This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft File: _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json) Hash identifier: WqsECEZ+4DcXxLjMrRdfJWbhRh/IkUtlecEIWFjmZ+Q= Subject key identifier: C1:B9:F6:A7:82:21:63:A2:28:C1:98:33:10:2B:97:81:38:CA:89:54 Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee Certificate serial: 019B45B842AD6DCEF4BBA8F967C9D7097805 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft Manifest number: 142B Signing time: Mon 22 Dec 2025 11:01:02 +0000 Manifest this update: Mon 22 Dec 2025 11:01:02 +0000 Manifest next update: Tue 23 Dec 2025 11:01:02 +0000 Files and hashes: 1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: lHeKItFzQ5yqwLgJeQvQc3UOkoKkkT6MakzNaFrEmow=) 2: m1aho7A62fK7s2UNnicExFjE6us.roa (hash: ADQVW+bl8YrIssIav1fCxE/xWNAztKLL5kf78n8W9UA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:42:ad:6d:ce:f4:bb:a8:f9:67:c9:d7:09:78:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee Validity Not Before: Dec 22 11:01:02 2025 GMT Not After : Dec 23 11:01:02 2025 GMT Subject: CN=c1b9f6a7822163a228c19833102b978138ca8954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:c2:9a:b8:25:b8:ef:35:61:d3:0d:73:bc: 34:69:71:2f:5b:7c:6b:6b:2e:4a:b6:75:49:0f:35: 6b:bc:17:89:b0:b7:f2:13:53:80:ce:45:2e:d4:8c: 3d:d3:24:76:79:9b:a1:40:5d:26:cc:0a:aa:bf:3f: 9e:75:70:c5:ab:ff:2a:8b:4b:0a:cc:97:e0:01:39: a4:07:69:8c:8a:82:ff:b5:43:82:09:44:3e:31:b1: 26:87:0a:d9:ad:7d:54:c4:32:ed:9a:5a:a5:24:ef: d3:78:66:0b:fe:17:3e:c8:f8:b9:a8:ae:38:fe:92: 72:db:7c:f0:31:fa:e9:e4:8c:11:c9:ac:5c:c3:ed: 85:d5:7d:d9:4b:86:d9:d5:1f:1b:65:90:11:c8:79: 3d:27:0c:f7:d5:ed:ed:2a:7a:19:f4:2a:f4:4f:01: 09:e0:39:f1:a7:58:2f:45:e3:20:c1:08:55:0f:e5: 08:55:bb:05:2c:3a:83:de:d4:27:b9:68:84:31:f6: 34:3b:73:52:62:ac:45:ef:de:99:28:06:b8:08:1d: 36:0c:9e:8a:77:24:c5:66:19:bc:b2:0c:4d:61:17: f6:83:93:6e:dc:91:9e:af:33:ed:3a:2f:cd:55:13: da:a7:3c:c4:f1:54:69:ee:34:de:51:45:34:4e:54: bc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B9:F6:A7:82:21:63:A2:28:C1:98:33:10:2B:97:81:38:CA:89:54 X509v3 Authority Key Identifier: keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:91:01:6e:a0:ce:c6:97:a0:be:17:fa:b2:05:f9:17:ad:99: 9f:9b:c0:10:4c:40:02:56:35:eb:3d:14:8c:41:a4:db:fc:db: cd:f9:12:38:bb:65:10:ac:de:4f:0b:89:d7:1c:1c:b5:46:68: a0:b1:33:89:c4:3f:8f:42:46:48:4b:8c:76:59:87:63:6b:46: 21:64:c3:b6:be:12:32:cc:0c:f3:c6:90:d5:76:bf:9e:cb:ef: fa:c1:4e:c9:0a:c4:bb:a3:d6:23:3d:17:19:28:94:59:38:01: 47:45:89:ce:b7:01:2f:57:de:f7:a2:d7:60:2f:10:1e:ec:83: ed:c4:3f:16:42:6c:91:eb:ea:14:10:5c:e4:d3:5e:50:ec:24: 21:f9:18:da:de:b4:5c:a9:90:cb:8e:d8:b3:34:c3:63:ab:de: ef:e2:d0:40:0f:7e:f3:a5:d7:c2:9f:88:d0:9b:0b:aa:e4:a5: ab:bf:9f:1c:6f:ff:7e:07:1e:c6:b5:63:ef:16:c6:a2:f6:63: 19:5f:c4:13:19:be:ab:c0:b2:57:57:bf:f8:ff:32:b2:fd:9e: b6:2d:5d:8d:f7:67:84:1c:04:d9:d6:7b:28:b7:7a:be:2b:41: 5c:fa:06:ea:ef:fd:78:37:80:3a:e3:d9:9d:20:c7:32:90:d9: a8:d2:a8:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuEKtbc70u6j5Z8nXCXgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjN2Q0YWI3NzYxYWJhMjRmMzNkNWI2ZGZiYzI3Y2FiNzM4 YmI1ZWUwHhcNMjUxMjIyMTEwMTAyWhcNMjUxMjIzMTEwMTAyWjAzMTEwLwYDVQQD EyhjMWI5ZjZhNzgyMjE2M2EyMjhjMTk4MzMxMDJiOTc4MTM4Y2E4OTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVTCmrgluO81YdMNc7w0aXEvW3xr ay5KtnVJDzVrvBeJsLfyE1OAzkUu1Iw90yR2eZuhQF0mzAqqvz+edXDFq/8qi0sK zJfgATmkB2mMioL/tUOCCUQ+MbEmhwrZrX1UxDLtmlqlJO/TeGYL/hc+yPi5qK44 /pJy23zwMfrp5IwRyaxcw+2F1X3ZS4bZ1R8bZZARyHk9Jwz31e3tKnoZ9Cr0TwEJ 4Dnxp1gvReMgwQhVD+UIVbsFLDqD3tQnuWiEMfY0O3NSYqxF796ZKAa4CB02DJ6K dyTFZhm8sgxNYRf2g5Nu3JGerzPtOi/NVRPapzzE8VRp7jTeUUU0TlS8PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMG59qeCIWOiKMGYMxArl4E4yolUMB8GA1UdIwQY MBaAFPx9Srd2Grok8z1bbfvCfKtzi7XuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wMjg3Y2YtODUzYi00NTE2LTlmMDYt NDUyZWMzYTk1ODhiLzEvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wMjg3Y2YtODUzYi00NTE2LTlmMDYtNDUyZWMzYTk1ODhi LzEvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZEBbqDO xpegvhf6sgX5F62Zn5vAEExAAlY16z0UjEGk2/zbzfkSOLtlEKzeTwuJ1xwctUZo oLEzicQ/j0JGSEuMdlmHY2tGIWTDtr4SMswM88aQ1Xa/nsvv+sFOyQrEu6PWIz0X GSiUWTgBR0WJzrcBL1fe96LXYC8QHuyD7cQ/FkJskevqFBBc5NNeUOwkIfkY2t60 XKmQy47YszTDY6ve7+LQQA9+86XXwp+I0JsLquSlq7+fHG//fgcexrVj7xbGovZj GV/EExm+q8CyV1e/+P8ysv2eti1djfdnhBwE2dZ7KLd6vitBXPoG6u/9eDeAOuPZ nSDHMpDZqNKoBg== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:32 2025 by rpki-client