This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft File: H4mVTcWspw-Dcs96YrWry4oXwrc.mft (raw, json) Hash identifier: peqfxnK2IKFvP12MAlkI7s4dhAyq0w+odSxYq4Htq3o= Subject key identifier: FE:C1:34:08:BC:EF:FE:41:F3:41:8B:42:54:D1:31:DA:41:71:B6:68 Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7 Certificate issuer: /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7 Certificate serial: 019B2FD4D69F4A905E8E2C167E997F513D8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 05:00:36 +0000 Manifest this update: Thu 18 Dec 2025 05:00:36 +0000 Manifest next update: Fri 19 Dec 2025 05:00:36 +0000 Files and hashes: 1: H4mVTcWspw-Dcs96YrWry4oXwrc.crl (hash: Az2RcsrAVydd5kKB+apA7wi1FPn6zEwe+AMxegR5dPc=) 2: VPSZKXOomg68CX3e2czb5vATzV0.roa (hash: u5eUOziaSNihoip6mFV/l4VWIAiX36Jv1InorW26yng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:d6:9f:4a:90:5e:8e:2c:16:7e:99:7f:51:3d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7 Validity Not Before: Dec 18 05:00:36 2025 GMT Not After : Dec 19 05:00:36 2025 GMT Subject: CN=fec13408bceffe41f3418b4254d131da4171b668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:93:9e:0d:23:96:ba:aa:d2:0c:f7:0a:88:bd: a1:d8:1c:d5:b5:40:d5:10:5a:6c:0e:2b:ae:b6:45: ff:24:98:73:62:78:eb:11:60:4f:92:b6:ee:6b:2b: e7:92:48:18:19:13:cc:ce:6b:cc:e0:ce:fd:88:f7: 74:ac:c9:57:ee:b2:5c:ec:12:e3:82:e1:6f:82:7e: b8:af:0d:b4:37:09:b8:75:01:23:fb:42:52:36:31: 64:12:0d:23:69:82:62:a7:16:97:dc:53:87:11:d0: 19:82:09:3e:6e:98:70:ce:56:a3:3a:3a:f4:c9:b7: 27:52:1d:79:a9:ec:ba:3a:71:03:b6:e4:6f:28:d7: 54:da:16:4f:9c:b1:19:99:76:a9:2c:3f:33:0f:84: 8b:c9:49:67:f6:9e:1a:6c:40:c1:36:03:2a:aa:0e: 72:e8:6f:2c:e7:23:63:db:bd:09:37:27:8a:bb:cc: 42:70:5c:8a:14:ce:7d:03:14:6e:a7:45:39:f5:e6: 07:f2:27:96:75:9d:d7:f5:71:5a:97:cf:ec:c2:3b: 7d:ee:58:5d:bb:46:99:23:0e:7b:3a:61:b7:a1:44: 66:2b:56:ab:f0:56:07:a8:7d:48:d3:95:47:06:b0: fd:fb:64:98:d7:27:a6:25:83:27:9d:75:60:46:a2: 12:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C1:34:08:BC:EF:FE:41:F3:41:8B:42:54:D1:31:DA:41:71:B6:68 X509v3 Authority Key Identifier: keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:98:89:d0:cb:9e:78:2b:92:67:5d:76:e5:8c:f4:da:f0:fd: 01:65:14:9a:94:1d:5e:59:2c:44:22:f5:1f:11:08:4c:a8:d3: a6:e8:85:00:7f:34:27:51:d8:b6:7d:a1:9f:56:0e:f6:f3:63: 0d:39:0c:d4:31:47:20:60:39:1b:15:05:55:b6:71:0d:21:6c: 29:77:77:94:0e:24:e8:0e:c2:b8:16:ae:34:95:bf:01:97:ab: 4d:96:78:22:68:d8:0b:b5:2f:b7:f5:0f:cc:e8:c8:8f:5b:74: eb:b7:68:74:db:77:63:6e:93:a7:35:26:14:5e:3b:8b:ab:fd: 32:cf:2a:80:98:52:f1:12:fa:a7:3a:f2:45:b6:96:8d:b1:1c: d3:0c:cc:8a:97:6d:23:22:b5:f0:bd:ac:20:2b:ac:1c:f7:69: 93:66:f0:17:8c:a4:d3:84:93:b0:0c:58:b1:b5:44:e9:7b:b4: ea:6d:88:06:38:9b:89:5d:8e:d4:c6:22:0f:94:89:9d:1c:d2: ca:50:92:36:66:20:fc:99:84:e5:47:69:b3:c9:a6:69:bd:d6: 2c:4b:dd:8b:d6:94:c1:e7:93:13:3f:7b:00:07:8c:ea:9a:64: 47:ba:0f:c1:48:6d:73:80:3a:7f:ad:6e:23:76:bf:5c:24:d8: c9:16:41:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1NafSpBejiwWfpl/UT2MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODk5NTRkYzVhY2E3MGY4MzcyY2Y3YTYyYjVhYmNiOGEx N2MyYjcwHhcNMjUxMjE4MDUwMDM2WhcNMjUxMjE5MDUwMDM2WjAzMTEwLwYDVQQD EyhmZWMxMzQwOGJjZWZmZTQxZjM0MThiNDI1NGQxMzFkYTQxNzFiNjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJOeDSOWuqrSDPcKiL2h2BzVtUDV EFpsDiuutkX/JJhzYnjrEWBPkrbuayvnkkgYGRPMzmvM4M79iPd0rMlX7rJc7BLj guFvgn64rw20Nwm4dQEj+0JSNjFkEg0jaYJipxaX3FOHEdAZggk+bphwzlajOjr0 ybcnUh15qey6OnEDtuRvKNdU2hZPnLEZmXapLD8zD4SLyUln9p4abEDBNgMqqg5y 6G8s5yNj270JNyeKu8xCcFyKFM59AxRup0U59eYH8ieWdZ3X9XFal8/swjt97lhd u0aZIw57OmG3oURmK1ar8FYHqH1I05VHBrD9+2SY1yemJYMnnXVgRqISFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7BNAi87/5B80GLQlTRMdpBcbZoMB8GA1UdIwQY MBaAFB+JlU3FrKcPg3LPemK1q8uKF8K3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRtVlRjV3Nwdy1EY3M5NllyV3J5NG9Yd3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYmU5ZjMtYjk4Zi00ZGQzLThjOTkt NGUyZTdlODc0YTQwLzEvSDRtVlRjV3Nwdy1EY3M5NllyV3J5NG9Yd3JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mYmU5ZjMtYjk4Zi00ZGQzLThjOTktNGUyZTdlODc0YTQw LzEvSDRtVlRjV3Nwdy1EY3M5NllyV3J5NG9Yd3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5iJ0Mue eCuSZ1125Yz02vD9AWUUmpQdXlksRCL1HxEITKjTpuiFAH80J1HYtn2hn1YO9vNj DTkM1DFHIGA5GxUFVbZxDSFsKXd3lA4k6A7CuBauNJW/AZerTZZ4ImjYC7Uvt/UP zOjIj1t067dodNt3Y26TpzUmFF47i6v9Ms8qgJhS8RL6pzryRbaWjbEc0wzMipdt IyK18L2sICusHPdpk2bwF4yk04STsAxYsbVE6Xu06m2IBjibiV2O1MYiD5SJnRzS ylCSNmYg/JmE5Udps8mmab3WLEvdi9aUweeTEz97AAeM6ppkR7oPwUhtc4A6f61u I3a/XCTYyRZBcQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:11:07 2025 by rpki-client