This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft File: H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json) Hash identifier: ji8nwY+9kfvSG+iYuq6Dmj6Su1oFBnhudyvs0I71DXg= Subject key identifier: 5C:B0:02:9D:5A:97:D3:2D:36:BA:D9:1A:E5:55:23:0C:89:75:34:02 Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1 Certificate issuer: /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1 Certificate serial: 019B4091C2356F8903C60BE802B14876E058 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft Manifest number: 1044 Signing time: Sun 21 Dec 2025 11:00:52 +0000 Manifest this update: Sun 21 Dec 2025 11:00:52 +0000 Manifest next update: Mon 22 Dec 2025 11:00:52 +0000 Files and hashes: 1: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: Wg7iv//erqHIvJyKFjw5E1XDvd3gwMqfJI3QbLKUk0s=) 2: vNstzceOXGplN-vBnPrAujnN1Ks.roa (hash: A1jnUd+2zoPrt/m5wPvY6xxOOy1gAscK2t40BFmGG10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:c2:35:6f:89:03:c6:0b:e8:02:b1:48:76:e0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1 Validity Not Before: Dec 21 11:00:52 2025 GMT Not After : Dec 22 11:00:52 2025 GMT Subject: CN=5cb0029d5a97d32d36bad91ae555230c89753402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5d:12:44:02:b8:94:21:df:f5:fa:db:b4:f7: 44:a1:7f:fd:df:fa:bb:42:ad:52:41:ab:3e:d4:85: 3f:c2:11:6a:b1:4d:ad:9f:ae:f2:f3:cb:38:a6:23: 17:48:65:71:e8:6a:b7:06:0c:d9:3b:10:84:e9:0b: 23:6b:f7:80:b2:77:e6:b8:ad:0a:ab:88:fe:41:5d: 2f:93:c6:76:ba:63:5b:24:0b:f2:7c:ce:a2:c8:31: 76:89:be:2b:62:5c:e1:bc:fd:d4:f7:b8:05:25:ac: d3:dd:6f:cb:4b:1a:57:dc:86:b8:bf:6a:06:5c:34: 93:34:ba:53:db:f2:09:00:0b:af:83:2c:b8:44:0b: 61:74:7e:f8:eb:81:7b:fa:04:0b:79:66:f4:5a:08: ed:6d:c4:22:bb:d0:60:7f:ef:a8:7c:ac:42:d9:dc: 3a:37:25:2d:a5:84:2d:25:64:c0:f3:4f:49:ec:c8: dc:b8:24:86:11:9d:5d:68:ca:4d:53:4f:fc:a0:80: 7d:5c:3f:12:f0:d4:ce:66:16:17:08:98:a2:cf:92: 72:b3:4a:3a:e5:d7:a8:29:2e:cc:4d:a6:4e:9e:78: b5:b1:b4:fa:42:03:f9:6e:24:42:4d:1b:9c:af:2f: a6:f0:f7:66:d4:e2:08:16:29:c1:f0:ee:44:30:54: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B0:02:9D:5A:97:D3:2D:36:BA:D9:1A:E5:55:23:0C:89:75:34:02 X509v3 Authority Key Identifier: keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2a:37:6e:15:b9:ae:22:33:cf:e4:95:1e:e5:17:fc:b3:a3: 45:62:e0:3e:61:8e:ef:50:7a:28:68:58:6d:04:7a:ad:be:b1: fe:de:d3:f1:ab:d7:18:63:76:c3:b8:47:ca:47:e9:48:d9:39: db:4f:06:00:49:3d:06:6f:59:ce:a7:8c:f7:23:e3:74:67:57: f1:08:c7:ca:50:e5:8c:1f:84:6b:e0:ea:03:d6:37:e5:3b:14: 2a:1a:84:6b:54:3d:a0:8b:df:32:06:09:42:aa:61:ee:f5:b2: 6c:27:0f:61:0e:ef:c1:3c:84:7e:3a:2c:4c:b1:25:e0:ec:f5: 2e:f6:62:46:76:2b:fc:1d:4e:7d:80:40:9a:5e:bb:b9:c2:b9: a7:ee:88:ea:53:d1:cb:8e:9b:56:40:bd:a1:f3:c0:2d:96:57: ea:b8:4f:2a:29:62:e7:8b:26:75:66:ca:3b:4b:9c:aa:af:16: 8f:6e:86:46:d5:bf:13:7e:11:7a:d0:86:9a:64:65:b2:36:a5: db:87:c7:91:29:62:e5:77:3a:d4:54:00:8a:b8:89:4b:1e:9d: 0f:36:a2:7d:d9:7b:ac:42:f6:29:3c:09:b4:04:cd:ae:9a:06: 0c:b3:bf:32:ae:8f:b6:2d:13:88:92:07:e0:c4:7f:63:16:8f: a1:0e:b5:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkcI1b4kDxgvoArFIduBYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNGFmMmI0Nzk4MTVmMDdjZDgyZTlmODJiYWIyZmVhMTNm YjIxYjEwHhcNMjUxMjIxMTEwMDUyWhcNMjUxMjIyMTEwMDUyWjAzMTEwLwYDVQQD Eyg1Y2IwMDI5ZDVhOTdkMzJkMzZiYWQ5MWFlNTU1MjMwYzg5NzUzNDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l0SRAK4lCHf9frbtPdEoX/93/q7 Qq1SQas+1IU/whFqsU2tn67y88s4piMXSGVx6Gq3BgzZOxCE6Qsja/eAsnfmuK0K q4j+QV0vk8Z2umNbJAvyfM6iyDF2ib4rYlzhvP3U97gFJazT3W/LSxpX3Ia4v2oG XDSTNLpT2/IJAAuvgyy4RAthdH7464F7+gQLeWb0WgjtbcQiu9Bgf++ofKxC2dw6 NyUtpYQtJWTA809J7MjcuCSGEZ1daMpNU0/8oIB9XD8S8NTOZhYXCJiiz5Jys0o6 5deoKS7MTaZOnni1sbT6QgP5biRCTRucry+m8Pdm1OIIFinB8O5EMFR7eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFywAp1al9MtNrrZGuVVIwyJdTQCMB8GA1UdIwQY MBaAFB9K8rR5gV8HzYLp+CurL+oT+yGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZjI1YjctNGY4MS00ZjQxLWExNjIt MDg2YzE2ZjczNmIxLzEvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wZjI1YjctNGY4MS00ZjQxLWExNjItMDg2YzE2ZjczNmIx LzEvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyo3bhW5 riIzz+SVHuUX/LOjRWLgPmGO71B6KGhYbQR6rb6x/t7T8avXGGN2w7hHykfpSNk5 208GAEk9Bm9ZzqeM9yPjdGdX8QjHylDljB+Ea+DqA9Y35TsUKhqEa1Q9oIvfMgYJ Qqph7vWybCcPYQ7vwTyEfjosTLEl4Oz1LvZiRnYr/B1OfYBAml67ucK5p+6I6lPR y46bVkC9ofPALZZX6rhPKili54smdWbKO0ucqq8Wj26GRtW/E34RetCGmmRlsjal 24fHkSli5Xc61FQAiriJSx6dDzaifdl7rEL2KTwJtATNrpoGDLO/Mq6Pti0TiJIH 4MR/YxaPoQ61Mg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:46:20 2025 by rpki-client