This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json) Hash identifier: SEN+p4Dg/deRUy3a5n6mhZA5cwIX/jh8jTxAnjb/xL4= Subject key identifier: F0:3C:FB:B7:66:75:DB:5A:E0:47:68:07:DB:07:F5:49:07:9C:0C:B4 Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b Certificate serial: 019B3E6D957B418EB7B374D4B2DF649D7665 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft Manifest number: 060D Signing time: Sun 21 Dec 2025 01:02:07 +0000 Manifest this update: Sun 21 Dec 2025 01:02:07 +0000 Manifest next update: Mon 22 Dec 2025 01:02:07 +0000 Files and hashes: 1: SalDxwYnKzervGIcZp186xtzhug.roa (hash: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=) 2: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: MT0a8+3Od441WEpE9ihPA/49FZUWBolsEdCjaTjZmfw=) 3: vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (hash: UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:95:7b:41:8e:b7:b3:74:d4:b2:df:64:9d:76:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b Validity Not Before: Dec 21 01:02:07 2025 GMT Not After : Dec 22 01:02:07 2025 GMT Subject: CN=f03cfbb76675db5ae0476807db07f549079c0cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:a0:7e:9e:c7:9c:ab:0d:c9:0f:b2:4e:58: 82:82:6e:af:05:32:19:29:11:56:b9:de:9e:ab:ce: 73:6e:eb:c0:4f:0b:46:9a:75:c6:ea:4b:7f:cb:aa: 98:fa:db:d6:03:af:c1:8d:52:51:c3:53:ec:d9:54: 80:82:7b:1e:3a:f9:c9:12:5e:04:06:46:50:96:1a: 8d:5a:28:e0:00:e8:f6:35:e0:e2:9f:96:9c:f2:1f: 8b:26:ba:e8:ee:e4:91:51:39:30:77:de:a1:0a:d1: 93:ac:61:1d:a1:c5:0a:15:57:56:00:6d:f7:28:f7: 4b:19:df:94:a7:9e:99:86:af:d3:89:01:92:86:9d: 5d:b5:75:76:40:b4:2e:6c:18:1e:1e:87:a1:cd:9f: a6:49:bc:5d:01:78:86:39:74:b3:7c:60:1e:82:80: cb:ca:68:f2:e5:bc:fb:e2:ae:03:5f:0a:b6:84:32: 6d:b2:d2:fa:48:ec:65:cf:33:fd:c1:51:be:5c:1b: e5:ba:0b:10:74:1f:e4:37:e7:27:76:a5:c2:b4:f7: 0f:22:aa:a8:34:5b:75:bf:9a:a7:06:fc:fb:a9:24: 6e:22:74:7e:7d:d6:35:55:7a:b7:54:0b:35:15:75: e2:8a:63:f3:27:8e:42:6a:25:9f:50:3f:e8:a6:89: ec:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3C:FB:B7:66:75:DB:5A:E0:47:68:07:DB:07:F5:49:07:9C:0C:B4 X509v3 Authority Key Identifier: keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:cc:1e:da:10:a9:14:e3:c3:28:d2:d0:e4:6c:97:37:65:54: db:27:69:93:8c:06:3b:f8:0b:72:89:a6:65:8a:4f:a5:bd:bb: 8e:6d:fb:11:0a:e9:02:24:6d:f8:93:1a:6c:56:85:17:c9:29: 3b:69:d5:1c:60:a9:01:24:62:b3:bf:16:b1:39:2a:13:48:95: 00:ae:1e:4c:73:e5:07:46:4e:ef:94:f8:d5:d6:9a:2f:07:c7: 99:74:a7:0d:f8:75:e7:0b:cf:d6:9a:a1:94:43:ba:52:4a:de: 6b:b5:20:d9:0b:87:41:35:a2:fd:9f:6c:f2:df:66:ca:df:16: 72:b8:3c:d6:e7:0a:94:f5:9b:90:3e:ef:ff:7b:fe:6a:a5:ef: 8b:e6:c2:d4:9f:c7:23:20:17:f8:06:d7:5d:ac:4c:60:d5:74: 36:ba:bb:4f:b4:45:4f:20:4a:38:b4:f1:72:56:39:90:bd:4c: 4e:84:34:61:c1:46:b2:a2:47:25:6e:a0:3d:00:1d:2d:c0:0e: f1:a1:e0:ca:76:ed:0b:a7:f7:d6:57:b0:4c:04:6f:f2:4b:e7: cc:af:2d:3c:66:8b:9e:44:43:9c:b6:1d:ce:b2:33:a5:76:28: 72:c5:fd:d6:6b:4a:5a:b9:aa:23:d1:78:9d:9b:40:8d:67:6c: 52:f2:f7:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bZV7QY63s3TUst9knXZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTQzOTVhYzgyMmRmZTAxMTY1MjE2Yzc3ODFmZmQ2MWRi MjhkNWIwHhcNMjUxMjIxMDEwMjA3WhcNMjUxMjIyMDEwMjA3WjAzMTEwLwYDVQQD EyhmMDNjZmJiNzY2NzVkYjVhZTA0NzY4MDdkYjA3ZjU0OTA3OWMwY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM+gfp7HnKsNyQ+yTliCgm6vBTIZ KRFWud6eq85zbuvATwtGmnXG6kt/y6qY+tvWA6/BjVJRw1Ps2VSAgnseOvnJEl4E BkZQlhqNWijgAOj2NeDin5ac8h+LJrro7uSRUTkwd96hCtGTrGEdocUKFVdWAG33 KPdLGd+Up56Zhq/TiQGShp1dtXV2QLQubBgeHoehzZ+mSbxdAXiGOXSzfGAegoDL ymjy5bz74q4DXwq2hDJtstL6SOxlzzP9wVG+XBvlugsQdB/kN+cndqXCtPcPIqqo NFt1v5qnBvz7qSRuInR+fdY1VXq3VAs1FXXiimPzJ45CaiWfUD/oponsRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPA8+7dmddta4EdoB9sH9UkHnAy0MB8GA1UdIwQY MBaAFIeUOVrIIt/gEWUhbHeB/9Ydso1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hMmEzYTQtYWI3NS00OWQ0LWE5NDEt MzUzZjk4MTJiMWRiLzEvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hMmEzYTQtYWI3NS00OWQ0LWE5NDEtMzUzZjk4MTJiMWRi LzEvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcwe2hCp FOPDKNLQ5GyXN2VU2ydpk4wGO/gLcommZYpPpb27jm37EQrpAiRt+JMabFaFF8kp O2nVHGCpASRis78WsTkqE0iVAK4eTHPlB0ZO75T41daaLwfHmXSnDfh15wvP1pqh lEO6Ukrea7Ug2QuHQTWi/Z9s8t9myt8Wcrg81ucKlPWbkD7v/3v+aqXvi+bC1J/H IyAX+AbXXaxMYNV0Nrq7T7RFTyBKOLTxclY5kL1MToQ0YcFGsqJHJW6gPQAdLcAO 8aHgynbtC6f31lewTARv8kvnzK8tPGaLnkRDnLYdzrIzpXYocsX91mtKWrmqI9F4 nZtAjWdsUvL3hg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:40:14 2025 by rpki-client