This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json) Hash identifier: 3ikEbg0j9pf+wEHyyl8ggJr0GN3w4dN3DIGZ7GAvRvs= Subject key identifier: BC:73:D3:86:CA:62:99:C2:69:50:9C:42:70:D6:BB:54:D8:09:FC:1C Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb Certificate serial: 019B40C945C65FB96707928C2FA04A5CF3AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft Manifest number: 1435 Signing time: Sun 21 Dec 2025 12:01:30 +0000 Manifest this update: Sun 21 Dec 2025 12:01:30 +0000 Manifest next update: Mon 22 Dec 2025 12:01:30 +0000 Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: BJKHgUJLtvRBFEess1m3eK/TnXIceBuvGDuyVkRnhtE=) 2: YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa (hash: UwEIySf0ujQ0bIXU2dedyQ3b/IuoBDp7UIw7LsZq4qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:45:c6:5f:b9:67:07:92:8c:2f:a0:4a:5c:f3:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb Validity Not Before: Dec 21 12:01:30 2025 GMT Not After : Dec 22 12:01:30 2025 GMT Subject: CN=bc73d386ca6299c269509c4270d6bb54d809fc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3a:24:06:87:8d:92:82:bd:66:8d:5a:4c:8c: a2:d8:17:cc:e6:6e:f7:4a:84:c5:eb:22:d7:95:69: fc:d7:aa:45:d9:19:0f:58:48:cb:7a:61:6e:72:7a: 13:ce:da:a0:71:bb:e5:fa:60:81:06:7a:ab:d7:45: 3c:f6:91:0a:e3:89:10:cc:4f:10:1f:b6:2f:e6:48: bb:12:75:9e:af:f1:77:fd:8e:e4:ee:18:f0:5c:6c: 0a:d7:71:97:a1:de:e8:0c:66:14:3b:f7:83:3b:0f: e2:34:cb:b2:fe:1c:fd:f2:bc:ad:d2:b7:85:f9:74: 48:41:93:e2:5c:b2:0b:bb:c1:bd:23:5b:df:bc:cb: c2:0d:d2:ee:df:05:ef:1f:be:15:0b:f1:a3:97:fe: 48:d4:a8:d8:be:a9:ed:27:95:13:22:d9:ae:5a:11: e6:34:79:52:25:f3:b7:18:ca:df:fe:a2:49:f9:16: 4e:28:b7:c4:a2:bb:a0:81:ff:ab:60:a6:49:b4:71: 8e:2c:62:3c:26:60:3a:22:7c:bf:e5:2b:81:63:30: 9c:53:fa:43:28:c9:d5:f0:f5:73:a9:90:c7:ab:fe: 53:16:ed:13:19:12:39:5d:7b:ed:02:25:1a:ff:48: bd:ea:5b:a6:46:66:95:57:fc:01:80:67:04:a6:b4: d5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:73:D3:86:CA:62:99:C2:69:50:9C:42:70:D6:BB:54:D8:09:FC:1C X509v3 Authority Key Identifier: keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:14:58:df:20:54:92:cf:7e:f4:61:78:68:c0:b1:51:4f:1e: 20:4c:77:d8:14:6b:2e:09:33:15:42:57:9e:08:8e:a2:05:a8: f6:7a:6f:eb:3f:3d:4f:03:33:dc:b9:2f:33:b6:3e:17:74:49: b3:40:17:56:10:05:28:12:94:82:2d:89:6a:c9:43:0e:6f:ab: 97:bd:02:15:da:20:bf:2f:82:77:d4:de:f4:bb:3c:ee:8b:6a: 79:82:8d:34:b1:3c:cf:f0:93:ec:6c:99:ef:8b:89:7b:e6:67: 97:aa:be:18:4d:fb:1f:fe:94:9b:2d:1e:5d:66:e1:85:47:ed: b1:d5:54:a8:a1:4f:db:eb:79:3b:7e:da:53:8c:04:24:bd:a7: d0:25:c4:3e:d8:e6:cb:9a:68:e6:4c:47:ef:4d:d7:27:cc:d1: 16:82:e2:01:f1:d0:fa:66:31:29:f4:21:de:c6:08:64:88:a9: e9:d4:70:63:f2:af:a3:8f:34:ab:ec:bf:6d:d7:08:52:c3:88: 88:63:ff:35:8d:c1:cd:b6:3d:35:50:87:91:27:b0:18:92:e6: e8:b5:1d:4c:e8:68:16:ce:1f:bc:d9:f2:d4:33:f5:4b:d9:a8: 35:17:0f:04:94:20:db:af:47:eb:bb:ef:71:09:6c:7a:5f:d6: df:50:75:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyUXGX7lnB5KML6BKXPOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOTRkMWEyOWNjZTI2MTUzYjkzNGZiNDdjMmVlMjE2NzRi Yjg1Y2IwHhcNMjUxMjIxMTIwMTMwWhcNMjUxMjIyMTIwMTMwWjAzMTEwLwYDVQQD EyhiYzczZDM4NmNhNjI5OWMyNjk1MDljNDI3MGQ2YmI1NGQ4MDlmYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTokBoeNkoK9Zo1aTIyi2BfM5m73 SoTF6yLXlWn816pF2RkPWEjLemFucnoTztqgcbvl+mCBBnqr10U89pEK44kQzE8Q H7Yv5ki7EnWer/F3/Y7k7hjwXGwK13GXod7oDGYUO/eDOw/iNMuy/hz98ryt0reF +XRIQZPiXLILu8G9I1vfvMvCDdLu3wXvH74VC/Gjl/5I1KjYvqntJ5UTItmuWhHm NHlSJfO3GMrf/qJJ+RZOKLfEoruggf+rYKZJtHGOLGI8JmA6Iny/5SuBYzCcU/pD KMnV8PVzqZDHq/5TFu0TGRI5XXvtAiUa/0i96lumRmaVV/wBgGcEprTVewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxz04bKYpnCaVCcQnDWu1TYCfwcMB8GA1UdIwQY MBaAFB+U0aKcziYVO5NPtHwu4hZ0u4XLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUt NTU0Y2FiYjlhZDA1LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUtNTU0Y2FiYjlhZDA1 LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRRY3yBU ks9+9GF4aMCxUU8eIEx32BRrLgkzFUJXngiOogWo9npv6z89TwMz3LkvM7Y+F3RJ s0AXVhAFKBKUgi2JaslDDm+rl70CFdogvy+Cd9Te9Ls87otqeYKNNLE8z/CT7GyZ 74uJe+Znl6q+GE37H/6Umy0eXWbhhUftsdVUqKFP2+t5O37aU4wEJL2n0CXEPtjm y5po5kxH703XJ8zRFoLiAfHQ+mYxKfQh3sYIZIip6dRwY/Kvo480q+y/bdcIUsOI iGP/NY3BzbY9NVCHkSewGJLm6LUdTOhoFs4fvNny1DP1S9moNRcPBJQg269H67vv cQlsel/W31B1/A== -----END CERTIFICATE-----Generated at Sun Dec 21 13:22:55 2025 by rpki-client