This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json) Hash identifier: x43Qu4lEVAdojEDwniYZwIQwIu0ZKRmemgGQfISRKY0= Subject key identifier: CA:61:A9:CA:C5:2A:D7:5B:F4:47:CF:D1:93:A3:7C:66:5E:10:AF:25 Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd Certificate serial: 019B39B45E6A41ECBDB1F8B4715655A1E0D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 03:01:20 +0000 Manifest this update: Sat 20 Dec 2025 03:01:20 +0000 Manifest next update: Sun 21 Dec 2025 03:01:20 +0000 Files and hashes: 1: FsLVTd1Z_Y1_QKD3XsSC6T-7WSc.roa (hash: MfqtShshWzvZLLqxVYU/rnjLf5/rPRnD2xrlVc90HQU=) 2: O26SvIi-iLlAArpGPoL_kcRMLz8.roa (hash: x6EwUP7G9se/ub/wgAs57oTYgG0nrtLTkuveOv5jyO4=) 3: eXFZQO35x46hI1_B-kM0oX7ba3w.roa (hash: IKEAMPDMrBLKazuRwlONi5mwZJ2E45qg/Wd4/iF4QYg=) 4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: kmlwhDMP4lZrmy7mR3mAIoaaT6/69cGv4QQRK5z2FPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:5e:6a:41:ec:bd:b1:f8:b4:71:56:55:a1:e0:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd Validity Not Before: Dec 20 03:01:20 2025 GMT Not After : Dec 21 03:01:20 2025 GMT Subject: CN=ca61a9cac52ad75bf447cfd193a37c665e10af25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:23:d0:2b:d4:6f:e0:41:e5:0e:8a:a2:46:d3: 09:cb:cc:91:1f:09:d1:43:83:6c:8d:71:fb:ed:62: f1:4e:96:1d:76:68:b8:cd:4b:47:9a:05:61:68:65: 90:7f:6a:c0:66:d6:37:a6:f1:98:7c:f5:cf:5f:d7: 94:7f:f7:05:7f:a7:a9:8c:8b:f5:ec:6c:64:75:47: e8:b0:c3:c7:95:e5:e3:83:43:0a:aa:7a:d0:9e:ac: 09:67:b6:e4:c7:46:0a:2b:e8:71:7a:44:13:9e:84: 98:75:d8:3c:5e:b0:77:cf:b1:db:75:05:92:c2:b5: 44:08:a4:e4:67:f8:9a:ed:b1:2a:d4:99:32:d5:ce: 2b:8d:62:0e:41:54:51:d4:ba:e1:b7:0b:51:2d:03: 24:87:22:fb:ee:c7:ca:1f:90:4e:88:ce:5a:36:d9: f2:60:09:2a:f7:b9:25:de:d5:92:05:9e:f9:08:00: 23:c1:71:6a:7d:f3:e7:b2:a8:01:5f:e5:3f:71:44: 13:6d:94:61:27:ae:2b:82:9e:67:aa:48:ba:7c:87: 06:01:f1:e6:6a:a0:bc:28:c8:ce:26:fc:25:b2:ea: e7:06:c5:b5:27:ba:b5:39:c9:fb:bd:e3:73:31:85: 81:ed:33:df:d2:a2:88:19:59:38:b0:57:ec:b8:a6: 54:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:61:A9:CA:C5:2A:D7:5B:F4:47:CF:D1:93:A3:7C:66:5E:10:AF:25 X509v3 Authority Key Identifier: keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:7a:e8:ba:f6:45:32:6f:1c:ac:89:1c:f6:05:9e:6a:15:9b: 3e:90:e4:7d:b8:ee:8b:fc:df:ac:a2:b4:d0:d1:ab:6a:50:47: bf:4f:e1:09:e9:38:05:3d:ac:f7:b8:29:b3:e9:e4:d3:04:16: 39:60:b3:b4:59:db:4d:e5:a6:c9:14:51:72:01:a7:f2:c7:86: a0:26:56:34:94:49:f1:65:ce:38:c1:ef:ba:87:8b:a2:21:2c: bb:33:0a:0e:1b:1c:eb:ff:90:46:f3:7e:b3:f7:eb:9e:e6:a1: fd:c8:63:08:20:e2:80:75:8f:55:54:54:5a:ce:fe:0d:5d:d7: 8f:27:ed:42:48:49:19:5e:67:24:16:25:c0:a8:66:4d:4a:b5: 67:29:8f:b2:d0:9f:de:18:9a:04:46:9d:e2:c1:cc:b9:b8:56: 5f:7a:65:e8:b9:c4:ca:72:05:f2:3f:6e:97:3d:ae:70:41:45: 6e:19:53:0d:ee:af:4d:08:81:b8:50:7e:0b:3c:1c:ab:27:aa: d4:7c:0c:84:e1:58:be:a9:4c:91:63:ea:5e:88:6d:17:03:95: 14:be:92:33:4c:6f:ca:2d:5f:10:f0:35:92:1c:ca:23:e9:8f: fc:bc:19:4c:d6:e2:61:5e:d1:17:76:4d:a5:9a:34:b6:a7:e4: 57:39:e0:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tF5qQey9sfi0cVZVoeDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YzM3ZDAzNWQ5NWZlZmJhMWQ0N2Y5OGI5ZmY0OTczZjE3 ZGY2Y2QwHhcNMjUxMjIwMDMwMTIwWhcNMjUxMjIxMDMwMTIwWjAzMTEwLwYDVQQD EyhjYTYxYTljYWM1MmFkNzViZjQ0N2NmZDE5M2EzN2M2NjVlMTBhZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCPQK9Rv4EHlDoqiRtMJy8yRHwnR Q4NsjXH77WLxTpYddmi4zUtHmgVhaGWQf2rAZtY3pvGYfPXPX9eUf/cFf6epjIv1 7GxkdUfosMPHleXjg0MKqnrQnqwJZ7bkx0YKK+hxekQTnoSYddg8XrB3z7HbdQWS wrVECKTkZ/ia7bEq1Jky1c4rjWIOQVRR1LrhtwtRLQMkhyL77sfKH5BOiM5aNtny YAkq97kl3tWSBZ75CAAjwXFqffPnsqgBX+U/cUQTbZRhJ64rgp5nqki6fIcGAfHm aqC8KMjOJvwlsurnBsW1J7q1Ocn7veNzMYWB7TPf0qKIGVk4sFfsuKZU3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMphqcrFKtdb9EfP0ZOjfGZeEK8lMB8GA1UdIwQY MBaAFIfDfQNdlf77odR/mLn/SXPxffbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81ZWYwNjAtZjQ3My00MDQzLWI4YTIt ZTFiN2M3NjQ5ZmEzLzEvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS81ZWYwNjAtZjQ3My00MDQzLWI4YTItZTFiN2M3NjQ5ZmEz LzEvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXrouvZF Mm8crIkc9gWeahWbPpDkfbjui/zfrKK00NGralBHv0/hCek4BT2s97gps+nk0wQW OWCztFnbTeWmyRRRcgGn8seGoCZWNJRJ8WXOOMHvuoeLoiEsuzMKDhsc6/+QRvN+ s/frnuah/chjCCDigHWPVVRUWs7+DV3XjyftQkhJGV5nJBYlwKhmTUq1ZymPstCf 3hiaBEad4sHMubhWX3pl6LnEynIF8j9ulz2ucEFFbhlTDe6vTQiBuFB+Czwcqyeq 1HwMhOFYvqlMkWPqXohtFwOVFL6SM0xvyi1fEPA1khzKI+mP/LwZTNbiYV7RF3ZN pZo0tqfkVzng8w== -----END CERTIFICATE-----Generated at Sat Dec 20 07:38:07 2025 by rpki-client