This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft File: H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft (raw, json) Hash identifier: ACifIhyZdXqUiLNVVJ7LgtT9i/zR/YD0KT3AjDVaWDc= Subject key identifier: 83:8D:A1:09:76:2B:55:64:7D:33:EF:87:A7:5D:15:1B:E6:05:83:C4 Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2 Certificate issuer: /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2 Certificate serial: 019B4E4D6AAB56E5FEBF55DCCAFCDC76C720 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft Manifest number: 0D82 Signing time: Wed 24 Dec 2025 03:00:54 +0000 Manifest this update: Wed 24 Dec 2025 03:00:54 +0000 Manifest next update: Thu 25 Dec 2025 03:00:54 +0000 Files and hashes: 1: H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl (hash: crw1iyvrCKohNpR2nQgAvj0lkT0J2+1KySiLXmCfdfc=) 2: mxOxKrBmnmPClr9Kc96iEdW6XUE.roa (hash: UbZRUNNa6gB9j1h+WjL/FTz+dVPKNCXmn8kcP5ajisc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:6a:ab:56:e5:fe:bf:55:dc:ca:fc:dc:76:c7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2 Validity Not Before: Dec 24 03:00:54 2025 GMT Not After : Dec 25 03:00:54 2025 GMT Subject: CN=838da109762b55647d33ef87a75d151be60583c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:0e:31:df:12:1e:95:aa:08:c4:8d:0b:2f: 8a:85:70:6d:68:7e:f1:92:48:b4:31:5c:3d:d1:58: 18:e5:13:7b:64:c2:82:d3:df:0f:1f:4b:a6:c5:c9: ff:07:3b:db:68:3f:f4:b1:b1:a9:e3:53:48:67:52: b6:7a:9d:0c:bc:97:a5:62:59:c2:78:1e:7d:12:68: ef:1f:1a:4d:ea:1f:da:51:49:62:6c:3c:9c:c3:4f: 79:75:02:c2:8b:15:1e:93:d6:ed:62:03:7b:5e:b4: c1:fd:89:29:b3:82:e1:8a:66:5f:d7:be:a5:d0:36: da:c3:8f:ba:54:7a:f8:f5:60:bc:39:f8:88:2d:5c: a6:8d:89:8b:45:ac:3c:57:65:59:82:7b:9a:a7:b9: fb:37:bf:62:29:f4:b6:6d:60:2e:b4:46:05:9a:da: da:6b:27:7c:f3:6f:ce:9d:a7:c8:7b:ac:24:3a:bc: 64:4c:ef:e8:71:5f:2b:2f:43:39:c1:96:23:3e:29: 99:c0:0f:ba:49:99:e1:bf:a7:26:a2:3f:90:67:7f: a3:59:94:c9:53:0d:45:53:6d:c9:84:55:25:c1:32: 8c:b3:81:8b:81:82:5b:61:ac:25:4d:43:aa:3f:53: 8d:10:cb:c5:e5:b2:f2:b3:ed:a7:2f:03:3b:64:ac: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8D:A1:09:76:2B:55:64:7D:33:EF:87:A7:5D:15:1B:E6:05:83:C4 X509v3 Authority Key Identifier: keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c0:e0:c7:81:52:3f:37:a6:31:ea:d5:bc:66:e0:22:29:8d: 3f:d3:2b:d4:cb:f2:3b:6e:52:df:b9:2d:c5:af:28:70:c8:d4: 30:df:3d:94:69:85:ff:b5:73:d3:61:a2:35:22:b5:31:e5:48: 63:3f:ff:e4:b2:f2:e4:d0:6a:fc:29:63:da:3a:79:10:23:ce: 71:57:9c:2a:8e:7f:61:bd:47:45:61:07:ad:4d:43:45:71:9e: bf:8c:6f:c3:92:71:0f:98:69:0a:04:1f:c6:4d:b6:1e:94:8c: 59:ef:91:f3:53:50:ce:23:17:f6:be:9f:e8:5e:4d:e2:75:06: b5:b2:11:9a:e7:91:4f:9a:3a:c7:07:a1:54:0a:be:7b:0e:4a: 6d:ac:cf:e8:38:a3:73:4c:69:b7:12:d2:af:b8:f4:b4:86:f4: e4:3d:1e:61:b4:5d:aa:9b:89:8f:74:ad:f4:4f:c6:76:bb:c1: ba:66:f4:2d:f1:ab:53:99:51:cf:3e:06:2b:65:9d:aa:fe:61: 28:83:92:4a:ff:99:f1:c0:11:25:39:1c:73:4d:df:d5:48:d5: c4:ca:58:d2:d4:93:70:71:6a:e6:03:09:d9:0a:81:19:32:7e: 57:8f:37:d2:7a:37:95:1f:ce:89:af:db:3e:08:b0:5c:78:fc: 22:30:6a:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTWqrVuX+v1XcyvzcdscgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOWUyNWY0YTg4YjhiYjQzYzU0ZDU4ZjZiNGU3NTA4OWY5 MDZmZDIwHhcNMjUxMjI0MDMwMDU0WhcNMjUxMjI1MDMwMDU0WjAzMTEwLwYDVQQD Eyg4MzhkYTEwOTc2MmI1NTY0N2QzM2VmODdhNzVkMTUxYmU2MDU4M2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSgOMd8SHpWqCMSNCy+KhXBtaH7x kki0MVw90VgY5RN7ZMKC098PH0umxcn/BzvbaD/0sbGp41NIZ1K2ep0MvJelYlnC eB59EmjvHxpN6h/aUUlibDycw095dQLCixUek9btYgN7XrTB/Ykps4LhimZf176l 0Dbaw4+6VHr49WC8OfiILVymjYmLRaw8V2VZgnuap7n7N79iKfS2bWAutEYFmtra ayd882/OnafIe6wkOrxkTO/ocV8rL0M5wZYjPimZwA+6SZnhv6cmoj+QZ3+jWZTJ Uw1FU23JhFUlwTKMs4GLgYJbYawlTUOqP1ONEMvF5bLys+2nLwM7ZKwvWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIONoQl2K1VkfTPvh6ddFRvmBYPEMB8GA1UdIwQY MBaAFB+eJfSoi4u0PFTVj2tOdQifkG/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDU0bDlLaUxpN1E4Vk5XUGEwNTFDSi1RYjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi81YjVmMjAtNmVmNi00NGI5LWE2OTEt ZTU1NGEzNWU5ZTc3LzEvSDU0bDlLaUxpN1E4Vk5XUGEwNTFDSi1RYjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi81YjVmMjAtNmVmNi00NGI5LWE2OTEtZTU1NGEzNWU5ZTc3 LzEvSDU0bDlLaUxpN1E4Vk5XUGEwNTFDSi1RYjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8Dgx4FS PzemMerVvGbgIimNP9Mr1MvyO25S37ktxa8ocMjUMN89lGmF/7Vz02GiNSK1MeVI Yz//5LLy5NBq/Clj2jp5ECPOcVecKo5/Yb1HRWEHrU1DRXGev4xvw5JxD5hpCgQf xk22HpSMWe+R81NQziMX9r6f6F5N4nUGtbIRmueRT5o6xwehVAq+ew5KbazP6Dij c0xptxLSr7j0tIb05D0eYbRdqpuJj3St9E/GdrvBumb0LfGrU5lRzz4GK2Wdqv5h KIOSSv+Z8cARJTkcc03f1UjVxMpY0tSTcHFq5gMJ2QqBGTJ+V4830no3lR/Oia/b PgiwXHj8IjBqSg== -----END CERTIFICATE-----Generated at Wed Dec 24 08:46:05 2025 by rpki-client