This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: nD233fPR5kU50zAex3PDNBkmvb/ECTAH4aburGzMgkY= Subject key identifier: 2F:D2:53:31:95:48:16:CF:53:6E:C4:DD:E6:30:09:CE:B1:D4:A1:73 Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 019B390F50E9D2DBC100E372D17024E5980E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 1416 Signing time: Sat 20 Dec 2025 00:01:03 +0000 Manifest this update: Sat 20 Dec 2025 00:01:03 +0000 Manifest next update: Sun 21 Dec 2025 00:01:03 +0000 Files and hashes: 1: 58EBygRjdS7517jE8ijFSPfVOH4.roa (hash: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=) 2: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (hash: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=) 3: CjTW9-CUmuY1lxZ8OqndS2FXSrY.roa (hash: 9DQ0LnRbHYpMYq+dl7Z0Jfv0Jx2DrmotGXluT5sxbiI=) 4: UYD_ol6L79u8glgaI6wKUZit3aI.roa (hash: Gf9BtC+mpY9FQr0OFj9WV8BSFzyS8ChMq/mXIibBTC4=) 5: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (hash: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=) 6: cgfWhp9nnNlIFwxwBmM9ufcXLT8.roa (hash: d9o/0tEnmxkRdMrExtvCAvZnhgV08vpjue2h9xSnd5M=) 7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: ZbIbnHleGh05cf0SgZKEYi0kZ9dwxgGB274QWdr8QvE=) 8: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (hash: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=) 9: l73XbGk7c4j4MjyLCnCZ2AhSa5g.roa (hash: zN4KADzvP9RDaA1coLbTnlm7K8otMtISf3HRhyFdP4I=) 10: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (hash: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:50:e9:d2:db:c1:00:e3:72:d1:70:24:e5:98:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Dec 20 00:01:03 2025 GMT Not After : Dec 21 00:01:03 2025 GMT Subject: CN=2fd25331954816cf536ec4dde63009ceb1d4a173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:40:1b:34:0d:31:ae:42:c9:05:1e:66:48:12: 2d:c5:8d:56:55:7f:29:cc:0c:35:b3:10:3b:34:17: a3:87:61:ba:a4:cc:38:c4:8a:a4:0b:02:88:e6:61: a5:8c:0c:e9:d7:1d:31:74:ba:50:95:21:b6:ae:cf: fa:e7:52:fa:6b:90:94:fe:fe:74:d0:77:bc:31:17: a2:e1:08:98:5d:14:dc:19:95:57:ac:45:76:fc:a4: 94:e9:5d:3c:74:64:8f:ea:c2:3a:66:6c:1d:04:a3: fe:9a:d3:88:ce:0d:fd:ce:c4:ed:c8:5f:2e:d7:44: aa:79:f4:e4:97:95:b9:65:8e:e8:69:ba:11:2a:fd: d2:ae:db:e7:fb:f9:f9:8e:78:f2:40:6c:75:9c:36: 82:4c:a6:11:94:d2:8c:9e:09:7a:56:ec:7b:6a:8c: 0c:3b:04:2a:25:f9:fb:ef:b2:fc:bb:29:ef:55:38: 4d:cc:15:81:a3:27:16:16:28:e3:10:19:08:f7:d9: 62:6e:80:57:7d:c6:84:a3:30:12:b8:1b:40:f7:51: b6:10:32:d7:58:13:cc:43:06:51:85:71:c1:e7:7f: 81:bb:be:28:b5:09:64:e9:01:6b:75:7a:d5:0a:1c: 40:83:af:bd:1d:ca:91:a7:e2:f3:dd:32:4e:83:03: 8d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D2:53:31:95:48:16:CF:53:6E:C4:DD:E6:30:09:CE:B1:D4:A1:73 X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b7:a2:b5:38:90:f0:ef:61:60:21:96:2b:16:45:c0:cd:51: 21:98:9d:d9:8d:ad:00:9b:99:d8:0c:f6:ca:ab:b1:4d:44:10: d6:81:4c:02:07:ad:1d:59:9b:12:8c:90:e4:7d:ee:13:dd:e4: 1f:57:1b:1d:c0:66:55:55:ea:02:b7:cf:98:ac:67:df:31:05: ae:5c:d4:0f:1a:7e:f8:f3:91:27:9a:42:b0:2b:47:c3:5e:c7: a1:1c:83:a2:5a:e2:8f:30:ea:42:05:c7:ef:53:4e:02:c9:66: 2f:a9:44:97:34:23:35:b5:fc:c9:7a:66:36:c3:0d:36:1e:d8: 2e:03:c2:e0:f6:b3:e8:70:6c:3b:e8:a4:e2:bc:ef:f4:28:f8: 63:28:05:f3:02:02:25:b9:55:fd:6f:e5:c8:d4:57:fe:1d:9a: 5e:c9:85:24:f6:76:b5:52:b2:d4:25:a7:87:c8:81:d2:87:a1: 88:59:28:89:e9:14:74:37:a0:bf:b7:03:13:8e:f3:d0:0f:0e: 06:36:b2:bb:8b:4f:91:aa:9a:29:0b:21:f2:b6:ec:91:f0:09: 6c:95:b1:f1:4c:d6:43:6c:f2:bd:71:11:49:99:3d:8a:97:0c: 4c:69:d9:f4:13:3d:3d:3b:8c:66:12:5f:b6:e4:ea:52:35:d3: 2d:df:a2:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D1Dp0tvBAONy0XAk5ZgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjUxMjIwMDAwMTAzWhcNMjUxMjIxMDAwMTAzWjAzMTEwLwYDVQQD EygyZmQyNTMzMTk1NDgxNmNmNTM2ZWM0ZGRlNjMwMDljZWIxZDRhMTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkAbNA0xrkLJBR5mSBItxY1WVX8p zAw1sxA7NBejh2G6pMw4xIqkCwKI5mGljAzp1x0xdLpQlSG2rs/651L6a5CU/v50 0He8MRei4QiYXRTcGZVXrEV2/KSU6V08dGSP6sI6ZmwdBKP+mtOIzg39zsTtyF8u 10SqefTkl5W5ZY7oaboRKv3Srtvn+/n5jnjyQGx1nDaCTKYRlNKMngl6Vux7aowM OwQqJfn777L8uynvVThNzBWBoycWFijjEBkI99liboBXfcaEozASuBtA91G2EDLX WBPMQwZRhXHB53+Bu74otQlk6QFrdXrVChxAg6+9HcqRp+Lz3TJOgwON+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/SUzGVSBbPU27E3eYwCc6x1KFzMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7eitTiQ 8O9hYCGWKxZFwM1RIZid2Y2tAJuZ2Az2yquxTUQQ1oFMAgetHVmbEoyQ5H3uE93k H1cbHcBmVVXqArfPmKxn3zEFrlzUDxp++PORJ5pCsCtHw17HoRyDolrijzDqQgXH 71NOAslmL6lElzQjNbX8yXpmNsMNNh7YLgPC4Paz6HBsO+ik4rzv9Cj4YygF8wIC JblV/W/lyNRX/h2aXsmFJPZ2tVKy1CWnh8iB0oehiFkoiekUdDegv7cDE47z0A8O Bjayu4tPkaqaKQsh8rbskfAJbJWx8UzWQ2zyvXERSZk9ipcMTGnZ9BM9PTuMZhJf tuTqUjXTLd+iTA== -----END CERTIFICATE-----Generated at Sat Dec 20 05:01:23 2025 by rpki-client