This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json) Hash identifier: kPuE8SKFatv19lZTw1FxB56GchDz7oYZFW4z+HjxdlQ= Subject key identifier: 5E:FE:2C:65:9F:19:AD:4D:26:12:3A:40:A6:88:C9:93:58:76:B7:6D Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1 Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1 Certificate serial: 019AF31B1FE4FED1E50DB622578164948C96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 10:00:32 +0000 Manifest this update: Sat 06 Dec 2025 10:00:32 +0000 Manifest next update: Sun 07 Dec 2025 10:00:32 +0000 Files and hashes: 1: 3MF6BuznJ4OfS1C5J5sFom719Ag.roa (hash: SgA1M+YF5PTZbvqD1BRuBpZXk3sFWrE/PgQsVhuZ/S4=) 2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: v/qCnYMzHfpJWjR5GVdzOswVC1ZWH7ETu/u+sgghPOk=) 3: pFxtApTW54EbBHD0oDAnh4jDG3E.roa (hash: gJNAVWKEII1RjZzGIybSB1Nkau8KmzUZnx0gYczpW88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:1f:e4:fe:d1:e5:0d:b6:22:57:81:64:94:8c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1 Validity Not Before: Dec 6 10:00:32 2025 GMT Not After : Dec 7 10:00:32 2025 GMT Subject: CN=5efe2c659f19ad4d26123a40a688c9935876b76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:6f:d8:36:23:de:70:50:cf:fa:87:2b:4e: 78:50:67:8e:01:33:99:79:f3:45:85:12:c8:b0:dd: df:40:6f:1b:f0:6b:f3:9b:1b:6f:49:e8:48:69:dd: 48:4c:23:1d:6d:61:b7:60:7a:a7:64:18:c2:19:fe: df:51:64:58:de:0a:1d:d8:44:29:84:3c:6c:0d:bb: 7d:5d:27:1d:10:82:ef:11:a4:19:94:d7:3a:71:57: b6:05:4d:69:57:7d:82:42:03:9b:d9:04:bc:c6:81: a4:50:46:c9:90:98:bf:da:ca:84:71:7f:48:08:86: 24:0c:7e:89:83:15:be:09:1c:47:ac:95:c2:3b:bd: e6:a1:a7:47:3f:2b:cc:66:55:f8:97:6f:fb:8e:c9: df:7d:23:d1:16:98:30:e5:db:6c:f8:1f:b0:b4:26: ef:fc:ce:ee:46:7d:ab:60:d0:0e:13:25:6f:8e:dc: 46:17:99:f1:97:d3:34:a0:c8:2d:04:11:cd:23:e2: da:26:9a:42:00:05:37:83:54:de:f9:c3:c3:c2:8d: 4c:cf:ca:36:94:e4:9f:87:05:d8:44:22:aa:95:20: bc:57:42:ee:62:7a:29:6b:8d:9a:db:af:74:23:f8: f7:e5:69:70:93:d5:77:5e:cc:7b:19:aa:e1:65:ec: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FE:2C:65:9F:19:AD:4D:26:12:3A:40:A6:88:C9:93:58:76:B7:6D X509v3 Authority Key Identifier: keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b6:1d:c5:fc:70:b1:14:24:a8:cb:2a:9a:bf:4d:51:4a:e3: 49:d9:e5:0e:8e:a0:ef:03:ce:0b:3c:eb:49:db:ea:5c:03:85: 93:59:94:3b:fd:01:bf:ea:bd:39:25:51:7a:74:8d:05:54:35: 81:f9:ea:1e:e2:69:7e:c1:c5:3d:19:0b:b3:cd:99:c9:76:eb: 7c:98:4a:c1:e7:8a:27:e8:e5:da:7a:86:0c:46:63:a9:e6:eb: fd:05:fa:5c:cf:ed:8e:63:98:51:d0:1c:d3:9b:67:57:f4:99: 08:71:3f:9a:7f:57:7d:3f:32:3a:75:90:f0:f9:23:2e:75:56: 98:26:d1:62:02:4a:41:a7:2a:e8:73:97:53:32:1f:a3:b0:e1: ee:fe:c4:96:4d:88:db:24:01:93:0b:bb:9d:84:ec:b0:19:d2: eb:cb:1f:e5:60:af:e9:50:22:aa:d9:a3:04:0f:be:01:c8:2f: ea:bb:6b:cb:f6:c1:36:35:70:ad:33:f0:d2:ab:2d:db:d6:cb: ae:19:79:71:fc:21:38:64:2c:9f:e4:a7:12:bf:f6:df:56:d9: 03:79:ef:e6:0e:e7:e6:80:ab:1f:dd:cc:cf:94:47:82:f6:52: 31:87:8e:d5:d9:7d:f4:61:2a:14:c8:60:b6:0c:a9:2e:22:9d: fa:8f:4a:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGx/k/tHlDbYiV4FklIyWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGI1OTFiNWQ4ZjA3NmVhZjQ3MmUzZWE0NWQzYjVjOGUx MzUwYTEwHhcNMjUxMjA2MTAwMDMyWhcNMjUxMjA3MTAwMDMyWjAzMTEwLwYDVQQD Eyg1ZWZlMmM2NTlmMTlhZDRkMjYxMjNhNDBhNjg4Yzk5MzU4NzZiNzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpBv2DYj3nBQz/qHK054UGeOATOZ efNFhRLIsN3fQG8b8GvzmxtvSehIad1ITCMdbWG3YHqnZBjCGf7fUWRY3god2EQp hDxsDbt9XScdEILvEaQZlNc6cVe2BU1pV32CQgOb2QS8xoGkUEbJkJi/2sqEcX9I CIYkDH6JgxW+CRxHrJXCO73moadHPyvMZlX4l2/7jsnffSPRFpgw5dts+B+wtCbv /M7uRn2rYNAOEyVvjtxGF5nxl9M0oMgtBBHNI+LaJppCAAU3g1Te+cPDwo1Mz8o2 lOSfhwXYRCKqlSC8V0LuYnopa42a2690I/j35Wlwk9V3Xsx7GarhZeygcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7+LGWfGa1NJhI6QKaIyZNYdrdtMB8GA1UdIwQY MBaAFIdLWRtdjwdur0cuPqRdO1yOE1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQt MGM2YTY3ODIwYTU4LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQtMGM2YTY3ODIwYTU4 LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrYdxfxw sRQkqMsqmr9NUUrjSdnlDo6g7wPOCzzrSdvqXAOFk1mUO/0Bv+q9OSVRenSNBVQ1 gfnqHuJpfsHFPRkLs82ZyXbrfJhKweeKJ+jl2nqGDEZjqebr/QX6XM/tjmOYUdAc 05tnV/SZCHE/mn9XfT8yOnWQ8PkjLnVWmCbRYgJKQacq6HOXUzIfo7Dh7v7Elk2I 2yQBkwu7nYTssBnS68sf5WCv6VAiqtmjBA++Acgv6rtry/bBNjVwrTPw0qst29bL rhl5cfwhOGQsn+SnEr/231bZA3nv5g7n5oCrH93Mz5RHgvZSMYeO1dl99GEqFMhg tgypLiKd+o9K7A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:46:30 2025 by rpki-client