This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft File: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft (raw, json) Hash identifier: b3y0wujeafg8/BTGxsVxMiSLvaNBuyCSyz3vKRbgaco= Subject key identifier: 2B:51:9C:92:18:D6:43:BA:54:AB:7F:52:86:A1:32:69:46:E4:71:02 Authority key identifier: 87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2 Certificate issuer: /CN=87b9313753bc0931af4393dbda009b0ff45ec7c2 Certificate serial: 019B330D1787E91671BDB4FB0A1FCE91AFFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft Manifest number: 0C4D Signing time: Thu 18 Dec 2025 20:00:54 +0000 Manifest this update: Thu 18 Dec 2025 20:00:54 +0000 Manifest next update: Fri 19 Dec 2025 20:00:54 +0000 Files and hashes: 1: ETVPLHc_dvqJDflGIPJgHzJaWt8.roa (hash: Jimm5bhH1qmUZnAAKaN20vij/bbKy4j6GEesqJVn7gk=) 2: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl (hash: 8ARGrq4bS0oY9ttRA5NqAVlbB6bfkQspN7qTK8CkVJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:17:87:e9:16:71:bd:b4:fb:0a:1f:ce:91:af:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b9313753bc0931af4393dbda009b0ff45ec7c2 Validity Not Before: Dec 18 20:00:54 2025 GMT Not After : Dec 19 20:00:54 2025 GMT Subject: CN=2b519c9218d643ba54ab7f5286a1326946e47102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7c:43:a1:16:d5:43:27:e7:91:97:c5:74:99: 9e:6b:56:5a:2a:c6:cd:2c:c0:74:f4:ef:8e:d7:9f: be:6b:a8:0d:65:a1:2b:a4:69:d2:1e:4a:5c:37:df: 02:8c:49:91:c3:f0:db:86:6f:c9:82:03:06:e6:62: 63:81:71:90:b8:bd:25:00:f0:05:23:11:a5:2e:b7: 5e:e5:6a:46:1e:c3:79:a8:7f:ce:f5:df:58:48:88: 08:49:7a:f5:20:68:61:8c:0a:bd:7e:d8:71:f9:d2: d9:81:11:ff:de:c4:19:f5:2d:e2:a8:37:94:1d:05: 53:52:b6:75:1e:77:3d:f3:5b:83:43:1d:28:2d:f1: ed:0a:b0:a5:cb:62:f8:db:42:a8:35:01:ed:7a:c9: 8f:b0:61:6c:8f:53:8a:0a:c7:81:9a:05:59:12:2e: 64:5a:26:b8:0d:63:f6:22:d0:4b:bc:1e:57:2e:8c: 33:84:ca:b5:d6:1f:b9:dd:a3:b6:39:a5:b6:c9:07: de:15:86:19:e5:e5:df:29:9d:56:4e:26:3d:c8:8f: 84:c0:13:6e:7c:85:92:5b:04:4b:8d:2c:62:a2:0c: 82:e4:a3:c6:e0:09:ca:4e:5f:56:b6:60:27:20:85: c8:09:64:e5:98:fb:da:0c:c9:7e:15:df:99:0f:2a: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:51:9C:92:18:D6:43:BA:54:AB:7F:52:86:A1:32:69:46:E4:71:02 X509v3 Authority Key Identifier: keyid:87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:d4:25:24:d9:7b:d7:89:5d:8e:9c:86:f2:37:b5:f7:ce:d6: 1c:20:60:55:1c:8a:fe:ab:33:70:15:fd:7b:8d:c3:3a:09:e6: 9e:1b:89:dc:2d:29:af:fc:8a:e4:ef:86:52:ab:ef:56:6b:8e: 5c:f3:d2:d0:22:f5:56:b1:c2:e0:f0:61:4a:fe:6e:fd:96:b7: 49:8c:82:58:04:eb:40:da:f9:0c:7d:be:1e:21:12:22:c7:fb: 6f:28:1f:4f:52:a3:db:62:90:51:03:29:53:9c:99:64:70:47: 03:2c:77:fd:44:e1:98:91:d7:00:8e:85:9c:11:eb:98:5c:e9: 05:39:fd:08:d9:2a:b0:31:65:9b:70:af:9a:fe:01:a2:e0:10: 59:53:83:b2:3b:f4:20:2a:6e:41:ce:1b:d6:f9:12:f3:47:b1: 17:58:27:b2:ff:cf:c3:1f:cb:32:64:fd:92:aa:e3:dc:18:c5: 38:55:df:a2:a1:5e:ba:ef:fa:91:51:5a:65:e4:43:31:fc:5c: 47:90:78:b9:b0:f5:75:29:22:a5:3e:a0:91:44:a6:54:0e:3e: 06:de:a8:f1:94:6c:9c:62:33:c3:c5:dc:f3:6e:e5:8e:ec:57: 2d:db:47:7f:89:b0:43:06:22:6b:44:1f:84:55:8f:eb:de:7a: c3:d3:68:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDReH6RZxvbT7Ch/Oka/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YjkzMTM3NTNiYzA5MzFhZjQzOTNkYmRhMDA5YjBmZjQ1 ZWM3YzIwHhcNMjUxMjE4MjAwMDU0WhcNMjUxMjE5MjAwMDU0WjAzMTEwLwYDVQQD EygyYjUxOWM5MjE4ZDY0M2JhNTRhYjdmNTI4NmExMzI2OTQ2ZTQ3MTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnxDoRbVQyfnkZfFdJmea1ZaKsbN LMB09O+O15++a6gNZaErpGnSHkpcN98CjEmRw/Dbhm/JggMG5mJjgXGQuL0lAPAF IxGlLrde5WpGHsN5qH/O9d9YSIgISXr1IGhhjAq9fthx+dLZgRH/3sQZ9S3iqDeU HQVTUrZ1Hnc981uDQx0oLfHtCrCly2L420KoNQHtesmPsGFsj1OKCseBmgVZEi5k Wia4DWP2ItBLvB5XLowzhMq11h+53aO2OaW2yQfeFYYZ5eXfKZ1WTiY9yI+EwBNu fIWSWwRLjSxiogyC5KPG4AnKTl9WtmAnIIXICWTlmPvaDMl+Fd+ZDyrKGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtRnJIY1kO6VKt/UoahMmlG5HECMB8GA1UdIwQY MBaAFIe5MTdTvAkxr0OT29oAmw/0XsfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83MWNiMGMtM2JlMC00YTllLTliODIt N2Q2ODM2NmI1OWI3LzEvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83MWNiMGMtM2JlMC00YTllLTliODItN2Q2ODM2NmI1OWI3 LzEvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1NQlJNl7 14ldjpyG8je1987WHCBgVRyK/qszcBX9e43DOgnmnhuJ3C0pr/yK5O+GUqvvVmuO XPPS0CL1VrHC4PBhSv5u/Za3SYyCWATrQNr5DH2+HiESIsf7bygfT1Kj22KQUQMp U5yZZHBHAyx3/UThmJHXAI6FnBHrmFzpBTn9CNkqsDFlm3Cvmv4BouAQWVODsjv0 ICpuQc4b1vkS80exF1gnsv/Pwx/LMmT9kqrj3BjFOFXfoqFeuu/6kVFaZeRDMfxc R5B4ubD1dSkipT6gkUSmVA4+Bt6o8ZRsnGIzw8Xc827ljuxXLdtHf4mwQwYia0Qf hFWP6956w9NoRg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:28:01 2025 by rpki-client