This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft File: h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft (raw, json) Hash identifier: MKjfD8cxS10j5ht84/efE+sf5/Az9loTraK44TLHays= Subject key identifier: BA:8F:8A:58:91:13:BB:81:8D:84:FF:6A:85:B7:F9:9C:70:EF:86:7A Authority key identifier: 87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE Certificate issuer: /CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce Certificate serial: 019B451396D636BE59C998E4AA8E583FCA8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft Manifest number: 14AF Signing time: Mon 22 Dec 2025 08:01:10 +0000 Manifest this update: Mon 22 Dec 2025 08:01:10 +0000 Manifest next update: Tue 23 Dec 2025 08:01:10 +0000 Files and hashes: 1: TBNCAmXPiITjG3rsN7mx1xrR_KY.roa (hash: iXvzmMuxsBGvkR+ftL5TgUS2Lpzgxj9Gu947ZjpDrMU=) 2: h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl (hash: yFGVvKspY5ZLlMlGW7A0klAeYaXA0Nm/9ArcxuP9v8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:96:d6:36:be:59:c9:98:e4:aa:8e:58:3f:ca:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce Validity Not Before: Dec 22 08:01:10 2025 GMT Not After : Dec 23 08:01:10 2025 GMT Subject: CN=ba8f8a589113bb818d84ff6a85b7f99c70ef867a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:77:a3:d5:73:54:a8:33:1b:0b:b7:af:e0: e4:e9:c5:54:8d:d4:f2:15:71:ee:6c:a1:fe:cc:b2: 36:22:5a:60:c9:cb:86:70:f2:85:b9:4d:37:69:be: ad:34:06:c8:b3:3d:2b:7c:35:a8:80:b0:01:0b:37: 79:b2:fe:61:1c:39:d2:d1:24:8d:57:01:71:d1:48: 9c:0e:f0:ec:2f:16:5e:c0:c5:3f:20:a5:b3:0e:0b: b1:70:b4:00:5d:d0:f7:5e:99:e7:2c:21:9f:e8:1a: 1a:f1:4d:4f:ae:bb:b0:e2:e1:71:84:91:83:b9:77: 10:91:55:9c:6b:fe:1a:9f:3b:a4:30:f7:53:8d:04: 68:08:72:37:0f:ca:90:e6:50:1f:ef:5f:e5:cc:93: a0:68:69:32:c8:4e:7b:c2:4f:23:2a:f8:ea:ba:c1: 9d:0f:56:21:a4:e6:7f:3d:ae:03:d6:82:c5:fe:6c: 0c:c3:20:b3:5d:4a:ae:da:eb:9c:6f:41:e7:e9:51: c9:b2:a0:63:e9:e5:c8:25:6b:67:39:8a:41:92:c3: 76:6e:34:43:fb:f1:35:05:74:a3:f3:30:25:f1:e0: 6e:5a:31:7d:18:a0:cd:a1:bd:03:63:93:64:5a:44: 6a:73:6b:3e:01:f0:8e:5d:fe:c8:34:46:1c:a4:e3: de:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8F:8A:58:91:13:BB:81:8D:84:FF:6A:85:B7:F9:9C:70:EF:86:7A X509v3 Authority Key Identifier: keyid:87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:a6:42:69:34:ce:d6:7a:64:84:ab:5c:99:0f:ae:67:00:d0: ec:f0:c1:0a:31:d5:10:db:12:aa:4b:0b:35:e6:70:1e:d5:42: 46:03:dd:93:5e:1d:4a:cc:e9:15:73:e0:c7:b2:1e:84:7d:60: 96:ab:33:0a:67:fb:0c:3b:70:6e:73:3c:f4:fb:6c:3f:34:9a: 78:7b:5b:11:84:1c:5a:8d:61:4c:65:df:ef:61:51:2f:39:d9: 1d:a0:53:5d:94:4e:4b:c4:83:0f:ac:a4:b2:1c:1c:dc:a3:9b: 38:7e:de:ea:9d:de:26:de:d0:20:10:30:3c:d2:4f:e3:66:46: a5:55:66:a1:c8:52:de:91:bc:54:5f:ab:5c:c2:1a:98:4d:c3: 46:e3:e7:e0:d4:69:46:6c:fb:60:ce:70:62:75:a6:2d:d4:74: c9:98:b6:40:5b:a3:a9:e8:cd:d7:50:cd:86:1b:c6:f6:1d:64: 78:25:6b:2c:a7:39:c9:ce:1e:c0:d6:31:27:70:d2:38:c2:53: bd:9a:f0:c9:5c:39:32:44:f5:aa:56:67:00:fc:9d:f4:5a:5b: 04:fa:7c:cd:51:25:c9:48:31:5d:7d:0b:42:19:f5:0d:b7:ec: 46:24:de:32:b8:f2:7e:e5:ab:3e:78:15:79:3b:f5:3f:42:16: 2c:6f:71:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE5bWNr5ZyZjkqo5YP8qNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGZjMGZiYTFiODM2YzIzZmY2ZGY0NjhjOGFiZjdkM2E4 MjE2Y2UwHhcNMjUxMjIyMDgwMTEwWhcNMjUxMjIzMDgwMTEwWjAzMTEwLwYDVQQD EyhiYThmOGE1ODkxMTNiYjgxOGQ4NGZmNmE4NWI3Zjk5YzcwZWY4NjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1l3o9VzVKgzGwu3r+Dk6cVUjdTy FXHubKH+zLI2IlpgycuGcPKFuU03ab6tNAbIsz0rfDWogLABCzd5sv5hHDnS0SSN VwFx0UicDvDsLxZewMU/IKWzDguxcLQAXdD3XpnnLCGf6Boa8U1Prruw4uFxhJGD uXcQkVWca/4anzukMPdTjQRoCHI3D8qQ5lAf71/lzJOgaGkyyE57wk8jKvjqusGd D1YhpOZ/Pa4D1oLF/mwMwyCzXUqu2uucb0Hn6VHJsqBj6eXIJWtnOYpBksN2bjRD +/E1BXSj8zAl8eBuWjF9GKDNob0DY5NkWkRqc2s+AfCOXf7INEYcpOPeoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqPiliRE7uBjYT/aoW3+Zxw74Z6MB8GA1UdIwQY MBaAFIdPwPuhuDbCP/bfRoyKv306ghbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDBfQS02RzROc0lfOXQ5R2pJcV9mVHFDRnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMTVjZjctNDIyZC00YThhLThmNGMt MmQ1NGU1ODJiNWUwLzEvaDBfQS02RzROc0lfOXQ5R2pJcV9mVHFDRnM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jMTVjZjctNDIyZC00YThhLThmNGMtMmQ1NGU1ODJiNWUw LzEvaDBfQS02RzROc0lfOXQ5R2pJcV9mVHFDRnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqZCaTTO 1npkhKtcmQ+uZwDQ7PDBCjHVENsSqksLNeZwHtVCRgPdk14dSszpFXPgx7IehH1g lqszCmf7DDtwbnM89PtsPzSaeHtbEYQcWo1hTGXf72FRLznZHaBTXZROS8SDD6yk shwc3KObOH7e6p3eJt7QIBAwPNJP42ZGpVVmochS3pG8VF+rXMIamE3DRuPn4NRp Rmz7YM5wYnWmLdR0yZi2QFujqejN11DNhhvG9h1keCVrLKc5yc4ewNYxJ3DSOMJT vZrwyVw5MkT1qlZnAPyd9FpbBPp8zVElyUgxXX0LQhn1DbfsRiTeMrjyfuWrPngV eTv1P0IWLG9xxQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:03:57 2025 by rpki-client