This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json) Hash identifier: XKcyhG0PXd95IsQitvq2NZu653jrWynM9kD9kFUaBVE= Subject key identifier: 04:07:C1:31:61:45:C9:B0:31:F7:CD:60:6C:71:33:1D:4F:86:52:94 Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea Certificate serial: 019B6D332390EE2882997051A8581210192E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft Manifest number: 0A01 Signing time: Tue 30 Dec 2025 03:00:26 +0000 Manifest this update: Tue 30 Dec 2025 03:00:26 +0000 Manifest next update: Wed 31 Dec 2025 03:00:26 +0000 Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: Ynt5jWykeXzX/Zbg9rwwVWs+p2tkBBxjm751MTfonPI=) 2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:23:90:ee:28:82:99:70:51:a8:58:12:10:19:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea Validity Not Before: Dec 30 03:00:26 2025 GMT Not After : Dec 31 03:00:26 2025 GMT Subject: CN=0407c1316145c9b031f7cd606c71331d4f865294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:81:49:48:6e:99:49:6b:d6:5d:b1:68:48: 3a:13:71:8f:b7:59:22:92:91:91:db:85:3b:38:d8: 2e:95:38:1d:f8:8c:1c:9e:e8:85:d0:74:ea:b5:01: e1:48:66:ce:b9:bc:28:ef:26:1d:fe:61:c6:51:d6: 1c:c6:8c:a9:ca:84:87:59:ee:59:69:4f:9e:6a:2b: 48:96:0b:4e:78:19:be:f8:88:1d:41:c6:86:3a:b1: b3:92:b0:66:2d:8a:31:10:38:c7:10:a2:93:50:10: 7c:25:c1:f9:07:8e:31:d8:3e:2d:69:07:96:a4:eb: 14:49:08:3c:03:d3:b8:51:a6:39:f7:52:6e:f2:8d: 60:9b:de:96:39:3c:72:0e:e0:9c:cb:b9:be:72:3b: a9:24:52:42:fe:23:cb:fc:3b:8f:f5:ef:3d:a4:ed: 81:69:1e:65:01:9c:91:90:7c:e7:82:75:17:53:75: 35:7b:43:e5:a9:fc:fc:90:93:28:06:96:6c:bf:7f: 0e:65:1b:43:88:9b:bf:11:e1:50:55:69:56:dc:85: 88:bd:dd:5e:44:fe:63:9b:0c:87:1a:73:88:7b:34: 4c:af:78:6a:49:f5:59:41:e7:04:d6:7d:3f:ef:9d: 90:15:bb:55:a0:82:5b:35:d9:2d:e0:e1:ab:b6:06: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:07:C1:31:61:45:C9:B0:31:F7:CD:60:6C:71:33:1D:4F:86:52:94 X509v3 Authority Key Identifier: keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b6:d5:6d:7f:ec:b0:c2:1f:7b:0b:4c:a7:fb:06:c9:65:67: 13:ad:f2:f1:53:61:1d:2e:4b:6a:cf:b1:ba:c4:72:13:06:4f: 28:a9:51:17:7d:5f:08:4c:61:3e:cb:79:02:bc:41:dd:5a:18: d7:a7:11:61:cf:cc:a1:f0:35:de:0d:ad:a3:a1:07:a1:76:71: e9:32:36:ad:6e:c0:b7:fa:3e:dd:76:b3:f9:24:81:13:22:0f: 72:bd:1e:28:32:9a:c8:17:9f:59:b1:b1:c4:92:6b:a1:33:68: e0:72:52:98:54:37:00:41:69:c9:7f:68:bb:a3:80:4b:45:f3: 53:11:fc:e4:57:a7:de:d9:d5:52:81:f4:6e:34:72:c5:b3:19: 09:90:35:8b:16:2a:d2:60:bc:fe:cb:d9:d6:96:75:78:6d:0a: 25:71:28:96:b3:49:d8:00:1d:c5:3c:16:f7:85:3d:fa:76:bf: a8:f2:22:a8:61:2a:47:bf:a7:f8:d3:98:91:a7:d6:fc:37:df: 5e:12:4f:ee:1a:aa:9f:d3:70:97:37:21:0f:d2:3f:2a:a0:cb: 65:57:9b:41:4d:0c:aa:ef:3f:46:68:f4:9a:62:2a:8b:89:d0: 8a:4b:a6:87:a7:f6:f7:62:0c:07:e1:00:9e:43:ac:7f:18:f5: 40:2b:60:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttMyOQ7iiCmXBRqFgSEBkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZGMxYTliZmZhMmNmMTVhN2Q4MDk5YzhhM2MzMTdjZTA3 ZGI1ZWEwHhcNMjUxMjMwMDMwMDI2WhcNMjUxMjMxMDMwMDI2WjAzMTEwLwYDVQQD EygwNDA3YzEzMTYxNDVjOWIwMzFmN2NkNjA2YzcxMzMxZDRmODY1Mjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus2BSUhumUlr1l2xaEg6E3GPt1ki kpGR24U7ONgulTgd+IwcnuiF0HTqtQHhSGbOubwo7yYd/mHGUdYcxoypyoSHWe5Z aU+eaitIlgtOeBm++IgdQcaGOrGzkrBmLYoxEDjHEKKTUBB8JcH5B44x2D4taQeW pOsUSQg8A9O4UaY591Ju8o1gm96WOTxyDuCcy7m+cjupJFJC/iPL/DuP9e89pO2B aR5lAZyRkHzngnUXU3U1e0Plqfz8kJMoBpZsv38OZRtDiJu/EeFQVWlW3IWIvd1e RP5jmwyHGnOIezRMr3hqSfVZQecE1n0/752QFbtVoIJbNdkt4OGrtgZHTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQHwTFhRcmwMffNYGxxMx1PhlKUMB8GA1UdIwQY MBaAFIfcGpv/os8Vp9gJnIo8MXzgfbXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMt NDlhZDk2ODRiMjE3LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMtNDlhZDk2ODRiMjE3 LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrbVbX/s sMIfewtMp/sGyWVnE63y8VNhHS5Las+xusRyEwZPKKlRF31fCExhPst5ArxB3VoY 16cRYc/MofA13g2to6EHoXZx6TI2rW7At/o+3Xaz+SSBEyIPcr0eKDKayBefWbGx xJJroTNo4HJSmFQ3AEFpyX9ou6OAS0XzUxH85Fen3tnVUoH0bjRyxbMZCZA1ixYq 0mC8/svZ1pZ1eG0KJXEolrNJ2AAdxTwW94U9+na/qPIiqGEqR7+n+NOYkafW/Dff XhJP7hqqn9NwlzchD9I/KqDLZVebQU0Mqu8/Rmj0mmIqi4nQikumh6f292IMB+EA nkOsfxj1QCtg3A== -----END CERTIFICATE-----Generated at Tue Dec 30 08:56:37 2025 by rpki-client