This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json) Hash identifier: RWv9Dpa/esSDt89GvP/33DJ5xq7DqEpmRu5mm+gBiN0= Subject key identifier: 6A:2D:88:13:E3:96:0B:52:5E:74:14:DB:A6:02:F8:2C:4C:90:CE:77 Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27 Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27 Certificate serial: 019AF31B4B13E8F917A58171A191FCB27B67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft Manifest number: 151D Signing time: Sat 06 Dec 2025 10:00:43 +0000 Manifest this update: Sat 06 Dec 2025 10:00:43 +0000 Manifest next update: Sun 07 Dec 2025 10:00:43 +0000 Files and hashes: 1: FsnHQCl3YIPQ-Kr--FXccxOvsak.roa (hash: 36hDdDotapDvjoXAZEUVlMvaerSFU32EL1uK11igVxs=) 2: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: bc5kAB1BQaCdbQrhT6B6pFbut6eIdoNm8hpyCDIJ23Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:4b:13:e8:f9:17:a5:81:71:a1:91:fc:b2:7b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27 Validity Not Before: Dec 6 10:00:43 2025 GMT Not After : Dec 7 10:00:43 2025 GMT Subject: CN=6a2d8813e3960b525e7414dba602f82c4c90ce77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ab:6e:13:70:5e:25:f0:c7:4d:29:23:f2:99: 0b:49:0e:bf:46:a0:51:9f:2d:dd:c4:36:27:9c:b1: 3f:44:e1:d8:05:30:9b:18:66:53:c8:47:26:0b:b2: 4e:df:dd:54:37:19:91:8b:f4:24:9e:1b:c5:b1:0e: 8f:70:91:2c:bc:f8:8e:d8:62:a9:c6:54:9a:09:ce: a6:f1:2f:18:73:e5:b8:21:b9:b3:e1:9b:f1:2a:99: e3:f9:c7:5d:9b:19:09:64:93:3a:23:b7:37:94:66: 1a:6f:f3:8d:30:65:11:a2:57:67:18:9b:f3:be:62: 0a:be:6a:61:f8:27:50:4c:61:9e:fc:22:12:8a:17: b8:a0:fe:fa:4b:76:0a:4d:d1:98:04:ed:82:05:6f: 61:2e:46:71:69:9c:50:86:ae:d3:07:82:c4:f6:1c: 67:75:d7:d0:34:f7:3b:53:91:5e:6e:f8:45:46:19: 5b:87:53:09:c0:e3:c2:a9:da:2f:ed:21:78:ca:f2: 78:8d:82:1c:bc:cc:86:13:d6:96:d6:0f:3e:d2:e8: 14:a1:5d:c2:69:e5:31:09:c4:fd:7b:e7:74:1a:02: f0:8d:e2:f3:56:6e:87:92:11:cb:86:06:49:a5:69: 03:1c:40:f5:6f:04:c8:66:46:29:08:dc:a1:d7:2e: 15:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2D:88:13:E3:96:0B:52:5E:74:14:DB:A6:02:F8:2C:4C:90:CE:77 X509v3 Authority Key Identifier: keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:4c:68:be:ab:6c:aa:ba:b4:79:39:f1:3d:a9:ac:60:ad:c5: 03:b3:0e:04:d0:16:83:2e:82:ee:49:b6:8c:01:7b:ff:7a:47: 31:7b:b4:6d:c7:96:f3:90:14:e1:d5:a2:ec:45:d7:11:40:d3: 9a:95:c4:a5:36:e0:f4:87:18:17:81:63:a7:df:eb:bb:e3:e3: f3:41:d3:4b:ac:59:58:ac:df:ad:f4:ef:77:4b:4c:8c:1b:d7: af:3a:9e:1b:de:69:8a:af:ad:bd:d1:99:42:d4:53:dc:53:45: 5a:c1:ca:50:63:5e:27:71:b8:bd:0e:c7:1f:f6:2b:35:ed:50: 74:b5:5f:7c:d0:6f:75:17:ae:07:d3:45:c3:94:93:f9:07:6e: 84:17:6d:14:27:11:93:32:33:7c:89:dc:cb:10:73:c8:51:d0: 6d:f8:b5:fd:48:ea:94:a2:99:90:4b:47:c9:57:e7:a8:85:3d: fb:0d:51:59:29:34:1f:64:31:4c:42:0e:03:dd:1f:85:ea:67: 1e:b8:20:5e:68:b1:2f:d7:d3:0c:ad:9f:b4:c7:c6:1c:6a:44: 8d:9f:ad:e4:1c:71:4b:53:cb:04:87:c8:3a:90:ba:42:a1:c3: 26:94:db:20:c0:c3:45:e8:4f:87:57:79:0e:c0:e6:bb:3a:31: 2d:bd:52:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0sT6PkXpYFxoZH8sntnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ODUxNTQ0YTY0MjdkMmM4ZTI3OWU0Yjk0YjkyYWFmMDAw OWVkMjcwHhcNMjUxMjA2MTAwMDQzWhcNMjUxMjA3MTAwMDQzWjAzMTEwLwYDVQQD Eyg2YTJkODgxM2UzOTYwYjUyNWU3NDE0ZGJhNjAyZjgyYzRjOTBjZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06tuE3BeJfDHTSkj8pkLSQ6/RqBR ny3dxDYnnLE/ROHYBTCbGGZTyEcmC7JO391UNxmRi/QknhvFsQ6PcJEsvPiO2GKp xlSaCc6m8S8Yc+W4Ibmz4ZvxKpnj+cddmxkJZJM6I7c3lGYab/ONMGURoldnGJvz vmIKvmph+CdQTGGe/CISihe4oP76S3YKTdGYBO2CBW9hLkZxaZxQhq7TB4LE9hxn ddfQNPc7U5FebvhFRhlbh1MJwOPCqdov7SF4yvJ4jYIcvMyGE9aW1g8+0ugUoV3C aeUxCcT9e+d0GgLwjeLzVm6HkhHLhgZJpWkDHED1bwTIZkYpCNyh1y4V3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGotiBPjlgtSXnQU26YC+CxMkM53MB8GA1UdIwQY MBaAFIeFFUSmQn0sjieeS5S5Kq8ACe0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYt ODU0MzRmNjE2OWYxLzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYtODU0MzRmNjE2OWYx LzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0xovqts qrq0eTnxPamsYK3FA7MOBNAWgy6C7km2jAF7/3pHMXu0bceW85AU4dWi7EXXEUDT mpXEpTbg9IcYF4Fjp9/ru+Pj80HTS6xZWKzfrfTvd0tMjBvXrzqeG95piq+tvdGZ QtRT3FNFWsHKUGNeJ3G4vQ7HH/YrNe1QdLVffNBvdReuB9NFw5ST+QduhBdtFCcR kzIzfIncyxBzyFHQbfi1/UjqlKKZkEtHyVfnqIU9+w1RWSk0H2QxTEIOA90fhepn HrggXmixL9fTDK2ftMfGHGpEjZ+t5BxxS1PLBIfIOpC6QqHDJpTbIMDDRehPh1d5 DsDmuzoxLb1SdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:37:34 2025 by rpki-client