This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json) Hash identifier: LmSXV/0KPz9KoBCm28CQhDXdNsWQhNc+FzNj0oSeEWE= Subject key identifier: 39:30:DB:0E:8C:77:6B:51:50:44:62:03:47:14:47:08:42:0A:AE:EF Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66 Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466 Certificate serial: 019B3C10901C1F70EB9493347BCE7FFAB56B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft Manifest number: 0E91 Signing time: Sat 20 Dec 2025 14:01:16 +0000 Manifest this update: Sat 20 Dec 2025 14:01:16 +0000 Manifest next update: Sun 21 Dec 2025 14:01:16 +0000 Files and hashes: 1: 9LtCAwdvQTxrsgjAgJBXTY-dexQ.roa (hash: YbPa7xrFRquA6rkXPn/4oW9xs5SCR/ZWuuJuhONwhvc=) 2: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: 53jn+ki5jsmffCw2VgcskU6GuUBLQ2eDDs/X6Zht+n4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:90:1c:1f:70:eb:94:93:34:7b:ce:7f:fa:b5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466 Validity Not Before: Dec 20 14:01:16 2025 GMT Not After : Dec 21 14:01:16 2025 GMT Subject: CN=3930db0e8c776b515044620347144708420aaeef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ed:8e:f0:b1:c6:e9:4e:d8:6a:a9:c9:4b:05: aa:a6:b3:48:51:93:da:18:c3:06:e5:d4:1a:24:1b: c7:51:fb:6b:fe:30:09:1b:e8:11:b9:b9:dd:e2:56: f8:bc:de:51:5f:4c:30:08:b9:44:88:23:6f:23:0f: 0c:16:8a:b2:ce:d9:05:68:bf:0d:3c:c6:0c:2c:ec: 40:a2:20:9e:2f:ef:69:a2:8f:40:92:5f:1e:a2:14: 30:37:35:66:98:b8:ce:96:03:15:69:c1:f8:a2:fd: b4:cb:0e:cd:ac:66:82:6b:bf:d2:ff:2a:e7:51:12: 46:ca:87:e1:e1:0d:2f:07:b8:8f:79:b3:30:94:a6: a1:f5:f4:60:23:20:de:e4:e2:13:20:98:03:e5:2a: 1a:62:89:60:06:3d:44:1c:65:13:17:7d:40:28:18: d0:f5:46:71:3f:ab:d2:ed:48:25:5b:6d:7b:3d:f8: 0b:72:7f:82:4d:7b:a9:e8:36:43:dc:dc:d9:ed:5e: 35:c1:98:2d:b4:80:7e:cc:af:32:c0:85:d6:0a:94: be:a2:8a:56:dc:92:5a:ec:b3:7a:51:2f:c2:8a:2e: dc:35:23:51:48:b5:27:bc:21:00:eb:b2:b6:54:e9: dc:79:9a:e0:d7:cb:86:ac:65:d5:76:c4:a4:2c:74: e6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:30:DB:0E:8C:77:6B:51:50:44:62:03:47:14:47:08:42:0A:AE:EF X509v3 Authority Key Identifier: keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:48:5e:0d:03:5e:08:97:cc:e4:2e:cc:c6:67:3f:e2:2e:da: aa:04:91:51:ac:1f:90:10:56:f5:46:fe:5f:89:30:30:23:18: bb:a0:cb:a3:96:21:da:e3:ba:82:09:c0:aa:9d:32:e8:a0:ec: 34:7f:be:7b:51:47:ea:39:d1:a6:8d:e3:0d:0e:c1:fa:88:08: 16:c1:22:17:8c:d5:0c:4d:fe:cd:6b:2d:11:60:4c:f6:23:19: 1b:fc:05:7a:40:f6:ea:73:a1:51:ea:f4:5d:ae:c3:8f:6b:eb: 3f:63:51:64:8d:ca:ab:13:36:52:e2:30:a6:af:44:2d:42:86: 5e:01:37:6a:75:36:ba:48:c4:13:f5:1c:fd:72:11:fc:29:7f: 62:89:f5:7e:bf:d5:99:73:cd:a8:33:71:45:08:41:67:46:e5: d7:37:c4:45:3b:12:b4:c6:aa:28:7a:a1:58:41:c4:c9:c4:07: c8:41:9c:fe:96:0c:2f:59:27:27:b9:a1:97:19:bf:ea:4d:d0: 51:f8:32:11:24:48:eb:f5:f4:a2:7d:a1:23:89:dc:8a:68:6e: ba:cc:63:e8:04:02:c1:c5:c0:02:15:9c:9d:15:10:dd:fa:b6: ba:ae:9f:cd:5a:a6:b6:41:cb:10:25:58:8f:7b:6c:98:33:52: 95:cb:70:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EJAcH3DrlJM0e85/+rVrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOTc1OTlmNjNkNzg3YzY1YjJlZjlmZjcwZGQ2MzY1Mjc0 MDQ0NjYwHhcNMjUxMjIwMTQwMTE2WhcNMjUxMjIxMTQwMTE2WjAzMTEwLwYDVQQD EygzOTMwZGIwZThjNzc2YjUxNTA0NDYyMDM0NzE0NDcwODQyMGFhZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O2O8LHG6U7YaqnJSwWqprNIUZPa GMMG5dQaJBvHUftr/jAJG+gRubnd4lb4vN5RX0wwCLlEiCNvIw8MFoqyztkFaL8N PMYMLOxAoiCeL+9poo9Akl8eohQwNzVmmLjOlgMVacH4ov20yw7NrGaCa7/S/yrn URJGyofh4Q0vB7iPebMwlKah9fRgIyDe5OITIJgD5SoaYolgBj1EHGUTF31AKBjQ 9UZxP6vS7UglW217PfgLcn+CTXup6DZD3NzZ7V41wZgttIB+zK8ywIXWCpS+oopW 3JJa7LN6US/Cii7cNSNRSLUnvCEA67K2VOnceZrg18uGrGXVdsSkLHTmsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkw2w6Md2tRUERiA0cURwhCCq7vMB8GA1UdIwQY MBaAFB+XWZ9j14fGWy75/3DdY2UnQERmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjct N2VjZTdkMDczNjUxLzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjctN2VjZTdkMDczNjUx LzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkheDQNe CJfM5C7Mxmc/4i7aqgSRUawfkBBW9Ub+X4kwMCMYu6DLo5Yh2uO6ggnAqp0y6KDs NH++e1FH6jnRpo3jDQ7B+ogIFsEiF4zVDE3+zWstEWBM9iMZG/wFekD26nOhUer0 Xa7Dj2vrP2NRZI3KqxM2UuIwpq9ELUKGXgE3anU2ukjEE/Uc/XIR/Cl/Yon1fr/V mXPNqDNxRQhBZ0bl1zfERTsStMaqKHqhWEHEycQHyEGc/pYML1knJ7mhlxm/6k3Q UfgyESRI6/X0on2hI4ncimhuusxj6AQCwcXAAhWcnRUQ3fq2uq6fzVqmtkHLECVY j3tsmDNSlctwow== -----END CERTIFICATE-----Generated at Sat Dec 20 17:47:04 2025 by rpki-client