This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json) Hash identifier: vltWBEbG2mL++jgVeue8eudmpQWskN0Hfq52+Eg/ZLA= Subject key identifier: 17:E9:16:8F:D1:98:53:07:F6:C0:10:AF:10:DA:C4:7B:72:DA:0C:1B Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d Certificate serial: 019B3EDAEDCA868542D5B388B97A18561AA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft Manifest number: 171C Signing time: Sun 21 Dec 2025 03:01:33 +0000 Manifest this update: Sun 21 Dec 2025 03:01:33 +0000 Manifest next update: Mon 22 Dec 2025 03:01:33 +0000 Files and hashes: 1: 1-cISFCJjrOXOH13uOfejSN0t07U.roa (hash: CsZ+l20+WvDp7ZAvLuoQUu3eyz/VH/hBFp+Sltnj4u8=) 2: Cz4X9MPRs8p_ImW4tUel1Ly3B_A.roa (hash: mCOTukj35b5NKqry7uD/1PQ8/wQManDEmCJ3x3rHtng=) 3: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: mW+yMa4Ex76oQIJ+XgIZ4pXdemyOSN9StldctCy9auU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:ed:ca:86:85:42:d5:b3:88:b9:7a:18:56:1a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d Validity Not Before: Dec 21 03:01:33 2025 GMT Not After : Dec 22 03:01:33 2025 GMT Subject: CN=17e9168fd1985307f6c010af10dac47b72da0c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ad:c7:cc:fd:ee:6b:80:35:40:63:98:a0:86: f3:98:3e:dd:96:6c:cc:53:6a:f1:0a:6d:73:73:6e: 67:54:6a:a7:32:a3:ae:e3:0b:fd:55:ee:49:ec:3e: 65:67:4b:8f:52:99:8b:80:92:94:4f:13:58:36:f9: 3a:41:1f:1d:3a:29:41:6e:dd:30:e9:dc:5f:cd:a4: c3:03:9c:df:4d:dd:d8:e0:cb:9f:33:bc:46:45:3d: bd:ba:48:91:af:c1:7b:0d:ec:30:fe:8a:66:15:3d: 7f:71:4f:34:6b:48:ca:6a:2e:96:42:e3:4d:2c:91: 2e:24:eb:d9:88:85:78:d2:6a:10:28:b0:b0:7b:28: f2:0e:d0:2a:47:aa:a3:46:d7:2d:72:67:de:22:1d: 39:87:10:3a:73:18:1f:2f:21:ce:9a:d2:cb:d3:4a: 0a:9a:06:b8:1f:ea:23:a7:6d:61:ed:84:42:cc:da: 2b:65:7e:a7:ce:20:29:cb:05:bd:16:e5:d8:27:ff: f5:55:90:de:cb:69:15:1e:80:e6:21:53:98:f1:27: 7c:de:a3:55:7b:1e:49:64:cb:d8:c1:e3:72:42:86: 64:b5:b8:00:9f:bc:91:d0:cf:2d:32:65:71:e3:6f: ee:a9:45:79:c8:5e:48:13:57:00:57:83:82:af:04: 45:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E9:16:8F:D1:98:53:07:F6:C0:10:AF:10:DA:C4:7B:72:DA:0C:1B X509v3 Authority Key Identifier: keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:24:37:66:05:fb:46:80:48:a4:1a:1b:3c:38:f5:ac:c3:45: fb:ec:50:9e:7c:e3:5c:cc:d6:4b:14:f4:44:77:9e:b4:24:8d: fa:37:e1:0f:41:6a:76:40:a6:5d:02:e2:5b:f2:e0:b9:22:9f: 2e:ca:97:04:4b:4f:17:cd:ea:82:2e:c2:17:d1:64:18:ec:55: 7a:81:1d:a3:c9:80:27:31:4e:63:64:e6:7c:40:25:ef:f6:56: 00:05:6b:42:26:e8:02:74:ca:d5:81:3b:9b:82:0f:b4:3f:24: 54:8d:4f:e2:78:f5:1a:bf:4b:47:1f:64:32:fe:2a:de:7f:ee: 07:b6:77:72:d6:34:85:d4:85:20:c9:9c:47:35:05:77:4d:a7: b4:00:7b:7d:14:4a:6d:6a:66:2d:5a:8b:31:93:60:78:91:97: 65:17:9b:01:38:e9:e6:ea:ec:f7:c0:69:3a:af:80:10:04:bf: 22:94:23:54:cc:4d:ac:87:76:f9:6a:3a:64:9d:cb:46:25:26: bf:48:f4:b9:33:c4:3f:46:d1:4b:33:83:d5:2e:e8:20:30:7e: 9d:10:44:7e:8b:28:42:f2:39:d1:cf:0d:b1:57:e4:f1:c6:13: 95:be:ce:88:4b:f2:d3:da:c0:3a:23:5c:bb:a2:7e:23:70:77: 55:da:43:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2u3KhoVC1bOIuXoYVhqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZTY0MTcwZjlkODJjNTE2NzBiOWE0NGYzMjliMjA2MTNh ODA4MmQwHhcNMjUxMjIxMDMwMTMzWhcNMjUxMjIyMDMwMTMzWjAzMTEwLwYDVQQD EygxN2U5MTY4ZmQxOTg1MzA3ZjZjMDEwYWYxMGRhYzQ3YjcyZGEwYzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5q3HzP3ua4A1QGOYoIbzmD7dlmzM U2rxCm1zc25nVGqnMqOu4wv9Ve5J7D5lZ0uPUpmLgJKUTxNYNvk6QR8dOilBbt0w 6dxfzaTDA5zfTd3Y4MufM7xGRT29ukiRr8F7Deww/opmFT1/cU80a0jKai6WQuNN LJEuJOvZiIV40moQKLCweyjyDtAqR6qjRtctcmfeIh05hxA6cxgfLyHOmtLL00oK mga4H+ojp21h7YRCzNorZX6nziApywW9FuXYJ//1VZDey2kVHoDmIVOY8Sd83qNV ex5JZMvYweNyQoZktbgAn7yR0M8tMmVx42/uqUV5yF5IE1cAV4OCrwRFyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfpFo/RmFMH9sAQrxDaxHty2gwbMB8GA1UdIwQY MBaAFIfmQXD52CxRZwuaRPMpsgYTqAgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDIt NmUxM2NjYmY0OTA2LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDItNmUxM2NjYmY0OTA2 LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCQ3ZgX7 RoBIpBobPDj1rMNF++xQnnzjXMzWSxT0RHeetCSN+jfhD0FqdkCmXQLiW/LguSKf LsqXBEtPF83qgi7CF9FkGOxVeoEdo8mAJzFOY2TmfEAl7/ZWAAVrQiboAnTK1YE7 m4IPtD8kVI1P4nj1Gr9LRx9kMv4q3n/uB7Z3ctY0hdSFIMmcRzUFd02ntAB7fRRK bWpmLVqLMZNgeJGXZRebATjp5urs98BpOq+AEAS/IpQjVMxNrId2+Wo6ZJ3LRiUm v0j0uTPEP0bRSzOD1S7oIDB+nRBEfosoQvI50c8NsVfk8cYTlb7OiEvy09rAOiNc u6J+I3B3VdpDQQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:01:12 2025 by rpki-client