This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft File: H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft (raw, json) Hash identifier: aES5gz8j88t2JQYA/B4rQDUfDYwtdkL3u6RPHF7mK2A= Subject key identifier: 75:5A:DE:57:6E:23:A4:C7:29:3C:B5:CB:A4:97:A0:C6:73:D1:05:26 Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2 Certificate issuer: /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2 Certificate serial: 019B3CEC9FB977CC2AA488BB0248DB0578FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft Manifest number: 0D79 Signing time: Sat 20 Dec 2025 18:01:38 +0000 Manifest this update: Sat 20 Dec 2025 18:01:38 +0000 Manifest next update: Sun 21 Dec 2025 18:01:38 +0000 Files and hashes: 1: H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl (hash: T1/4TBPRVyr6tT2cQaJOF4ZtfLCISbHo2OwZbgE9D6E=) 2: mxOxKrBmnmPClr9Kc96iEdW6XUE.roa (hash: UbZRUNNa6gB9j1h+WjL/FTz+dVPKNCXmn8kcP5ajisc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:9f:b9:77:cc:2a:a4:88:bb:02:48:db:05:78:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2 Validity Not Before: Dec 20 18:01:38 2025 GMT Not After : Dec 21 18:01:38 2025 GMT Subject: CN=755ade576e23a4c7293cb5cba497a0c673d10526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:38:5c:f1:8d:64:bf:1c:96:67:25:6a:fa: 5f:d3:46:23:2a:cf:c9:ae:37:c2:8e:0a:01:15:71: 66:01:1c:28:63:78:c4:18:3a:9a:b2:af:73:1a:f1: f8:2d:99:45:dc:1f:99:ab:fa:02:3c:20:3e:c6:85: 60:3c:01:2c:61:31:ba:fd:9a:c8:de:4a:af:8d:9f: 51:34:68:46:2a:d1:d0:be:c2:25:00:40:6f:55:c1: f2:26:d5:19:8b:ad:ff:a5:d2:b7:5c:f3:eb:c0:d5: eb:0a:fc:6b:9d:8d:f8:f3:7d:e3:0c:6d:0f:8a:ab: d5:62:0e:ce:cb:6e:79:21:c2:5e:a2:8f:2d:9b:ac: c6:9f:b4:62:4e:0a:c4:85:e8:4f:5b:2e:4d:eb:5c: af:e7:d7:8c:64:80:3f:0f:0a:24:6a:aa:4b:d9:8e: 18:10:bd:f8:73:ef:a3:d4:46:ae:ba:73:57:96:c0: 8b:99:d1:26:76:3f:f6:a8:61:d2:41:c1:62:38:98: 3b:67:13:74:5e:20:71:14:2b:e1:25:34:6e:de:30: 49:4a:8b:8d:98:63:c7:27:76:bf:c9:e7:ed:13:74: 44:87:58:28:6d:9c:17:17:fa:a5:47:ec:33:bb:2c: c0:dd:c0:60:1a:90:33:75:b5:17:5f:0b:c7:4a:bf: 5b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5A:DE:57:6E:23:A4:C7:29:3C:B5:CB:A4:97:A0:C6:73:D1:05:26 X509v3 Authority Key Identifier: keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:98:91:b2:8b:51:f5:35:02:3c:4f:77:c4:e5:d0:16:d8:87: 2c:b6:a0:f3:7b:d0:21:e8:24:d1:7e:d2:ec:81:1c:7f:51:16: 18:e8:18:c3:37:29:f8:6a:73:94:85:1f:b4:4d:d2:6b:08:f0: ee:fb:ef:02:1e:09:2c:39:e1:c0:3e:e5:1f:6a:41:18:87:c1: 94:4e:b7:1b:67:d8:bb:9a:c5:cc:db:59:47:72:06:7e:a1:0d: 9c:6c:10:1c:9e:b5:7b:53:b8:f5:e6:ca:37:e8:81:ff:dd:7f: 01:ad:45:57:f6:34:22:e4:41:ed:43:8d:c1:b8:10:8f:95:f2: df:7d:ec:68:3a:27:5f:8a:c0:65:51:53:e0:25:bc:83:80:c2: 03:02:a6:d3:5a:0c:6a:2e:95:be:ae:b2:34:c1:4f:b0:c3:8b: 84:61:ad:3d:2b:0e:e5:33:1b:12:d2:28:7a:2a:64:e4:a2:18: b7:4a:10:d1:ac:fe:b8:79:68:04:07:78:89:5c:72:a2:26:d9: 5d:17:6c:ef:93:48:2a:4f:3c:5d:d4:50:98:2f:83:09:73:a6: f8:5d:94:76:60:d5:7f:ac:f5:50:63:d0:ee:82:f4:e5:d3:b6: e9:0f:61:27:17:47:45:dc:bc:62:a2:cf:e6:66:55:8a:c5:15: 15:e9:40:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87J+5d8wqpIi7AkjbBXj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmOWUyNWY0YTg4YjhiYjQzYzU0ZDU4ZjZiNGU3NTA4OWY5 MDZmZDIwHhcNMjUxMjIwMTgwMTM4WhcNMjUxMjIxMTgwMTM4WjAzMTEwLwYDVQQD Eyg3NTVhZGU1NzZlMjNhNGM3MjkzY2I1Y2JhNDk3YTBjNjczZDEwNTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQI4XPGNZL8clmclavpf00YjKs/J rjfCjgoBFXFmARwoY3jEGDqasq9zGvH4LZlF3B+Zq/oCPCA+xoVgPAEsYTG6/ZrI 3kqvjZ9RNGhGKtHQvsIlAEBvVcHyJtUZi63/pdK3XPPrwNXrCvxrnY34833jDG0P iqvVYg7Oy255IcJeoo8tm6zGn7RiTgrEhehPWy5N61yv59eMZIA/DwokaqpL2Y4Y EL34c++j1EauunNXlsCLmdEmdj/2qGHSQcFiOJg7ZxN0XiBxFCvhJTRu3jBJSouN mGPHJ3a/yeftE3REh1gobZwXF/qlR+wzuyzA3cBgGpAzdbUXXwvHSr9bbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVa3lduI6THKTy1y6SXoMZz0QUmMB8GA1UdIwQY MBaAFB+eJfSoi4u0PFTVj2tOdQifkG/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDU0bDlLaUxpN1E4Vk5XUGEwNTFDSi1RYjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi81YjVmMjAtNmVmNi00NGI5LWE2OTEt ZTU1NGEzNWU5ZTc3LzEvSDU0bDlLaUxpN1E4Vk5XUGEwNTFDSi1RYjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi81YjVmMjAtNmVmNi00NGI5LWE2OTEtZTU1NGEzNWU5ZTc3 LzEvSDU0bDlLaUxpN1E4Vk5XUGEwNTFDSi1RYjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJiRsotR 9TUCPE93xOXQFtiHLLag83vQIegk0X7S7IEcf1EWGOgYwzcp+GpzlIUftE3Sawjw 7vvvAh4JLDnhwD7lH2pBGIfBlE63G2fYu5rFzNtZR3IGfqENnGwQHJ61e1O49ebK N+iB/91/Aa1FV/Y0IuRB7UONwbgQj5Xy333saDonX4rAZVFT4CW8g4DCAwKm01oM ai6Vvq6yNMFPsMOLhGGtPSsO5TMbEtIoeipk5KIYt0oQ0az+uHloBAd4iVxyoibZ XRds75NIKk88XdRQmC+DCXOm+F2UdmDVf6z1UGPQ7oL05dO26Q9hJxdHRdy8YqLP 5mZVisUVFelABg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:12:23 2025 by rpki-client