This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft File: h9qWV60f35jec4uxmnPv0NsLOio.mft (raw, json) Hash identifier: 7K5iYBY+DqUzXGE0QJiCV4QmOXMOJ4PZwjJhZJ5vYzo= Subject key identifier: AD:D7:36:31:27:A9:F0:C9:12:2E:B4:35:5D:31:B5:7D:94:A5:58:BD Authority key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A Certificate issuer: /CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a Certificate serial: 019B68E970A5EB6B601C75D35F0BA7D56318 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft Manifest number: 023E Signing time: Mon 29 Dec 2025 07:01:27 +0000 Manifest this update: Mon 29 Dec 2025 07:01:27 +0000 Manifest next update: Tue 30 Dec 2025 07:01:27 +0000 Files and hashes: 1: 2GTFPZ68uVkX8Ryfbx92fDQ9upI.roa (hash: lvp+RlxYyEIMygF5MN9RWgH0GLslbYAMM+G4pVyVmkU=) 2: h9qWV60f35jec4uxmnPv0NsLOio.crl (hash: xjd9+zSqm0IH/tAs2o14u9VKwFZuAJSoN1jtzptQunI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:70:a5:eb:6b:60:1c:75:d3:5f:0b:a7:d5:63:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a Validity Not Before: Dec 29 07:01:27 2025 GMT Not After : Dec 30 07:01:27 2025 GMT Subject: CN=add7363127a9f0c9122eb4355d31b57d94a558bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:be:55:5f:dd:85:99:7d:3c:94:29:f3:ef:0c: ba:89:3a:47:43:31:e3:07:a4:e9:29:33:cf:85:35: f9:52:48:79:db:c8:a1:d3:0e:03:25:c6:16:0b:63: 03:3e:1b:90:57:bb:a5:e3:87:8f:47:84:51:e1:04: 7d:7a:b8:61:05:0a:d8:2e:c2:6e:95:a5:c8:bd:62: 54:b0:e8:26:dd:f7:88:49:ad:57:76:5d:32:9c:02: 5e:e4:2f:06:f9:6b:12:5f:b0:29:77:c6:50:69:3c: ad:b0:1c:10:57:9a:55:dd:59:3d:89:92:b8:d8:6c: 3e:37:86:2c:4c:ad:07:68:b5:58:20:b3:66:e3:9f: 87:ed:4c:6b:3c:21:33:2a:e3:15:c4:28:af:e4:b2: f8:6a:31:4c:c7:31:ca:70:11:b4:8c:35:b1:18:66: f5:c3:f2:39:60:a3:26:fc:4f:83:80:9c:e6:f6:85: 87:67:1a:b1:91:32:56:ea:93:15:f0:cc:2e:f0:88: ed:2b:2a:b9:26:3e:d8:b8:e6:50:8a:e9:14:db:06: 68:63:9c:1f:76:8f:05:18:f6:1d:96:d2:74:44:52: 86:e4:19:67:8c:93:5e:07:9b:d1:07:95:2a:d5:61: 33:82:17:3e:b1:c6:6b:2b:c6:17:ad:31:ad:f8:7b: 77:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:36:31:27:A9:F0:C9:12:2E:B4:35:5D:31:B5:7D:94:A5:58:BD X509v3 Authority Key Identifier: keyid:87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:19:e3:0a:92:2b:42:ed:97:9d:58:bf:87:af:22:1a:4c:aa: 24:1e:e9:35:74:77:37:6f:4f:db:99:84:4b:0b:f1:66:73:a9: 5f:25:73:11:e8:a2:db:dc:62:02:c9:fa:e8:27:68:67:89:29: a3:31:50:24:01:81:08:45:8c:66:5d:c3:9d:a9:1f:34:90:fa: 08:c7:dd:54:80:ee:0f:46:ac:7f:bb:ed:47:c0:cf:63:eb:f9: ad:2d:1e:20:04:a9:9e:14:38:ed:7a:b2:52:78:ed:ba:1a:bb: c8:34:c3:1d:6b:29:ac:da:13:76:12:47:5e:b0:77:6e:70:02: 32:17:2c:bb:08:32:4a:21:9d:0f:74:7e:9e:68:47:e8:5d:e6: 0b:1f:bf:e6:88:1e:35:a4:a0:0c:fd:c5:37:ef:c0:1e:2f:57: 39:e4:65:13:8b:71:56:fc:6c:91:06:1f:31:a3:73:6b:93:88: 07:d3:36:3d:ab:0a:cd:08:f9:b7:26:39:d3:28:86:2b:ab:fa: c9:8a:4d:b2:90:d0:87:7a:c9:43:ee:60:09:28:df:f2:43:f3: d7:3e:5c:b6:47:68:66:da:8f:6a:ca:63:54:28:14:6e:f6:9a: 09:3e:2c:e2:c0:95:8c:02:ad:8b:11:89:c1:e3:25:ae:98:57: 75:53:ed:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6XCl62tgHHXTXwun1WMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZGE5NjU3YWQxZmRmOThkZTczOGJiMTlhNzNlZmQwZGIw YjNhMmEwHhcNMjUxMjI5MDcwMTI3WhcNMjUxMjMwMDcwMTI3WjAzMTEwLwYDVQQD EyhhZGQ3MzYzMTI3YTlmMGM5MTIyZWI0MzU1ZDMxYjU3ZDk0YTU1OGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9r5VX92FmX08lCnz7wy6iTpHQzHj B6TpKTPPhTX5Ukh528ih0w4DJcYWC2MDPhuQV7ul44ePR4RR4QR9erhhBQrYLsJu laXIvWJUsOgm3feISa1Xdl0ynAJe5C8G+WsSX7Apd8ZQaTytsBwQV5pV3Vk9iZK4 2Gw+N4YsTK0HaLVYILNm45+H7UxrPCEzKuMVxCiv5LL4ajFMxzHKcBG0jDWxGGb1 w/I5YKMm/E+DgJzm9oWHZxqxkTJW6pMV8Mwu8IjtKyq5Jj7YuOZQiukU2wZoY5wf do8FGPYdltJ0RFKG5BlnjJNeB5vRB5Uq1WEzghc+scZrK8YXrTGt+Ht3VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3XNjEnqfDJEi60NV0xtX2UpVi9MB8GA1UdIwQY MBaAFIfalletH9+Y3nOLsZpz79DbCzoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDlxV1Y2MGYzNWplYzR1eG1uUHYwTnNMT2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iYmVlNWUtZGRiZC00Yjg1LWI0Y2Et MmFlNDQwYTVjY2IwLzEvaDlxV1Y2MGYzNWplYzR1eG1uUHYwTnNMT2lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iYmVlNWUtZGRiZC00Yjg1LWI0Y2EtMmFlNDQwYTVjY2Iw LzEvaDlxV1Y2MGYzNWplYzR1eG1uUHYwTnNMT2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshnjCpIr Qu2XnVi/h68iGkyqJB7pNXR3N29P25mESwvxZnOpXyVzEeii29xiAsn66CdoZ4kp ozFQJAGBCEWMZl3DnakfNJD6CMfdVIDuD0asf7vtR8DPY+v5rS0eIASpnhQ47Xqy Unjtuhq7yDTDHWsprNoTdhJHXrB3bnACMhcsuwgySiGdD3R+nmhH6F3mCx+/5oge NaSgDP3FN+/AHi9XOeRlE4txVvxskQYfMaNza5OIB9M2PasKzQj5tyY50yiGK6v6 yYpNspDQh3rJQ+5gCSjf8kPz1z5ctkdoZtqPaspjVCgUbvaaCT4s4sCVjAKtixGJ weMlrphXdVPtig== -----END CERTIFICATE-----Generated at Mon Dec 29 08:48:32 2025 by rpki-client