This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json) Hash identifier: 8QQTfL8i7vwiFYS2zO/fUVzSvmfeTJC8gCQ2WliRjkQ= Subject key identifier: AC:0B:35:C8:A5:D2:BE:20:DE:A2:E5:B0:00:5D:B9:C0:14:A9:43:CC Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6 Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6 Certificate serial: 019AF2AD89E513A0D7655F3B5348D7B05A52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft Manifest number: 14CA Signing time: Sat 06 Dec 2025 08:00:50 +0000 Manifest this update: Sat 06 Dec 2025 08:00:50 +0000 Manifest next update: Sun 07 Dec 2025 08:00:50 +0000 Files and hashes: 1: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: OKq77GhZK7EI1Z0+f+71VXwUHj6p2shXmGRYG7ZrseI=) 2: pd4NfQq1m5q0gJRIY8-JV63L0Ug.roa (hash: 2jDsm0ha9EaVCILusmCVnInYpOVbfVEOKEtxwwvPFb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:89:e5:13:a0:d7:65:5f:3b:53:48:d7:b0:5a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6 Validity Not Before: Dec 6 08:00:50 2025 GMT Not After : Dec 7 08:00:50 2025 GMT Subject: CN=ac0b35c8a5d2be20dea2e5b0005db9c014a943cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:01:c6:8d:dd:fa:e9:4e:c6:4a:b0:82:2d:ed: 75:41:6d:da:53:a7:60:04:a4:a7:31:42:51:81:dd: 3f:4b:e7:1a:a2:6a:33:c1:90:bd:47:b9:76:56:e3: 2e:1e:5b:c9:e0:35:8c:c3:2c:27:2d:c1:1e:ff:ef: e9:db:1e:11:d6:1f:03:bb:d9:a6:b9:81:f3:fd:25: f1:44:0b:51:4d:db:8d:60:4f:3f:77:a1:1d:75:d1: 19:68:cc:ef:0b:2a:d6:88:68:cb:67:3e:b4:7a:d2: a0:12:7c:5f:5b:dc:e2:c3:73:f3:e2:5e:c7:77:0f: 93:e8:9b:73:d8:e9:eb:e7:e7:83:8b:3b:07:f6:e7: b1:4f:bc:7e:4c:2c:1c:51:2f:0a:80:b2:bf:c1:47: 39:6d:1c:2c:3d:ed:e5:f6:a5:14:be:56:3f:43:8f: 3d:aa:e1:0d:b8:06:b6:ed:cf:b8:fa:e3:3a:40:d9: 03:20:10:aa:43:3e:f2:8d:12:82:83:be:24:bb:b4: 18:c2:3b:ae:6c:f3:59:91:13:e0:d6:8b:a3:87:ad: a4:12:22:0e:c3:96:8c:08:87:20:39:02:f1:29:35: 64:43:9f:88:7a:7d:ff:e0:db:0b:0b:81:ff:c7:5c: ad:5f:ae:21:8f:d4:b9:1e:89:54:62:40:e0:57:9b: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0B:35:C8:A5:D2:BE:20:DE:A2:E5:B0:00:5D:B9:C0:14:A9:43:CC X509v3 Authority Key Identifier: keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1e:fa:c9:e8:2b:69:84:17:1f:41:42:9a:6e:3a:5b:84:3e: ed:d6:89:dd:ca:b7:0d:df:f3:7c:39:8c:21:4a:c4:f6:2a:00: a8:e5:e5:ed:bb:7c:20:aa:f6:8e:5f:f3:43:0d:40:d1:58:ef: 80:0a:40:4d:5e:d3:e6:4e:d5:48:fd:a4:00:69:2c:83:82:85: 34:12:51:74:3a:43:60:69:50:0d:0b:4f:6c:c4:d2:9e:61:e2: b7:d1:d5:7e:81:fa:b4:83:03:cf:83:9c:52:1c:8c:bb:5b:da: aa:7d:d4:66:2b:d6:05:d5:88:90:4b:1e:17:69:ee:7f:9b:0b: 16:8e:d5:df:13:8f:10:d4:1f:11:90:4e:42:0e:bf:0f:1d:5e: 05:fd:13:48:48:06:cb:63:9b:61:35:ad:61:d6:df:f8:fc:60: e6:51:bb:6d:b8:b7:ac:94:9c:50:19:b1:d9:d2:37:d6:55:07: 9e:55:15:f5:af:1c:48:e6:51:c2:80:74:c2:40:60:49:52:17: 0c:a0:91:68:0b:4e:1d:27:9e:ab:52:8c:ef:15:48:c8:ed:31: 8f:bb:dd:c4:56:03:fa:bb:e7:c4:01:9c:8d:9b:4d:f4:46:8a: 29:78:13:12:d8:e4:95:e1:76:f9:84:dc:71:4c:71:4c:20:71: 11:26:54:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYnlE6DXZV87U0jXsFpSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZDdmN2QyZmMxMzQ4OTE0YzAwNmI1NWFiOTNmMmQyZTMz OTBkZTYwHhcNMjUxMjA2MDgwMDUwWhcNMjUxMjA3MDgwMDUwWjAzMTEwLwYDVQQD EyhhYzBiMzVjOGE1ZDJiZTIwZGVhMmU1YjAwMDVkYjljMDE0YTk0M2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAHGjd366U7GSrCCLe11QW3aU6dg BKSnMUJRgd0/S+caomozwZC9R7l2VuMuHlvJ4DWMwywnLcEe/+/p2x4R1h8Du9mm uYHz/SXxRAtRTduNYE8/d6EdddEZaMzvCyrWiGjLZz60etKgEnxfW9ziw3Pz4l7H dw+T6Jtz2Onr5+eDizsH9uexT7x+TCwcUS8KgLK/wUc5bRwsPe3l9qUUvlY/Q489 quENuAa27c+4+uM6QNkDIBCqQz7yjRKCg74ku7QYwjuubPNZkRPg1oujh62kEiIO w5aMCIcgOQLxKTVkQ5+Ien3/4NsLC4H/x1ytX64hj9S5HolUYkDgV5tOpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwLNcil0r4g3qLlsABducAUqUPMMB8GA1UdIwQY MBaAFIfX99L8E0iRTABrVauT8tLjOQ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQt MzAxZGYyNzIxNTJlLzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQtMzAxZGYyNzIxNTJl LzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIR76yegr aYQXH0FCmm46W4Q+7daJ3cq3Dd/zfDmMIUrE9ioAqOXl7bt8IKr2jl/zQw1A0Vjv gApATV7T5k7VSP2kAGksg4KFNBJRdDpDYGlQDQtPbMTSnmHit9HVfoH6tIMDz4Oc UhyMu1vaqn3UZivWBdWIkEseF2nuf5sLFo7V3xOPENQfEZBOQg6/Dx1eBf0TSEgG y2ObYTWtYdbf+Pxg5lG7bbi3rJScUBmx2dI31lUHnlUV9a8cSOZRwoB0wkBgSVIX DKCRaAtOHSeeq1KM7xVIyO0xj7vdxFYD+rvnxAGcjZtN9EaKKXgTEtjkleF2+YTc cUxxTCBxESZUQw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:02 2025 by rpki-client