This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json) Hash identifier: VCzMnnqkxM+BScgbBCTfMo/P3Dd00qwa2e0OvDmWjb0= Subject key identifier: 28:8D:42:75:F4:BD:FA:D6:C7:D8:F4:25:97:24:30:D7:06:EA:90:36 Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21 Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921 Certificate serial: 019AF1D1EA22AC4499885A4570C17C70D0BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft Manifest number: 130E Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: EqmxfEPR61JZ1PILd4aiLsGlGKg.roa (hash: o+GN8e0CITe+H1MxoXkf/yVp/P7VliN/bKmtLSSdiwk=) 2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: waIvII5NWTiidn1CXCG85ikT1v4A7ZXjLkoGXJkDnjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ea:22:ac:44:99:88:5a:45:70:c1:7c:70:d0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921 Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=288d4275f4bdfad6c7d8f425972430d706ea9036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7c:76:5b:07:3f:cc:d2:73:c6:38:b8:93:6a: 50:fa:2c:71:5d:ac:cb:64:6b:2a:04:7c:b7:24:41: dc:8e:00:b8:16:fb:11:d5:1d:9f:9c:44:01:5a:56: 6a:8c:64:29:00:e9:ef:7c:d0:e5:e7:4d:f6:c8:73: 2a:86:62:a3:6a:b1:c1:7b:40:93:42:4f:04:c4:86: a8:34:7b:2d:e4:fb:12:6f:b0:bb:1a:eb:62:86:fa: 2d:a8:99:e8:57:a7:cc:3a:49:e0:4f:0b:72:72:ff: b1:d8:b9:30:97:81:0d:67:04:d1:74:b9:67:fe:87: 07:6b:c2:26:d2:4c:9c:be:68:23:6b:0f:a5:32:b3: 93:3b:3e:18:0c:88:d4:72:1c:3d:35:e5:af:e6:6f: 57:b5:cf:9f:cf:f5:a4:a3:89:77:dc:cd:b3:7f:56: 48:83:1f:63:37:e3:71:da:57:94:1a:b4:65:74:3c: 0f:1f:e5:23:18:46:0f:0c:cf:cf:60:e7:6a:d0:8d: c0:03:5e:84:15:c5:5d:41:0b:ca:b4:17:1f:ea:94: df:98:9c:49:7f:66:05:0c:36:ca:23:0c:a2:af:8d: 8d:6d:21:f9:0d:e6:35:8e:74:02:1b:38:9b:91:91: e9:f5:4a:18:4e:4d:72:ad:f3:f9:19:7b:10:a9:24: 64:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8D:42:75:F4:BD:FA:D6:C7:D8:F4:25:97:24:30:D7:06:EA:90:36 X509v3 Authority Key Identifier: keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:2d:11:53:70:88:8a:8b:8c:56:90:04:67:fa:b3:ac:36:1a: 4a:6a:5c:30:0b:59:6f:c3:0c:39:4e:12:b9:31:e9:73:0c:d7: 7d:3f:9e:15:1d:90:75:6f:a8:e5:d7:6d:7b:3d:40:d4:d9:da: a4:50:fa:bd:f3:d3:33:3b:eb:56:bf:62:0f:b4:24:83:b4:eb: 9e:ff:90:c4:e1:d1:ed:f8:89:1f:95:30:7e:62:3f:f5:6f:96: a8:12:bc:77:cd:33:af:3f:b0:a7:b2:56:23:fd:ef:b0:21:4f: ad:f2:b2:e8:b4:43:4e:87:3a:67:ff:03:07:7c:3c:fb:ff:ef: c9:ab:97:b1:23:29:cc:47:85:30:26:d9:2e:06:fe:7d:c5:a6: d8:e4:ad:72:df:ed:b2:fb:65:b8:19:ed:c5:f4:a2:3f:30:6c: 78:63:d2:d5:2c:74:c3:b6:7b:ec:7f:72:c7:8d:b8:d5:08:90: f4:96:5c:10:a6:36:66:1d:11:6f:58:8d:9f:91:c2:2e:37:23: 2f:cb:fd:63:70:2a:b2:37:0f:b9:66:98:fb:6e:a6:be:7e:75: 21:fe:e7:ec:b6:cf:61:4c:9b:45:04:3c:c7:41:97:30:5e:7c: 0a:c1:0b:ce:6b:50:56:be:66:b9:20:a6:00:e4:76:1d:54:3f: ef:40:e5:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eoirESZiFpFcMF8cNC8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZjQ1ZTNhNDA2OWQ0ZjVlYmQ1ZjZlNjQyMWQ4ZDNjYWJl MzA5MjEwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD EygyODhkNDI3NWY0YmRmYWQ2YzdkOGY0MjU5NzI0MzBkNzA2ZWE5MDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nx2Wwc/zNJzxji4k2pQ+ixxXazL ZGsqBHy3JEHcjgC4FvsR1R2fnEQBWlZqjGQpAOnvfNDl5032yHMqhmKjarHBe0CT Qk8ExIaoNHst5PsSb7C7GutihvotqJnoV6fMOkngTwtycv+x2Lkwl4ENZwTRdLln /ocHa8Im0kycvmgjaw+lMrOTOz4YDIjUchw9NeWv5m9Xtc+fz/Wko4l33M2zf1ZI gx9jN+Nx2leUGrRldDwPH+UjGEYPDM/PYOdq0I3AA16EFcVdQQvKtBcf6pTfmJxJ f2YFDDbKIwyir42NbSH5DeY1jnQCGzibkZHp9UoYTk1yrfP5GXsQqSRkywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiNQnX0vfrWx9j0JZckMNcG6pA2MB8GA1UdIwQY MBaAFIf0XjpAadT169X25kIdjTyr4wkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYt NjMxOWJiMDc5YzQ0LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYtNjMxOWJiMDc5YzQ0 LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgS0RU3CI iouMVpAEZ/qzrDYaSmpcMAtZb8MMOU4SuTHpcwzXfT+eFR2QdW+o5ddtez1A1Nna pFD6vfPTMzvrVr9iD7Qkg7Trnv+QxOHR7fiJH5UwfmI/9W+WqBK8d80zrz+wp7JW I/3vsCFPrfKy6LRDToc6Z/8DB3w8+//vyauXsSMpzEeFMCbZLgb+fcWm2OStct/t svtluBntxfSiPzBseGPS1Sx0w7Z77H9yx4241QiQ9JZcEKY2Zh0Rb1iNn5HCLjcj L8v9Y3AqsjcPuWaY+26mvn51If7n7LbPYUybRQQ8x0GXMF58CsELzmtQVr5muSCm AOR2HVQ/70DlIA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:41 2025 by rpki-client