This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json) Hash identifier: EH47LV5JusXHDOxvLmVrUV/w6Q9DGe4rmQFKlUWXb/4= Subject key identifier: DA:A9:92:8F:58:34:1B:57:CC:4D:FF:F9:DC:12:C9:A0:5C:B7:3C:DE Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Certificate serial: 019B5117F61918D800D3989B3EE4A770D769 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft Manifest number: 0F25 Signing time: Wed 24 Dec 2025 16:01:23 +0000 Manifest this update: Wed 24 Dec 2025 16:01:23 +0000 Manifest next update: Thu 25 Dec 2025 16:01:23 +0000 Files and hashes: 1: 1-NOojewDd9utfznujBymNMOVe5o.roa (hash: X2kKFux/YKAN46Gj+j+YVyBua6uxGC7NabYTrscJFb0=) 2: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: qlepnAhA5Zn9cGvgNJJFc0d+BI5uOPcjSkGGNv0ISMU=) 3: QjuxJ6qQtAfkxBg368Hm1m7WVg4.roa (hash: t8EQkQ4/YMRDclHW8vhweaMsa94SAKvAmv2jUXhwu6A=) 4: V6VlaWA1K-C9MyNU228wIIvdWko.roa (hash: 1CcDBQN60ZlZdF+oTvwDg2BxgmLENhu2Ibg8dddCRwg=) 5: VniS5GV6pMehwAD691_j3TcBoAA.roa (hash: +vOLB8fvZmysfQ2OW1z955SFLMU+xQAMgao9QD3s580=) 6: _zdlWhEi_N0gWHtAVPgkNsc9mR4.roa (hash: 3JxJU5VxNcGspDTOSPWFbdh4BiX6viLLu85SaLzaPnc=) 7: giTh8Ebv-slnkkaTofMNpLbZvzM.roa (hash: bO2clbkcE8o6+abtqVuqTC73svDuw3XhC1F4AhqNJOA=) 8: pj_r37O8ymvyjuC6uSrXOKsAL0o.roa (hash: wt8kJLWKI7jt1DkUmOJ01bIYni4fTUbSQrDjjyaL96c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:f6:19:18:d8:00:d3:98:9b:3e:e4:a7:70:d7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Validity Not Before: Dec 24 16:01:23 2025 GMT Not After : Dec 25 16:01:23 2025 GMT Subject: CN=daa9928f58341b57cc4dfff9dc12c9a05cb73cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:aa:62:34:89:1d:63:f9:c0:e1:fe:bf:f8:3b: 61:94:1e:ea:20:12:f4:f1:e3:25:6a:a9:ab:1f:45: b0:4f:8e:f2:fb:7f:23:44:98:b7:9d:12:20:1d:7f: 45:c7:b9:c9:4b:46:9c:0b:17:98:b9:60:5b:eb:f3: 08:9d:b2:3c:97:bf:d7:37:b6:e1:41:fa:64:7d:b7: 6e:32:35:37:6d:83:58:e1:4f:fa:67:12:3e:fa:92: 5c:15:6a:c6:f3:db:23:c7:16:bf:18:64:6b:45:3b: 8e:29:ce:c4:a2:5b:80:22:75:f1:00:1d:d9:0c:f6: d4:3c:0a:49:43:a3:1d:53:f5:4f:59:e1:fc:de:b1: 54:6b:bb:39:ba:82:67:6f:43:9e:5e:30:c6:df:84: c6:1f:84:31:5d:43:0b:80:f5:8b:42:15:ab:e0:9b: 0e:fe:c5:f7:83:83:23:bb:24:dd:16:dc:41:06:9f: 39:03:2a:31:2c:e5:24:3c:9b:47:89:71:72:73:cc: fa:e0:b5:7e:e1:3e:8a:40:76:ad:03:ab:0c:f3:d0: b4:f6:0b:cc:dd:76:f8:e2:48:56:a3:62:30:14:e8: 81:05:bf:73:ed:61:9e:7f:96:b9:20:38:25:86:9e: ad:7d:5d:e6:22:8a:05:55:4d:6e:a9:d6:89:55:25: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A9:92:8F:58:34:1B:57:CC:4D:FF:F9:DC:12:C9:A0:5C:B7:3C:DE X509v3 Authority Key Identifier: keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:10:7e:8f:1a:02:75:00:0a:88:52:d1:73:6d:f9:78:4d:e1: 63:09:26:d0:b8:b4:1e:b0:34:63:02:37:98:09:7e:0f:23:7e: 96:f1:5e:4c:3e:c4:5b:a2:af:5e:57:16:ff:47:33:0c:df:45: 9a:7e:f4:cb:e2:c0:ee:5f:0b:0a:fb:26:27:50:e9:bc:c2:10: 5f:c8:29:eb:b8:22:69:54:06:6d:de:a5:8d:28:2a:d9:df:f6: 43:36:67:2b:9c:83:4c:48:13:fa:f9:ae:aa:32:38:c8:f3:cf: c9:6c:6d:07:7e:f9:6d:cb:cd:93:30:e8:9d:73:83:39:ec:c8: 29:30:aa:36:42:12:e1:67:dc:a9:27:7c:f6:7c:03:e0:79:0f: 68:b0:97:99:d4:9a:ed:f1:68:b6:34:c3:ab:dd:ea:b9:78:16: b1:b3:35:5f:21:f5:47:17:02:3f:63:44:bf:d5:54:50:ca:0e: 64:06:5c:c0:78:d7:bf:5c:51:22:87:d5:e1:62:77:21:0e:66: 0b:89:65:dc:ae:5b:1a:9a:07:d2:9b:75:ac:a2:95:4e:e2:48: 75:14:22:99:44:a4:50:f2:d4:55:bb:d5:d9:a3:29:af:b3:be: 62:4b:a2:79:4a:0d:69:f3:3e:45:5a:c7:33:a7:e0:99:bc:f6: b8:4c:80:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF/YZGNgA05ibPuSncNdpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODEwY2MzZmQyMjgzMzhkOWI5Njk3MjVkOTViYjMzYzRl NjVhNDgwHhcNMjUxMjI0MTYwMTIzWhcNMjUxMjI1MTYwMTIzWjAzMTEwLwYDVQQD EyhkYWE5OTI4ZjU4MzQxYjU3Y2M0ZGZmZjlkYzEyYzlhMDVjYjczY2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6piNIkdY/nA4f6/+DthlB7qIBL0 8eMlaqmrH0WwT47y+38jRJi3nRIgHX9Fx7nJS0acCxeYuWBb6/MInbI8l7/XN7bh QfpkfbduMjU3bYNY4U/6ZxI++pJcFWrG89sjxxa/GGRrRTuOKc7EoluAInXxAB3Z DPbUPApJQ6MdU/VPWeH83rFUa7s5uoJnb0OeXjDG34TGH4QxXUMLgPWLQhWr4JsO /sX3g4MjuyTdFtxBBp85AyoxLOUkPJtHiXFyc8z64LV+4T6KQHatA6sM89C09gvM 3Xb44khWo2IwFOiBBb9z7WGef5a5IDglhp6tfV3mIooFVU1uqdaJVSU0ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqpko9YNBtXzE3/+dwSyaBctzzeMB8GA1UdIwQY MBaAFB+BDMP9IoM42blpcl2VuzPE5lpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUt ZjljMTgwYmE0ODAxLzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUtZjljMTgwYmE0ODAx LzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBB+jxoC dQAKiFLRc235eE3hYwkm0Li0HrA0YwI3mAl+DyN+lvFeTD7EW6KvXlcW/0czDN9F mn70y+LA7l8LCvsmJ1DpvMIQX8gp67giaVQGbd6ljSgq2d/2QzZnK5yDTEgT+vmu qjI4yPPPyWxtB375bcvNkzDonXODOezIKTCqNkIS4WfcqSd89nwD4HkPaLCXmdSa 7fFotjTDq93quXgWsbM1XyH1RxcCP2NEv9VUUMoOZAZcwHjXv1xRIofV4WJ3IQ5m C4ll3K5bGpoH0pt1rKKVTuJIdRQimUSkUPLUVbvV2aMpr7O+YkuieUoNafM+RVrH M6fgmbz2uEyA4w== -----END CERTIFICATE-----Generated at Wed Dec 24 20:04:40 2025 by rpki-client