This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json) Hash identifier: w9T+VubBkSGqEBsjU3DMOdEWDvcI9WTTpj/0MT7hUg0= Subject key identifier: 6E:4F:C5:FE:87:79:57:77:77:BA:D4:DE:D9:5F:D7:BF:57:4C:B0:6F Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7 Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7 Certificate serial: 019B311F200FD04ECDD3DC3ECCBCAAFEFD2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft Manifest number: 069A Signing time: Thu 18 Dec 2025 11:01:21 +0000 Manifest this update: Thu 18 Dec 2025 11:01:21 +0000 Manifest next update: Fri 19 Dec 2025 11:01:21 +0000 Files and hashes: 1: HxD2Tgnl9DbU7Fb8vyXYt-Ezj6A.roa (hash: 21Z2ZIhjOIjkwftoPhASqvQtUr2MxHlKe4XS++23wKw=) 2: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: BIcLDRx/k+qComnyT7K6z1CeyXW4IWTYb+fNLqv0k6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1f:20:0f:d0:4e:cd:d3:dc:3e:cc:bc:aa:fe:fd:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7 Validity Not Before: Dec 18 11:01:21 2025 GMT Not After : Dec 19 11:01:21 2025 GMT Subject: CN=6e4fc5fe8779577777bad4ded95fd7bf574cb06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:ef:2d:43:8d:7f:a0:9f:44:92:e1:72:6c: 10:22:a1:a2:a5:25:f3:ba:6b:63:8b:24:3c:81:e2: 32:65:51:be:27:2d:fc:e0:3b:9e:a5:6f:45:aa:70: 5c:bc:bb:a4:93:a8:3a:cc:65:20:7d:a1:cc:a9:3d: af:69:6d:59:9f:a3:46:c4:94:5f:56:9f:21:25:34: 60:44:e3:b1:a5:76:1b:95:67:c7:09:38:25:8e:1f: b4:d9:e3:60:e7:c7:00:b2:3b:33:be:9a:f4:9f:c8: cc:16:c7:6e:d4:e7:5e:1a:49:66:7d:24:4f:b6:86: f0:4a:f3:01:b3:3b:05:a5:4c:21:30:63:f6:21:79: 58:c8:00:57:ed:7a:2d:86:fe:ff:d9:78:53:04:49: 41:6d:62:32:b8:f8:99:99:d9:89:11:36:c7:37:d9: db:12:75:9d:22:4a:0e:41:0b:1c:65:93:22:68:48: 56:75:90:44:e9:c1:08:31:be:40:c8:f7:09:51:dc: 75:f7:0b:ba:ea:65:cd:6c:a1:80:10:7c:5a:be:26: 42:c5:87:fa:9c:ab:c8:7a:31:eb:0d:56:bb:b4:4b: 10:99:46:99:d3:aa:af:ae:dd:e3:64:a7:14:d3:4c: 91:f7:dd:de:bf:22:3f:45:5d:2d:53:a4:db:e5:fb: 31:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4F:C5:FE:87:79:57:77:77:BA:D4:DE:D9:5F:D7:BF:57:4C:B0:6F X509v3 Authority Key Identifier: keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:db:6c:60:8c:6a:5d:20:54:45:c7:eb:e4:44:8b:08:10:a8: 9d:55:16:40:04:24:06:c1:3f:a5:cf:df:48:a6:4b:8e:ab:c5: 8c:ff:17:7b:33:52:cd:dd:b1:ce:65:ba:59:8d:4e:7e:b0:81: 92:c8:58:be:e5:79:38:7e:9b:cd:7e:47:96:9d:d4:d4:b4:20: a8:00:74:ae:93:1d:69:df:72:6b:93:c7:91:5d:f5:91:3c:f7: 40:56:49:7c:8f:77:41:f0:4c:bf:ea:b5:05:36:71:72:b9:d0: 13:db:1e:84:23:4e:99:f3:77:d2:39:f0:53:40:8d:ef:88:71: 08:dd:9e:09:68:ad:22:8d:0d:17:84:5c:73:5f:d6:98:b8:36: 35:0b:ce:15:93:de:54:c0:4d:92:86:34:c7:2d:ef:39:c4:23: f9:40:b7:ee:16:57:ad:e2:93:d1:c2:72:eb:54:46:8b:53:74: a5:26:26:f5:8c:2a:76:aa:51:d4:e5:8f:c9:6d:9d:e1:20:50: f0:39:f0:51:76:a6:26:36:71:20:00:3c:30:0e:e2:80:de:31: 25:7f:a6:98:4c:c9:1a:6f:87:84:0b:43:6a:7b:1b:4d:66:7c: 26:31:b5:c8:4e:b1:87:75:af:6e:b8:19:ab:f6:86:b9:b5:54: c0:6a:cc:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHyAP0E7N09w+zLyq/v0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YjEzOTZmZDExYzczMGVmMjA0NDgxMjliMjgyODU2YWM1 MDRjYjcwHhcNMjUxMjE4MTEwMTIxWhcNMjUxMjE5MTEwMTIxWjAzMTEwLwYDVQQD Eyg2ZTRmYzVmZTg3Nzk1Nzc3NzdiYWQ0ZGVkOTVmZDdiZjU3NGNiMDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq/vLUONf6CfRJLhcmwQIqGipSXz umtjiyQ8geIyZVG+Jy384DuepW9FqnBcvLukk6g6zGUgfaHMqT2vaW1Zn6NGxJRf Vp8hJTRgROOxpXYblWfHCTgljh+02eNg58cAsjszvpr0n8jMFsdu1OdeGklmfSRP tobwSvMBszsFpUwhMGP2IXlYyABX7Xothv7/2XhTBElBbWIyuPiZmdmJETbHN9nb EnWdIkoOQQscZZMiaEhWdZBE6cEIMb5AyPcJUdx19wu66mXNbKGAEHxaviZCxYf6 nKvIejHrDVa7tEsQmUaZ06qvrt3jZKcU00yR993evyI/RV0tU6Tb5fsxXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5Pxf6HeVd3d7rU3tlf179XTLBvMB8GA1UdIwQY MBaAFIexOW/RHHMO8gRIEpsoKFasUEy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGIt ZjRlN2M5Y2M0M2ZmLzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGItZjRlN2M5Y2M0M2Zm LzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAydtsYIxq XSBURcfr5ESLCBConVUWQAQkBsE/pc/fSKZLjqvFjP8XezNSzd2xzmW6WY1OfrCB kshYvuV5OH6bzX5Hlp3U1LQgqAB0rpMdad9ya5PHkV31kTz3QFZJfI93QfBMv+q1 BTZxcrnQE9sehCNOmfN30jnwU0CN74hxCN2eCWitIo0NF4Rcc1/WmLg2NQvOFZPe VMBNkoY0xy3vOcQj+UC37hZXreKT0cJy61RGi1N0pSYm9YwqdqpR1OWPyW2d4SBQ 8DnwUXamJjZxIAA8MA7igN4xJX+mmEzJGm+HhAtDansbTWZ8JjG1yE6xh3WvbrgZ q/aGubVUwGrMYQ== -----END CERTIFICATE-----Generated at Thu Dec 18 12:47:59 2025 by rpki-client