This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json) Hash identifier: Pqx0LEYqbtvOJqXQMCzrFZU+C61u3o3AIadxREdEuz8= Subject key identifier: E4:2B:CF:3A:C2:3B:D5:0A:72:79:1D:45:EA:E4:AD:B6:AD:00:53:51 Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57 Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157 Certificate serial: 019B4091CFE9EADDF6861BE10636070F234A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft Manifest number: 06B2 Signing time: Sun 21 Dec 2025 11:00:56 +0000 Manifest this update: Sun 21 Dec 2025 11:00:56 +0000 Manifest next update: Mon 22 Dec 2025 11:00:56 +0000 Files and hashes: 1: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: gVMTM1IVsARloYzMCJbFWJw7V03Hjy35uP9V+zV/QOw=) 2: qK0r22fc4dStcfs-iJMEOqc-e8I.roa (hash: szAPsZBmBxrbRZJWId/rghs7S63YVBb1wXhPcGatKBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:cf:e9:ea:dd:f6:86:1b:e1:06:36:07:0f:23:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157 Validity Not Before: Dec 21 11:00:56 2025 GMT Not After : Dec 22 11:00:56 2025 GMT Subject: CN=e42bcf3ac23bd50a72791d45eae4adb6ad005351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:9f:77:40:01:2c:ba:c5:66:6a:b8:66:58: f5:04:70:a2:26:db:e6:9e:62:2f:03:6f:73:7b:c1: 2c:5a:39:e8:00:8a:6c:ee:6b:81:31:ee:8a:d4:bd: f1:1d:c1:ef:cc:2a:5a:c7:c7:b2:2b:c9:f2:35:44: 51:0b:74:65:91:a0:4d:7c:ae:5f:45:ce:05:c1:d5: 9a:c4:d1:35:f9:b1:fa:72:45:2d:d9:26:7a:14:28: 70:63:2f:c0:88:27:71:57:89:93:af:49:5a:1a:2c: e0:cd:b7:ae:ef:c9:36:d1:81:7d:42:07:ee:be:40: 83:99:b1:83:2f:99:ab:ef:25:30:a5:2e:48:e9:9c: 45:1b:90:fb:7e:f9:f0:db:df:db:7b:22:7e:8c:8d: d3:1f:75:e1:3c:10:75:1f:7a:5a:3c:16:02:75:c3: 89:e8:40:2c:79:f6:4d:bf:b8:ec:1e:b3:fa:f5:29: 9c:83:01:46:71:90:c3:91:fb:97:d9:ab:d4:b8:6f: 8c:13:76:79:bb:b1:54:96:b1:ec:fb:cc:75:90:1a: 6f:b3:ba:be:14:cf:03:75:21:1f:48:fe:6a:5d:44: 1f:da:0c:bb:e9:e8:41:bc:ce:6e:a5:76:e2:68:17: 77:58:b6:a7:e0:cf:7d:47:8e:5b:c1:88:01:5e:45: 80:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2B:CF:3A:C2:3B:D5:0A:72:79:1D:45:EA:E4:AD:B6:AD:00:53:51 X509v3 Authority Key Identifier: keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f1:a5:ec:3b:3d:95:ba:49:12:15:96:2b:30:80:e0:5c:19: cc:b4:af:84:cd:49:6c:40:67:09:cd:d2:98:52:9e:43:35:e0: 84:55:2d:4b:4e:28:62:d6:bc:1c:77:e6:2c:66:56:7b:ee:9e: ad:fb:38:2a:f1:76:d8:e4:fc:af:ff:e0:8e:82:19:42:6e:6c: fb:93:2a:52:58:95:cb:ca:9b:99:6c:21:de:02:3d:1b:e8:aa: cb:4b:57:84:a8:bc:ac:d4:06:81:77:06:b3:23:1b:17:1e:8b: 8d:9f:62:26:b0:ad:53:03:c4:70:20:8c:42:b3:ab:75:5c:4e: f0:8b:36:3b:06:53:8c:72:fd:63:53:a3:ab:62:46:c2:12:8c: 75:a4:e4:45:10:07:64:01:80:02:5c:ee:2f:b1:7a:04:e7:7e: 2e:3d:b1:44:b3:72:ef:67:bb:b6:ac:40:da:06:fb:78:f1:68: 89:b7:7c:60:01:ea:09:33:20:55:4f:20:84:88:45:3e:dd:73: fa:53:52:2a:a0:f5:54:98:72:41:bb:0a:63:8e:ba:b4:83:4c: d0:ed:bf:8c:2d:8d:19:11:10:13:db:91:8e:76:8f:d3:27:71: db:be:94:46:fc:18:ec:a0:78:c6:9b:4a:aa:35:2b:9c:4e:c0: c3:c4:89:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkc/p6t32hhvhBjYHDyNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YjNjYjJkNmZiNjhlNmVkYjg0NDJmZWIwYWJmYzk1YWVi NWIxNTcwHhcNMjUxMjIxMTEwMDU2WhcNMjUxMjIyMTEwMDU2WjAzMTEwLwYDVQQD EyhlNDJiY2YzYWMyM2JkNTBhNzI3OTFkNDVlYWU0YWRiNmFkMDA1MzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhmfd0ABLLrFZmq4Zlj1BHCiJtvm nmIvA29ze8EsWjnoAIps7muBMe6K1L3xHcHvzCpax8eyK8nyNURRC3RlkaBNfK5f Rc4FwdWaxNE1+bH6ckUt2SZ6FChwYy/AiCdxV4mTr0laGizgzbeu78k20YF9Qgfu vkCDmbGDL5mr7yUwpS5I6ZxFG5D7fvnw29/beyJ+jI3TH3XhPBB1H3paPBYCdcOJ 6EAsefZNv7jsHrP69SmcgwFGcZDDkfuX2avUuG+ME3Z5u7FUlrHs+8x1kBpvs7q+ FM8DdSEfSP5qXUQf2gy76ehBvM5upXbiaBd3WLan4M99R45bwYgBXkWA3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQrzzrCO9UKcnkdRerkrbatAFNRMB8GA1UdIwQY MBaAFIezyy1vto5u24RC/rCr/JWutbFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdQTExXLTJqbTdiaEVMLXNLdjhsYTYxc1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85OWQ5YTYtMTNiZS00MGFiLWJlNTMt YjQyYTRjM2U5MTZiLzEvaDdQTExXLTJqbTdiaEVMLXNLdjhsYTYxc1ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85OWQ5YTYtMTNiZS00MGFiLWJlNTMtYjQyYTRjM2U5MTZi LzEvaDdQTExXLTJqbTdiaEVMLXNLdjhsYTYxc1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfGl7Ds9 lbpJEhWWKzCA4FwZzLSvhM1JbEBnCc3SmFKeQzXghFUtS04oYta8HHfmLGZWe+6e rfs4KvF22OT8r//gjoIZQm5s+5MqUliVy8qbmWwh3gI9G+iqy0tXhKi8rNQGgXcG syMbFx6LjZ9iJrCtUwPEcCCMQrOrdVxO8Is2OwZTjHL9Y1Ojq2JGwhKMdaTkRRAH ZAGAAlzuL7F6BOd+Lj2xRLNy72e7tqxA2gb7ePFoibd8YAHqCTMgVU8ghIhFPt1z +lNSKqD1VJhyQbsKY466tINM0O2/jC2NGREQE9uRjnaP0ydx276URvwY7KB4xptK qjUrnE7Aw8SJOg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:37:33 2025 by rpki-client