This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json) Hash identifier: 89eqUSZcm4sOlJqZ2VQdoDigEQXzJNKcOMANUPqIcMI= Subject key identifier: F0:79:10:D9:F2:71:C3:24:1F:97:02:57:E5:DB:8B:25:5A:2B:31:7F Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6 Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6 Certificate serial: 019B307A239A68341FC1B0868B1DF2F6FECF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft Manifest number: 14EA Signing time: Thu 18 Dec 2025 08:01:09 +0000 Manifest this update: Thu 18 Dec 2025 08:01:09 +0000 Manifest next update: Fri 19 Dec 2025 08:01:09 +0000 Files and hashes: 1: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: oG9XtDk8YLZe9CHLqOTW8CNd0n/7JdXN2yQ/HL99coI=) 2: pd4NfQq1m5q0gJRIY8-JV63L0Ug.roa (hash: 2jDsm0ha9EaVCILusmCVnInYpOVbfVEOKEtxwwvPFb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:7a:23:9a:68:34:1f:c1:b0:86:8b:1d:f2:f6:fe:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6 Validity Not Before: Dec 18 08:01:09 2025 GMT Not After : Dec 19 08:01:09 2025 GMT Subject: CN=f07910d9f271c3241f970257e5db8b255a2b317f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:44:c5:76:92:21:35:cc:0a:b3:70:c5:cd:aa: 49:6e:85:f3:78:83:c1:0f:70:ea:7f:dc:0f:f8:d7: c0:ed:97:83:75:dd:b9:97:9b:01:88:ec:3f:d9:e7: 91:30:f8:4c:04:d1:b8:bc:76:46:50:e3:29:8b:1f: 10:fb:43:67:dc:12:bd:9f:c9:62:a3:5c:92:88:82: 9c:45:98:79:a7:fd:90:e3:a1:a0:dd:de:e0:cc:dd: 10:f6:ed:c8:8b:74:95:0a:64:6b:88:e9:ae:a9:44: 67:6c:09:8c:f4:de:80:21:ac:18:35:ad:bb:03:18: f7:df:c9:59:e8:84:d9:e7:57:de:f5:a0:f3:01:32: 67:04:a4:43:be:c9:a0:ba:e4:0d:3e:a0:6f:43:0a: e7:04:2a:c6:3a:e7:f4:ff:d1:4e:00:cb:5d:1d:1b: b3:be:c0:a1:fe:a4:16:25:1c:bf:db:0b:d5:a5:31: 6f:48:9d:0e:95:62:c0:f9:96:bd:08:c1:b7:1d:03: 1f:71:11:64:47:3b:6e:c8:94:e1:e4:1c:cf:1c:c0: 62:0b:db:8d:0b:ad:74:95:03:57:86:06:4a:f4:72: fa:40:cf:75:4d:2b:b7:d9:99:5f:22:37:13:1a:e6: 1f:8a:68:1d:a6:1d:bc:ce:4e:89:7d:4d:d1:d4:75: 9a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:79:10:D9:F2:71:C3:24:1F:97:02:57:E5:DB:8B:25:5A:2B:31:7F X509v3 Authority Key Identifier: keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d7:0f:62:74:a7:81:6f:de:ef:1e:56:22:cb:09:ec:7f:4d: 5d:00:e2:5d:8a:b7:f1:ac:59:92:b2:23:ac:a8:0b:03:89:5d: 7c:55:64:05:4a:9a:69:f3:5c:55:34:5c:f7:02:94:44:23:9d: 77:1c:40:a4:5d:79:ee:e2:25:8e:5d:da:54:5c:42:63:1e:61: 6f:45:14:d0:f6:5c:47:00:05:db:14:6c:26:59:3e:47:9a:13: 43:86:58:4f:75:02:21:14:53:2b:4f:29:6e:58:34:38:c7:98: 61:c0:01:3d:ec:bd:dd:7d:5c:58:12:a1:46:07:87:99:51:e1: af:99:89:17:3a:d7:77:63:09:52:64:71:9a:4d:1a:d9:76:d0: 21:56:49:6c:af:5f:17:f3:a7:c8:45:d3:76:2f:ce:a3:9a:26: 12:ba:5e:25:09:4f:07:c0:6f:74:5a:9a:ac:a5:a9:ae:db:f8: 91:ce:30:92:19:86:27:8a:6d:be:29:29:29:4a:6d:2c:ae:e2: 9d:a1:5b:65:e0:65:a7:de:44:77:d0:db:90:bd:44:85:e1:a9: 6c:53:2e:3b:8c:13:28:be:75:15:ed:9a:eb:29:46:81:a6:ae: 3b:5e:91:5f:cb:12:ee:cd:be:0f:6e:6a:bc:2e:bb:0e:74:84: 6f:98:a8:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweiOaaDQfwbCGix3y9v7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZDdmN2QyZmMxMzQ4OTE0YzAwNmI1NWFiOTNmMmQyZTMz OTBkZTYwHhcNMjUxMjE4MDgwMTA5WhcNMjUxMjE5MDgwMTA5WjAzMTEwLwYDVQQD EyhmMDc5MTBkOWYyNzFjMzI0MWY5NzAyNTdlNWRiOGIyNTVhMmIzMTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UTFdpIhNcwKs3DFzapJboXzeIPB D3Dqf9wP+NfA7ZeDdd25l5sBiOw/2eeRMPhMBNG4vHZGUOMpix8Q+0Nn3BK9n8li o1ySiIKcRZh5p/2Q46Gg3d7gzN0Q9u3Ii3SVCmRriOmuqURnbAmM9N6AIawYNa27 Axj338lZ6ITZ51fe9aDzATJnBKRDvsmguuQNPqBvQwrnBCrGOuf0/9FOAMtdHRuz vsCh/qQWJRy/2wvVpTFvSJ0OlWLA+Za9CMG3HQMfcRFkRztuyJTh5BzPHMBiC9uN C610lQNXhgZK9HL6QM91TSu32ZlfIjcTGuYfimgdph28zk6JfU3R1HWaWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPB5ENnyccMkH5cCV+XbiyVaKzF/MB8GA1UdIwQY MBaAFIfX99L8E0iRTABrVauT8tLjOQ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQt MzAxZGYyNzIxNTJlLzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQtMzAxZGYyNzIxNTJl LzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENcPYnSn gW/e7x5WIssJ7H9NXQDiXYq38axZkrIjrKgLA4ldfFVkBUqaafNcVTRc9wKURCOd dxxApF157uIljl3aVFxCYx5hb0UU0PZcRwAF2xRsJlk+R5oTQ4ZYT3UCIRRTK08p blg0OMeYYcABPey93X1cWBKhRgeHmVHhr5mJFzrXd2MJUmRxmk0a2XbQIVZJbK9f F/OnyEXTdi/Oo5omErpeJQlPB8BvdFqarKWprtv4kc4wkhmGJ4ptvikpKUptLK7i naFbZeBlp95Ed9DbkL1EheGpbFMuO4wTKL51Fe2a6ylGgaauO16RX8sS7s2+D25q vC67DnSEb5iomA== -----END CERTIFICATE-----Generated at Thu Dec 18 16:12:41 2025 by rpki-client