This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft File: h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft (raw, json) Hash identifier: l6pl1mnQaG97Qv1EdbnpFzlqQ0sEKOgyiIqyxMlfuuQ= Subject key identifier: 7B:7F:5D:07:3E:02:1D:F5:69:5E:6A:24:E6:D2:EF:91:7D:FF:2E:5B Authority key identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65 Certificate issuer: /CN=8751759bb92cba5520536945ed1b3fa5ad151b65 Certificate serial: 019B533CEAAAEA2043E944EE73455CBFCBF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 02:00:59 +0000 Manifest this update: Thu 25 Dec 2025 02:00:59 +0000 Manifest next update: Fri 26 Dec 2025 02:00:59 +0000 Files and hashes: 1: P-yGIcgr3IfthLgzfM98T6lGbKU.roa (hash: 7HVjYAoSUQuVeE2cpmTGfmBl3cuM7py9I5dDG8/Cz1U=) 2: h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl (hash: sznjhIuZjUJso/8izp3Jk7FDo0BJQbl0cLXjDTgbgUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:ea:aa:ea:20:43:e9:44:ee:73:45:5c:bf:cb:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8751759bb92cba5520536945ed1b3fa5ad151b65 Validity Not Before: Dec 25 02:00:59 2025 GMT Not After : Dec 26 02:00:59 2025 GMT Subject: CN=7b7f5d073e021df5695e6a24e6d2ef917dff2e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:60:6a:5f:61:2f:82:f0:8a:77:8f:e6:90:e0: e0:98:b2:a7:a5:31:19:a3:21:68:32:d6:f0:97:57: 52:b1:71:79:c0:fb:a3:cf:71:00:75:0d:b2:a3:fe: b7:50:e2:94:15:38:dc:b9:4b:6d:bc:71:bf:19:54: 85:ac:ee:bd:14:57:09:c9:f0:e7:b7:88:2e:8f:f1: 59:bf:4d:4c:10:da:a9:41:20:b7:01:5a:d6:4b:a6: 21:84:f2:ad:3b:de:82:7e:a0:c4:c9:25:9b:4b:02: ca:f7:3f:88:89:90:d2:41:96:8f:72:1b:6a:3c:29: 7d:c9:b8:8c:7f:a8:22:2a:37:33:66:16:19:31:4f: d0:53:e5:42:b2:1f:8e:52:3e:3f:55:22:47:d7:03: 59:99:34:66:dc:0c:24:b7:3e:ec:65:c9:44:9b:2c: b3:7c:13:72:df:5c:45:15:f1:2c:f8:54:ae:b7:da: a8:ad:ac:f3:b6:d4:fc:e5:9c:14:c2:2f:5f:4e:f3: a1:c3:8d:e1:4f:80:8e:d9:19:e3:7b:63:ae:6e:b8: 14:f5:e1:0e:f4:22:2e:0e:1b:be:70:03:8c:5c:a9: bd:37:44:88:3d:4d:73:de:39:29:9d:5f:2c:cd:a9: a8:03:40:31:a5:da:be:55:3b:fa:2a:de:8d:3a:9c: e2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7F:5D:07:3E:02:1D:F5:69:5E:6A:24:E6:D2:EF:91:7D:FF:2E:5B X509v3 Authority Key Identifier: keyid:87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f6:f6:dc:1b:6b:3b:0d:7f:49:93:96:7c:c2:a8:87:b0:ed: 81:97:58:44:3c:f3:ac:c5:5a:68:8c:ea:36:69:a8:34:dd:c2: bd:35:74:5a:2e:71:65:c0:4e:79:36:88:c5:6a:f7:24:9e:4f: 62:bd:3e:d9:cb:6f:46:98:95:b8:22:29:d4:ff:0a:f4:f3:05: c2:bf:a0:aa:72:ce:fe:47:72:51:fb:17:9a:98:2d:0f:e3:9c: e2:81:34:0f:f0:c6:43:a7:7c:4b:3a:7e:d4:97:b2:61:30:ef: e9:4a:d3:e6:60:ae:92:4a:1d:1c:02:a0:59:01:92:09:a3:e5: d9:db:8d:46:18:78:18:01:20:e3:4c:5e:3e:90:7c:2a:1a:31: b1:97:63:a9:1f:c5:5c:dc:4c:20:94:34:1f:68:15:1e:51:e5: 77:12:d1:dd:cf:d5:cb:50:e8:dd:ec:6f:dc:17:2a:61:e7:84: 7c:de:64:06:6e:16:2d:b0:54:a5:6d:ba:61:38:4c:fd:fe:9e: 8b:1a:00:14:32:0a:8d:b5:03:35:a1:e8:dc:40:62:be:cf:18: 99:58:66:7e:a1:b5:58:7a:32:23:fa:36:6b:b9:53:27:28:4b: d2:b5:20:6a:c1:10:fc:db:73:c6:8e:0a:5b:f5:7e:b9:14:43: 76:c4:07:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPOqq6iBD6UTuc0Vcv8v1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NTE3NTliYjkyY2JhNTUyMDUzNjk0NWVkMWIzZmE1YWQx NTFiNjUwHhcNMjUxMjI1MDIwMDU5WhcNMjUxMjI2MDIwMDU5WjAzMTEwLwYDVQQD Eyg3YjdmNWQwNzNlMDIxZGY1Njk1ZTZhMjRlNmQyZWY5MTdkZmYyZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2BqX2EvgvCKd4/mkODgmLKnpTEZ oyFoMtbwl1dSsXF5wPujz3EAdQ2yo/63UOKUFTjcuUttvHG/GVSFrO69FFcJyfDn t4guj/FZv01MENqpQSC3AVrWS6YhhPKtO96CfqDEySWbSwLK9z+IiZDSQZaPchtq PCl9ybiMf6giKjczZhYZMU/QU+VCsh+OUj4/VSJH1wNZmTRm3Awktz7sZclEmyyz fBNy31xFFfEs+FSut9qorazzttT85ZwUwi9fTvOhw43hT4CO2Rnje2OubrgU9eEO 9CIuDhu+cAOMXKm9N0SIPU1z3jkpnV8szamoA0Axpdq+VTv6Kt6NOpzi+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHt/XQc+Ah31aV5qJObS75F9/y5bMB8GA1UdIwQY MBaAFIdRdZu5LLpVIFNpRe0bP6WtFRtlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDFGMW03a3N1bFVnVTJsRjdSc19wYTBWRzJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84NjI1MjUtZjYzZi00NjUzLWEzYTYt ZTg5ZjUxY2E2ODQwLzEvaDFGMW03a3N1bFVnVTJsRjdSc19wYTBWRzJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84NjI1MjUtZjYzZi00NjUzLWEzYTYtZTg5ZjUxY2E2ODQw LzEvaDFGMW03a3N1bFVnVTJsRjdSc19wYTBWRzJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvb23Btr Ow1/SZOWfMKoh7DtgZdYRDzzrMVaaIzqNmmoNN3CvTV0Wi5xZcBOeTaIxWr3JJ5P Yr0+2ctvRpiVuCIp1P8K9PMFwr+gqnLO/kdyUfsXmpgtD+Oc4oE0D/DGQ6d8Szp+ 1JeyYTDv6UrT5mCukkodHAKgWQGSCaPl2duNRhh4GAEg40xePpB8KhoxsZdjqR/F XNxMIJQ0H2gVHlHldxLR3c/Vy1Do3exv3BcqYeeEfN5kBm4WLbBUpW26YThM/f6e ixoAFDIKjbUDNaHo3EBivs8YmVhmfqG1WHoyI/o2a7lTJyhL0rUgasEQ/Ntzxo4K W/V+uRRDdsQH7g== -----END CERTIFICATE-----Generated at Thu Dec 25 09:22:25 2025 by rpki-client