This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json) Hash identifier: +m40xcD/Mw/1YkE6ugsxmI3kewf3L1MpvVauTDuMXVw= Subject key identifier: 66:63:4B:CA:21:A3:06:AC:FD:D1:4F:43:8D:BC:63:AF:8F:1D:28:A3 Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34 Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34 Certificate serial: 019B3A8FB563DB0ACBE2CF115EE5568CD150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft Manifest number: 0E7B Signing time: Sat 20 Dec 2025 07:00:55 +0000 Manifest this update: Sat 20 Dec 2025 07:00:55 +0000 Manifest next update: Sun 21 Dec 2025 07:00:55 +0000 Files and hashes: 1: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: XPGCZCB42xUvKePxq/uLeK3EY5Jx12bj637hBvwVoKo=) 2: hrRjboaEddMTvU1wn6u0WdMEQ5k.roa (hash: R2w89TKLu5CTfHL7zBMhtJ8zldIghHv3KwB06EytEuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:b5:63:db:0a:cb:e2:cf:11:5e:e5:56:8c:d1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34 Validity Not Before: Dec 20 07:00:55 2025 GMT Not After : Dec 21 07:00:55 2025 GMT Subject: CN=66634bca21a306acfdd14f438dbc63af8f1d28a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:28:7c:e4:ec:74:8f:1c:84:98:4f:ff:74: cb:d7:4f:f1:14:dc:d4:1b:32:4c:8f:70:ba:06:2c: 99:b7:1d:f3:0d:f0:32:32:53:6f:81:24:b4:5c:36: cf:23:28:2c:2c:95:15:48:8e:5a:9c:8e:30:f3:18: 39:53:f3:9e:e6:28:00:14:e3:3c:de:a9:a7:91:d0: 94:5a:56:21:4a:88:69:f8:ef:ab:2b:31:22:99:38: e1:bf:91:83:bb:7f:4c:53:0c:cc:2c:fb:89:6e:8a: 55:de:7d:ad:55:66:11:4e:1a:d6:5b:4d:a3:d4:ac: ca:5b:0c:c8:5e:03:e5:f5:aa:8a:f6:23:05:b4:69: 4b:0d:fb:e0:3a:13:59:46:18:30:53:cc:85:b2:e2: fb:49:0a:be:b9:ad:c5:07:a5:76:33:f5:aa:a0:e4: 8a:de:29:30:58:5a:13:22:55:de:ec:8b:32:ee:59: 26:6b:91:28:cb:91:4f:4d:19:f2:a7:3b:fc:df:c5: 2a:3d:06:cf:21:05:70:d7:ba:7e:b4:a6:9e:e2:40: 9d:2a:a2:1f:12:88:99:57:4f:94:28:41:9c:dc:7c: a1:12:91:f9:59:86:da:60:9f:0e:2e:60:5d:ab:40: b0:af:e5:cf:92:f2:54:15:cd:03:32:64:74:e7:93: 93:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:63:4B:CA:21:A3:06:AC:FD:D1:4F:43:8D:BC:63:AF:8F:1D:28:A3 X509v3 Authority Key Identifier: keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b3:85:d3:ce:1b:86:ab:ad:4d:b2:f2:06:c1:52:bf:60:2a: b5:1e:aa:fc:45:7b:77:91:65:26:db:e4:e8:82:7a:6e:54:b1: ea:90:4f:e1:64:d4:51:78:06:6a:04:37:dd:99:d9:81:00:ed: ac:ac:70:3c:02:bd:5d:3e:ce:00:38:5a:82:c7:5d:84:5b:ef: 3a:f5:ed:14:a9:40:6c:ea:08:7e:9b:4d:dd:55:df:e7:bc:40: bc:88:f6:93:52:d4:af:29:96:c4:3a:04:7d:29:64:16:ee:23: 22:c7:d2:4a:0c:3e:d0:b8:a5:4d:b6:d1:83:8b:47:27:c9:f5: 60:9e:72:92:86:36:79:29:d1:f2:fb:67:02:64:66:75:43:06: 4d:5c:d4:5f:41:d2:c7:04:1d:25:19:02:b6:48:0e:9a:36:f3: ba:65:95:a4:fe:07:50:0c:bb:bf:50:ff:14:2c:1d:8d:e6:9c: 1b:ac:c2:b5:0e:8b:fd:34:81:8a:aa:2a:93:5f:0f:c6:31:36: de:c3:50:a6:dd:79:29:84:cd:f9:05:c5:9f:cd:d7:f5:41:9b: e4:83:9c:52:90:57:68:d3:fd:9b:fa:97:88:ee:60:9e:4e:dd: 4d:3d:9b:7b:74:7b:cd:ad:6f:45:bc:d5:fe:16:df:c9:fc:88: 7f:b1:fa:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j7Vj2wrL4s8RXuVWjNFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdi Y2VmMzQwHhcNMjUxMjIwMDcwMDU1WhcNMjUxMjIxMDcwMDU1WjAzMTEwLwYDVQQD Eyg2NjYzNGJjYTIxYTMwNmFjZmRkMTRmNDM4ZGJjNjNhZjhmMWQyOGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxUofOTsdI8chJhP/3TL10/xFNzU GzJMj3C6BiyZtx3zDfAyMlNvgSS0XDbPIygsLJUVSI5anI4w8xg5U/Oe5igAFOM8 3qmnkdCUWlYhSohp+O+rKzEimTjhv5GDu39MUwzMLPuJbopV3n2tVWYRThrWW02j 1KzKWwzIXgPl9aqK9iMFtGlLDfvgOhNZRhgwU8yFsuL7SQq+ua3FB6V2M/WqoOSK 3ikwWFoTIlXe7Isy7lkma5Eoy5FPTRnypzv838UqPQbPIQVw17p+tKae4kCdKqIf EoiZV0+UKEGc3HyhEpH5WYbaYJ8OLmBdq0Cwr+XPkvJUFc0DMmR055OT4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZjS8ohowas/dFPQ428Y6+PHSijMB8GA1UdIwQY MBaAFIe5duKquSMkjugO5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMt ZTFiOGZmMjVmNjBiLzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBi LzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrOF084b hqutTbLyBsFSv2AqtR6q/EV7d5FlJtvk6IJ6blSx6pBP4WTUUXgGagQ33ZnZgQDt rKxwPAK9XT7OADhagsddhFvvOvXtFKlAbOoIfptN3VXf57xAvIj2k1LUrymWxDoE fSlkFu4jIsfSSgw+0LilTbbRg4tHJ8n1YJ5ykoY2eSnR8vtnAmRmdUMGTVzUX0HS xwQdJRkCtkgOmjbzumWVpP4HUAy7v1D/FCwdjeacG6zCtQ6L/TSBiqoqk18PxjE2 3sNQpt15KYTN+QXFn83X9UGb5IOcUpBXaNP9m/qXiO5gnk7dTT2be3R7za1vRbzV /hbfyfyIf7H6BQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:03:26 2025 by rpki-client