This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json) Hash identifier: c554x4ofr1hVmjjczPUlP0ri7WqndFeLJWHuZ4MJGOk= Subject key identifier: 9A:E5:81:C4:38:DD:31:96:AC:98:F5:14:10:94:F2:56:3C:BD:83:5D Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5 Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5 Certificate serial: 019B3C7DB65E795543F94DA8EF4973CEEE22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft Manifest number: 0A Signing time: Sat 20 Dec 2025 16:00:30 +0000 Manifest this update: Sat 20 Dec 2025 16:00:30 +0000 Manifest next update: Sun 21 Dec 2025 16:00:30 +0000 Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: IiYqfz30GLl0G6/cPF5+xFjF4WLNhOFk1hddxZhAyVE=) 2: zHLIRVvP3DMXL_pxYZ-vISEw8PA.roa (hash: rjexzqv/p+4z8m2gvPLKL3b1mTiDMdeytglSUbt0/vU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:b6:5e:79:55:43:f9:4d:a8:ef:49:73:ce:ee:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5 Validity Not Before: Dec 20 16:00:30 2025 GMT Not After : Dec 21 16:00:30 2025 GMT Subject: CN=9ae581c438dd3196ac98f5141094f2563cbd835d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bf:a5:a1:30:64:98:69:ea:4e:99:bf:3a:f2: 25:ce:56:55:df:d6:97:02:3d:94:42:3b:f9:97:fa: 3b:2a:5b:e1:7c:83:6c:cd:5a:5a:70:85:44:2d:f3: 8d:d7:d5:65:b9:4b:1e:9e:f2:2d:9c:25:9c:68:4a: 8e:64:c7:41:ac:36:eb:38:23:16:3d:96:3e:6f:08: 2a:af:92:71:39:8f:de:68:50:d7:b1:a4:e5:a1:17: 14:9e:ed:98:5b:37:f5:26:d4:ba:9b:05:e0:ce:85: ba:4c:33:8c:28:32:f6:06:d4:d1:45:dd:d9:9e:1e: 70:c3:ae:71:15:ec:2a:89:34:b1:f1:b7:70:4b:1d: 50:93:74:97:56:39:33:2f:39:dc:4a:b3:a1:9f:2a: ba:49:5a:c2:ac:fb:ea:d6:e4:8a:b3:a6:d7:f5:02: ff:bc:b8:27:f5:f2:9b:0e:55:19:79:41:a9:6f:ca: c3:32:64:5e:99:d2:03:a6:f1:15:93:29:7b:01:ed: b9:e6:07:73:f5:03:a8:78:14:87:31:10:af:82:e7: 35:1a:de:09:b0:ce:ea:2b:21:8b:f4:fa:d8:2c:a1: 18:68:9a:b0:d0:97:d9:99:7b:3f:9a:27:76:30:33: e8:f7:f2:e1:53:45:cd:8a:8a:2d:c6:3c:d6:d7:ae: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E5:81:C4:38:DD:31:96:AC:98:F5:14:10:94:F2:56:3C:BD:83:5D X509v3 Authority Key Identifier: keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:15:eb:16:51:3e:52:1c:df:8b:a1:7a:ec:e6:a3:f4:ea:98: 45:3b:e3:95:2c:b5:f7:cc:d2:c8:bf:bb:8a:ad:f7:14:d3:c8: 3c:91:60:07:93:73:bd:f9:14:94:82:c8:0a:74:4f:07:15:4b: 77:ec:b3:fb:8e:63:57:5b:b4:23:4a:b2:68:9d:3d:a5:21:71: df:87:4f:3e:95:f9:24:54:c7:c2:56:63:10:a6:56:20:3c:b5: 40:21:b3:31:2c:a9:53:d0:35:b6:83:6b:bd:98:ff:85:b5:1b: 63:41:a2:bf:63:a0:77:15:5c:f1:bf:fd:f8:41:54:5a:74:af: a4:37:12:51:17:72:a9:6f:88:48:c0:d5:be:23:e3:50:6c:34: 44:92:9c:46:4a:b9:d3:ca:67:4d:58:63:52:5f:cf:93:96:61: a4:79:93:7e:65:7b:0a:60:6a:58:51:1a:f1:13:49:4c:06:e2: d9:5c:3c:69:6a:08:48:87:85:4b:18:b5:96:fb:ea:41:e6:5f: dc:89:de:0c:92:a8:b2:25:22:b7:81:0d:8f:b5:27:0a:8e:b2: 0b:0b:b2:fb:c8:86:fd:f5:2d:61:67:20:2f:73:f4:6a:c0:6f: 37:20:c7:09:1c:d8:9f:76:0d:70:32:31:fc:72:93:97:e7:6f: e7:d7:51:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fbZeeVVD+U2o70lzzu4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTRkNTY0MzYwYTUyMWRiNTk4YWVlNmU2YTJmOGQ2Njky MWI2YzUwHhcNMjUxMjIwMTYwMDMwWhcNMjUxMjIxMTYwMDMwWjAzMTEwLwYDVQQD Eyg5YWU1ODFjNDM4ZGQzMTk2YWM5OGY1MTQxMDk0ZjI1NjNjYmQ4MzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7L+loTBkmGnqTpm/OvIlzlZV39aX Aj2UQjv5l/o7KlvhfINszVpacIVELfON19VluUsenvItnCWcaEqOZMdBrDbrOCMW PZY+bwgqr5JxOY/eaFDXsaTloRcUnu2YWzf1JtS6mwXgzoW6TDOMKDL2BtTRRd3Z nh5ww65xFewqiTSx8bdwSx1Qk3SXVjkzLzncSrOhnyq6SVrCrPvq1uSKs6bX9QL/ vLgn9fKbDlUZeUGpb8rDMmRemdIDpvEVkyl7Ae255gdz9QOoeBSHMRCvguc1Gt4J sM7qKyGL9PrYLKEYaJqw0JfZmXs/mid2MDPo9/LhU0XNiootxjzW166ctwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrlgcQ43TGWrJj1FBCU8lY8vYNdMB8GA1UdIwQY MBaAFIeU1WQ2ClIdtZiu5uai+NZpIbbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jYTE2NjctZGU4Zi00NWRjLTkwMDct NWFmZTBjNDJjZjc3LzEvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jYTE2NjctZGU4Zi00NWRjLTkwMDctNWFmZTBjNDJjZjc3 LzEvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBXrFlE+ Uhzfi6F67Oaj9OqYRTvjlSy198zSyL+7iq33FNPIPJFgB5NzvfkUlILICnRPBxVL d+yz+45jV1u0I0qyaJ09pSFx34dPPpX5JFTHwlZjEKZWIDy1QCGzMSypU9A1toNr vZj/hbUbY0Giv2OgdxVc8b/9+EFUWnSvpDcSURdyqW+ISMDVviPjUGw0RJKcRkq5 08pnTVhjUl/Pk5ZhpHmTfmV7CmBqWFEa8RNJTAbi2Vw8aWoISIeFSxi1lvvqQeZf 3IneDJKosiUit4ENj7UnCo6yCwuy+8iG/fUtYWcgL3P0asBvNyDHCRzYn3YNcDIx /HKTl+dv59dRUg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:04:26 2025 by rpki-client