This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json) Hash identifier: CZB1DnGqV4fYkv8Td0/AnFlIOU9GILh3xHE2fccTKIg= Subject key identifier: 6C:38:7B:01:E5:EA:74:EF:3F:B7:F2:DA:4A:9D:B4:EC:4D:0F:D4:5E Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6 Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6 Certificate serial: 019B43C9F806A532AB4D3EAD4DE963595B37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft Manifest number: 14F4 Signing time: Mon 22 Dec 2025 02:01:08 +0000 Manifest this update: Mon 22 Dec 2025 02:01:08 +0000 Manifest next update: Tue 23 Dec 2025 02:01:08 +0000 Files and hashes: 1: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: V1eCdPZlWRKUYnrnJvauM+e6WPkBbmmGIMCiF5cimm8=) 2: pd4NfQq1m5q0gJRIY8-JV63L0Ug.roa (hash: 2jDsm0ha9EaVCILusmCVnInYpOVbfVEOKEtxwwvPFb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:f8:06:a5:32:ab:4d:3e:ad:4d:e9:63:59:5b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6 Validity Not Before: Dec 22 02:01:08 2025 GMT Not After : Dec 23 02:01:08 2025 GMT Subject: CN=6c387b01e5ea74ef3fb7f2da4a9db4ec4d0fd45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c0:d0:14:27:59:b1:8e:f5:da:d3:b7:6e:74: 45:28:e0:ac:38:26:7c:f8:5c:43:df:da:1d:96:7e: 6e:e3:60:c5:47:34:a8:8d:78:9c:8a:30:18:bd:f9: 67:ee:90:ef:01:1a:8e:89:8a:af:0e:c1:82:47:6c: 31:6f:a9:d1:52:d6:62:0d:b1:07:ec:9d:6d:0a:d1: 10:10:5e:8e:72:ef:3d:50:56:91:1b:b6:41:31:40: 58:de:12:5e:a9:4f:5e:7a:d6:df:e5:b8:59:cf:20: 71:42:00:31:25:05:86:f4:a3:e7:ab:6a:00:9d:5e: 01:e4:f9:60:cf:5a:a2:71:e4:da:e4:b1:51:d8:48: 5a:b5:68:ed:e9:5c:fd:3f:92:d2:25:6c:0c:8a:e5: 7e:6a:17:dc:a7:7b:11:f6:03:da:8c:75:e8:29:68: 60:9f:a5:3b:b6:4e:9a:bd:3c:7c:1c:ce:b0:fd:eb: a3:51:f8:61:4d:cc:67:ee:6b:56:3d:30:63:e9:66: b9:60:66:db:15:df:a3:fb:aa:63:01:36:bc:ca:b1: 7e:1e:fe:e4:88:8e:45:a4:45:17:04:27:d1:14:bc: c4:de:a9:5d:d3:70:b6:96:50:6b:d2:b3:f8:2a:ff: 28:d6:6f:8c:d3:d2:ae:d0:5b:41:bd:2f:d0:f3:f0: 8d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:38:7B:01:E5:EA:74:EF:3F:B7:F2:DA:4A:9D:B4:EC:4D:0F:D4:5E X509v3 Authority Key Identifier: keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:31:93:b3:f4:75:9e:b6:57:b0:dc:83:11:5f:57:bb:f9:6c: d4:3a:5e:c4:19:79:ac:45:53:12:6a:78:a7:90:c8:0e:63:c4: ae:69:04:86:d3:03:e1:d8:9d:ce:2d:a3:c3:4b:3f:29:e5:96: 12:92:cf:ac:ad:bd:4c:98:2e:70:d4:a0:3a:13:35:f9:0d:3e: fb:16:54:d7:43:5a:64:40:6b:55:b8:da:a1:01:79:68:69:10: 86:ee:1f:f5:e2:3e:fd:1c:d5:95:6d:55:63:af:a9:d8:51:ee: 8c:c7:93:05:a7:44:e9:10:fd:12:05:12:9a:8f:b5:23:7f:05: 58:41:03:b3:30:b9:93:03:44:01:5e:8b:13:fe:47:48:ed:cf: 0d:49:f1:c0:e3:d8:3f:bd:de:e4:e9:b9:23:3b:91:8b:be:c0: 58:f2:c5:e1:ef:a0:58:f6:c4:2f:6e:e4:85:03:b0:1c:9a:a5: 94:f0:2f:5e:bf:f7:30:0f:53:f4:04:e5:ec:1d:d8:cd:4b:60: 62:28:07:25:c0:10:a4:ad:8d:de:48:46:93:e3:f8:1f:b6:53: fd:ac:f0:cc:51:f7:46:8d:73:72:7f:33:c0:e5:f3:e9:79:fa: b4:94:e3:c7:ab:97:46:3c:cc:9d:cd:61:5d:99:cd:88:17:50: 40:be:f9:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyfgGpTKrTT6tTeljWVs3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZDdmN2QyZmMxMzQ4OTE0YzAwNmI1NWFiOTNmMmQyZTMz OTBkZTYwHhcNMjUxMjIyMDIwMTA4WhcNMjUxMjIzMDIwMTA4WjAzMTEwLwYDVQQD Eyg2YzM4N2IwMWU1ZWE3NGVmM2ZiN2YyZGE0YTlkYjRlYzRkMGZkNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsDQFCdZsY712tO3bnRFKOCsOCZ8 +FxD39odln5u42DFRzSojXicijAYvfln7pDvARqOiYqvDsGCR2wxb6nRUtZiDbEH 7J1tCtEQEF6Ocu89UFaRG7ZBMUBY3hJeqU9eetbf5bhZzyBxQgAxJQWG9KPnq2oA nV4B5Plgz1qiceTa5LFR2EhatWjt6Vz9P5LSJWwMiuV+ahfcp3sR9gPajHXoKWhg n6U7tk6avTx8HM6w/eujUfhhTcxn7mtWPTBj6Wa5YGbbFd+j+6pjATa8yrF+Hv7k iI5FpEUXBCfRFLzE3qld03C2llBr0rP4Kv8o1m+M09Ku0FtBvS/Q8/CN+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGw4ewHl6nTvP7fy2kqdtOxND9ReMB8GA1UdIwQY MBaAFIfX99L8E0iRTABrVauT8tLjOQ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQt MzAxZGYyNzIxNTJlLzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQtMzAxZGYyNzIxNTJl LzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzGTs/R1 nrZXsNyDEV9Xu/ls1DpexBl5rEVTEmp4p5DIDmPErmkEhtMD4didzi2jw0s/KeWW EpLPrK29TJgucNSgOhM1+Q0++xZU10NaZEBrVbjaoQF5aGkQhu4f9eI+/RzVlW1V Y6+p2FHujMeTBadE6RD9EgUSmo+1I38FWEEDszC5kwNEAV6LE/5HSO3PDUnxwOPY P73e5Om5IzuRi77AWPLF4e+gWPbEL27khQOwHJqllPAvXr/3MA9T9ATl7B3YzUtg YigHJcAQpK2N3khGk+P4H7ZT/azwzFH3Ro1zcn8zwOXz6Xn6tJTjx6uXRjzMnc1h XZnNiBdQQL75wg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:44:02 2025 by rpki-client