This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json) Hash identifier: 895UDmfVH/XG4IxiXuYlDOUSmVTTjg2H6WzQcAMsNDY= Subject key identifier: 26:ED:77:E2:E8:10:7C:57:35:E9:EB:E9:5C:49:F9:10:55:B6:7D:2D Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5 Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5 Certificate serial: 019B44DD0D16273E227768FFB368F152C8D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft Manifest number: 0674 Signing time: Mon 22 Dec 2025 07:01:36 +0000 Manifest this update: Mon 22 Dec 2025 07:01:36 +0000 Manifest next update: Tue 23 Dec 2025 07:01:36 +0000 Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: qSa1AXyAVbN4T4nJPno1xMMobQpuaTaqbZqqeQA4hxg=) 2: VgX2YIG6L_L8c5HWMPiqq1n_S1o.roa (hash: BRlNIKeJrtOTaA3OLFtig45D6GjYy7gWY1CCeaiI+5U=) 3: sDqZRTbZvAQQTn6KJoc_Vm9WzY4.roa (hash: iL19VOkv+2+1Ma+y58+a49a0z0arTyOufs85rap+38w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dd:0d:16:27:3e:22:77:68:ff:b3:68:f1:52:c8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5 Validity Not Before: Dec 22 07:01:36 2025 GMT Not After : Dec 23 07:01:36 2025 GMT Subject: CN=26ed77e2e8107c5735e9ebe95c49f91055b67d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:75:d0:e6:20:10:26:80:48:66:03:aa:f2: a9:d9:82:5a:2d:51:80:d2:ee:80:f5:30:31:7c:63: a0:2e:e0:27:c1:05:56:08:11:d2:0c:97:fb:d3:08: 17:f1:24:f4:a1:f5:1b:05:94:ad:29:28:cc:02:4c: 17:a7:c6:2f:be:74:f1:fb:0b:8c:06:6b:10:7b:13: 7b:ab:21:2d:5f:66:41:a1:c7:88:93:c0:24:f5:40: 12:15:db:97:70:c7:d8:c2:db:a8:3c:79:c1:ad:5f: a6:c0:95:98:08:c0:94:d0:1d:02:f0:75:df:a6:f3: 5c:14:9a:66:55:7e:5c:9a:00:0a:0b:32:da:43:a2: ea:b6:23:fc:49:b7:f4:e3:c8:a0:49:13:1f:4c:7e: 46:68:1e:1c:c3:2a:50:99:0c:32:80:3a:5c:b1:bd: 75:88:4d:89:31:66:29:15:fe:fa:53:43:80:56:d2: 32:88:ec:c4:25:30:17:e2:5e:bf:e2:5e:dd:a7:c4: 2e:bb:93:16:b7:be:a6:c5:f0:ce:7a:a2:49:ab:e5: 1a:d0:ce:85:01:42:b4:6c:28:a2:62:43:fb:20:88: 0d:da:08:a2:b3:7f:07:0e:da:1d:0c:65:4b:ac:90: e8:1e:62:2a:8a:cb:74:2f:7c:c7:71:b9:34:fb:f4: 74:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:ED:77:E2:E8:10:7C:57:35:E9:EB:E9:5C:49:F9:10:55:B6:7D:2D X509v3 Authority Key Identifier: keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:24:08:9d:02:5d:7b:98:ef:c2:bb:a1:de:c4:d4:24:9a:bd: 69:eb:7d:a2:fb:35:39:a4:6f:27:59:5e:15:e8:a8:e5:29:fd: 6a:b2:4e:72:b4:56:ce:65:24:d9:ac:1f:2c:85:e0:72:b3:5b: a6:49:e0:4d:69:5b:16:63:6e:03:cd:a8:7b:f9:9d:54:7d:aa: 34:f3:e8:0c:9a:b3:61:d2:dc:1b:bb:95:fb:d8:9e:d6:a3:7d: 15:6a:88:e3:01:6a:15:1a:76:c7:e1:20:19:ee:28:55:0f:ec: c1:db:02:73:87:32:26:5d:28:9f:a1:49:19:cd:76:c5:ce:c0: f4:f9:6a:83:ed:48:8d:b1:b2:e6:40:63:37:2f:a9:42:8a:1c: ec:c1:9a:2f:87:41:aa:a4:3b:7c:21:44:e5:fc:8f:27:6c:aa: 5b:c4:8b:44:48:80:48:68:41:09:f7:66:d5:d4:80:eb:e9:ec: df:07:4e:7d:15:f1:ba:aa:34:8d:c8:19:55:4b:27:e9:65:f9: 1f:4f:a0:51:ee:87:bf:f5:ce:3d:a3:e8:82:6a:e5:ae:ae:ed: 27:57:5e:12:7a:a7:e2:08:73:30:2d:a3:77:e7:5e:cb:40:66: 65:d5:6e:e6:fd:e3:fb:18:07:bc:3e:b3:23:cf:3f:cf:64:37: 17:12:81:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3Q0WJz4id2j/s2jxUsjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYWFjYWI4ZTQ1NmJiMjkxOTc5YTczNTdhNzAyNGYwMGJl YmFhZjUwHhcNMjUxMjIyMDcwMTM2WhcNMjUxMjIzMDcwMTM2WjAzMTEwLwYDVQQD EygyNmVkNzdlMmU4MTA3YzU3MzVlOWViZTk1YzQ5ZjkxMDU1YjY3ZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiF10OYgECaASGYDqvKp2YJaLVGA 0u6A9TAxfGOgLuAnwQVWCBHSDJf70wgX8ST0ofUbBZStKSjMAkwXp8YvvnTx+wuM BmsQexN7qyEtX2ZBoceIk8Ak9UASFduXcMfYwtuoPHnBrV+mwJWYCMCU0B0C8HXf pvNcFJpmVX5cmgAKCzLaQ6LqtiP8Sbf048igSRMfTH5GaB4cwypQmQwygDpcsb11 iE2JMWYpFf76U0OAVtIyiOzEJTAX4l6/4l7dp8Quu5MWt76mxfDOeqJJq+Ua0M6F AUK0bCiiYkP7IIgN2giis38HDtodDGVLrJDoHmIqist0L3zHcbk0+/R0awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbtd+LoEHxXNenr6VxJ+RBVtn0tMB8GA1UdIwQY MBaAFB+qyrjkVrspGXmnNXpwJPAL66r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MDFmZDMtYThjZC00ZTJkLTlkMzIt MmZiNzJhMGFlZjZkLzEvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81MDFmZDMtYThjZC00ZTJkLTlkMzItMmZiNzJhMGFlZjZk LzEvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSQInQJd e5jvwruh3sTUJJq9aet9ovs1OaRvJ1leFeio5Sn9arJOcrRWzmUk2awfLIXgcrNb pkngTWlbFmNuA82oe/mdVH2qNPPoDJqzYdLcG7uV+9ie1qN9FWqI4wFqFRp2x+Eg Ge4oVQ/swdsCc4cyJl0on6FJGc12xc7A9Plqg+1IjbGy5kBjNy+pQooc7MGaL4dB qqQ7fCFE5fyPJ2yqW8SLREiASGhBCfdm1dSA6+ns3wdOfRXxuqo0jcgZVUsn6WX5 H0+gUe6Hv/XOPaPogmrlrq7tJ1deEnqn4ghzMC2jd+dey0BmZdVu5v3j+xgHvD6z I88/z2Q3FxKBDQ== -----END CERTIFICATE-----Generated at Mon Dec 22 10:03:33 2025 by rpki-client