This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json) Hash identifier: 7fE2kTNmR9gtreqz8Phc+hAztVkQS13g3Lvgay71Ssk= Subject key identifier: 17:E2:82:98:40:02:22:9E:A7:54:52:06:9B:16:18:3E:49:E1:2B:03 Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Certificate serial: 019B3DC80EA77DC9802EC23D386E992AC518 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft Manifest number: 0F1B Signing time: Sat 20 Dec 2025 22:01:19 +0000 Manifest this update: Sat 20 Dec 2025 22:01:19 +0000 Manifest next update: Sun 21 Dec 2025 22:01:19 +0000 Files and hashes: 1: 1-NOojewDd9utfznujBymNMOVe5o.roa (hash: X2kKFux/YKAN46Gj+j+YVyBua6uxGC7NabYTrscJFb0=) 2: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: FF/kMb9OQ5YRewRvWsG9VrXg0938UcfPmao0lWoxIJQ=) 3: QjuxJ6qQtAfkxBg368Hm1m7WVg4.roa (hash: t8EQkQ4/YMRDclHW8vhweaMsa94SAKvAmv2jUXhwu6A=) 4: V6VlaWA1K-C9MyNU228wIIvdWko.roa (hash: 1CcDBQN60ZlZdF+oTvwDg2BxgmLENhu2Ibg8dddCRwg=) 5: VniS5GV6pMehwAD691_j3TcBoAA.roa (hash: +vOLB8fvZmysfQ2OW1z955SFLMU+xQAMgao9QD3s580=) 6: _zdlWhEi_N0gWHtAVPgkNsc9mR4.roa (hash: 3JxJU5VxNcGspDTOSPWFbdh4BiX6viLLu85SaLzaPnc=) 7: giTh8Ebv-slnkkaTofMNpLbZvzM.roa (hash: bO2clbkcE8o6+abtqVuqTC73svDuw3XhC1F4AhqNJOA=) 8: pj_r37O8ymvyjuC6uSrXOKsAL0o.roa (hash: wt8kJLWKI7jt1DkUmOJ01bIYni4fTUbSQrDjjyaL96c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:0e:a7:7d:c9:80:2e:c2:3d:38:6e:99:2a:c5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Validity Not Before: Dec 20 22:01:19 2025 GMT Not After : Dec 21 22:01:19 2025 GMT Subject: CN=17e282984002229ea75452069b16183e49e12b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:35:64:75:92:8e:ff:1b:eb:b4:9d:c9:40: c9:74:ec:b2:97:9b:d6:40:0e:bf:e5:60:9f:21:e5: de:6b:a5:e8:d5:e6:f0:53:45:84:3c:a2:07:22:5e: 87:ed:ad:d9:d4:db:10:27:59:0b:c1:91:1e:5c:a6: 61:d7:45:6b:05:12:cc:79:f6:64:26:68:47:e8:92: 36:93:32:39:42:73:91:a3:f8:39:3b:1f:3e:d3:ea: 67:37:9a:3e:4a:3e:cf:96:85:3d:6a:57:5c:67:c1: e7:a5:4c:99:95:3b:a1:82:48:fa:9a:df:66:f9:43: c9:64:27:59:47:0b:92:6d:fb:8a:9c:49:4a:9f:8e: 3d:97:50:2d:77:fd:4e:18:61:0d:4c:ce:04:55:a0: 1f:94:ca:06:ae:44:16:d5:cf:1f:4f:9f:b9:ac:7c: f0:26:c4:39:13:ec:4a:dc:cd:d6:a1:ee:4e:85:42: aa:17:40:f0:cb:59:5a:a4:6f:98:3f:6c:8c:0f:0e: 9c:20:bd:6a:f0:65:17:5f:bd:e9:9d:76:70:9b:2d: 05:0a:04:7f:2f:0e:35:e1:54:a4:2b:1a:52:b2:c2: 5d:aa:c9:42:f5:89:94:fe:d7:11:b5:dd:d2:d1:ae: 39:e8:34:7c:85:9f:60:29:d2:60:84:23:1b:fc:35: b5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E2:82:98:40:02:22:9E:A7:54:52:06:9B:16:18:3E:49:E1:2B:03 X509v3 Authority Key Identifier: keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:cb:ad:d2:c1:0d:62:9f:09:0d:4b:fb:bf:30:3f:59:43:cb: 81:93:25:98:ea:ed:ac:53:a1:8d:12:48:55:07:b1:0c:8b:34: 79:35:f3:ea:13:69:23:a5:6f:0a:1a:35:00:9d:62:36:b0:40: 50:62:63:32:a2:0b:00:35:79:e0:4a:31:f0:57:e2:14:a8:95: fc:bb:f2:d8:8a:b6:b6:38:11:61:fa:43:bc:ac:11:38:30:32: e7:e8:5d:6c:77:7a:8c:4a:40:fa:5c:44:e9:7c:72:7d:78:85: 4b:2f:dc:11:db:38:5d:ce:09:b7:cb:b2:9e:1e:dd:84:b4:fd: c0:30:21:2f:2a:67:09:31:97:07:6a:54:97:a6:65:bc:f6:c0: b0:36:c7:6c:29:29:aa:dc:1d:85:29:4e:72:d5:b3:cc:87:3a: b0:7c:af:5d:1e:4a:07:7b:88:fe:40:be:1e:27:5a:1e:fe:c7: 6f:66:14:21:be:e1:ef:e6:e1:c1:23:44:ca:cc:71:30:19:82: 2d:77:50:05:66:7d:95:86:e0:fd:d0:e7:b3:c3:86:87:de:ee: 0e:cd:83:f4:30:46:8c:9b:f8:cb:7a:28:9e:24:d3:ff:af:ed: 03:41:16:23:86:53:cd:66:75:00:06:e1:d6:bc:17:be:b7:08: fe:5f:33:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yA6nfcmALsI9OG6ZKsUYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODEwY2MzZmQyMjgzMzhkOWI5Njk3MjVkOTViYjMzYzRl NjVhNDgwHhcNMjUxMjIwMjIwMTE5WhcNMjUxMjIxMjIwMTE5WjAzMTEwLwYDVQQD EygxN2UyODI5ODQwMDIyMjllYTc1NDUyMDY5YjE2MTgzZTQ5ZTEyYjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5g1ZHWSjv8b67SdyUDJdOyyl5vW QA6/5WCfIeXea6Xo1ebwU0WEPKIHIl6H7a3Z1NsQJ1kLwZEeXKZh10VrBRLMefZk JmhH6JI2kzI5QnORo/g5Ox8+0+pnN5o+Sj7PloU9aldcZ8HnpUyZlTuhgkj6mt9m +UPJZCdZRwuSbfuKnElKn449l1Atd/1OGGENTM4EVaAflMoGrkQW1c8fT5+5rHzw JsQ5E+xK3M3Woe5OhUKqF0Dwy1lapG+YP2yMDw6cIL1q8GUXX73pnXZwmy0FCgR/ Lw414VSkKxpSssJdqslC9YmU/tcRtd3S0a456DR8hZ9gKdJghCMb/DW1IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfigphAAiKep1RSBpsWGD5J4SsDMB8GA1UdIwQY MBaAFB+BDMP9IoM42blpcl2VuzPE5lpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUt ZjljMTgwYmE0ODAxLzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUtZjljMTgwYmE0ODAx LzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcut0sEN Yp8JDUv7vzA/WUPLgZMlmOrtrFOhjRJIVQexDIs0eTXz6hNpI6VvCho1AJ1iNrBA UGJjMqILADV54Eox8FfiFKiV/Lvy2Iq2tjgRYfpDvKwRODAy5+hdbHd6jEpA+lxE 6XxyfXiFSy/cEds4Xc4Jt8uynh7dhLT9wDAhLypnCTGXB2pUl6ZlvPbAsDbHbCkp qtwdhSlOctWzzIc6sHyvXR5KB3uI/kC+HidaHv7Hb2YUIb7h7+bhwSNEysxxMBmC LXdQBWZ9lYbg/dDns8OGh97uDs2D9DBGjJv4y3ooniTT/6/tA0EWI4ZTzWZ1AAbh 1rwXvrcI/l8z5w== -----END CERTIFICATE-----Generated at Sat Dec 20 23:08:01 2025 by rpki-client