This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft File: H1KEKQNNz7oB9__1x8yIVtTQbhs.mft (raw, json) Hash identifier: nCApRtCTB3u1ayf8TprY8Z6zxVmhAjHgJD9yvloC5m0= Subject key identifier: 58:C1:12:9C:B5:4C:8A:E1:5C:DF:92:45:80:CF:17:92:B0:55:8F:CF Authority key identifier: 1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B Certificate issuer: /CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b Certificate serial: 019B476FBFC9FFE8C08081AEF02260098AE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft Manifest number: 0CE6 Signing time: Mon 22 Dec 2025 19:01:04 +0000 Manifest this update: Mon 22 Dec 2025 19:01:04 +0000 Manifest next update: Tue 23 Dec 2025 19:01:04 +0000 Files and hashes: 1: DwdwnNYiYszxSFZUvDnifZ1cmVo.roa (hash: z1Ue0CWmwoS4r8rtXwZcldA5j6c831i2ATcqPGIWOrM=) 2: H1KEKQNNz7oB9__1x8yIVtTQbhs.crl (hash: Fw8M/mJ7X0nUceD4Um3gCeHcTcGxV7cwxaCHXbWTgzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:bf:c9:ff:e8:c0:80:81:ae:f0:22:60:09:8a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b Validity Not Before: Dec 22 19:01:04 2025 GMT Not After : Dec 23 19:01:04 2025 GMT Subject: CN=58c1129cb54c8ae15cdf924580cf1792b0558fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:ab:a5:ce:8a:82:11:fe:4a:9b:f4:d6:9a: d4:87:db:d7:d2:40:21:e1:5d:23:86:35:ad:10:dd: c9:41:7d:33:48:10:fd:f5:f7:33:a6:05:00:47:e9: 1a:a9:63:5a:65:4d:aa:e8:e7:d1:e7:4c:35:bd:5a: 5b:9d:27:4d:57:68:7d:67:15:3e:3a:bf:7d:b1:bb: 18:cb:fe:e9:0c:2a:9c:7c:ae:0f:8d:f9:78:0b:92: 15:22:a9:f3:54:3c:b9:42:30:39:ee:aa:cf:6c:a7: 01:44:9e:c3:92:ac:d1:77:13:cb:ba:73:df:73:2b: dd:79:d8:21:d5:9f:72:4e:22:80:43:06:58:80:82: 25:6b:bd:88:4d:dc:b0:c5:f4:03:83:5f:c5:77:f4: b4:48:83:47:32:81:29:82:9a:fe:62:64:4d:79:e6: 20:06:14:f3:3b:09:f4:f7:db:ef:5d:fc:14:2a:be: d5:3a:86:70:62:32:f3:b1:7b:28:fd:9c:c9:3d:1c: b0:de:e4:31:83:b3:b8:3d:e7:f7:03:9f:01:65:ac: 61:f7:68:fd:3d:25:47:c5:eb:2a:a9:ec:8b:1e:f3: ca:c9:61:c8:49:b5:ac:ce:be:aa:00:40:41:9f:4e: 98:c7:00:14:20:89:d7:d9:de:cc:a2:53:61:bc:ba: 75:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C1:12:9C:B5:4C:8A:E1:5C:DF:92:45:80:CF:17:92:B0:55:8F:CF X509v3 Authority Key Identifier: keyid:1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:aa:48:e1:60:9b:6e:99:67:f6:fa:aa:92:3e:9e:35:e2:50: d1:15:bb:84:7d:c9:69:67:49:fd:7f:f0:d0:7b:ea:82:33:df: 14:a4:e1:6a:e5:39:9d:04:7a:1d:e9:8f:a2:c9:32:0a:c8:14: 14:8c:27:65:cf:8f:a0:5d:7f:7b:f6:d8:ec:82:9d:16:5a:ed: 79:7d:a3:34:8e:a1:54:0a:2f:f7:80:90:fa:f4:28:9c:8f:a9: a0:90:89:ec:93:bd:ab:d9:66:1c:37:c6:cc:77:07:85:58:09: 4e:a6:4e:2a:84:45:24:da:3a:ca:ee:dc:68:35:78:f9:ec:a0: 4c:f6:ad:f1:63:76:17:93:ed:89:04:76:c3:00:d0:23:61:36: a1:bf:da:4b:20:9e:4d:9e:e7:ef:ec:12:5e:b3:f7:ff:93:5d: 23:65:16:5a:7f:4d:47:12:6a:9d:bc:bd:82:e1:a3:3c:e1:b4: d0:37:63:77:14:17:06:64:c7:a7:c5:eb:cd:f3:89:b4:49:1c: b2:f5:09:7f:62:f6:c0:85:01:09:2b:3a:b8:ae:2b:c4:14:22: 25:91:0c:c2:c7:c7:f5:6c:91:9c:24:aa:d1:1b:b0:f0:d1:0b: 33:e6:a5:f1:aa:0e:47:f9:cf:8d:ea:9c:3f:1a:51:9a:e1:c7: 5d:72:87:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb7/J/+jAgIGu8CJgCYriMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNTI4NDI5MDM0ZGNmYmEwMWY3ZmZmNWM3Y2M4ODU2ZDRk MDZlMWIwHhcNMjUxMjIyMTkwMTA0WhcNMjUxMjIzMTkwMTA0WjAzMTEwLwYDVQQD Eyg1OGMxMTI5Y2I1NGM4YWUxNWNkZjkyNDU4MGNmMTc5MmIwNTU4ZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9Wrpc6KghH+Spv01prUh9vX0kAh 4V0jhjWtEN3JQX0zSBD99fczpgUAR+kaqWNaZU2q6OfR50w1vVpbnSdNV2h9ZxU+ Or99sbsYy/7pDCqcfK4Pjfl4C5IVIqnzVDy5QjA57qrPbKcBRJ7DkqzRdxPLunPf cyvdedgh1Z9yTiKAQwZYgIIla72ITdywxfQDg1/Fd/S0SINHMoEpgpr+YmRNeeYg BhTzOwn099vvXfwUKr7VOoZwYjLzsXso/ZzJPRyw3uQxg7O4Pef3A58BZaxh92j9 PSVHxesqqeyLHvPKyWHISbWszr6qAEBBn06YxwAUIInX2d7MolNhvLp1dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjBEpy1TIrhXN+SRYDPF5KwVY/PMB8GA1UdIwQY MBaAFB9ShCkDTc+6Aff/9cfMiFbU0G4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDFLRUtRTk56N29COV9fMXg4eUlWdFRRYmhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85NzNiYjUtMDY2MS00NTZjLTllMWUt MjUzYmU5ZjZlZDNkLzEvSDFLRUtRTk56N29COV9fMXg4eUlWdFRRYmhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85NzNiYjUtMDY2MS00NTZjLTllMWUtMjUzYmU5ZjZlZDNk LzEvSDFLRUtRTk56N29COV9fMXg4eUlWdFRRYmhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1qpI4WCb bpln9vqqkj6eNeJQ0RW7hH3JaWdJ/X/w0HvqgjPfFKThauU5nQR6HemPoskyCsgU FIwnZc+PoF1/e/bY7IKdFlrteX2jNI6hVAov94CQ+vQonI+poJCJ7JO9q9lmHDfG zHcHhVgJTqZOKoRFJNo6yu7caDV4+eygTPat8WN2F5PtiQR2wwDQI2E2ob/aSyCe TZ7n7+wSXrP3/5NdI2UWWn9NRxJqnby9guGjPOG00DdjdxQXBmTHp8XrzfOJtEkc svUJf2L2wIUBCSs6uK4rxBQiJZEMwsfH9WyRnCSq0Ruw8NELM+al8aoOR/nPjeqc PxpRmuHHXXKHEQ== -----END CERTIFICATE-----Generated at Tue Dec 23 00:43:15 2025 by rpki-client