This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: dvbrmpJ8BZl5ioOjGUQPTcD4RtTyw3XTGTgnhmoj078= Subject key identifier: DE:6D:60:B6:DF:EA:5F:02:56:70:2B:F0:66:22:BD:70:45:7D:76:09 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019B38D85F75B37B6FE960B1032F3F7D96A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 17AF Signing time: Fri 19 Dec 2025 23:01:02 +0000 Manifest this update: Fri 19 Dec 2025 23:01:02 +0000 Manifest next update: Sat 20 Dec 2025 23:01:02 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: mmWCipwLMW/qlFILaYAWgyFdTjXn7z8RUy760dbo9DI=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:5f:75:b3:7b:6f:e9:60:b1:03:2f:3f:7d:96:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Dec 19 23:01:02 2025 GMT Not After : Dec 20 23:01:02 2025 GMT Subject: CN=de6d60b6dfea5f0256702bf06622bd70457d7609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:42:e0:14:d1:28:9d:09:53:80:84:1c:b9:56: 25:87:8c:90:f3:67:b1:7a:6f:75:1a:7b:62:4d:ca: ee:2c:7c:d3:f0:f3:8e:21:f6:b8:62:55:e1:27:67: 59:30:a3:2b:a0:d1:6f:a7:b3:ec:5b:21:c2:84:e9: 4b:f5:66:bf:91:ab:68:d8:08:b3:ef:fd:5b:12:45: 12:ed:3f:40:27:bd:fb:20:25:a0:6d:b7:0e:19:ee: c3:c8:fc:73:db:89:b8:54:21:22:27:b3:66:4b:2f: d4:0a:d0:52:2b:17:c3:49:56:56:42:c0:7c:6e:c3: d3:dd:c0:a4:a8:68:5a:7b:1c:42:49:e2:3a:58:f0: 72:55:22:cd:8e:8e:b7:8d:6a:b7:bf:18:47:90:92: b1:45:75:9f:e6:7c:54:72:d9:93:a5:ed:2b:61:4a: c7:32:bd:31:52:67:76:66:6f:5a:94:b3:44:40:89: d2:36:fe:01:ef:1e:7b:cd:55:4e:b8:05:2e:c9:fe: 2a:cf:cc:d8:9d:0a:fb:21:09:75:33:71:64:9e:5f: da:af:b8:b7:97:42:4b:94:36:8f:45:49:30:8f:ed: c1:46:6f:20:f1:52:4d:1f:36:41:e4:3c:52:83:9a: f4:60:58:41:be:3f:ff:ea:4b:d1:16:83:4a:d5:57: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6D:60:B6:DF:EA:5F:02:56:70:2B:F0:66:22:BD:70:45:7D:76:09 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:85:da:55:37:e1:ee:33:f8:6a:31:a7:3c:9d:53:0a:a0:ed: f2:15:3a:20:e1:f0:b7:b5:fe:88:73:26:c3:7b:9d:5b:6e:c9: 99:8c:c2:fe:42:c1:f5:a0:c4:11:a3:a2:30:8d:95:ea:8d:7f: 44:ff:c1:75:4b:48:7f:f2:9b:ec:58:d5:d2:24:d9:12:97:0a: 2b:b1:a8:b2:63:b6:68:d3:d8:9f:92:2b:c6:40:51:8c:75:aa: f3:b5:67:b2:b9:a2:5f:59:25:ea:02:b3:1f:0c:34:b9:37:72: 95:7c:58:0a:11:f2:4a:b5:d7:6e:ce:23:13:e8:1c:b0:e0:96: 25:74:69:05:b2:0a:94:67:11:5f:f6:53:37:33:78:52:1d:9e: 93:1a:0d:db:0c:6b:51:5f:e2:1d:a8:ec:43:c0:a7:b5:a4:63: d5:9c:8f:f6:5b:43:f7:50:87:2f:84:a2:56:55:78:aa:94:f7: 05:2b:cc:74:5b:11:c9:93:46:e1:3b:25:f4:ce:94:a2:63:86: 0a:09:f8:4e:ff:cb:64:b1:27:e3:5e:72:27:00:52:34:83:bd: 6c:72:f7:18:df:fb:77:76:06:c0:b4:76:63:c4:f5:7e:08:d3: 55:e9:56:76:d0:8c:a7:2b:e1:2d:c4:df:4a:9d:48:11:c0:da: 02:94:b7:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42F91s3tv6WCxAy8/fZaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUxMjE5MjMwMTAyWhcNMjUxMjIwMjMwMTAyWjAzMTEwLwYDVQQD EyhkZTZkNjBiNmRmZWE1ZjAyNTY3MDJiZjA2NjIyYmQ3MDQ1N2Q3NjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30LgFNEonQlTgIQcuVYlh4yQ82ex em91GntiTcruLHzT8POOIfa4YlXhJ2dZMKMroNFvp7PsWyHChOlL9Wa/kato2Aiz 7/1bEkUS7T9AJ737ICWgbbcOGe7DyPxz24m4VCEiJ7NmSy/UCtBSKxfDSVZWQsB8 bsPT3cCkqGhaexxCSeI6WPByVSLNjo63jWq3vxhHkJKxRXWf5nxUctmTpe0rYUrH Mr0xUmd2Zm9alLNEQInSNv4B7x57zVVOuAUuyf4qz8zYnQr7IQl1M3Fknl/ar7i3 l0JLlDaPRUkwj+3BRm8g8VJNHzZB5DxSg5r0YFhBvj//6kvRFoNK1VdP9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5tYLbf6l8CVnAr8GYivXBFfXYJMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIXaVTfh 7jP4ajGnPJ1TCqDt8hU6IOHwt7X+iHMmw3udW27JmYzC/kLB9aDEEaOiMI2V6o1/ RP/BdUtIf/Kb7FjV0iTZEpcKK7GosmO2aNPYn5IrxkBRjHWq87VnsrmiX1kl6gKz Hww0uTdylXxYChHySrXXbs4jE+gcsOCWJXRpBbIKlGcRX/ZTNzN4Uh2ekxoN2wxr UV/iHajsQ8CntaRj1ZyP9ltD91CHL4SiVlV4qpT3BSvMdFsRyZNG4Tsl9M6UomOG Cgn4Tv/LZLEn415yJwBSNIO9bHL3GN/7d3YGwLR2Y8T1fgjTVelWdtCMpyvhLcTf Sp1IEcDaApS3Dg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:24:58 2025 by rpki-client