:72:A0:1B:76:C4:7C:CA:78:BD:20:24:90:DC:28:56:F2:40:00 X509v3 Authority Key Identifier: keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:59:79:ae:b5:98:e6:5f:76:36:c1:1f:64:5f:e3:83:af:71: 3d:da:ac:03:12:fb:14:59:93:29:99:d0:46:8e:12:9b:9f:cd: bb:ab:bd:7e:2d:26:bd:4f:d6:20:c4:0d:f5:7c:b6:0a:b1:c0: 5f:49:28:a7:2f:ef:47:55:3e:be:48:a4:66:fb:7e:c1:0e:e6: b6:fd:e9:fd:0b:7c:6e:d9:8a:79:81:81:1a:c9:2a:0d:9a:57: 9e:d2:9a:c9:b5:c2:c2:4d:9e:00:af:ba:00:29:3e:3e:18:46: 3b:61:70:b2:c1:50:32:47:4b:df:9b:50:91:8e:d0:4a:91:ed: 2c:d8:7d:ac:d5:da:63:1b:86:11:15:ef:ce:47:4d:a1:69:6b: 1e:62:0b:e9:ff:74:12:78:29:75:4d:ad:81:e3:7f:85:6a:26: c5:61:04:b9:b9:57:d0:2c:95:bf:fa:b3:1a:9d:90:69:ee:8f: cc:e1:79:65:d7:2f:4d:9a:e9:7c:24:9e:cc:28:11:a6:d8:f1: 67:2b:5e:0b:9b:97:b1:c6:f7:e2:80:7f:d7:f1:ca:f8:a8:3f: 54:be:99:16:4f:04:73:63:37:16:34:c6:58:e1:ce:3e:7c:2f: fa:45:66:05:39:a8:1a:59:78:6a:a2:ee:79:f5:d0:76:17:5b: 81:a5:61:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrswZU4SokdUHgKgmU4otnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjg4Zjk4NTdkOWU0NDBjMTA1OGRjODk1OWU0OWY4YjMx ODNmNjEwHhcNMjUxMjI5MjAwMDUzWhcNMjUxMjMwMjAwMDUzWjAzMTEwLwYDVQQD EygyNGY4NzJhMDFiNzZjNDdjY2E3OGJkMjAyNDkwZGMyODU2ZjI0MDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJcZsCxan642c4Ra0jCLRIBUCaqp bFPTjnnq5+HsU/Jakf2K81IYiO3oxK7XLEfjxfQIDt1rXpRDgrLjPT6MIpdduwua w7FT47rVo2N5LdH4emescvpbKUPzk50Y+Qyy41kGRW3FIDd60gQQH1dMo2Mrkvic leheYNU5iNs4PewkaF9NpNtIwvT39t+x2zrEnNjEu6G9whRrYv5VFlB3l9f5mE7/ /b68bHzn6iE/fChB2xsLGaDtIGQdFWvRcmxnLy78D0wwM6n5gF8xwoJnK+u/A9VM nojZpQ2EHuQcnYzgjUexqJQsX00e5xUXNBX57UiME/KQMV53rpyIif7bDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCT4cqAbdsR8yni9ICSQ3ChW8kAAMB8GA1UdIwQY MBaAFB9oj5hX2eRAwQWNyJWeSfizGD9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUt MDIxYzJlMDczNWIxLzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUtMDIxYzJlMDczNWIx LzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1l5rrWY 5l92NsEfZF/jg69xPdqsAxL7FFmTKZnQRo4Sm5/Nu6u9fi0mvU/WIMQN9Xy2CrHA X0kopy/vR1U+vkikZvt+wQ7mtv3p/Qt8btmKeYGBGskqDZpXntKaybXCwk2eAK+6 ACk+PhhGO2FwssFQMkdL35tQkY7QSpHtLNh9rNXaYxuGERXvzkdNoWlrHmIL6f90 EngpdU2tgeN/hWomxWEEublX0CyVv/qzGp2Qae6PzOF5ZdcvTZrpfCSezCgRptjx ZyteC5uXscb34oB/1/HK+Kg/VL6ZFk8Ec2M3FjTGWOHOPnwv+kVmBTmoGll4aqLu efXQdhdbgaVhzw== -----END CERTIFICATE-----Generated at Tue Dec 30 01:30:20 2025 by rpki-client