This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft File: h338-RVp2BViJvwnkOZ5BnY6KwM.mft (raw, json) Hash identifier: cbQDZP5Ve6KwHsxD4WGEoewC/4NKHrrHvD6MYYgL2ls= Subject key identifier: B0:A5:5F:65:9F:24:55:E6:5C:C8:8C:DE:03:D5:7A:88:79:15:7E:31 Authority key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03 Certificate issuer: /CN=877dfcf91569d8156226fc2790e67906763a2b03 Certificate serial: 019B4EBB94970273BA4E22201FA37BEE892D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 05:01:14 +0000 Manifest this update: Wed 24 Dec 2025 05:01:14 +0000 Manifest next update: Thu 25 Dec 2025 05:01:14 +0000 Files and hashes: 1: h338-RVp2BViJvwnkOZ5BnY6KwM.crl (hash: 8/MkSDnDvf9+1fk4cPGIz1b0vvh4Qip760IK6e9BaEs=) 2: hw2W04D1is42TOmflaN39hcxH9E.roa (hash: fNZHjDeAyo42LcaysmyiDifSO0kt6UxDpr+XhWr9MzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:94:97:02:73:ba:4e:22:20:1f:a3:7b:ee:89:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=877dfcf91569d8156226fc2790e67906763a2b03 Validity Not Before: Dec 24 05:01:14 2025 GMT Not After : Dec 25 05:01:14 2025 GMT Subject: CN=b0a55f659f2455e65cc88cde03d57a8879157e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:28:ff:dd:fa:7d:57:f2:10:12:6f:67:24: 1d:b5:1c:ff:d4:b4:90:89:99:ef:ce:ea:54:1f:cd: 1b:e0:41:3d:fa:20:97:ba:fb:b2:52:8c:e5:56:1c: fb:0b:47:ab:78:da:6f:18:15:19:36:88:e5:c0:4e: dd:03:ef:2d:e0:21:8e:53:ac:f1:c6:01:e9:29:cd: 45:33:ac:34:92:51:e9:77:b8:1d:97:2d:83:d3:37: ca:24:d2:4b:07:31:8c:b9:71:cd:36:6a:28:4f:e3: 1e:a0:70:12:9d:da:44:95:73:99:08:70:f6:20:df: 29:e0:1e:89:fa:e8:9b:16:13:71:b5:b5:00:9a:12: 08:e9:4a:b4:24:e4:1a:db:be:d4:10:56:77:3c:20: 54:00:b4:6f:ca:37:a9:58:11:98:c9:42:6a:14:83: 16:22:29:b1:45:b0:49:cc:e8:d9:18:43:0f:d6:55: eb:dc:86:40:e9:76:01:05:e3:c9:de:46:ae:19:86: 06:cf:ed:8c:c1:e4:bd:ee:83:51:5b:9b:a3:d5:98: fe:22:c5:06:6b:ad:23:6a:9d:1a:32:c9:33:bd:24: 0a:63:66:2e:91:88:28:7e:ea:0a:b4:c3:da:b6:78: eb:b1:87:b7:33:f8:8b:8a:eb:bb:79:e0:b1:8c:67: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A5:5F:65:9F:24:55:E6:5C:C8:8C:DE:03:D5:7A:88:79:15:7E:31 X509v3 Authority Key Identifier: keyid:87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2d:84:2b:31:bf:dd:0a:d9:aa:47:2b:95:9c:f4:fb:23:f5: 14:39:f4:b8:5d:6d:80:db:b7:c7:53:84:d9:0e:52:99:15:fc: c9:6e:2d:6a:96:64:42:14:6b:a2:ef:47:90:3e:81:20:35:d2: 77:5a:c9:52:17:ab:c2:49:07:e7:f3:11:ea:fb:a1:25:ad:7e: 2e:73:42:60:d6:31:f3:7f:b9:6c:08:8d:aa:1b:68:e4:f0:bc: 4b:21:8e:07:7d:11:89:63:c2:9e:ec:ae:fe:a4:e6:16:c5:ee: 26:8c:e2:21:9b:34:9f:77:79:5d:6d:f4:cc:26:df:66:02:1e: c1:3e:13:a7:9e:ad:39:b4:ae:15:52:c6:32:09:74:50:47:e6: e6:17:81:76:6f:15:dc:45:89:fc:07:e8:85:80:c5:d7:18:62: 31:0c:a5:1b:bb:13:05:67:16:a0:08:76:87:e0:14:be:12:fb: 8a:4f:60:8e:41:28:b2:7f:d5:e0:64:60:14:50:14:b3:77:47: 7d:49:85:bc:6f:74:bb:03:4a:91:7e:9f:57:e7:38:c0:9f:9c: 6b:34:f3:f4:b7:11:1c:a9:a9:6e:17:05:8e:4b:4c:68:9f:ef: 3d:5b:17:9d:b7:66:ab:8c:3e:4f:7d:12:12:2f:f7:51:c3:3d: 51:7a:c2:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu5SXAnO6TiIgH6N77oktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3N2RmY2Y5MTU2OWQ4MTU2MjI2ZmMyNzkwZTY3OTA2NzYz YTJiMDMwHhcNMjUxMjI0MDUwMTE0WhcNMjUxMjI1MDUwMTE0WjAzMTEwLwYDVQQD EyhiMGE1NWY2NTlmMjQ1NWU2NWNjODhjZGUwM2Q1N2E4ODc5MTU3ZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXMo/936fVfyEBJvZyQdtRz/1LSQ iZnvzupUH80b4EE9+iCXuvuyUozlVhz7C0ereNpvGBUZNojlwE7dA+8t4CGOU6zx xgHpKc1FM6w0klHpd7gdly2D0zfKJNJLBzGMuXHNNmooT+MeoHASndpElXOZCHD2 IN8p4B6J+uibFhNxtbUAmhII6Uq0JOQa277UEFZ3PCBUALRvyjepWBGYyUJqFIMW IimxRbBJzOjZGEMP1lXr3IZA6XYBBePJ3kauGYYGz+2MweS97oNRW5uj1Zj+IsUG a60jap0aMskzvSQKY2YukYgofuoKtMPatnjrsYe3M/iLiuu7eeCxjGd0+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLClX2WfJFXmXMiM3gPVeoh5FX4xMB8GA1UdIwQY MBaAFId9/PkVadgVYib8J5DmeQZ2OisDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMmJkYzgtNzllNy00OGNkLWE5OTQt YWQ0OTU4NThiMzJjLzEvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mMmJkYzgtNzllNy00OGNkLWE5OTQtYWQ0OTU4NThiMzJj LzEvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKi2EKzG/ 3QrZqkcrlZz0+yP1FDn0uF1tgNu3x1OE2Q5SmRX8yW4tapZkQhRrou9HkD6BIDXS d1rJUherwkkH5/MR6vuhJa1+LnNCYNYx83+5bAiNqhto5PC8SyGOB30RiWPCnuyu /qTmFsXuJoziIZs0n3d5XW30zCbfZgIewT4Tp56tObSuFVLGMgl0UEfm5heBdm8V 3EWJ/AfohYDF1xhiMQylG7sTBWcWoAh2h+AUvhL7ik9gjkEosn/V4GRgFFAUs3dH fUmFvG90uwNKkX6fV+c4wJ+cazTz9LcRHKmpbhcFjktMaJ/vPVsXnbdmq4w+T30S Ei/3UcM9UXrC6g== -----END CERTIFICATE-----Generated at Wed Dec 24 10:36:52 2025 by rpki-client