This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft File: H7XBu67UTItq4_K1ZtAcwljfws4.mft (raw, json) Hash identifier: 4paRa1A6bPbMIwNvnfVz/CiOHW8H3G/X1RO9yhaEqiU= Subject key identifier: 13:DE:A9:B3:B6:18:F3:2B:D1:95:3C:FA:AE:F9:27:22:79:4D:20:56 Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE Certificate issuer: /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce Certificate serial: 019B41371439CEDF017CFAFF9499C5423E69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft Manifest number: 1311 Signing time: Sun 21 Dec 2025 14:01:27 +0000 Manifest this update: Sun 21 Dec 2025 14:01:27 +0000 Manifest next update: Mon 22 Dec 2025 14:01:27 +0000 Files and hashes: 1: H7XBu67UTItq4_K1ZtAcwljfws4.crl (hash: MhiB2Engu7COAVuNduhYcvPVlYlN30ue11s7BSEMBbU=) 2: MEWWY0epwShfEJbfHo9y4r51GYY.roa (hash: SGRcwmohz12gMReH4Cn9V8oKzsRQ7LvpKURqTZBMtCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:14:39:ce:df:01:7c:fa:ff:94:99:c5:42:3e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce Validity Not Before: Dec 21 14:01:27 2025 GMT Not After : Dec 22 14:01:27 2025 GMT Subject: CN=13dea9b3b618f32bd1953cfaaef92722794d2056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:d8:95:44:35:40:16:e6:71:81:0c:13:61: 63:41:1d:aa:06:df:32:4d:51:7c:14:13:e2:82:48: e5:4d:9b:f6:c6:6f:f8:c4:a6:6a:d1:18:89:e2:5b: 73:19:d5:4b:3b:ae:ed:87:f6:ce:ff:ff:e5:23:1b: 27:1f:7f:95:c5:2f:a6:f5:84:5a:cc:da:f6:81:fd: 79:37:12:dd:a6:e0:f1:69:0e:dc:0e:08:41:65:f9: b8:10:14:1c:08:31:9b:a4:70:51:4f:2f:71:cc:60: 44:b5:45:ee:5d:00:bd:3f:ce:6e:9c:29:d2:3e:17: cc:29:a3:85:e8:17:18:c1:e8:e8:04:0a:e7:7f:b5: c3:89:8b:9b:13:ce:6f:96:2f:02:c4:67:16:83:89: 9b:12:28:89:ab:eb:f5:43:bc:74:2d:68:d0:69:54: c6:56:c9:73:47:3e:87:94:87:d7:4c:ba:9c:a2:49: c0:7f:5f:78:9d:5b:50:16:5f:38:c7:2c:d5:46:61: 1f:ab:7d:c0:ba:50:27:91:db:7f:6f:23:41:f4:2a: 2e:89:5b:19:64:2a:81:65:8e:fc:c3:4d:53:15:d2: a4:49:46:db:54:0b:17:3d:b1:df:8c:87:01:61:28: d0:b0:0e:d0:ec:c6:83:4b:f2:af:0f:f3:58:d8:cd: c7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DE:A9:B3:B6:18:F3:2B:D1:95:3C:FA:AE:F9:27:22:79:4D:20:56 X509v3 Authority Key Identifier: keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:4f:16:1e:be:72:9b:66:50:b5:6f:7d:4d:86:29:86:52:5e: ac:68:7a:16:a0:7e:40:cb:4f:37:62:b5:fa:30:82:90:38:4b: 64:0f:e3:7c:6f:5d:de:d4:52:4b:75:2c:54:36:ef:4e:7e:1e: 82:b4:44:6b:50:17:14:bd:11:42:b0:74:91:c4:33:0d:86:00: df:b0:fa:13:36:ab:a1:99:15:aa:66:39:0c:5a:3a:f2:16:23: 9a:7f:19:49:d7:e8:3b:e6:c8:32:ac:64:07:07:f2:2f:c0:0a: c3:ec:46:ef:3a:06:5f:62:89:2e:99:17:11:af:29:8d:61:6f: b3:fc:1c:cb:b6:ad:9e:68:ca:6b:05:f7:53:79:6f:f4:2e:35: 3a:55:8c:15:59:c4:ba:6d:8d:ae:4e:97:be:2e:fe:36:f2:a3: 62:3e:e8:01:7e:b2:fa:d3:d1:eb:a8:96:bf:7e:90:ab:6d:19: 9a:03:49:2a:8d:31:96:75:d4:d8:a3:c6:82:9c:b7:48:d3:08: 0d:cc:cc:38:10:59:0b:4b:45:54:f5:3b:32:80:8d:2d:79:fe: 5e:56:cb:98:ef:7e:51:dd:3c:2a:23:85:fa:1c:34:8b:96:e6: e1:94:60:c0:96:b4:11:6a:04:db:0f:d2:f5:84:8a:f7:41:bc: 7b:ae:08:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNxQ5zt8BfPr/lJnFQj5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYjVjMWJiYWVkNDRjOGI2YWUzZjJiNTY2ZDAxY2MyNThk ZmMyY2UwHhcNMjUxMjIxMTQwMTI3WhcNMjUxMjIyMTQwMTI3WjAzMTEwLwYDVQQD EygxM2RlYTliM2I2MThmMzJiZDE5NTNjZmFhZWY5MjcyMjc5NGQyMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t3YlUQ1QBbmcYEME2FjQR2qBt8y TVF8FBPigkjlTZv2xm/4xKZq0RiJ4ltzGdVLO67th/bO///lIxsnH3+VxS+m9YRa zNr2gf15NxLdpuDxaQ7cDghBZfm4EBQcCDGbpHBRTy9xzGBEtUXuXQC9P85unCnS PhfMKaOF6BcYwejoBArnf7XDiYubE85vli8CxGcWg4mbEiiJq+v1Q7x0LWjQaVTG VslzRz6HlIfXTLqcoknAf194nVtQFl84xyzVRmEfq33AulAnkdt/byNB9CouiVsZ ZCqBZY78w01TFdKkSUbbVAsXPbHfjIcBYSjQsA7Q7MaDS/KvD/NY2M3HZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPeqbO2GPMr0ZU8+q75JyJ5TSBWMB8GA1UdIwQY MBaAFB+1wbuu1EyLauPytWbQHMJY38LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDdYQnU2N1VUSXRxNF9LMVp0QWN3bGpmd3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zYzRiNTMtZWNhMy00NTk5LTlkOTQt ZDcxZmM5MGM3YjE2LzEvSDdYQnU2N1VUSXRxNF9LMVp0QWN3bGpmd3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8zYzRiNTMtZWNhMy00NTk5LTlkOTQtZDcxZmM5MGM3YjE2 LzEvSDdYQnU2N1VUSXRxNF9LMVp0QWN3bGpmd3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArk8WHr5y m2ZQtW99TYYphlJerGh6FqB+QMtPN2K1+jCCkDhLZA/jfG9d3tRSS3UsVDbvTn4e grREa1AXFL0RQrB0kcQzDYYA37D6EzaroZkVqmY5DFo68hYjmn8ZSdfoO+bIMqxk BwfyL8AKw+xG7zoGX2KJLpkXEa8pjWFvs/wcy7atnmjKawX3U3lv9C41OlWMFVnE um2Nrk6Xvi7+NvKjYj7oAX6y+tPR66iWv36Qq20ZmgNJKo0xlnXU2KPGgpy3SNMI DczMOBBZC0tFVPU7MoCNLXn+XlbLmO9+Ud08KiOF+hw0i5bm4ZRgwJa0EWoE2w/S 9YSK90G8e64IMw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:56:35 2025 by rpki-client