This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft File: h-ll54gxqIuo-kGUMqnXusnbOKM.mft (raw, json) Hash identifier: SSJ+27q3JSiyBf9JbHkS0dLrWkeTVNK0WSu/CWiF4NU= Subject key identifier: B6:EF:7C:54:CB:56:2C:13:FF:1D:1C:41:56:EF:2B:6E:1C:8C:0B:3E Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3 Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3 Certificate serial: 019B337B3B949C1685BB76D597E47786E332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft Manifest number: 0818 Signing time: Thu 18 Dec 2025 22:01:12 +0000 Manifest this update: Thu 18 Dec 2025 22:01:12 +0000 Manifest next update: Fri 19 Dec 2025 22:01:12 +0000 Files and hashes: 1: P67W-sp0mORZMv4IJYWq4ebl3DI.roa (hash: 1jNCeGYTIsfay6y/1fIn4OYexq/lwmYvxij2ON0v7bU=) 2: h-ll54gxqIuo-kGUMqnXusnbOKM.crl (hash: fcCOOpgJ+0fyuAVIQEdWsuFTxqkMRtOzF5swMloL/Wg=) 3: tb7b-pMyLuFzVUUaYd4D0tYvrVM.roa (hash: kplquuozq7s5NkeQhsxsJ048qcIZPUbW30XHKIIbIL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:3b:94:9c:16:85:bb:76:d5:97:e4:77:86:e3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3 Validity Not Before: Dec 18 22:01:12 2025 GMT Not After : Dec 19 22:01:12 2025 GMT Subject: CN=b6ef7c54cb562c13ff1d1c4156ef2b6e1c8c0b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e2:44:d7:16:64:1b:40:37:2a:8b:1a:67:94: 3d:d6:19:b5:dc:03:07:4d:4f:26:a3:10:62:73:a6: e9:e7:20:d2:ec:b8:d6:62:64:a2:d8:a4:09:aa:fb: 5f:53:fd:cb:ec:1b:ee:a2:b3:fb:86:72:bc:9b:96: ee:32:49:08:f7:3f:c4:6b:06:87:5b:52:00:e3:b1: a3:42:bc:6b:fc:58:0d:99:7e:9c:de:c5:19:08:78: 35:6e:93:18:ad:65:41:ee:6b:1a:69:d4:cc:5a:41: 70:31:4c:ea:37:e8:b3:86:71:73:50:d2:cc:ef:01: b3:ad:98:00:2b:c5:48:e7:4b:8b:6a:9e:d3:92:45: 48:df:89:52:fb:7f:64:4a:e3:f3:00:dc:3c:f5:27: b4:98:a3:b5:0e:0d:cd:a0:f5:75:65:5e:cb:ef:91: ea:27:82:6e:0f:9d:86:fd:b8:f3:27:ac:4e:bf:75: 3b:6d:58:1a:fe:d0:bb:6c:56:31:e9:d8:97:b2:cd: 60:8d:ed:94:78:77:a2:1d:98:d5:84:2b:b7:7c:7e: 98:8a:86:26:37:e9:b2:97:5c:29:73:6e:ff:bc:5d: 88:c7:cd:ea:89:20:d6:1d:a6:9b:b7:60:ba:64:be: b2:3f:44:19:4e:8a:4e:60:85:18:c1:02:0b:02:32: 7a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EF:7C:54:CB:56:2C:13:FF:1D:1C:41:56:EF:2B:6E:1C:8C:0B:3E X509v3 Authority Key Identifier: keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2b:fe:a9:e2:e3:cb:68:7b:d1:e9:e5:14:a9:85:4e:0a:9a: 42:bc:60:e2:24:85:19:d9:67:fa:b6:03:99:ab:fc:3c:96:c6: 0c:43:c3:a0:da:89:52:24:c2:b7:c6:60:96:80:58:65:b9:d3: 13:ae:67:b1:02:d0:36:02:ca:d3:06:18:af:6f:35:0d:b0:fd: 9b:8b:a9:75:f5:71:a4:bc:da:92:52:6a:e5:f5:19:1a:d2:11: b2:1f:0a:fb:e6:0f:37:78:05:db:1d:48:36:ee:b4:2f:6d:3a: cf:86:0c:b2:e1:c9:a0:16:52:d8:5c:dc:cd:ae:be:0c:94:84: f1:27:07:c8:57:1b:72:a1:73:4b:be:d4:f2:96:16:82:cc:12: c6:ba:36:4b:74:78:f5:8c:28:49:aa:99:af:bd:54:6b:22:c7: 72:33:20:f2:37:3c:b4:cd:f6:d1:94:a8:d2:fb:79:49:b9:8e: a6:bf:98:7a:bb:d7:c3:4c:63:9d:8c:2a:94:a5:97:d4:6b:28: 09:c1:2f:bf:55:1d:73:62:81:a5:38:e3:2e:a5:fe:da:5b:30: f4:c8:3f:34:c4:5b:18:3a:46:b0:4c:eb:14:4e:01:95:0f:78: 28:ab:4f:0f:eb:c2:4b:99:a1:bc:8b:7b:63:45:f9:0d:af:86: 56:cb:0c:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszezuUnBaFu3bVl+R3huMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZTk2NWU3ODgzMWE4OGJhOGZhNDE5NDMyYTlkN2JhYzlk YjM4YTMwHhcNMjUxMjE4MjIwMTEyWhcNMjUxMjE5MjIwMTEyWjAzMTEwLwYDVQQD EyhiNmVmN2M1NGNiNTYyYzEzZmYxZDFjNDE1NmVmMmI2ZTFjOGMwYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uJE1xZkG0A3KosaZ5Q91hm13AMH TU8moxBic6bp5yDS7LjWYmSi2KQJqvtfU/3L7BvuorP7hnK8m5buMkkI9z/EawaH W1IA47GjQrxr/FgNmX6c3sUZCHg1bpMYrWVB7msaadTMWkFwMUzqN+izhnFzUNLM 7wGzrZgAK8VI50uLap7TkkVI34lS+39kSuPzANw89Se0mKO1Dg3NoPV1ZV7L75Hq J4JuD52G/bjzJ6xOv3U7bVga/tC7bFYx6diXss1gje2UeHeiHZjVhCu3fH6YioYm N+myl1wpc27/vF2Ix83qiSDWHaabt2C6ZL6yP0QZTopOYIUYwQILAjJ6LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbvfFTLViwT/x0cQVbvK24cjAs+MB8GA1UdIwQY MBaAFIfpZeeIMaiLqPpBlDKp17rJ2zijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaC1sbDU0Z3hxSXVvLWtHVU1xblh1c25iT0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wNTA1MzMtYTU3ZS00YThiLWJmMGQt Y2VlM2I0OTI5MDJlLzEvaC1sbDU0Z3hxSXVvLWtHVU1xblh1c25iT0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wNTA1MzMtYTU3ZS00YThiLWJmMGQtY2VlM2I0OTI5MDJl LzEvaC1sbDU0Z3hxSXVvLWtHVU1xblh1c25iT0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSv+qeLj y2h70enlFKmFTgqaQrxg4iSFGdln+rYDmav8PJbGDEPDoNqJUiTCt8ZgloBYZbnT E65nsQLQNgLK0wYYr281DbD9m4updfVxpLzaklJq5fUZGtIRsh8K++YPN3gF2x1I Nu60L206z4YMsuHJoBZS2Fzcza6+DJSE8ScHyFcbcqFzS77U8pYWgswSxro2S3R4 9YwoSaqZr71UayLHcjMg8jc8tM320ZSo0vt5SbmOpr+YervXw0xjnYwqlKWX1Gso CcEvv1Udc2KBpTjjLqX+2lsw9Mg/NMRbGDpGsEzrFE4BlQ94KKtPD+vCS5mhvIt7 Y0X5Da+GVssMhg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:18 2025 by rpki-client