This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json) Hash identifier: Pvl9C71qAllKCgTeY9zEtQec7utZn1vFkZi0jrKfM7k= Subject key identifier: D2:17:E4:5C:E3:F7:44:4F:E7:F1:DA:ED:8D:6B:97:9F:5B:CD:99:2B Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21 Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421 Certificate serial: 019B3EDAD1488BF4A433AC73C05799A09C5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft Manifest number: 0354 Signing time: Sun 21 Dec 2025 03:01:26 +0000 Manifest this update: Sun 21 Dec 2025 03:01:26 +0000 Manifest next update: Mon 22 Dec 2025 03:01:26 +0000 Files and hashes: 1: f87u7kBdxRsndUbHafpkZkro0IU.roa (hash: zdIYsmtX/Gy6oFoVgbZrLwhX3d3gff2hTbpByuS7zVc=) 2: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: /eFoC4M6ILnlQQZBuTaPO51zvBtSYFtQ9MdOPctHm9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:d1:48:8b:f4:a4:33:ac:73:c0:57:99:a0:9c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421 Validity Not Before: Dec 21 03:01:26 2025 GMT Not After : Dec 22 03:01:26 2025 GMT Subject: CN=d217e45ce3f7444fe7f1daed8d6b979f5bcd992b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:33:00:1b:ac:56:b6:34:15:8d:a8:3e:d6:99: f9:32:c0:e7:8a:d1:34:7f:6b:72:1f:b1:1f:9d:7a: c0:a2:7e:89:ea:9d:2d:f1:d2:fb:a6:4c:06:e4:fb: bf:d1:7b:bd:33:75:a9:64:74:34:fb:e7:44:18:59: f5:84:e2:1f:ff:d9:f6:0e:d8:9b:d9:9c:3e:66:5f: 2d:2e:20:70:07:f3:2b:46:da:c7:9e:ad:5e:28:85: c2:f8:0f:1b:78:52:c6:8b:f0:66:66:a4:c7:5e:67: 16:23:b3:c9:be:6a:13:d9:c0:e1:e7:d7:f7:2a:de: ae:c8:4a:bd:c9:40:72:52:00:e1:58:17:82:31:86: e4:68:84:08:62:89:e4:dd:8b:ff:dc:6f:e1:6e:b0: c5:df:0d:00:c5:e3:3e:2a:99:35:90:4d:ff:69:11: 47:03:7b:bd:b1:52:48:70:1a:3c:22:5d:d9:25:af: 79:bc:0e:23:72:23:78:36:37:8f:49:d7:35:ee:57: c8:f1:4b:2c:12:3b:58:e4:bf:86:4e:03:35:b7:76: ff:22:c0:10:3a:56:29:29:30:f1:99:96:33:83:10: f5:78:a7:6f:e6:da:ff:1a:d8:70:d1:1a:f5:9e:a7: 81:9a:dd:26:67:8e:13:83:77:be:99:fe:42:c4:34: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:17:E4:5C:E3:F7:44:4F:E7:F1:DA:ED:8D:6B:97:9F:5B:CD:99:2B X509v3 Authority Key Identifier: keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:40:b9:6c:ed:77:5d:fb:43:b9:5b:76:fa:34:8f:3b:71:1f: f7:00:6d:8a:b9:dc:f2:55:88:2f:bb:eb:63:8a:8c:b4:99:37: 6d:48:eb:42:63:38:e7:e1:0e:76:93:fe:0d:0e:a5:a3:b5:e6: 64:e6:08:ad:64:7a:b1:81:64:44:3e:0b:58:82:9e:fc:77:2d: 40:0d:67:2a:3c:e9:ba:71:43:f9:e4:35:c8:ad:64:00:e5:5c: 1e:27:0f:92:59:77:1b:d5:39:ad:fa:e8:92:d7:78:a1:02:58: 09:e1:1b:51:d3:b8:d5:5e:aa:17:bf:ac:90:f6:34:f8:d4:8b: fe:53:8f:10:0c:2a:6b:22:7b:59:b2:c6:b8:e4:83:f6:7b:8c: ea:83:a2:e4:ef:a7:a9:dd:49:0d:8a:4b:45:79:25:b1:69:94: fe:f9:c5:70:ff:76:3b:4a:66:bc:c3:e7:07:e1:9b:5c:bd:d5: aa:95:8d:f0:76:94:e3:6b:d1:ba:40:c8:06:5a:3d:f4:5b:6c: c3:36:6a:45:ea:57:8c:7d:03:b2:6f:3b:57:da:16:0f:e6:85: ed:dd:e9:cc:df:44:eb:96:f1:f1:84:11:51:b7:c5:4e:8b:de: 2d:de:ce:62:09:9a:52:41:6a:e2:9f:27:e4:ea:65:b9:87:d2: 8f:46:4d:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2tFIi/SkM6xzwFeZoJxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZWI5N2Y5OGM4ODJlZjQyNmIzNjY2MzQxMWQ0MDgxNDMw YWM0MjEwHhcNMjUxMjIxMDMwMTI2WhcNMjUxMjIyMDMwMTI2WjAzMTEwLwYDVQQD EyhkMjE3ZTQ1Y2UzZjc0NDRmZTdmMWRhZWQ4ZDZiOTc5ZjViY2Q5OTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjMAG6xWtjQVjag+1pn5MsDnitE0 f2tyH7EfnXrAon6J6p0t8dL7pkwG5Pu/0Xu9M3WpZHQ0++dEGFn1hOIf/9n2Dtib 2Zw+Zl8tLiBwB/MrRtrHnq1eKIXC+A8beFLGi/BmZqTHXmcWI7PJvmoT2cDh59f3 Kt6uyEq9yUByUgDhWBeCMYbkaIQIYonk3Yv/3G/hbrDF3w0AxeM+Kpk1kE3/aRFH A3u9sVJIcBo8Il3ZJa95vA4jciN4NjePSdc17lfI8UssEjtY5L+GTgM1t3b/IsAQ OlYpKTDxmZYzgxD1eKdv5tr/Gthw0Rr1nqeBmt0mZ44Tg3e+mf5CxDS+qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIX5Fzj90RP5/Ha7Y1rl59bzZkrMB8GA1UdIwQY MBaAFIfrl/mMiC70JrNmY0EdQIFDCsQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjkt M2Y2ZDdkN2VhMWIwLzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjktM2Y2ZDdkN2VhMWIw LzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0C5bO13 XftDuVt2+jSPO3Ef9wBtirnc8lWIL7vrY4qMtJk3bUjrQmM45+EOdpP+DQ6lo7Xm ZOYIrWR6sYFkRD4LWIKe/HctQA1nKjzpunFD+eQ1yK1kAOVcHicPkll3G9U5rfro ktd4oQJYCeEbUdO41V6qF7+skPY0+NSL/lOPEAwqayJ7WbLGuOSD9nuM6oOi5O+n qd1JDYpLRXklsWmU/vnFcP92O0pmvMPnB+GbXL3VqpWN8HaU42vRukDIBlo99Fts wzZqRepXjH0Dsm87V9oWD+aF7d3pzN9E65bx8YQRUbfFToveLd7OYgmaUkFq4p8n 5OpluYfSj0ZNnQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:21:29 2025 by rpki-client