This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft File: h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft (raw, json) Hash identifier: iVKSAxqbAC7lb8aM/QiObhzRGO5K+ENJdpeNrJoDqHk= Subject key identifier: 92:5B:08:73:82:0B:56:C9:B9:70:13:25:96:BE:28:EA:F1:0A:7F:4B Authority key identifier: 87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64 Certificate issuer: /CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364 Certificate serial: 019B3EDA97384605E93FE8C32595929442D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft Manifest number: 0121 Signing time: Sun 21 Dec 2025 03:01:11 +0000 Manifest this update: Sun 21 Dec 2025 03:01:11 +0000 Manifest next update: Mon 22 Dec 2025 03:01:11 +0000 Files and hashes: 1: GvyGkOachzJk9DygDnTBnDm6D0g.roa (hash: 9DNBA079y1VayC4HCKQN0sFF5/u3/PsV+NDhAUJH7m4=) 2: h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl (hash: hYDS3aVOo5Dwd5w3FAiBd195KGtzcfZL8lf/wM8WEBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:97:38:46:05:e9:3f:e8:c3:25:95:92:94:42:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364 Validity Not Before: Dec 21 03:01:11 2025 GMT Not After : Dec 22 03:01:11 2025 GMT Subject: CN=925b0873820b56c9b970132596be28eaf10a7f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b7:df:bb:18:d1:20:54:57:d6:e4:94:4a:38: 6d:b3:71:37:e7:27:08:78:85:84:20:26:e8:f1:53: c1:51:26:56:e7:42:f8:b0:be:66:11:f9:19:99:ec: e9:82:c7:33:73:91:06:72:72:aa:d6:4d:62:de:03: 84:90:77:f6:ce:72:11:f6:07:ae:cf:b5:07:3e:6c: 76:43:e9:c5:a9:6a:85:88:d2:14:5a:82:5c:a0:85: 83:1c:73:cb:7c:7e:c8:10:0e:ef:bd:6e:8f:37:72: a9:98:df:d1:98:45:d4:d4:9d:c2:ae:ce:36:df:d2: e2:ad:bc:55:bc:ae:81:cc:b2:8e:8e:bb:f8:62:35: f9:b2:e0:a5:90:0f:9a:d5:d2:82:42:08:ef:13:c2: c4:86:4d:9b:8e:74:18:25:03:4d:1c:71:19:a2:2c: d7:7d:35:88:93:c0:af:19:62:b2:fa:a4:5f:9f:c4: 85:17:52:c4:a7:5f:f9:57:32:04:35:ae:d5:69:e7: bf:bb:38:04:92:a1:ea:5b:7b:17:16:77:49:da:26: 62:c8:6c:9e:a2:e9:f6:0b:35:e8:e9:71:66:23:4d: fb:24:75:da:e6:52:42:18:6d:c9:a5:aa:5b:67:2e: 70:f1:c2:c2:eb:e8:45:83:67:b2:06:e6:9f:4a:2f: 53:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5B:08:73:82:0B:56:C9:B9:70:13:25:96:BE:28:EA:F1:0A:7F:4B X509v3 Authority Key Identifier: keyid:87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:e9:f3:3f:9b:a8:0c:f9:84:3b:42:c3:68:ab:19:59:1e:e5: f3:bc:0d:f1:2f:91:34:16:e0:6b:0f:b3:22:09:f3:60:8c:0a: 9c:1f:9c:c3:e4:40:c5:e2:b4:94:ba:4c:82:d6:e6:8d:c9:c5: e4:86:ae:51:e1:61:46:86:5a:8c:68:78:13:de:18:69:28:87: 56:05:b9:e7:66:d5:4b:dd:c5:99:0f:b9:b0:a3:05:80:e5:76: 6b:f9:a5:e2:51:62:b1:2a:a2:06:25:f0:da:52:2e:c4:0f:28: 23:e9:76:85:40:f4:a8:36:de:5c:44:4c:5c:35:b1:f7:a3:b6: 0f:4a:1e:c8:2f:84:0b:89:7a:14:24:25:b0:be:ce:7e:23:8f: 34:a4:be:aa:5f:ce:ba:e9:6e:59:f9:9f:fe:f2:bc:fa:bd:71: 96:01:60:93:89:7b:4f:0f:51:67:67:36:d4:a6:c9:a3:e3:29: db:6a:17:f4:1c:fd:76:93:09:f3:00:c1:81:38:8a:18:52:5f: ab:71:5d:69:04:4e:0b:a3:4a:a4:c9:a3:72:0e:96:c6:9a:c1: 49:3a:38:9d:68:c5:a8:31:a9:77:d8:88:08:4f:91:b1:c6:11: 3d:39:74:b9:dc:b2:91:c7:a7:37:e6:04:ce:27:83:40:e5:b1: ce:f8:1e:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2pc4RgXpP+jDJZWSlELRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NTEwNTRkZmJmZGFkMjJjNDllNmJiYWRhYjNhMThmNDJh MWMzNjQwHhcNMjUxMjIxMDMwMTExWhcNMjUxMjIyMDMwMTExWjAzMTEwLwYDVQQD Eyg5MjViMDg3MzgyMGI1NmM5Yjk3MDEzMjU5NmJlMjhlYWYxMGE3ZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bffuxjRIFRX1uSUSjhts3E35ycI eIWEICbo8VPBUSZW50L4sL5mEfkZmezpgsczc5EGcnKq1k1i3gOEkHf2znIR9geu z7UHPmx2Q+nFqWqFiNIUWoJcoIWDHHPLfH7IEA7vvW6PN3KpmN/RmEXU1J3Crs42 39LirbxVvK6BzLKOjrv4YjX5suClkA+a1dKCQgjvE8LEhk2bjnQYJQNNHHEZoizX fTWIk8CvGWKy+qRfn8SFF1LEp1/5VzIENa7Vaee/uzgEkqHqW3sXFndJ2iZiyGye oun2CzXo6XFmI037JHXa5lJCGG3JpapbZy5w8cLC6+hFg2eyBuafSi9TZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJbCHOCC1bJuXATJZa+KOrxCn9LMB8GA1UdIwQY MBaAFIdRBU37/a0ixJ5rutqzoY9CocNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZGE3ZWMtMWMzNC00NjQ3LTllODMt NzU3OWU4NWExYTQ5LzEvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xZGE3ZWMtMWMzNC00NjQ3LTllODMtNzU3OWU4NWExYTQ5 LzEvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOnzP5uo DPmEO0LDaKsZWR7l87wN8S+RNBbgaw+zIgnzYIwKnB+cw+RAxeK0lLpMgtbmjcnF 5IauUeFhRoZajGh4E94YaSiHVgW552bVS93FmQ+5sKMFgOV2a/ml4lFisSqiBiXw 2lIuxA8oI+l2hUD0qDbeXERMXDWx96O2D0oeyC+EC4l6FCQlsL7OfiOPNKS+ql/O uuluWfmf/vK8+r1xlgFgk4l7Tw9RZ2c21KbJo+Mp22oX9Bz9dpMJ8wDBgTiKGFJf q3FdaQROC6NKpMmjcg6WxprBSTo4nWjFqDGpd9iICE+RscYRPTl0udyykcenN+YE zieDQOWxzvgeqQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:17:12 2025 by rpki-client