This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft File: H6EtaHxiehgvgdTMyz8yIBhh9nc.mft (raw, json) Hash identifier: vmVD6dTF6e6kdVqy0WPAqmqVBww8bsWy+ISofzSo2s0= Subject key identifier: 9E:EE:B7:00:86:01:20:A4:2C:1B:6E:1A:93:2B:26:8B:88:48:E0:E6 Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77 Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677 Certificate serial: 019B552ADDE509FF6ABB71695A1844CA5B32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft Manifest number: 179C Signing time: Thu 25 Dec 2025 11:00:31 +0000 Manifest this update: Thu 25 Dec 2025 11:00:31 +0000 Manifest next update: Fri 26 Dec 2025 11:00:31 +0000 Files and hashes: 1: H6EtaHxiehgvgdTMyz8yIBhh9nc.crl (hash: 9kfwlgCdzdk9JrcauWp9cYaU/JlgPtiUq2wJ6O+PInM=) 2: TYWepdwzCmiIVwEz7K8yZe03CRw.roa (hash: Gskq7xmpmSlLRwYuMMpLlLQSUWpIBfZkyQHS0PN6dOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2a:dd:e5:09:ff:6a:bb:71:69:5a:18:44:ca:5b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677 Validity Not Before: Dec 25 11:00:31 2025 GMT Not After : Dec 26 11:00:31 2025 GMT Subject: CN=9eeeb700860120a42c1b6e1a932b268b8848e0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:32:5a:c4:63:3b:73:e5:23:b9:38:0e:af:73: b8:97:c7:65:b2:35:59:89:96:c3:06:a9:8e:49:6e: ec:c2:0b:d8:6a:44:a9:b5:1d:7c:4e:4c:ce:16:39: 20:4c:36:76:4e:31:d8:20:0e:d8:ca:be:2c:00:8b: d3:fa:79:1e:99:a4:67:92:87:ce:64:3c:6d:16:c5: 42:bb:37:ec:21:e0:0d:9e:53:07:ab:36:d3:28:89: e0:5e:de:ff:b7:b8:7a:5e:d6:db:8b:37:67:dd:fa: 0d:91:60:21:1f:c4:a2:f3:e6:df:d7:be:9d:df:c2: 4a:44:02:33:87:d2:ec:e8:79:1d:d9:37:1d:16:77: bb:6d:30:da:65:94:1e:14:f0:b3:fe:c6:8c:63:7a: 3b:c0:07:9b:4a:3f:72:90:73:db:37:ba:7e:89:f7: 87:df:ca:ea:f1:b6:00:f4:0e:4a:b8:71:31:42:36: 69:96:ba:94:c5:29:8f:fc:3d:71:a6:00:c3:10:72: d3:63:8a:e5:86:de:6d:de:ec:dd:d8:3f:47:86:65: 40:85:58:7a:68:c9:6f:7a:ac:77:ad:c8:6e:85:8b: a6:2b:5f:7f:a5:76:c8:a2:71:bf:63:96:bc:d3:6b: 51:50:84:19:2c:6f:d7:16:c7:5b:b5:17:a9:c3:d0: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EE:B7:00:86:01:20:A4:2C:1B:6E:1A:93:2B:26:8B:88:48:E0:E6 X509v3 Authority Key Identifier: keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bf:67:9f:9e:e1:8e:7b:3c:1c:39:5d:4b:b2:69:46:d5:38: fd:94:18:6b:c6:c8:a7:1c:e9:ad:d5:d9:40:21:1a:40:7c:f0: f6:7d:98:77:38:0f:55:e2:ca:97:42:8b:70:8d:02:b1:3b:e6: 64:77:6d:99:91:01:4f:ec:02:19:61:84:b7:f6:d1:0e:0b:9a: 8e:5c:57:c7:b4:4e:c3:93:26:a9:84:9d:3d:f8:ac:17:be:14: e8:ab:9f:df:7c:2a:90:d5:10:18:34:2d:54:f8:c9:61:c3:d9: 07:19:24:0e:c6:65:22:74:6b:11:22:46:4e:d8:66:f3:aa:89: 02:8c:9d:24:df:cb:24:5d:f8:00:2f:57:03:ff:06:9e:d2:8e: f9:0a:b8:53:ae:5f:5b:22:5e:b4:b3:7d:02:b5:33:fc:d7:39: 03:d1:cc:b2:80:ca:44:d5:f3:73:1e:3a:47:49:9b:13:4f:87: a2:cf:b6:7b:8c:76:ae:1d:c7:1d:c3:33:fe:05:fc:7f:71:16: 5b:f4:3a:ad:67:31:bf:a0:98:f3:40:84:5d:1b:2f:ec:f4:11: 71:54:5d:07:15:eb:31:11:0a:fd:8b:d2:b3:01:80:99:6a:94: 1d:9b:4e:f8:6f:b0:49:68:04:08:bc:ba:67:d1:01:46:bd:94: ba:a1:ca:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVKt3lCf9qu3FpWhhEylsyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYTEyZDY4N2M2MjdhMTgyZjgxZDRjY2NiM2YzMjIwMTg2 MWY2NzcwHhcNMjUxMjI1MTEwMDMxWhcNMjUxMjI2MTEwMDMxWjAzMTEwLwYDVQQD Eyg5ZWVlYjcwMDg2MDEyMGE0MmMxYjZlMWE5MzJiMjY4Yjg4NDhlMGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jJaxGM7c+UjuTgOr3O4l8dlsjVZ iZbDBqmOSW7swgvYakSptR18TkzOFjkgTDZ2TjHYIA7Yyr4sAIvT+nkemaRnkofO ZDxtFsVCuzfsIeANnlMHqzbTKIngXt7/t7h6Xtbbizdn3foNkWAhH8Si8+bf176d 38JKRAIzh9Ls6Hkd2TcdFne7bTDaZZQeFPCz/saMY3o7wAebSj9ykHPbN7p+ifeH 38rq8bYA9A5KuHExQjZplrqUxSmP/D1xpgDDEHLTY4rlht5t3uzd2D9HhmVAhVh6 aMlveqx3rchuhYumK19/pXbIonG/Y5a802tRUIQZLG/XFsdbtRepw9AtvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7utwCGASCkLBtuGpMrJouISODmMB8GA1UdIwQY MBaAFB+hLWh8YnoYL4HUzMs/MiAYYfZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80YzI5ZDAtNThlYS00OGU4LWJhYzct ODljY2MyZDQ1NjNiLzEvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC80YzI5ZDAtNThlYS00OGU4LWJhYzctODljY2MyZDQ1NjNi LzEvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW79nn57h jns8HDldS7JpRtU4/ZQYa8bIpxzprdXZQCEaQHzw9n2YdzgPVeLKl0KLcI0CsTvm ZHdtmZEBT+wCGWGEt/bRDguajlxXx7ROw5MmqYSdPfisF74U6Kuf33wqkNUQGDQt VPjJYcPZBxkkDsZlInRrESJGTthm86qJAoydJN/LJF34AC9XA/8GntKO+Qq4U65f WyJetLN9ArUz/Nc5A9HMsoDKRNXzcx46R0mbE0+Hos+2e4x2rh3HHcMz/gX8f3EW W/Q6rWcxv6CY80CEXRsv7PQRcVRdBxXrMREK/YvSswGAmWqUHZtO+G+wSWgECLy6 Z9EBRr2UuqHKCg== -----END CERTIFICATE-----Generated at Thu Dec 25 12:48:18 2025 by rpki-client