This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft File: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json) Hash identifier: dxSFJSDsaFgZkTfVaHo9P5BBc05S5v2xBt6D3M0yFVM= Subject key identifier: C6:99:C3:31:D1:09:5F:F6:DE:EB:A6:42:4D:80:6E:4B:9F:33:44:C5 Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4 Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4 Certificate serial: 019B281BFBC7FB48E17CC49F7C726A71F3B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft Manifest number: 09C6 Signing time: Tue 16 Dec 2025 17:01:21 +0000 Manifest this update: Tue 16 Dec 2025 17:01:21 +0000 Manifest next update: Wed 17 Dec 2025 17:01:21 +0000 Files and hashes: 1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: OY8sz3FoDb56f3GlaC/U/G1gynAC4ORW6bNeR9a+Epw=) 2: rNGuPSJft-Vo3aMmE_0SHixDFYs.roa (hash: RB3m8yl02sm8Z1EZzBwUHBfxuJzfyJEgz7CGmiyldWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:fb:c7:fb:48:e1:7c:c4:9f:7c:72:6a:71:f3:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4 Validity Not Before: Dec 16 17:01:21 2025 GMT Not After : Dec 17 17:01:21 2025 GMT Subject: CN=c699c331d1095ff6deeba6424d806e4b9f3344c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:fc:7d:96:c6:c0:20:78:8e:ac:cf:2e:77: 8f:a4:b5:bf:05:2f:1c:e4:9e:64:8f:9d:d1:44:97: d3:ee:a2:76:94:ab:f4:24:a5:3b:ab:cd:18:3e:dd: 73:57:9b:53:6d:23:62:d4:1e:88:4b:24:ab:0d:55: 13:80:67:30:b4:9f:81:d5:81:02:a8:55:14:c5:d6: 23:57:c5:d1:21:ed:e2:bf:14:a8:65:fd:db:37:17: 90:9c:db:df:8d:11:a4:18:92:55:a5:9a:da:0c:58: 93:46:02:39:0d:5f:88:62:90:f1:99:5e:56:d4:29: 2c:09:27:14:51:d9:c6:15:07:b9:85:09:22:0a:69: 0f:98:ea:30:84:00:7c:a2:bf:50:64:b5:bf:a2:63: d6:1d:71:c2:60:64:00:d9:7b:f4:e8:3b:c6:df:9b: be:de:01:cf:cc:45:25:88:8a:7a:07:b1:2e:bd:9a: 91:cf:7e:2c:ea:10:09:e4:b6:f1:96:cd:5e:1d:aa: dd:9d:15:52:d3:93:c1:b5:8a:9f:65:c2:80:22:e0: 0b:30:95:1c:82:97:ba:b1:4a:44:3e:43:16:19:6b: 39:c8:e4:71:fb:38:2e:42:e0:f8:46:3f:00:88:0e: a4:b3:23:39:3b:c1:96:3a:c5:02:15:c4:6f:88:90: fe:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:99:C3:31:D1:09:5F:F6:DE:EB:A6:42:4D:80:6E:4B:9F:33:44:C5 X509v3 Authority Key Identifier: keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:ab:11:0e:97:2e:85:74:69:17:bb:95:9c:98:49:3f:7d:0e: d3:3c:6c:b0:ce:e5:ff:c2:c6:32:1f:ab:b0:cf:fb:03:5a:27: 7c:39:02:88:f8:f3:d0:91:c7:bf:3f:60:87:27:bb:3b:d8:5f: 87:f7:ba:08:d0:d4:ea:86:51:7a:11:a3:40:ca:b8:f4:a7:84: 61:92:91:61:b7:dd:e9:f3:77:22:f5:3b:b7:0a:28:5e:7e:80: f8:ab:1d:80:e9:be:e2:a2:a7:a9:92:e2:5c:bc:d8:51:14:17: b7:0c:f9:9b:47:61:41:e0:69:1c:e2:ef:37:0f:86:bf:78:c5: 31:7e:3d:00:86:df:fb:b0:a8:6d:6b:52:b6:95:69:ba:3f:ab: af:ff:b7:8c:b7:87:17:b6:59:33:e0:5c:bc:98:9d:01:99:13: 10:fd:5c:b9:34:7c:a3:f1:21:05:71:ca:31:d3:6d:62:e0:12: b0:6a:c4:ca:88:7a:19:53:3c:30:92:73:0b:df:51:4a:9d:8f: 70:e6:dc:f5:fb:bf:51:0b:82:56:88:c5:ea:ad:0a:ca:36:71: 85:cf:d0:a2:e1:9b:3c:49:b2:0b:15:22:52:cd:8d:1c:c4:d8: 83:7a:8a:9f:ca:68:bf:91:ec:e9:0c:ac:85:50:51:08:92:90: 5f:da:9d:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG/vH+0jhfMSffHJqcfO1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYjVmYzNkODk4MzQ4ZDM1Yzc3YmYxNmMzZWQ5Y2ZlODE1 OTU1YjQwHhcNMjUxMjE2MTcwMTIxWhcNMjUxMjE3MTcwMTIxWjAzMTEwLwYDVQQD EyhjNjk5YzMzMWQxMDk1ZmY2ZGVlYmE2NDI0ZDgwNmU0YjlmMzM0NGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCj8fZbGwCB4jqzPLnePpLW/BS8c 5J5kj53RRJfT7qJ2lKv0JKU7q80YPt1zV5tTbSNi1B6ISySrDVUTgGcwtJ+B1YEC qFUUxdYjV8XRIe3ivxSoZf3bNxeQnNvfjRGkGJJVpZraDFiTRgI5DV+IYpDxmV5W 1CksCScUUdnGFQe5hQkiCmkPmOowhAB8or9QZLW/omPWHXHCYGQA2Xv06DvG35u+ 3gHPzEUliIp6B7EuvZqRz34s6hAJ5Lbxls1eHardnRVS05PBtYqfZcKAIuALMJUc gpe6sUpEPkMWGWs5yORx+zguQuD4Rj8AiA6ksyM5O8GWOsUCFcRviJD+CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaZwzHRCV/23uumQk2AbkufM0TFMB8GA1UdIwQY MBaAFB+1/D2Jg0jTXHe/FsPtnP6BWVW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNGViMmYtYzExNS00ZGVlLWE1ZTct ZGVkZWEzYWIwZDNiLzEvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kNGViMmYtYzExNS00ZGVlLWE1ZTctZGVkZWEzYWIwZDNi LzEvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0asRDpcu hXRpF7uVnJhJP30O0zxssM7l/8LGMh+rsM/7A1onfDkCiPjz0JHHvz9ghye7O9hf h/e6CNDU6oZRehGjQMq49KeEYZKRYbfd6fN3IvU7twooXn6A+KsdgOm+4qKnqZLi XLzYURQXtwz5m0dhQeBpHOLvNw+Gv3jFMX49AIbf+7CobWtStpVpuj+rr/+3jLeH F7ZZM+BcvJidAZkTEP1cuTR8o/EhBXHKMdNtYuASsGrEyoh6GVM8MJJzC99RSp2P cObc9fu/UQuCVojF6q0KyjZxhc/QouGbPEmyCxUiUs2NHMTYg3qKn8pov5Hs6Qys hVBRCJKQX9qdKA== -----END CERTIFICATE-----Generated at Tue Dec 16 23:16:38 2025 by rpki-client