This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json) Hash identifier: NNFsni8EILG8BAFDNTx+r2wc+fBZ+D3FOnzZG6dvSNA= Subject key identifier: CB:87:D0:D3:83:4E:A8:09:A1:C6:4E:EC:6B:90:AC:6B:09:E8:F6:91 Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21 Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921 Certificate serial: 019B6D69F63F9029045141599064FCC32B6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft Manifest number: 134E Signing time: Tue 30 Dec 2025 04:00:19 +0000 Manifest this update: Tue 30 Dec 2025 04:00:19 +0000 Manifest next update: Wed 31 Dec 2025 04:00:19 +0000 Files and hashes: 1: EqmxfEPR61JZ1PILd4aiLsGlGKg.roa (hash: o+GN8e0CITe+H1MxoXkf/yVp/P7VliN/bKmtLSSdiwk=) 2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: axk9fwWiHUZJ1FVSpiMc84HCifdeHihR10fSLXME+64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:69:f6:3f:90:29:04:51:41:59:90:64:fc:c3:2b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921 Validity Not Before: Dec 30 04:00:19 2025 GMT Not After : Dec 31 04:00:19 2025 GMT Subject: CN=cb87d0d3834ea809a1c64eec6b90ac6b09e8f691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:82:1e:6e:6e:56:a4:bc:90:77:90:aa:8a: cd:03:37:32:96:6f:47:23:ae:8a:9a:3b:fb:d3:e1: 91:7f:09:46:c7:df:49:94:2a:aa:e8:45:5c:c5:65: d8:6c:39:66:a0:c0:70:5c:f5:a4:8a:57:9d:89:03: 64:e9:7e:74:21:55:21:96:fd:6f:a8:d2:cb:e1:e5: e4:70:02:0c:8c:db:42:72:6a:a2:fc:61:df:3f:87: e5:b4:18:e8:81:93:69:fa:db:8f:62:d7:0e:05:8d: ac:04:b1:50:00:ce:ff:fe:52:d0:09:05:2c:c1:95: 75:be:70:2d:f5:61:5d:db:52:b8:75:7e:8a:f0:b4: 7d:01:8f:24:87:7e:42:9d:2c:b3:d2:28:af:00:a0: 17:92:8a:77:22:08:58:1a:6d:f0:dc:76:ea:7f:af: a4:fd:26:8a:41:ac:06:3f:bb:87:35:e1:2a:e4:79: 41:4c:f9:b5:75:4e:b4:45:b2:53:8f:0b:f6:78:4c: 5d:7e:ff:80:bf:e5:1d:59:43:ae:77:8d:01:c7:8f: 40:8e:5c:02:74:52:5f:a1:ba:d6:82:59:0d:62:02: 4c:f0:8b:4a:48:8e:38:ca:8b:cd:a6:d5:7a:1c:c0: 36:97:3b:b8:8b:90:ff:5c:b1:40:20:10:38:91:01: 68:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:87:D0:D3:83:4E:A8:09:A1:C6:4E:EC:6B:90:AC:6B:09:E8:F6:91 X509v3 Authority Key Identifier: keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8c:c1:8d:a4:c5:cf:07:62:05:52:3e:2c:3d:d9:1c:18:dc: 61:dd:97:b9:42:ad:ee:e9:1e:6d:cd:52:b6:22:bd:0b:77:9c: 17:1f:17:88:3f:6c:f7:a6:07:6c:98:8f:60:1d:b3:a6:8d:a8: 0d:01:19:9c:e4:ec:e6:65:7c:a2:c6:ff:3a:fa:4d:03:6d:1e: e5:0f:43:1b:41:93:0c:49:a4:0b:58:44:92:a3:21:4b:c0:d1: 90:18:da:70:97:93:4b:e9:9f:a2:90:75:8e:1a:76:9d:4c:19: 35:3e:bd:7f:b1:3d:fc:ad:88:7e:ed:36:59:8a:c9:66:5d:62: 32:82:13:f3:a5:e8:bb:8e:f4:18:bb:d2:a3:1b:6d:34:cb:7a: a5:9d:52:33:89:65:74:44:e2:d9:82:2e:40:83:2c:e5:67:da: 2f:50:18:48:75:2b:d6:89:8b:6b:5a:bc:b0:c5:c9:c8:94:d8: 2b:c3:5f:8e:1c:d5:70:ce:7c:cc:c8:45:81:58:5b:1e:00:ca: 80:6e:6a:2f:74:16:3b:54:d2:66:82:54:d4:3c:14:58:70:f4: ec:85:77:17:5c:b9:8f:81:82:43:1e:69:c9:8c:62:19:96:57: b0:83:3f:58:41:c9:3b:0d:9d:83:b7:b9:d1:8d:82:4f:7b:4f: ed:ae:02:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttafY/kCkEUUFZkGT8wyttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZjQ1ZTNhNDA2OWQ0ZjVlYmQ1ZjZlNjQyMWQ4ZDNjYWJl MzA5MjEwHhcNMjUxMjMwMDQwMDE5WhcNMjUxMjMxMDQwMDE5WjAzMTEwLwYDVQQD EyhjYjg3ZDBkMzgzNGVhODA5YTFjNjRlZWM2YjkwYWM2YjA5ZThmNjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspGCHm5uVqS8kHeQqorNAzcylm9H I66Kmjv70+GRfwlGx99JlCqq6EVcxWXYbDlmoMBwXPWkilediQNk6X50IVUhlv1v qNLL4eXkcAIMjNtCcmqi/GHfP4fltBjogZNp+tuPYtcOBY2sBLFQAM7//lLQCQUs wZV1vnAt9WFd21K4dX6K8LR9AY8kh35CnSyz0iivAKAXkop3IghYGm3w3Hbqf6+k /SaKQawGP7uHNeEq5HlBTPm1dU60RbJTjwv2eExdfv+Av+UdWUOud40Bx49AjlwC dFJfobrWglkNYgJM8ItKSI44yovNptV6HMA2lzu4i5D/XLFAIBA4kQFo3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuH0NODTqgJocZO7GuQrGsJ6PaRMB8GA1UdIwQY MBaAFIf0XjpAadT169X25kIdjTyr4wkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYt NjMxOWJiMDc5YzQ0LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYtNjMxOWJiMDc5YzQ0 LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYzBjaTF zwdiBVI+LD3ZHBjcYd2XuUKt7ukebc1StiK9C3ecFx8XiD9s96YHbJiPYB2zpo2o DQEZnOTs5mV8osb/OvpNA20e5Q9DG0GTDEmkC1hEkqMhS8DRkBjacJeTS+mfopB1 jhp2nUwZNT69f7E9/K2Ifu02WYrJZl1iMoIT86Xou470GLvSoxttNMt6pZ1SM4ll dETi2YIuQIMs5WfaL1AYSHUr1omLa1q8sMXJyJTYK8NfjhzVcM58zMhFgVhbHgDK gG5qL3QWO1TSZoJU1DwUWHD07IV3F1y5j4GCQx5pyYxiGZZXsIM/WEHJOw2dg7e5 0Y2CT3tP7a4CKQ== -----END CERTIFICATE-----Generated at Tue Dec 30 08:49:42 2025 by rpki-client