This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft File: h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json) Hash identifier: QoCYpT4l8IIJNi6VwzyJIDLkIiS3YK6zi2+kE7H+9Es= Subject key identifier: 3B:EC:81:E8:41:68:25:47:E5:27:14:00:5E:6B:78:08:2F:2A:B1:31 Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f Certificate serial: 019B6AD6F437A02AE430981931A5815BBAC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 16:00:30 +0000 Manifest this update: Mon 29 Dec 2025 16:00:30 +0000 Manifest next update: Tue 30 Dec 2025 16:00:30 +0000 Files and hashes: 1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: RBBIRZLw10pji5X9nvL/ojaILwRC8dv6trujXKDJdO4=) 2: vH-eK3MDkjfjQIWGcNruZ1gYj6o.roa (hash: X8Ll3xNOyDNsY8OoD7P2fm6g2ckrfD35bOMThe6H4RM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d6:f4:37:a0:2a:e4:30:98:19:31:a5:81:5b:ba:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f Validity Not Before: Dec 29 16:00:30 2025 GMT Not After : Dec 30 16:00:30 2025 GMT Subject: CN=3bec81e841682547e52714005e6b78082f2ab131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:82:0f:4e:7c:7e:9c:ab:81:e9:8b:88:5a: 0d:c2:29:ee:f8:3d:ea:ac:b4:3d:c0:53:21:ac:43: 86:8a:9e:d5:7b:a4:1d:e4:21:f6:c7:d8:bc:7c:7d: 73:cb:9e:93:40:76:fc:fb:90:d0:d2:12:78:85:bd: d7:97:ae:ee:ae:d0:04:53:0e:19:d4:9e:89:d8:a5: 78:06:26:4f:e4:d2:7c:de:32:65:72:58:be:a1:67: 43:e8:85:47:75:2f:c7:93:af:46:58:54:db:69:07: c9:6b:25:c9:45:94:9f:33:34:36:41:96:50:76:32: a7:86:91:73:28:e4:57:e6:8b:39:3f:b4:2c:aa:ae: a4:2c:2d:f4:20:5d:0e:4d:01:2f:5d:a5:9f:10:cc: 4f:5d:7e:5b:ac:43:42:23:cd:51:41:ba:58:96:10: 9b:d1:ad:60:77:40:23:44:b6:df:dd:89:fe:b4:61: f2:ff:14:0f:54:f9:88:0b:ee:40:a6:4b:29:e7:e0: 84:18:66:b7:0c:3c:92:f4:75:82:a4:41:2c:e8:fb: ff:37:ab:f4:5b:7c:90:c7:c5:9d:cd:28:08:c8:db: c5:45:5f:9c:55:2b:30:bd:7b:26:7f:8e:b6:79:00: 81:bc:e1:81:3d:ef:c1:62:83:56:04:20:e7:d4:f5: aa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EC:81:E8:41:68:25:47:E5:27:14:00:5E:6B:78:08:2F:2A:B1:31 X509v3 Authority Key Identifier: keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:89:6b:27:2c:11:c8:3d:6d:80:ce:30:05:79:ad:d1:d8:88: 77:62:62:0f:22:a9:e6:5e:e4:30:ec:d5:b9:4e:77:f7:a5:f9: b4:71:3f:86:b6:fb:de:b6:4f:87:69:08:24:bf:5b:c0:b8:7a: 27:7f:c2:41:59:ac:70:0b:15:dc:32:d9:97:7f:5a:94:a4:c0: d7:2e:cd:89:1d:60:c9:c2:fc:52:9a:30:84:a4:7c:b8:32:2b: 60:c9:cc:62:47:06:b2:72:1f:b3:85:47:77:85:3e:d3:a5:8d: 94:9e:62:79:4b:36:26:3d:1a:9d:c9:5a:fa:86:9d:62:bc:d5: 40:0e:ae:63:cc:aa:37:29:9e:ae:fa:8f:8a:4b:46:e2:dd:30: 2a:cd:cc:73:6d:b1:d6:b7:5d:d8:c7:70:cf:0e:3a:75:76:be: ab:6b:a8:d2:c3:51:59:a7:09:25:a9:9b:4f:66:53:a6:96:17: 07:81:03:68:64:b6:96:3f:f2:06:9a:28:95:44:80:7c:1d:d0: 74:f7:51:ac:87:50:c9:d4:81:c4:3b:2e:95:f0:0c:91:d5:62: b5:91:06:c3:ab:07:01:97:78:d8:31:aa:6e:2f:ab:59:43:73: 1e:6f:26:42:51:bd:a9:91:e6:bc:e9:2f:c5:3f:5e:a0:8a:0f: 3e:ad:2b:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq1vQ3oCrkMJgZMaWBW7rBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTkyMDg4ZTc2NTVjYjEzNDAyMGNhOTViMGU1N2Q0ZTZk YWY0MGYwHhcNMjUxMjI5MTYwMDMwWhcNMjUxMjMwMTYwMDMwWjAzMTEwLwYDVQQD EygzYmVjODFlODQxNjgyNTQ3ZTUyNzE0MDA1ZTZiNzgwODJmMmFiMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC6CD058fpyrgemLiFoNwinu+D3q rLQ9wFMhrEOGip7Ve6Qd5CH2x9i8fH1zy56TQHb8+5DQ0hJ4hb3Xl67urtAEUw4Z 1J6J2KV4BiZP5NJ83jJlcli+oWdD6IVHdS/Hk69GWFTbaQfJayXJRZSfMzQ2QZZQ djKnhpFzKORX5os5P7Qsqq6kLC30IF0OTQEvXaWfEMxPXX5brENCI81RQbpYlhCb 0a1gd0AjRLbf3Yn+tGHy/xQPVPmIC+5Apksp5+CEGGa3DDyS9HWCpEEs6Pv/N6v0 W3yQx8WdzSgIyNvFRV+cVSswvXsmf462eQCBvOGBPe/BYoNWBCDn1PWqAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvsgehBaCVH5ScUAF5reAgvKrExMB8GA1UdIwQY MBaAFIeZIIjnZVyxNAIMqVsOV9Tm2vQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMt ODVlYTYzYzI0NDc0LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMtODVlYTYzYzI0NDc0 LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4lrJywR yD1tgM4wBXmt0diId2JiDyKp5l7kMOzVuU5396X5tHE/hrb73rZPh2kIJL9bwLh6 J3/CQVmscAsV3DLZl39alKTA1y7NiR1gycL8UpowhKR8uDIrYMnMYkcGsnIfs4VH d4U+06WNlJ5ieUs2Jj0ancla+oadYrzVQA6uY8yqNymervqPiktG4t0wKs3Mc22x 1rdd2Mdwzw46dXa+q2uo0sNRWacJJambT2ZTppYXB4EDaGS2lj/yBpoolUSAfB3Q dPdRrIdQydSBxDsulfAMkdVitZEGw6sHAZd42DGqbi+rWUNzHm8mQlG9qZHmvOkv xT9eoIoPPq0r2w== -----END CERTIFICATE-----Generated at Tue Dec 30 01:34:47 2025 by rpki-client