This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json) Hash identifier: 7qBES2zO9X4RRUZENTeek7VkPa04dN7Bvs0vFNesF+8= Subject key identifier: 21:B0:92:BC:E2:ED:D6:79:B6:39:A9:7D:7B:C9:97:29:C5:EA:8F:A7 Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7 Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7 Certificate serial: 019B4625F1D0163C6C777D6342D3F26E7346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft Manifest number: 1791 Signing time: Mon 22 Dec 2025 13:00:50 +0000 Manifest this update: Mon 22 Dec 2025 13:00:50 +0000 Manifest next update: Tue 23 Dec 2025 13:00:50 +0000 Files and hashes: 1: Jd9KhT8D9dzrmclXzaM2LsTcdvk.roa (hash: Xz0hJFnyzCZED2jN3f6gRmu551al736EIaABcjiPvLQ=) 2: Ms_pDtAjK9tb1e5h7bLoQWbyHs8.roa (hash: cL+zxxB8p9BDEROGB77OysHEV8P4dX2U5M5xqP9Q6C0=) 3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: EmN8thQTakbOY0j5WrwW0mg7dRzVDCmKXIwnZRUaEAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:25:f1:d0:16:3c:6c:77:7d:63:42:d3:f2:6e:73:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7 Validity Not Before: Dec 22 13:00:50 2025 GMT Not After : Dec 23 13:00:50 2025 GMT Subject: CN=21b092bce2edd679b639a97d7bc99729c5ea8fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1b:f7:d7:d1:c1:fe:52:af:0b:7d:d6:0d:ec: 27:5d:fe:90:63:48:f4:73:ea:8a:99:9e:c1:e2:cc: 32:1b:56:49:88:f1:91:96:1a:da:52:bd:b4:1d:16: 0b:2c:1b:0c:ec:99:2a:6a:02:25:48:da:ca:bc:eb: 86:df:64:d4:4e:77:b1:63:0d:11:49:87:c6:04:43: 6f:83:1d:8e:09:e2:38:50:70:ff:fd:8e:76:f3:b8: 5c:4c:a1:96:5b:24:2d:f8:c8:dc:d2:91:f0:8b:a4: 59:df:c8:ad:9b:08:dd:b3:52:5e:92:1b:27:8d:de: 98:d5:7e:57:bd:a3:41:48:7e:fb:7f:34:fb:8a:db: e4:81:b3:96:05:3b:23:c5:b3:1c:97:64:f2:09:0b: 44:82:d1:ef:44:30:b5:8f:46:0e:f6:fd:0f:51:e9: 5a:44:d8:48:97:0d:65:4c:86:20:7d:2d:ba:cf:4e: ad:32:b1:ab:16:b2:6b:23:08:53:1d:4d:9f:0e:67: 2d:7e:76:c8:87:64:82:4b:57:42:66:39:be:dc:c6: 29:1a:82:90:5f:88:28:c5:8a:aa:c4:4d:41:04:9a: d2:db:f1:b6:6a:25:2e:78:e7:0a:a2:4b:4b:1d:ab: 30:13:08:10:51:8f:14:6b:31:21:c3:f2:b4:5a:3b: 07:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B0:92:BC:E2:ED:D6:79:B6:39:A9:7D:7B:C9:97:29:C5:EA:8F:A7 X509v3 Authority Key Identifier: keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3d:91:23:81:fd:75:5a:89:c8:ae:66:c4:07:13:d1:d1:b7: 36:3f:95:31:d7:6b:df:04:a2:b4:b6:a4:08:e5:13:c7:1f:80: 66:a4:8c:cc:ae:c2:26:7c:54:25:52:a4:73:03:eb:53:a2:7f: fa:e7:4d:e1:19:b7:0c:c2:ff:39:1c:82:a2:eb:9d:f4:34:0f: 20:44:e0:40:68:53:06:32:d2:54:47:dd:49:d5:ce:62:2b:d9: ff:14:1e:92:71:da:fb:71:b4:0d:55:9b:8f:bc:4f:47:10:92: db:47:c8:45:24:9e:64:c7:86:4c:83:54:a8:b6:3c:5a:60:2a: ff:61:4a:b3:50:f2:b0:8e:1c:ff:82:0a:19:72:97:a3:10:9d: fb:5f:1d:6b:05:e9:c0:a0:d8:09:77:f5:f6:27:ac:0f:c7:c0: 6e:7f:9c:b1:ab:43:1a:64:fb:87:a9:2a:1c:89:76:5a:00:83: 37:cc:ef:3e:08:18:20:15:8f:d5:de:b2:81:16:15:50:74:14: 46:d7:2b:73:c3:04:8f:fb:b4:9c:a4:3c:d8:05:2d:44:e6:54: 3f:18:68:c0:66:d9:8f:df:e0:b9:61:71:e6:c4:e2:60:46:82: 29:80:28:2b:29:c4:e9:e6:58:5b:84:25:f3:fa:ba:a5:c1:b2: 9a:90:ba:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJfHQFjxsd31jQtPybnNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZjQxYWUwNzc5ZTM3ZGVmYzY5YjJhNWIwZjdhYjhmZDQw Y2QzZTcwHhcNMjUxMjIyMTMwMDUwWhcNMjUxMjIzMTMwMDUwWjAzMTEwLwYDVQQD EygyMWIwOTJiY2UyZWRkNjc5YjYzOWE5N2Q3YmM5OTcyOWM1ZWE4ZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhv319HB/lKvC33WDewnXf6QY0j0 c+qKmZ7B4swyG1ZJiPGRlhraUr20HRYLLBsM7JkqagIlSNrKvOuG32TUTnexYw0R SYfGBENvgx2OCeI4UHD//Y5287hcTKGWWyQt+Mjc0pHwi6RZ38itmwjds1Jekhsn jd6Y1X5XvaNBSH77fzT7itvkgbOWBTsjxbMcl2TyCQtEgtHvRDC1j0YO9v0PUela RNhIlw1lTIYgfS26z06tMrGrFrJrIwhTHU2fDmctfnbIh2SCS1dCZjm+3MYpGoKQ X4goxYqqxE1BBJrS2/G2aiUueOcKoktLHaswEwgQUY8UazEhw/K0WjsHJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGwkrzi7dZ5tjmpfXvJlynF6o+nMB8GA1UdIwQY MBaAFIf0GuB3njfe/GmypbD3q4/UDNPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYt YzQzYWIyYTEyZDU1LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYtYzQzYWIyYTEyZDU1 LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAej2RI4H9 dVqJyK5mxAcT0dG3Nj+VMddr3wSitLakCOUTxx+AZqSMzK7CJnxUJVKkcwPrU6J/ +udN4Rm3DML/ORyCouud9DQPIETgQGhTBjLSVEfdSdXOYivZ/xQeknHa+3G0DVWb j7xPRxCS20fIRSSeZMeGTINUqLY8WmAq/2FKs1DysI4c/4IKGXKXoxCd+18dawXp wKDYCXf19iesD8fAbn+csatDGmT7h6kqHIl2WgCDN8zvPggYIBWP1d6ygRYVUHQU Rtcrc8MEj/u0nKQ82AUtROZUPxhowGbZj9/guWFx5sTiYEaCKYAoKynE6eZYW4Ql 8/q6pcGympC6Lw== -----END CERTIFICATE-----Generated at Mon Dec 22 16:01:28 2025 by rpki-client