This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json) Hash identifier: Jh2xHapHtJ2mKcJY6SLOrGjb/C6K7KgAud0Hnepeo9U= Subject key identifier: 50:19:7E:10:B7:31:EA:09:1A:43:3F:4B:98:F6:E9:A4:14:31:50:8A Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc Certificate serial: 019B514EAB3D249B785BEBEA0DC9C84A0D75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 17:01:08 +0000 Manifest this update: Wed 24 Dec 2025 17:01:08 +0000 Manifest next update: Thu 25 Dec 2025 17:01:08 +0000 Files and hashes: 1: EV_VJQ7znLLT_4jLuRQdPiIqgco.roa (hash: D3X5PT8yDu7pN/mU+PmRQS2ADQ706uf76HlBQmopR6o=) 2: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: cNkDyjJTF3dtlYK1OrANEg/AtJmJtZl9HeS2q+luO5w=) 3: _A233dG0OsivwYkQExiSR967RqA.roa (hash: W1a0C5qkdasTQfph8n3hvMTYG6/PIGL4cSCJYs2ipZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:ab:3d:24:9b:78:5b:eb:ea:0d:c9:c8:4a:0d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc Validity Not Before: Dec 24 17:01:08 2025 GMT Not After : Dec 25 17:01:08 2025 GMT Subject: CN=50197e10b731ea091a433f4b98f6e9a41431508a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8c:bf:7a:13:c7:6f:df:0b:46:77:f5:e9:cd: 56:53:cf:94:88:d0:aa:4f:b1:25:b9:b2:de:24:f3: f5:9a:cb:78:c0:99:9e:b0:b0:8c:e6:c6:67:0e:48: a8:03:54:56:b9:10:32:be:bd:7f:4c:3c:6b:84:94: e9:13:84:6a:56:74:fa:e9:93:1e:4c:df:05:fc:8e: 93:f6:9c:e0:84:b7:8c:17:53:c7:02:82:14:f4:88: b2:e5:a3:77:cf:e6:28:89:77:08:8a:71:ee:8d:fd: 32:02:fd:78:2a:81:95:93:c7:45:3b:aa:b5:a1:d6: b3:68:2a:87:b7:55:78:46:9f:ed:1b:1c:fc:53:ed: 8b:b0:f6:30:85:b2:a9:79:b6:a2:60:c2:79:b3:6b: 9f:5a:59:fa:ed:21:35:0b:4b:1a:1e:8e:c3:b7:ca: 8e:71:58:b5:06:66:f6:61:d9:09:75:b2:16:b6:f7: 20:10:3e:b5:34:8e:99:84:0f:4b:11:88:d0:9f:58: 9e:e2:44:36:24:62:a7:fe:4f:ce:eb:83:26:d0:c7: 93:4b:d9:53:b8:d5:36:83:a4:71:10:3d:22:52:6b: 44:c2:89:c7:34:19:cc:6c:d3:2c:59:5d:a0:a1:55: 1f:40:dc:75:81:79:62:43:96:12:ed:13:c1:49:f8: b5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:19:7E:10:B7:31:EA:09:1A:43:3F:4B:98:F6:E9:A4:14:31:50:8A X509v3 Authority Key Identifier: keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:0b:fb:76:f3:76:b3:10:1d:88:36:fc:42:08:22:4b:92:14: 53:1b:a6:8e:cd:73:96:60:fc:1b:ec:6f:5a:0c:61:fc:4d:1c: 34:c6:d3:e5:37:ff:76:86:5b:d8:cc:33:20:2e:a2:84:42:93: fe:da:66:66:1d:5f:23:7b:43:fe:3b:ce:72:45:75:e2:bf:70: 75:a2:b1:8a:ca:b8:13:fd:55:80:fb:d0:5a:f7:67:36:d6:8d: ec:65:73:dd:f4:19:6c:98:7f:fe:d8:fe:c1:f8:ae:54:ae:33: de:c9:39:e7:cc:27:e8:e8:63:5c:52:61:d2:41:38:18:fa:57: f8:36:b7:55:1c:94:91:5f:c9:db:02:3a:06:26:0a:4a:9f:98: b9:c5:c7:f0:ff:eb:d5:e7:43:4c:9e:cd:82:89:c9:91:57:4c: f8:30:8d:39:a0:d2:f0:08:9d:39:20:49:88:c3:18:f4:3d:96: a5:e6:42:c0:3a:0a:21:c8:b3:88:41:f0:a7:79:74:80:a0:77: 6c:35:33:c9:e3:2b:2d:c3:7c:8f:db:e6:55:d6:3a:63:cc:44: 90:bd:98:8c:d1:cf:22:c6:81:e6:0b:b8:af:65:fc:a0:2b:6b: 40:80:3b:c6:30:07:a5:f6:72:54:ac:e2:28:1b:b6:96:dc:61: 45:b3:d2:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTqs9JJt4W+vqDcnISg11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYThhYzM3Zjk2OTUxNjk2MjdmNzVlMDk4OTYzMzk2ZGU5 NjM4Y2MwHhcNMjUxMjI0MTcwMTA4WhcNMjUxMjI1MTcwMTA4WjAzMTEwLwYDVQQD Eyg1MDE5N2UxMGI3MzFlYTA5MWE0MzNmNGI5OGY2ZTlhNDE0MzE1MDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIy/ehPHb98LRnf16c1WU8+UiNCq T7ElubLeJPP1mst4wJmesLCM5sZnDkioA1RWuRAyvr1/TDxrhJTpE4RqVnT66ZMe TN8F/I6T9pzghLeMF1PHAoIU9Iiy5aN3z+YoiXcIinHujf0yAv14KoGVk8dFO6q1 odazaCqHt1V4Rp/tGxz8U+2LsPYwhbKpebaiYMJ5s2ufWln67SE1C0saHo7Dt8qO cVi1Bmb2YdkJdbIWtvcgED61NI6ZhA9LEYjQn1ie4kQ2JGKn/k/O64Mm0MeTS9lT uNU2g6RxED0iUmtEwonHNBnMbNMsWV2goVUfQNx1gXliQ5YS7RPBSfi1WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAZfhC3MeoJGkM/S5j26aQUMVCKMB8GA1UdIwQY MBaAFB+orDf5aVFpYn914JiWM5beljjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUt MDIzYjZjMDc5M2YxLzEvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUtMDIzYjZjMDc5M2Yx LzEvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1wv7dvN2 sxAdiDb8QggiS5IUUxumjs1zlmD8G+xvWgxh/E0cNMbT5Tf/doZb2MwzIC6ihEKT /tpmZh1fI3tD/jvOckV14r9wdaKxisq4E/1VgPvQWvdnNtaN7GVz3fQZbJh//tj+ wfiuVK4z3sk558wn6OhjXFJh0kE4GPpX+Da3VRyUkV/J2wI6BiYKSp+YucXH8P/r 1edDTJ7NgonJkVdM+DCNOaDS8AidOSBJiMMY9D2WpeZCwDoKIciziEHwp3l0gKB3 bDUzyeMrLcN8j9vmVdY6Y8xEkL2YjNHPIsaB5gu4r2X8oCtrQIA7xjAHpfZyVKzi KBu2ltxhRbPSNQ== -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:40 2025 by rpki-client