This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json) Hash identifier: sE3UchNg3QMDfXLE1oCsQtFKJg81bXygn9XJiRH49Jc= Subject key identifier: A5:CA:AC:0F:1E:25:70:20:C4:98:41:F3:0A:F6:BA:CF:8C:2E:B3:A9 Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34 Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34 Certificate serial: 019B7480BAA8C549CC31F0ED9E6EC507E8CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft Manifest number: 0E99 Signing time: Wed 31 Dec 2025 13:02:31 +0000 Manifest this update: Wed 31 Dec 2025 13:02:31 +0000 Manifest next update: Thu 01 Jan 2026 13:02:31 +0000 Files and hashes: 1: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: +kppfJCN30+PPM8uGd2FxmDBwkc38OHwpokn86LUVdw=) 2: hrRjboaEddMTvU1wn6u0WdMEQ5k.roa (hash: R2w89TKLu5CTfHL7zBMhtJ8zldIghHv3KwB06EytEuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:80:ba:a8:c5:49:cc:31:f0:ed:9e:6e:c5:07:e8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34 Validity Not Before: Dec 31 13:02:31 2025 GMT Not After : Jan 1 13:02:31 2026 GMT Subject: CN=a5caac0f1e257020c49841f30af6bacf8c2eb3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a0:ea:50:cb:5a:b3:1a:07:33:13:2a:77:9a: fd:e0:69:5e:15:bc:3a:a4:cf:d3:c0:7e:8b:cc:c3: 63:b4:d7:1f:be:de:10:e9:91:f0:ef:0a:01:83:40: 9c:7c:0c:e6:cf:7d:f6:74:31:cc:ba:68:5d:48:93: 95:e4:73:0d:0c:77:d0:92:5b:8c:90:a3:3f:41:b5: 09:00:c2:d0:42:29:54:47:6e:6d:35:32:56:e1:10: c5:1d:e3:f8:d2:04:cb:0a:a8:eb:c3:ee:fb:aa:d8: 66:db:b2:b1:07:5a:b4:2f:85:3b:9f:7c:ed:7e:04: de:49:0f:4c:f6:45:3f:16:99:ad:36:af:6a:49:98: 23:fe:5a:8e:ca:b3:f5:b7:8d:e7:b4:09:9c:d4:d3: e6:8e:64:16:50:29:d6:3a:0a:ef:a8:1e:03:d7:bc: e0:cb:13:c9:cc:01:4d:8e:9f:a6:c5:a4:a4:3f:cd: ab:14:2d:5a:56:b8:4e:19:08:1c:2c:a6:55:6e:51: 21:cf:26:56:e2:84:7c:a2:ac:36:83:35:d9:fb:1f: d7:b2:f4:4b:76:27:85:81:ed:be:5c:04:46:36:49: b3:5c:fc:9f:fb:6c:23:88:45:f4:da:d6:87:ef:30: b6:3d:da:9f:78:16:35:f5:9c:d1:1c:6b:cc:40:00: 3e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CA:AC:0F:1E:25:70:20:C4:98:41:F3:0A:F6:BA:CF:8C:2E:B3:A9 X509v3 Authority Key Identifier: keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ce:41:2a:00:08:13:31:ef:66:fe:b5:83:e2:58:7e:31:55: 90:8a:72:97:36:03:73:96:02:c3:95:32:37:82:42:db:4f:8d: b7:e3:05:4c:88:6f:f6:48:35:db:40:9c:81:8e:d5:74:f7:a2: 88:ee:7f:ef:38:df:92:d7:13:3d:86:c9:ca:f0:04:dc:6f:72: 0c:1b:70:92:fc:81:1a:cf:a0:9b:62:ae:3e:fc:18:15:d2:4b: cd:96:68:19:c0:d4:21:9b:eb:a5:1d:00:ab:6c:0b:e0:35:d5: ff:c2:70:5e:98:9e:73:07:40:ba:94:40:76:49:e2:2b:98:96: ba:91:76:9f:ae:08:c4:42:91:76:03:5a:80:f4:96:31:18:7d: 6d:8f:8c:6f:3d:e4:15:f9:b2:99:ff:4a:a0:92:21:6c:7d:c1: 69:47:04:df:16:f2:4e:ee:59:35:06:87:9a:29:0d:e0:80:9a: 6a:db:8f:3a:f7:26:79:c2:40:78:48:8c:fd:73:26:5a:bd:3a: a2:3a:90:8d:4e:57:e6:14:2a:08:74:dd:13:60:36:fc:29:24: be:04:be:d7:df:56:12:49:2d:6f:b4:01:58:96:34:0c:ba:ba: ea:c2:ee:48:de:da:b2:0c:67:75:e0:7a:07:a5:12:fe:6e:7b: f1:fb:0a:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0gLqoxUnMMfDtnm7FB+jOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdi Y2VmMzQwHhcNMjUxMjMxMTMwMjMxWhcNMjYwMTAxMTMwMjMxWjAzMTEwLwYDVQQD EyhhNWNhYWMwZjFlMjU3MDIwYzQ5ODQxZjMwYWY2YmFjZjhjMmViM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KDqUMtasxoHMxMqd5r94GleFbw6 pM/TwH6LzMNjtNcfvt4Q6ZHw7woBg0CcfAzmz332dDHMumhdSJOV5HMNDHfQkluM kKM/QbUJAMLQQilUR25tNTJW4RDFHeP40gTLCqjrw+77qthm27KxB1q0L4U7n3zt fgTeSQ9M9kU/FpmtNq9qSZgj/lqOyrP1t43ntAmc1NPmjmQWUCnWOgrvqB4D17zg yxPJzAFNjp+mxaSkP82rFC1aVrhOGQgcLKZVblEhzyZW4oR8oqw2gzXZ+x/XsvRL dieFge2+XARGNkmzXPyf+2wjiEX02taH7zC2PdqfeBY19ZzRHGvMQAA+ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXKrA8eJXAgxJhB8wr2us+MLrOpMB8GA1UdIwQY MBaAFIe5duKquSMkjugO5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMt ZTFiOGZmMjVmNjBiLzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBi LzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM5BKgAI EzHvZv61g+JYfjFVkIpylzYDc5YCw5UyN4JC20+Nt+MFTIhv9kg120CcgY7VdPei iO5/7zjfktcTPYbJyvAE3G9yDBtwkvyBGs+gm2KuPvwYFdJLzZZoGcDUIZvrpR0A q2wL4DXV/8JwXpiecwdAupRAdkniK5iWupF2n64IxEKRdgNagPSWMRh9bY+Mbz3k Ffmymf9KoJIhbH3BaUcE3xbyTu5ZNQaHmikN4ICaatuPOvcmecJAeEiM/XMmWr06 ojqQjU5X5hQqCHTdE2A2/CkkvgS+199WEkktb7QBWJY0DLq66sLuSN7asgxndeB6 B6US/m578fsKPw== -----END CERTIFICATE-----Generated at Wed Dec 31 19:34:21 2025 by rpki-client