This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json) Hash identifier: aW9TMG2xd8rtPBNuuipK3jOankhZ3gsz33E/+4tcYpI= Subject key identifier: 3D:D7:67:CE:8F:1E:40:87:DD:1D:D3:DD:5B:76:7C:88:F0:D6:B5:EE Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5 Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5 Certificate serial: 019B563E3E25C5938D6EC74D17F3BB636C47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft Manifest number: 067D Signing time: Thu 25 Dec 2025 16:01:18 +0000 Manifest this update: Thu 25 Dec 2025 16:01:18 +0000 Manifest next update: Fri 26 Dec 2025 16:01:18 +0000 Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: E5iueU48Rq2Ld1tFeG8hR/drw8str6MMqiMVNt6mMfI=) 2: VgX2YIG6L_L8c5HWMPiqq1n_S1o.roa (hash: BRlNIKeJrtOTaA3OLFtig45D6GjYy7gWY1CCeaiI+5U=) 3: sDqZRTbZvAQQTn6KJoc_Vm9WzY4.roa (hash: iL19VOkv+2+1Ma+y58+a49a0z0arTyOufs85rap+38w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 16:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3e:3e:25:c5:93:8d:6e:c7:4d:17:f3:bb:63:6c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5 Validity Not Before: Dec 25 16:01:18 2025 GMT Not After : Dec 26 16:01:18 2025 GMT Subject: CN=3dd767ce8f1e4087dd1dd3dd5b767c88f0d6b5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:06:36:e7:ef:43:b4:29:e6:8b:9f:48:31: aa:b9:9e:4c:7e:41:b8:0a:d8:ce:a8:09:78:91:10: e4:cc:3c:ec:14:e9:b4:75:91:ca:07:bf:35:67:d6: 40:5c:16:73:00:01:a5:6f:93:db:c2:d4:8d:45:62: 6a:76:6a:b1:26:09:76:76:07:da:cd:a0:50:50:83: 15:a3:de:ff:ad:a3:35:93:be:39:7d:39:74:30:e1: 5b:5c:84:f3:7a:c9:c1:16:6b:d0:50:c6:b2:6c:5d: 2a:ae:43:b5:b2:ab:3a:49:e3:5f:b4:a6:a5:ae:36: 13:c6:3c:ec:2a:6c:85:04:06:ec:9f:ac:0d:d0:a9: 69:02:8b:fb:f4:68:80:53:9a:64:7f:2f:ed:fe:50: 6e:b7:fa:39:9d:b9:cb:2c:f1:70:3a:84:b9:7b:56: 43:95:43:aa:4f:50:85:b0:1a:0e:b9:3e:eb:1c:04: 10:0e:85:65:8b:f2:3e:72:c3:e4:8d:1c:8c:6f:b8: ed:97:7b:6d:11:26:62:09:b9:91:cd:db:58:eb:91: be:0e:43:cc:48:89:7d:80:7d:9c:35:be:8c:dc:45: 22:cb:68:fd:34:ee:18:6e:0c:71:35:08:46:39:c0: 41:67:e0:78:22:be:43:68:43:b9:c1:bf:40:2a:64: 34:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D7:67:CE:8F:1E:40:87:DD:1D:D3:DD:5B:76:7C:88:F0:D6:B5:EE X509v3 Authority Key Identifier: keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:37:07:5c:8f:76:90:9d:a2:1e:ef:0d:63:36:c7:92:b6:e6: 6e:b5:69:b5:95:3e:51:89:b0:41:c6:16:f2:da:98:b2:3e:43: 10:4a:33:52:00:90:35:57:a1:91:29:8f:d9:fb:4a:55:dc:3a: a8:6f:05:5d:ff:04:92:0a:d7:02:a9:1d:1e:b6:63:ae:cd:a7: c0:fa:35:63:b2:ed:fd:e2:4a:30:5f:e6:2e:6c:10:1f:e8:68: a0:fb:ac:dc:c8:ea:05:cc:4d:0a:d5:04:8c:b2:d4:d7:fc:84: a8:48:65:83:5d:f2:7d:c6:dc:ee:86:89:74:89:b3:32:64:1a: 0c:67:67:14:25:3f:85:f1:83:58:f7:b6:3f:1c:2e:20:53:d0: 27:cb:9a:cb:8b:4c:1b:a6:e4:3b:4d:e6:18:69:f2:e4:e6:1a: 1e:71:78:7c:82:26:d0:d3:40:88:a8:b3:15:6d:af:64:ad:71: e5:71:9b:d4:f7:7c:23:ed:4a:5d:b5:45:5d:28:2d:12:e0:fd: ca:be:08:90:48:84:a6:57:51:85:91:d2:75:f2:4a:78:ba:7e: 0c:79:0d:d4:ea:b7:d4:94:71:40:b1:06:f2:af:f4:87:1b:21: d8:04:51:f6:a9:0b:57:83:10:dd:9c:5d:44:a7:3a:c8:c4:f2: f6:d3:b4:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPj4lxZONbsdNF/O7Y2xHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYWFjYWI4ZTQ1NmJiMjkxOTc5YTczNTdhNzAyNGYwMGJl YmFhZjUwHhcNMjUxMjI1MTYwMTE4WhcNMjUxMjI2MTYwMTE4WjAzMTEwLwYDVQQD EygzZGQ3NjdjZThmMWU0MDg3ZGQxZGQzZGQ1Yjc2N2M4OGYwZDZiNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthIGNufvQ7Qp5oufSDGquZ5MfkG4 CtjOqAl4kRDkzDzsFOm0dZHKB781Z9ZAXBZzAAGlb5PbwtSNRWJqdmqxJgl2dgfa zaBQUIMVo97/raM1k745fTl0MOFbXITzesnBFmvQUMaybF0qrkO1sqs6SeNftKal rjYTxjzsKmyFBAbsn6wN0KlpAov79GiAU5pkfy/t/lBut/o5nbnLLPFwOoS5e1ZD lUOqT1CFsBoOuT7rHAQQDoVli/I+csPkjRyMb7jtl3ttESZiCbmRzdtY65G+DkPM SIl9gH2cNb6M3EUiy2j9NO4YbgxxNQhGOcBBZ+B4Ir5DaEO5wb9AKmQ0NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3XZ86PHkCH3R3T3Vt2fIjw1rXuMB8GA1UdIwQY MBaAFB+qyrjkVrspGXmnNXpwJPAL66r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MDFmZDMtYThjZC00ZTJkLTlkMzIt MmZiNzJhMGFlZjZkLzEvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81MDFmZDMtYThjZC00ZTJkLTlkMzItMmZiNzJhMGFlZjZk LzEvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvjcHXI92 kJ2iHu8NYzbHkrbmbrVptZU+UYmwQcYW8tqYsj5DEEozUgCQNVehkSmP2ftKVdw6 qG8FXf8EkgrXAqkdHrZjrs2nwPo1Y7Lt/eJKMF/mLmwQH+hooPus3MjqBcxNCtUE jLLU1/yEqEhlg13yfcbc7oaJdImzMmQaDGdnFCU/hfGDWPe2PxwuIFPQJ8uay4tM G6bkO03mGGny5OYaHnF4fIIm0NNAiKizFW2vZK1x5XGb1Pd8I+1KXbVFXSgtEuD9 yr4IkEiEpldRhZHSdfJKeLp+DHkN1Oq31JRxQLEG8q/0hxsh2ARR9qkLV4MQ3Zxd RKc6yMTy9tO0ug== -----END CERTIFICATE-----Generated at Thu Dec 25 22:12:56 2025 by rpki-client