This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json) Hash identifier: bGPi9uLEt5wxTmgE2TiwZD2GbtjS7pKczKKqdk8RtJg= Subject key identifier: 54:A8:92:0D:5E:86:62:00:4A:B4:0F:BE:26:C9:F5:7F:0B:ED:70:CD Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34 Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34 Certificate serial: 019B397CFD3A012C7A7D21D88421B635913A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft Manifest number: 064E Signing time: Sat 20 Dec 2025 02:00:51 +0000 Manifest this update: Sat 20 Dec 2025 02:00:51 +0000 Manifest next update: Sun 21 Dec 2025 02:00:51 +0000 Files and hashes: 1: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: b4RQhtlHi/obUH4PzXWkrtWYUbqhRX+M5DrLKUryNug=) 2: mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa (hash: F4Jtc5+FUEqcLwMhPjxlPH6jWlgxGrbFa+YLXHGjjaE=) 3: tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa (hash: 26ICYZJOvq605v0CSl1cezfNjCXPU7AckP1ImmTpFUQ=) 4: u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa (hash: z1DWJwaHbuR/Qct83OIrMO/3C45DlWrhtr2MVeCX/hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7c:fd:3a:01:2c:7a:7d:21:d8:84:21:b6:35:91:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34 Validity Not Before: Dec 20 02:00:51 2025 GMT Not After : Dec 21 02:00:51 2025 GMT Subject: CN=54a8920d5e8662004ab40fbe26c9f57f0bed70cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:d5:48:7a:8b:9e:09:4f:17:cc:72:f6:81: f9:1f:b1:93:0a:2f:42:2b:29:a4:d2:31:75:3e:d5: bd:42:14:f1:02:13:3f:1b:94:17:69:dc:7b:c4:1d: a6:37:0b:36:1b:6c:cc:f3:63:78:64:6f:e5:f0:e3: a4:60:ea:b7:1a:14:26:98:bd:88:ed:76:c0:d6:04: d6:58:d8:f3:35:fa:cc:cc:c6:8c:05:b3:3d:f8:2a: 74:73:26:01:29:23:5b:9c:4e:fa:e3:f4:a4:dd:d0: 3b:3f:32:5e:cb:3e:9b:d3:d1:e4:a8:e0:89:e2:3b: d2:12:fc:89:93:97:59:6a:f8:1b:92:c0:ca:5d:e6: 1a:9c:62:2a:37:dc:d3:21:e4:81:a1:55:59:8b:15: 4c:36:3f:0b:b2:b0:01:87:ea:a8:9b:3d:73:36:fa: 6f:4a:0c:99:06:6f:d2:5d:31:1e:8c:02:b4:9c:e7: 2a:98:d4:f5:6d:24:cd:70:07:54:e9:6b:5d:49:b9: b9:6b:22:7d:a3:36:0e:37:48:b0:13:49:9d:c2:31: 05:01:c7:13:44:b8:f4:9a:04:61:8c:e2:a7:f6:e6: 74:62:53:89:03:39:ff:5a:27:53:d5:a0:a8:eb:58: 34:f0:1e:0e:dd:2e:fb:d6:60:ca:47:c2:dc:94:4f: 38:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A8:92:0D:5E:86:62:00:4A:B4:0F:BE:26:C9:F5:7F:0B:ED:70:CD X509v3 Authority Key Identifier: keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:cc:83:16:13:c4:95:60:05:f2:53:c1:dd:dd:c1:f9:41:3c: 07:47:f6:3c:8f:e9:92:c7:ef:56:be:f7:43:88:4f:05:3b:91: cb:59:84:fd:c7:10:9b:9f:bc:14:3d:32:ee:68:1f:6b:47:08: 52:9c:68:4c:64:18:5a:78:ed:a4:bb:30:62:c2:da:7a:ee:83: 28:63:b6:e3:a2:98:85:c8:3d:4f:01:63:09:91:22:ed:1e:70: ca:36:01:b2:9c:9d:53:2f:20:6c:70:5c:a6:7c:cf:e2:67:2f: 5c:d9:2d:7f:7a:36:7f:0d:df:92:06:1e:73:df:42:0a:e2:46: 43:7f:db:17:f9:86:9e:0e:cd:01:8e:1c:0d:76:51:5e:85:2e: 9c:c1:42:bb:dd:da:2f:f7:38:7e:2c:d8:11:52:33:02:09:71: 8b:93:88:fc:db:f2:39:74:af:67:07:04:df:8d:bc:b8:8c:62: ce:e7:47:28:09:3b:38:0d:8e:e4:04:70:e2:38:98:7e:3a:04: 29:cc:9b:28:8b:14:ac:26:ff:ca:0f:cc:c4:54:73:ed:2d:e8: e9:b4:f6:76:b8:dc:45:e9:fb:ff:d0:dc:9c:8a:e3:97:b0:7d: db:aa:2e:ae:67:4c:b4:50:7e:db:a4:26:28:0f:c7:83:e0:66: 1b:d3:cc:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fP06ASx6fSHYhCG2NZE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjN2M3ZDQ4ODg3ZTJmMDg2NWQ3MDFjZGM2ZTBiYjdkZWVk NWRiMzQwHhcNMjUxMjIwMDIwMDUxWhcNMjUxMjIxMDIwMDUxWjAzMTEwLwYDVQQD Eyg1NGE4OTIwZDVlODY2MjAwNGFiNDBmYmUyNmM5ZjU3ZjBiZWQ3MGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeTVSHqLnglPF8xy9oH5H7GTCi9C Kymk0jF1PtW9QhTxAhM/G5QXadx7xB2mNws2G2zM82N4ZG/l8OOkYOq3GhQmmL2I 7XbA1gTWWNjzNfrMzMaMBbM9+Cp0cyYBKSNbnE764/Sk3dA7PzJeyz6b09HkqOCJ 4jvSEvyJk5dZavgbksDKXeYanGIqN9zTIeSBoVVZixVMNj8LsrABh+qomz1zNvpv SgyZBm/SXTEejAK0nOcqmNT1bSTNcAdU6WtdSbm5ayJ9ozYON0iwE0mdwjEFAccT RLj0mgRhjOKn9uZ0YlOJAzn/WidT1aCo61g08B4O3S771mDKR8LclE84VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSokg1ehmIASrQPvibJ9X8L7XDNMB8GA1UdIwQY MBaAFHx8fUiIfi8IZdcBzcbgu33u1ds0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYt ZjdhYmVmM2M4YTJiLzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYtZjdhYmVmM2M4YTJi LzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcyDFhPE lWAF8lPB3d3B+UE8B0f2PI/pksfvVr73Q4hPBTuRy1mE/ccQm5+8FD0y7mgfa0cI UpxoTGQYWnjtpLswYsLaeu6DKGO246KYhcg9TwFjCZEi7R5wyjYBspydUy8gbHBc pnzP4mcvXNktf3o2fw3fkgYec99CCuJGQ3/bF/mGng7NAY4cDXZRXoUunMFCu93a L/c4fizYEVIzAglxi5OI/NvyOXSvZwcE3428uIxizudHKAk7OA2O5ARw4jiYfjoE KcybKIsUrCb/yg/MxFRz7S3o6bT2drjcRen7/9DcnIrjl7B926ourmdMtFB+26Qm KA/Hg+BmG9PMwQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:51:55 2025 by rpki-client