This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft File: h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json) Hash identifier: BCxikpKS/p7YJrJ9g7c6U8s7YI4fzLarMb1MgX0iT88= Subject key identifier: 67:0A:37:24:5B:2F:85:58:94:EC:29:C9:28:48:27:B2:9A:F4:07:E0 Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f Certificate serial: 019B3E6C228E05C0B0D9D8443A33D2909F09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 01:00:32 +0000 Manifest this update: Sun 21 Dec 2025 01:00:32 +0000 Manifest next update: Mon 22 Dec 2025 01:00:32 +0000 Files and hashes: 1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: Sx+34WDM4S0yNy02HEYDEDwdwmVr0eRv9bqRBQ+QGzI=) 2: vH-eK3MDkjfjQIWGcNruZ1gYj6o.roa (hash: X8Ll3xNOyDNsY8OoD7P2fm6g2ckrfD35bOMThe6H4RM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:22:8e:05:c0:b0:d9:d8:44:3a:33:d2:90:9f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f Validity Not Before: Dec 21 01:00:32 2025 GMT Not After : Dec 22 01:00:32 2025 GMT Subject: CN=670a37245b2f855894ec29c9284827b29af407e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:80:5c:8a:24:54:75:08:42:8a:53:d3:f4: 32:f2:e2:95:a9:e6:c6:a6:c1:4a:c8:da:87:15:de: 0c:cd:29:3a:04:4d:ca:28:a1:79:e8:73:23:70:1b: 19:fe:88:fb:6e:24:2b:78:fe:dd:af:2b:9f:21:a9: bd:79:ad:8a:c8:3b:db:bc:74:30:c5:6a:7a:83:0c: 82:94:1e:d0:c1:8c:fc:f5:0b:80:55:a5:a8:3f:01: c6:45:e4:6c:f6:a5:9c:98:9f:c6:e2:2e:6a:10:a6: 5c:ed:37:68:75:3a:20:f1:33:9b:89:d6:66:66:f4: a4:4d:f5:61:26:27:f6:55:91:5a:e4:11:cd:d5:b2: 16:7b:3e:48:63:f2:30:06:2c:fb:f6:b9:b7:30:bb: 37:71:5d:68:9a:1a:e9:a6:88:5b:c6:34:a1:2e:49: ac:da:0b:b8:71:2e:d4:c7:f6:bf:0a:fb:4c:15:a0: 01:c5:24:e6:18:09:29:3f:ad:70:a3:c1:3d:ec:45: b8:01:1a:77:2d:7d:c6:73:0e:2f:1c:f8:6d:3d:74: 98:5d:74:fc:66:1b:0c:4f:c7:52:c5:39:bc:60:9b: b2:b0:8b:a2:82:ee:e7:91:b7:01:6e:c6:7d:b7:8f: 29:86:03:b3:84:aa:63:e2:4d:48:07:cd:7e:7f:5f: 0a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0A:37:24:5B:2F:85:58:94:EC:29:C9:28:48:27:B2:9A:F4:07:E0 X509v3 Authority Key Identifier: keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:73:c1:84:c2:81:5d:9e:2b:1e:7a:4d:64:4b:4e:65:21:ba: b1:36:fa:d9:66:4d:37:5c:a0:50:45:e8:7e:bd:8a:32:85:da: ef:ff:b6:e4:c1:f3:40:db:de:8c:b0:91:f0:b1:66:a6:7e:36: 95:b8:ce:25:5a:e7:70:b6:fa:5a:3c:05:1d:d2:da:95:a8:da: 03:ae:5b:6b:42:6c:e2:1b:f2:3e:5e:ab:cc:d9:26:f0:f2:81: eb:34:79:33:33:36:2d:21:39:db:a4:31:6e:13:84:aa:d4:2b: 84:d2:ce:27:41:a9:f2:1a:0b:26:7c:d8:30:4d:90:89:00:d5: 58:d5:00:d8:0f:37:17:1c:a9:1e:b8:a4:c8:8b:d8:51:24:08: fc:c6:78:42:14:7d:16:ed:24:28:d7:46:d3:17:dd:6a:6e:f3: 66:4b:d4:76:ff:71:d8:ce:25:6a:2b:1c:9a:81:77:5b:a9:49: 4b:ce:b9:fb:b2:9b:0c:82:3b:ab:89:18:f8:52:9d:10:3c:0a: be:61:4e:33:da:e2:f4:73:ff:d9:b7:38:26:6e:c8:5f:2b:17: 95:b7:2d:2d:6f:72:bb:1a:ce:d6:d5:c4:32:1d:bc:37:8c:85: 39:67:82:55:c8:4c:f7:ad:6c:4d:ad:89:00:80:49:18:8f:d2: 64:7e:d8:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bCKOBcCw2dhEOjPSkJ8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTkyMDg4ZTc2NTVjYjEzNDAyMGNhOTViMGU1N2Q0ZTZk YWY0MGYwHhcNMjUxMjIxMDEwMDMyWhcNMjUxMjIyMDEwMDMyWjAzMTEwLwYDVQQD Eyg2NzBhMzcyNDViMmY4NTU4OTRlYzI5YzkyODQ4MjdiMjlhZjQwN2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI6AXIokVHUIQopT0/Qy8uKVqebG psFKyNqHFd4MzSk6BE3KKKF56HMjcBsZ/oj7biQreP7dryufIam9ea2KyDvbvHQw xWp6gwyClB7QwYz89QuAVaWoPwHGReRs9qWcmJ/G4i5qEKZc7TdodTog8TObidZm ZvSkTfVhJif2VZFa5BHN1bIWez5IY/IwBiz79rm3MLs3cV1omhrppohbxjShLkms 2gu4cS7Ux/a/CvtMFaABxSTmGAkpP61wo8E97EW4ARp3LX3Gcw4vHPhtPXSYXXT8 ZhsMT8dSxTm8YJuysIuigu7nkbcBbsZ9t48phgOzhKpj4k1IB81+f18KiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcKNyRbL4VYlOwpyShIJ7Ka9AfgMB8GA1UdIwQY MBaAFIeZIIjnZVyxNAIMqVsOV9Tm2vQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMt ODVlYTYzYzI0NDc0LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMtODVlYTYzYzI0NDc0 LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3PBhMKB XZ4rHnpNZEtOZSG6sTb62WZNN1ygUEXofr2KMoXa7/+25MHzQNvejLCR8LFmpn42 lbjOJVrncLb6WjwFHdLalajaA65ba0Js4hvyPl6rzNkm8PKB6zR5MzM2LSE526Qx bhOEqtQrhNLOJ0Gp8hoLJnzYME2QiQDVWNUA2A83FxypHrikyIvYUSQI/MZ4QhR9 Fu0kKNdG0xfdam7zZkvUdv9x2M4laiscmoF3W6lJS865+7KbDII7q4kY+FKdEDwK vmFOM9ri9HP/2bc4Jm7IXysXlbctLW9yuxrO1tXEMh28N4yFOWeCVchM961sTa2J AIBJGI/SZH7YyA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:10:13 2025 by rpki-client