This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json) Hash identifier: Y8SRdyjCQxvLblV0z5g5vB0Sh6DpGDglSzxdArCtl2I= Subject key identifier: 35:49:51:E5:CF:42:0D:EB:51:C9:3E:F6:4D:1D:45:7A:4E:B3:2F:6D Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Certificate serial: 019B56E375C35E7D100DA6362828EA60373D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft Manifest number: 0F28 Signing time: Thu 25 Dec 2025 19:01:45 +0000 Manifest this update: Thu 25 Dec 2025 19:01:45 +0000 Manifest next update: Fri 26 Dec 2025 19:01:45 +0000 Files and hashes: 1: 1-NOojewDd9utfznujBymNMOVe5o.roa (hash: X2kKFux/YKAN46Gj+j+YVyBua6uxGC7NabYTrscJFb0=) 2: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: dg4iO7Um5wih/6KeRneTW82YnV/fIts7p9wFq/KtnV4=) 3: QjuxJ6qQtAfkxBg368Hm1m7WVg4.roa (hash: t8EQkQ4/YMRDclHW8vhweaMsa94SAKvAmv2jUXhwu6A=) 4: V6VlaWA1K-C9MyNU228wIIvdWko.roa (hash: 1CcDBQN60ZlZdF+oTvwDg2BxgmLENhu2Ibg8dddCRwg=) 5: VniS5GV6pMehwAD691_j3TcBoAA.roa (hash: +vOLB8fvZmysfQ2OW1z955SFLMU+xQAMgao9QD3s580=) 6: _zdlWhEi_N0gWHtAVPgkNsc9mR4.roa (hash: 3JxJU5VxNcGspDTOSPWFbdh4BiX6viLLu85SaLzaPnc=) 7: giTh8Ebv-slnkkaTofMNpLbZvzM.roa (hash: bO2clbkcE8o6+abtqVuqTC73svDuw3XhC1F4AhqNJOA=) 8: pj_r37O8ymvyjuC6uSrXOKsAL0o.roa (hash: wt8kJLWKI7jt1DkUmOJ01bIYni4fTUbSQrDjjyaL96c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:e3:75:c3:5e:7d:10:0d:a6:36:28:28:ea:60:37:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Validity Not Before: Dec 25 19:01:45 2025 GMT Not After : Dec 26 19:01:45 2025 GMT Subject: CN=354951e5cf420deb51c93ef64d1d457a4eb32f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5a:12:2c:fb:09:1a:96:e7:9b:9e:1c:2a:2d: 80:b6:a8:a1:57:bb:2e:cc:eb:b6:49:4d:3a:b0:8a: 50:0b:f0:7e:00:bf:51:6a:91:2c:75:78:a2:c1:fe: 8c:0a:bb:aa:db:0c:64:ef:45:a2:5b:11:4f:58:c7: c4:aa:db:61:7e:70:9c:24:84:5b:57:77:70:14:cb: a3:4f:f3:0f:4d:d6:e6:63:59:c1:d9:b5:7e:7c:71: 17:03:5a:e7:da:62:2c:28:da:a6:77:10:74:06:d3: e4:16:c1:8b:ce:80:9b:0c:b1:38:bb:d3:44:b4:56: c0:d7:f6:69:f0:cc:2f:33:f7:be:fa:38:fb:9e:9c: e5:94:8e:85:b8:a9:75:29:57:6b:4a:c6:48:f6:8d: c7:b7:9d:12:a1:67:f4:e8:80:4d:e5:61:3b:e1:d0: 7a:9f:4c:13:54:3f:13:65:c9:36:04:57:ed:9b:5d: 2a:e1:7a:9a:b8:c7:cc:e7:ac:e7:cf:98:62:50:ea: 77:76:7b:f9:5d:45:d1:4f:e3:46:e7:0d:b5:d7:aa: 12:32:eb:8c:e4:19:27:ea:36:ce:80:7b:ff:8a:65: 31:2b:a1:d3:54:21:53:75:3c:33:39:2e:28:d6:5d: 60:45:3f:d4:55:c7:f3:da:95:f1:29:d0:6d:f4:aa: c4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:49:51:E5:CF:42:0D:EB:51:C9:3E:F6:4D:1D:45:7A:4E:B3:2F:6D X509v3 Authority Key Identifier: keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:9a:27:a7:23:76:44:dc:29:a5:a5:69:1a:d7:bb:12:09:e0: d8:b0:89:31:34:8e:36:a9:90:23:92:20:20:87:6d:88:c6:6a: b7:e6:94:35:4f:ad:ec:ec:79:f6:6c:e2:43:22:7b:59:a9:77: 8f:1d:7d:93:39:11:8f:fc:c7:fd:08:1e:e6:26:d4:4e:4d:58: db:97:23:33:72:09:bd:ca:d3:a7:98:9d:78:af:dd:1b:7d:78: a7:25:3f:72:3b:68:b3:6a:79:48:96:c6:9a:45:be:5d:14:5c: e7:ca:a8:ad:7e:7a:12:38:81:60:a4:f3:1a:6b:e3:fb:48:d6: 4a:84:4e:d3:8a:7c:68:51:4d:e1:8a:42:51:fa:fb:84:b9:07: 0e:2a:7f:ee:01:c3:7a:3c:6f:05:c2:a4:ee:76:43:2a:d5:86: a4:36:b0:28:96:76:4a:d8:da:6e:6e:d6:f4:3b:70:56:33:ad: f0:ad:40:f1:5d:85:c5:d3:69:51:f1:2e:8d:97:98:be:a1:85: d7:3f:26:97:26:39:d7:98:95:c8:97:c9:41:1c:13:2e:49:25: 9b:a6:c9:22:f2:b0:53:2c:84:be:73:36:19:a6:2c:48:f0:f4: 48:93:2a:42:a4:08:6f:cc:91:4a:5b:15:6e:58:30:77:de:6d: b1:36:f6:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtW43XDXn0QDaY2KCjqYDc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODEwY2MzZmQyMjgzMzhkOWI5Njk3MjVkOTViYjMzYzRl NjVhNDgwHhcNMjUxMjI1MTkwMTQ1WhcNMjUxMjI2MTkwMTQ1WjAzMTEwLwYDVQQD EygzNTQ5NTFlNWNmNDIwZGViNTFjOTNlZjY0ZDFkNDU3YTRlYjMyZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1oSLPsJGpbnm54cKi2AtqihV7su zOu2SU06sIpQC/B+AL9RapEsdXiiwf6MCruq2wxk70WiWxFPWMfEqtthfnCcJIRb V3dwFMujT/MPTdbmY1nB2bV+fHEXA1rn2mIsKNqmdxB0BtPkFsGLzoCbDLE4u9NE tFbA1/Zp8MwvM/e++jj7npzllI6FuKl1KVdrSsZI9o3Ht50SoWf06IBN5WE74dB6 n0wTVD8TZck2BFftm10q4XqauMfM56znz5hiUOp3dnv5XUXRT+NG5w2116oSMuuM 5Bkn6jbOgHv/imUxK6HTVCFTdTwzOS4o1l1gRT/UVcfz2pXxKdBt9KrEewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVJUeXPQg3rUck+9k0dRXpOsy9tMB8GA1UdIwQY MBaAFB+BDMP9IoM42blpcl2VuzPE5lpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUt ZjljMTgwYmE0ODAxLzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUtZjljMTgwYmE0ODAx LzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJonpyN2 RNwppaVpGte7Egng2LCJMTSONqmQI5IgIIdtiMZqt+aUNU+t7Ox59mziQyJ7Wal3 jx19kzkRj/zH/Qge5ibUTk1Y25cjM3IJvcrTp5ideK/dG314pyU/cjtos2p5SJbG mkW+XRRc58qorX56EjiBYKTzGmvj+0jWSoRO04p8aFFN4YpCUfr7hLkHDip/7gHD ejxvBcKk7nZDKtWGpDawKJZ2Stjabm7W9DtwVjOt8K1A8V2FxdNpUfEujZeYvqGF 1z8mlyY515iVyJfJQRwTLkklm6bJIvKwUyyEvnM2GaYsSPD0SJMqQqQIb8yRSlsV blgwd95tsTb2ig== -----END CERTIFICATE-----Generated at Thu Dec 25 22:18:02 2025 by rpki-client