This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json) Hash identifier: Ayy7hQLq2fpwh86FHSgkB6XK50emOBMUFGoiNiZoKKQ= Subject key identifier: E7:57:7C:83:B2:EC:34:38:7F:EA:58:0C:F6:D7:DB:6C:D7:07:04:E2 Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Certificate serial: 019B4738812148DFF1C51494E511F48DD591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft Manifest number: 1217 Signing time: Mon 22 Dec 2025 18:00:43 +0000 Manifest this update: Mon 22 Dec 2025 18:00:43 +0000 Manifest next update: Tue 23 Dec 2025 18:00:43 +0000 Files and hashes: 1: 7q0WrWMejy7wbR787YAaoWGbJFQ.roa (hash: wvukoKMYamTKrvVMIAVFKbPLx57mG8Vi2Twko2h+BGA=) 2: 9N4nOv3tg3sEbPyzZf0it1Hq25E.roa (hash: IJnSS5a9u+7nIpL38LijT/DvQkKhhTmKcLRcnn9ZFq4=) 3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: 7J3+mKvGBbHTrS6wHq2WTPY/7pXkxo3+5hMUPx6SAkM=) 4: HFw-x8czfBceHHrxWFsisFaU53k.roa (hash: cYh9OngZxsihRjHnYd3zU3o4mbQkOgFi9+M2bbApN3k=) 5: X8AY7TE63_MLYw5qzgUDNFtz5p0.roa (hash: X2a5upeXUq+OfzrT3NEfhOg+ntOWBbajp/Ueexg9I2s=) 6: lZMuhPvtZ2azCXBKPog94p3v2Xw.roa (hash: xEuRWjb3WfY9qNirTUGj3ZWp2yVhhUygTy4CswJMg3c=) 7: uIXD9TM7mcGL2h8D_v3d0KyzT9E.roa (hash: N8tk1k3ctTBw3mBa+DDHR+60L2fh+aJO68VY7R3S2T4=) 8: vlexF02dkqJLD0WdrTxwGKUdE4I.roa (hash: cuDkI790X0jMiu+jzLtuqyGyt6ox4BybHkrBEnZriww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:81:21:48:df:f1:c5:14:94:e5:11:f4:8d:d5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Validity Not Before: Dec 22 18:00:43 2025 GMT Not After : Dec 23 18:00:43 2025 GMT Subject: CN=e7577c83b2ec34387fea580cf6d7db6cd70704e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:80:dd:b9:15:7b:f4:79:08:d8:73:0e:c4: 93:22:c3:a9:4f:80:f8:07:94:ea:b5:23:21:40:4d: 2b:81:60:cb:15:cb:b1:ab:06:d5:11:23:45:9c:ed: b8:fa:35:8c:81:dd:7a:b7:d4:a3:b0:eb:5c:0a:11: da:3e:42:83:f1:b5:36:58:9d:64:0d:b8:00:d2:7c: 42:a6:5a:15:85:81:9c:a2:d0:55:18:aa:f4:3f:6e: 4f:3b:30:5b:1b:dd:a7:01:2c:d1:3d:a2:9e:72:71: 02:5d:75:d6:25:f2:f1:e3:75:ae:8f:48:09:bb:3a: 52:8f:09:24:10:24:bb:00:52:3a:e6:39:10:62:bd: 9f:44:32:fb:8a:5b:3d:f4:e8:72:f6:b8:84:c4:f6: d1:be:c4:54:e1:0b:9c:df:ec:0a:d0:ba:b8:b1:7f: 01:8d:64:6b:48:4b:9d:ee:5c:76:0e:32:d6:54:c5: 88:22:48:3d:c3:8e:63:d2:4a:84:5e:6a:e4:78:b7: b0:fb:29:33:12:b0:a1:f4:c8:97:e5:51:9b:ee:3f: 0d:db:62:da:72:b4:af:56:a1:7b:59:fb:c8:de:0d: ff:6d:ad:e7:da:44:ac:94:94:f8:02:76:73:2f:e6: d8:09:1f:62:7f:db:20:14:8e:16:00:ae:c2:14:d8: 78:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:57:7C:83:B2:EC:34:38:7F:EA:58:0C:F6:D7:DB:6C:D7:07:04:E2 X509v3 Authority Key Identifier: keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e0:1a:be:2c:37:5e:38:75:fe:1b:8c:b8:26:7c:6c:bb:df: 6e:11:26:ef:c3:16:e5:c6:26:80:87:5c:f7:b6:fc:25:65:40: 47:ee:6c:d1:d4:dc:17:dd:77:11:e0:bb:b0:0a:d5:ec:a7:4b: d8:35:76:20:41:a9:42:d3:7b:68:29:43:2e:0d:a1:1e:ff:69: d5:6a:e2:08:2b:f4:42:95:9f:9a:d9:53:26:c5:29:d0:f6:e9: fd:8c:70:c6:0a:9e:95:ba:88:7b:fc:c1:3d:23:77:0e:63:f8: e6:bb:c1:b1:65:0a:15:25:f2:01:ff:8e:7b:64:c7:2b:3d:65: 0e:fc:23:45:0e:4d:86:5a:12:f2:46:48:0d:54:72:8e:3b:e2: 53:ad:60:9e:dd:6a:67:91:ae:48:78:54:f6:76:ef:a5:ef:a5: 1d:21:f3:23:0f:12:ee:55:0d:c6:eb:67:86:7a:3c:8c:9c:42: f6:8a:7a:d9:ae:5d:f1:cf:68:8c:50:92:b7:2e:5b:0b:7c:a1: 9b:27:df:a0:d0:b2:aa:f4:83:a3:f0:14:26:22:a9:d4:5a:f5: d6:ed:ab:54:af:aa:08:05:d9:84:4e:98:97:7f:2c:05:10:c9: 9e:39:7c:26:6f:60:51:dd:b3:5b:ba:63:ba:21:51:40:69:e7: 97:94:cc:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOIEhSN/xxRSU5RH0jdWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYzQ5MjdhYjE5NGFlMTIzN2ZkZTJkM2JlZjY5MDM4ODkz ZjBkYzUwHhcNMjUxMjIyMTgwMDQzWhcNMjUxMjIzMTgwMDQzWjAzMTEwLwYDVQQD EyhlNzU3N2M4M2IyZWMzNDM4N2ZlYTU4MGNmNmQ3ZGI2Y2Q3MDcwNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsWA3bkVe/R5CNhzDsSTIsOpT4D4 B5TqtSMhQE0rgWDLFcuxqwbVESNFnO24+jWMgd16t9SjsOtcChHaPkKD8bU2WJ1k DbgA0nxCploVhYGcotBVGKr0P25POzBbG92nASzRPaKecnECXXXWJfLx43Wuj0gJ uzpSjwkkECS7AFI65jkQYr2fRDL7ils99Ohy9riExPbRvsRU4Quc3+wK0Lq4sX8B jWRrSEud7lx2DjLWVMWIIkg9w45j0kqEXmrkeLew+ykzErCh9MiX5VGb7j8N22La crSvVqF7WfvI3g3/ba3n2kSslJT4AnZzL+bYCR9if9sgFI4WAK7CFNh4IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdXfIOy7DQ4f+pYDPbX22zXBwTiMB8GA1UdIwQY MBaAFB/EknqxlK4SN/3i0772kDiJPw3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODIt OGI4YTAxYmQ3NDE0LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODItOGI4YTAxYmQ3NDE0 LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeAaviw3 Xjh1/huMuCZ8bLvfbhEm78MW5cYmgIdc97b8JWVAR+5s0dTcF913EeC7sArV7KdL 2DV2IEGpQtN7aClDLg2hHv9p1WriCCv0QpWfmtlTJsUp0Pbp/YxwxgqelbqIe/zB PSN3DmP45rvBsWUKFSXyAf+Oe2THKz1lDvwjRQ5NhloS8kZIDVRyjjviU61gnt1q Z5GuSHhU9nbvpe+lHSHzIw8S7lUNxutnhno8jJxC9op62a5d8c9ojFCSty5bC3yh myffoNCyqvSDo/AUJiKp1Fr11u2rVK+qCAXZhE6Yl38sBRDJnjl8Jm9gUd2zW7pj uiFRQGnnl5TM1A== -----END CERTIFICATE-----Generated at Mon Dec 22 22:54:48 2025 by rpki-client