This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft File: h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json) Hash identifier: A26pxMhoNl1VkodovOqtN92EE3pvkChckIhg5uAIxQg= Subject key identifier: D8:17:05:32:55:62:04:5C:7A:FE:AB:BE:DF:65:F5:3A:21:9E:44:0B Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D Certificate issuer: /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d Certificate serial: 019B326852C17DD250FE56F47C99AD96A7E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft Manifest number: 087B Signing time: Thu 18 Dec 2025 17:00:56 +0000 Manifest this update: Thu 18 Dec 2025 17:00:56 +0000 Manifest next update: Fri 19 Dec 2025 17:00:56 +0000 Files and hashes: 1: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: 41J/oVSsQN+13aDy7aQ3u8Eo+aRwj1DUv8Sm/15miGM=) 2: hlby1xXJUtbaqPmELmi7xbziBY8.roa (hash: QsHPEqttrfF2zMx3M7sZxcReCt1hljy1sF+KTN49S3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:52:c1:7d:d2:50:fe:56:f4:7c:99:ad:96:a7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d Validity Not Before: Dec 18 17:00:56 2025 GMT Not After : Dec 19 17:00:56 2025 GMT Subject: CN=d81705325562045c7afeabbedf65f53a219e440b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:21:91:30:34:7d:68:d0:c2:13:b0:4b:26:08: 4b:45:19:ec:05:f9:0e:43:08:41:a4:c0:12:ca:23: 63:90:bb:8d:c3:45:2d:51:b1:60:c9:c5:2f:5d:94: 56:70:6d:d6:a5:1d:81:0f:09:78:9d:6a:bc:24:06: ca:2f:7c:ba:7c:67:8e:73:53:21:05:68:f3:1e:a0: e2:1a:cb:a9:06:a7:2f:6c:85:a8:19:df:41:44:41: d0:d7:b2:ae:14:6c:cc:3c:c4:7d:07:62:e6:8c:af: 55:88:84:b9:15:99:94:a8:17:0b:04:c7:3d:36:8e: cf:55:cf:c8:25:af:ca:e7:17:3f:19:44:27:eb:7d: 89:32:fc:e6:38:eb:f0:a4:8f:bd:4b:c7:60:da:e1: 27:af:11:3a:d5:ad:ee:0e:25:a3:9b:f5:68:86:5e: b7:4a:db:b5:ad:98:13:ad:e0:94:da:7a:c0:3a:f4: 51:51:d2:74:e5:74:92:ef:b5:62:4a:50:63:ca:01: 30:48:13:8c:3c:17:b4:ca:53:ef:bb:5d:8a:4e:5f: 6c:b9:96:c6:20:f3:be:65:ec:04:3e:f0:8e:ff:97: eb:a8:60:60:14:f0:a1:05:e8:84:14:b9:e9:bd:c3: 40:19:75:49:b7:da:57:bb:d8:97:26:a2:5e:ad:af: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:17:05:32:55:62:04:5C:7A:FE:AB:BE:DF:65:F5:3A:21:9E:44:0B X509v3 Authority Key Identifier: keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c9:ac:c5:62:9c:0c:35:49:d8:7a:73:49:ea:3d:e1:f5:90: 1b:7a:8b:ea:5e:ed:f9:84:20:12:49:3d:3a:1b:41:cd:f7:94: 6e:75:0c:cc:10:b9:e6:c2:95:b9:c8:07:c4:ad:a0:cb:d5:5c: 80:57:b2:77:a2:8b:2c:02:34:5a:76:0b:2d:8b:36:65:8d:0f: cb:fe:9f:93:34:9f:11:d3:82:46:e4:c2:ad:dd:5a:98:e1:de: e1:75:43:2b:12:ce:8c:a6:f4:86:91:d1:c2:9b:2b:60:0f:8f: d4:d2:8e:49:45:fc:2d:9a:2d:fb:ff:11:42:0c:88:28:42:7d: cb:8b:bc:56:01:22:e1:db:fa:e3:92:b4:1e:4a:56:8f:0d:60: 8f:44:8b:3b:d9:62:7a:69:fb:2e:0a:bc:4d:a2:99:2e:14:27: f6:72:aa:63:c4:f8:ea:2c:f6:ae:b2:f0:f9:57:69:00:b3:2b: 88:e4:ca:74:9e:7c:41:0c:c7:ae:d7:d0:76:ea:27:a3:e9:1f: 65:be:c1:a8:97:da:d5:71:28:bf:38:ba:aa:38:f3:1c:da:3f: d8:5f:45:5e:31:9b:49:9b:a4:00:50:0e:65:40:cf:3f:07:44: 01:32:cd:71:dc:be:e1:d8:5d:2f:62:82:b7:d6:d9:36:4c:61: c7:41:a7:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaFLBfdJQ/lb0fJmtlqfnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGMzZGNjY2JmMDJiYTg1MDFhYjFjNzA2ZDMxZTEzN2Zk ZGY0MWQwHhcNMjUxMjE4MTcwMDU2WhcNMjUxMjE5MTcwMDU2WjAzMTEwLwYDVQQD EyhkODE3MDUzMjU1NjIwNDVjN2FmZWFiYmVkZjY1ZjUzYTIxOWU0NDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSGRMDR9aNDCE7BLJghLRRnsBfkO QwhBpMASyiNjkLuNw0UtUbFgycUvXZRWcG3WpR2BDwl4nWq8JAbKL3y6fGeOc1Mh BWjzHqDiGsupBqcvbIWoGd9BREHQ17KuFGzMPMR9B2LmjK9ViIS5FZmUqBcLBMc9 No7PVc/IJa/K5xc/GUQn632JMvzmOOvwpI+9S8dg2uEnrxE61a3uDiWjm/Vohl63 Stu1rZgTreCU2nrAOvRRUdJ05XSS77ViSlBjygEwSBOMPBe0ylPvu12KTl9suZbG IPO+ZewEPvCO/5frqGBgFPChBeiEFLnpvcNAGXVJt9pXu9iXJqJera83fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgXBTJVYgRcev6rvt9l9TohnkQLMB8GA1UdIwQY MBaAFIdMPczL8CuoUBqxxwbTHhN/3fQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTNkMzgtMjE4OC00YTdiLWJjMzct YTA0NzYyMDk1ZWU2LzEvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85OTNkMzgtMjE4OC00YTdiLWJjMzctYTA0NzYyMDk1ZWU2 LzEvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMmsxWKc DDVJ2HpzSeo94fWQG3qL6l7t+YQgEkk9OhtBzfeUbnUMzBC55sKVucgHxK2gy9Vc gFeyd6KLLAI0WnYLLYs2ZY0Py/6fkzSfEdOCRuTCrd1amOHe4XVDKxLOjKb0hpHR wpsrYA+P1NKOSUX8LZot+/8RQgyIKEJ9y4u8VgEi4dv645K0HkpWjw1gj0SLO9li emn7Lgq8TaKZLhQn9nKqY8T46iz2rrLw+VdpALMriOTKdJ58QQzHrtfQduono+kf Zb7BqJfa1XEovzi6qjjzHNo/2F9FXjGbSZukAFAOZUDPPwdEATLNcdy+4dhdL2KC t9bZNkxhx0GnCQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:25 2025 by rpki-client