This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft File: aHcm04_PKn-7t7_CjWP-NXntIR0.mft (raw, json) Hash identifier: /4shOh/tKpBuki2xS9r3M7IDtzQzb0N1fAMs/w1CjGY= Subject key identifier: AB:3A:98:7C:91:78:40:E8:80:D9:CF:4C:5D:8A:7D:9D:98:48:67:C7 Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D Certificate issuer: /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d Certificate serial: 019AF31C7D40FBE897A9A854FE913F040793 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft Manifest number: 1294 Signing time: Sat 06 Dec 2025 10:02:01 +0000 Manifest this update: Sat 06 Dec 2025 10:02:01 +0000 Manifest next update: Sun 07 Dec 2025 10:02:01 +0000 Files and hashes: 1: 4BPgPazxL-0_7TACTrAAB2vKcvM.roa (hash: ByHJvADYtVUpx6K/7n+qZ80ogn6pFEeZiZMcZkXwguI=) 2: DnTRig2ZHULz3p9wZNouYmsC9jo.roa (hash: t4VZBdK9Uss3nXT5qelMDtPowMN8UI5/vISGQexu/1w=) 3: FiGOQGJVQzUX0AI-kIcMSlyL5Jw.roa (hash: iNn6sg9mF+PuqzA3VDumFe63FkMkR+FoX25ZFTkc1KE=) 4: aHcm04_PKn-7t7_CjWP-NXntIR0.crl (hash: rqhw8e4TmSihQuEfN43qs43tvmEsHrAQvhwY+vPuess=) 5: psb7_FoF9tBnDB6tY5GqWOvVJFk.roa (hash: VNe9Mli14Tvo817wNnFl35Vg2+YLvG6cgRRigjOYMS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:7d:40:fb:e8:97:a9:a8:54:fe:91:3f:04:07:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d Validity Not Before: Dec 6 10:02:01 2025 GMT Not After : Dec 7 10:02:01 2025 GMT Subject: CN=ab3a987c917840e880d9cf4c5d8a7d9d984867c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9f:f4:9e:32:26:0c:69:2e:63:9b:2f:54:12: 2f:98:bb:0d:bb:c8:b7:56:68:a8:8a:4c:f8:fc:7c: 14:84:c0:7f:f7:0e:71:1c:38:ce:34:fb:f6:38:df: 35:71:4b:f1:3f:96:90:c2:4f:37:e3:16:36:5d:8b: 54:59:6c:e1:dd:9a:63:e3:df:60:ef:93:6f:c8:32: 08:90:94:eb:4d:f7:3e:cc:7c:46:ab:9a:c8:dd:76: 67:fb:ac:b2:ee:9a:2e:d2:34:0d:39:ca:50:5e:f4: 27:c8:86:b3:10:95:12:b8:8f:cd:d8:2e:d5:26:9c: 0a:d4:92:42:c3:99:da:a6:e1:77:14:22:0e:5c:83: e3:0e:f7:21:f3:07:af:dd:ee:57:85:bb:cd:28:3a: df:59:d6:59:a0:09:e3:73:4d:45:78:22:a8:b7:04: 96:af:c6:10:e8:58:bf:b2:c3:c5:96:4f:30:57:1b: 02:dd:07:a6:cf:f6:c0:b2:56:54:3b:0e:b2:74:99: ce:0a:40:50:1b:f0:71:50:83:ae:e0:eb:d1:52:b3: 7d:3a:3b:87:f1:a6:34:07:44:6e:09:63:cb:f3:c0: af:84:92:b4:97:87:ee:f8:6a:92:c2:a9:60:aa:9d: 89:a7:c5:54:14:27:e4:60:36:48:e5:6f:08:17:b3: 12:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3A:98:7C:91:78:40:E8:80:D9:CF:4C:5D:8A:7D:9D:98:48:67:C7 X509v3 Authority Key Identifier: keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:72:ef:ad:b2:ae:9c:98:07:79:47:59:7d:1b:ab:59:4e:d7: 2d:1c:86:63:d3:2c:6c:e3:49:d0:ef:ba:14:e4:07:f2:69:04: fc:b1:0f:f3:9e:91:ae:90:09:13:2d:46:25:10:72:9c:c6:6f: 65:08:a0:3b:38:71:f6:da:e8:53:c4:0b:bb:70:5f:e5:32:50: 39:c1:d3:f3:f6:b6:2e:1b:c5:24:9b:42:6f:00:fd:8e:27:ab: 2b:61:bf:58:12:23:c8:6a:28:cb:8e:ff:6d:ad:1f:85:ca:77: c5:44:f8:16:46:81:5a:f2:45:dd:93:36:3a:92:5f:0d:2b:63: 4e:97:5a:86:e2:18:ab:f5:b7:6e:23:a5:54:76:2d:b6:a9:7f: f0:ea:d7:bc:cd:8c:94:2f:7c:53:1a:23:81:22:7f:ee:ec:35: b2:88:cb:5c:7a:c8:d9:32:40:c2:26:4a:c9:3f:2b:2f:90:7e: 9b:94:bd:4b:39:81:cb:90:36:ef:78:8d:01:f7:ac:5c:0e:b6: ca:97:4b:70:5c:fb:5e:c6:16:f4:69:be:a3:27:69:dd:fa:bd: f0:ec:34:09:fc:0b:e8:fa:b9:83:8a:fc:cb:f3:e1:b7:c1:62: 9e:e7:3c:8a:40:0c:ce:71:24:d4:0c:e2:2a:c4:c6:a4:7a:a2: 0f:b7:13:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHH1A++iXqahU/pE/BAeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NzcyNmQzOGZjZjJhN2ZiYmI3YmZjMjhkNjNmZTM1Nzll ZDIxMWQwHhcNMjUxMjA2MTAwMjAxWhcNMjUxMjA3MTAwMjAxWjAzMTEwLwYDVQQD EyhhYjNhOTg3YzkxNzg0MGU4ODBkOWNmNGM1ZDhhN2Q5ZDk4NDg2N2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55/0njImDGkuY5svVBIvmLsNu8i3 Vmioikz4/HwUhMB/9w5xHDjONPv2ON81cUvxP5aQwk834xY2XYtUWWzh3Zpj499g 75NvyDIIkJTrTfc+zHxGq5rI3XZn+6yy7pou0jQNOcpQXvQnyIazEJUSuI/N2C7V JpwK1JJCw5napuF3FCIOXIPjDvch8wev3e5XhbvNKDrfWdZZoAnjc01FeCKotwSW r8YQ6Fi/ssPFlk8wVxsC3Qemz/bAslZUOw6ydJnOCkBQG/BxUIOu4OvRUrN9OjuH 8aY0B0RuCWPL88CvhJK0l4fu+GqSwqlgqp2Jp8VUFCfkYDZI5W8IF7MSxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKs6mHyReEDogNnPTF2KfZ2YSGfHMB8GA1UdIwQY MBaAFGh3JtOPzyp/u7e/wo1j/jV57SEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAt NGIyZGExOTdhN2U2LzEvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAtNGIyZGExOTdhN2U2 LzEvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnLvrbKu nJgHeUdZfRurWU7XLRyGY9MsbONJ0O+6FOQH8mkE/LEP856RrpAJEy1GJRBynMZv ZQigOzhx9troU8QLu3Bf5TJQOcHT8/a2LhvFJJtCbwD9jierK2G/WBIjyGooy47/ ba0fhcp3xUT4FkaBWvJF3ZM2OpJfDStjTpdahuIYq/W3biOlVHYttql/8OrXvM2M lC98UxojgSJ/7uw1sojLXHrI2TJAwiZKyT8rL5B+m5S9SzmBy5A273iNAfesXA62 ypdLcFz7XsYW9Gm+oydp3fq98Ow0CfwL6Pq5g4r8y/Pht8Finuc8ikAMznEk1Azi KsTGpHqiD7cTew== -----END CERTIFICATE-----Generated at Sat Dec 6 19:05:22 2025 by rpki-client