This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: zU2NXVJ5Tciy2Y4zkMOh5M009g5tWpZZ3sDYWn1C8AY= Subject key identifier: 93:5C:DA:D6:53:E7:D7:D8:1A:AB:58:90:9E:60:DE:B4:07:D6:3E:1F Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 019AF19B89688D8FB080A8164993E83ED028 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 13F1 Signing time: Sat 06 Dec 2025 03:01:33 +0000 Manifest this update: Sat 06 Dec 2025 03:01:33 +0000 Manifest next update: Sun 07 Dec 2025 03:01:33 +0000 Files and hashes: 1: 58EBygRjdS7517jE8ijFSPfVOH4.roa (hash: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=) 2: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (hash: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=) 3: CjTW9-CUmuY1lxZ8OqndS2FXSrY.roa (hash: 9DQ0LnRbHYpMYq+dl7Z0Jfv0Jx2DrmotGXluT5sxbiI=) 4: UYD_ol6L79u8glgaI6wKUZit3aI.roa (hash: Gf9BtC+mpY9FQr0OFj9WV8BSFzyS8ChMq/mXIibBTC4=) 5: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (hash: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=) 6: cgfWhp9nnNlIFwxwBmM9ufcXLT8.roa (hash: d9o/0tEnmxkRdMrExtvCAvZnhgV08vpjue2h9xSnd5M=) 7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: CY4cm9Zvb4fpoiwR0f8dsSMxAD7BEJ6rBew5bBz1B8E=) 8: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (hash: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=) 9: l73XbGk7c4j4MjyLCnCZ2AhSa5g.roa (hash: zN4KADzvP9RDaA1coLbTnlm7K8otMtISf3HRhyFdP4I=) 10: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (hash: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:89:68:8d:8f:b0:80:a8:16:49:93:e8:3e:d0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Dec 6 03:01:33 2025 GMT Not After : Dec 7 03:01:33 2025 GMT Subject: CN=935cdad653e7d7d81aab58909e60deb407d63e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8f:f4:69:e3:00:a8:8a:51:3c:ff:01:4e:f9: 3c:19:f5:0a:c6:6b:e5:a8:c9:17:ad:b0:b5:b9:e0: 99:33:ed:07:00:19:1d:29:71:f5:81:d2:50:41:0d: 4c:7b:3f:28:87:5b:0d:23:00:3c:d6:0d:e7:98:fb: 1a:1f:48:f9:03:4c:e8:ef:ef:10:5c:61:46:f4:d3: 45:97:b8:ef:62:05:e9:01:22:c4:51:e6:64:b3:63: 2f:52:55:ad:2e:e8:11:20:e3:22:3a:a9:79:3e:3c: 86:79:1c:cb:51:43:f1:f3:52:37:a9:4e:0d:82:69: 41:76:ee:17:45:12:61:61:78:07:92:b4:cd:3f:ea: ce:ca:3d:4a:34:50:ee:39:0f:cc:b6:94:93:8a:44: 7a:51:d4:ae:40:65:0a:ea:3a:09:c9:34:c9:6f:60: 0a:72:89:9d:8f:e7:fd:6d:54:ad:45:43:4a:d7:73: 28:13:65:f2:c5:34:3d:eb:fe:4e:ff:b2:33:51:9d: e7:29:66:92:66:f0:f8:2e:96:39:5b:3b:49:55:4c: 6d:a8:b4:26:77:35:18:54:dc:2c:31:22:22:23:2b: da:82:11:6f:ec:2b:5a:a7:08:92:52:17:f8:90:61: e1:ac:39:b7:47:d6:02:bd:50:85:80:73:c3:04:e3: a2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5C:DA:D6:53:E7:D7:D8:1A:AB:58:90:9E:60:DE:B4:07:D6:3E:1F X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a4:ac:55:30:39:d4:e0:98:b3:a2:b3:9e:c7:af:44:2a:38: 36:de:c2:03:5a:fd:45:8a:6a:e6:39:0d:ba:ee:e3:06:04:b0: 8c:8a:e6:98:8b:62:41:9d:4e:74:ab:20:33:a2:c7:12:14:7d: 21:51:0d:ab:d1:35:d3:fc:71:b1:7e:db:23:fc:ec:b2:b7:a5: a1:08:dd:6a:62:ef:82:69:41:3b:25:4c:b5:c2:e6:4e:75:a3: 11:8b:00:f0:6a:34:4f:52:56:58:2e:3c:dc:c9:29:bc:1e:73: f1:9d:c9:4f:32:4e:ab:1b:ab:15:81:cd:72:c1:ec:4f:bf:43: dc:ab:b8:bc:f5:96:2d:a5:f1:04:38:6c:d3:49:3d:d5:42:ed: 28:81:66:37:e0:41:79:74:c4:11:39:cf:84:b2:80:bc:71:d6: d4:21:f2:e2:70:54:41:e1:2b:1b:11:a4:74:1d:93:2b:d6:d2: c7:87:82:3c:12:43:79:38:74:c2:40:97:bb:54:18:d8:95:b0: f4:72:99:14:bf:18:a1:63:d6:f9:0b:85:fc:f2:bc:30:96:b9: 17:5e:6d:27:01:6d:94:48:a1:94:79:dd:f2:5e:82:97:e1:24: 04:1d:80:3f:a9:77:ea:cf:1e:9c:d6:31:b0:1b:1d:0b:b7:30: 7d:b6:9a:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4lojY+wgKgWSZPoPtAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjUxMjA2MDMwMTMzWhcNMjUxMjA3MDMwMTMzWjAzMTEwLwYDVQQD Eyg5MzVjZGFkNjUzZTdkN2Q4MWFhYjU4OTA5ZTYwZGViNDA3ZDYzZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI/0aeMAqIpRPP8BTvk8GfUKxmvl qMkXrbC1ueCZM+0HABkdKXH1gdJQQQ1Mez8oh1sNIwA81g3nmPsaH0j5A0zo7+8Q XGFG9NNFl7jvYgXpASLEUeZks2MvUlWtLugRIOMiOql5PjyGeRzLUUPx81I3qU4N gmlBdu4XRRJhYXgHkrTNP+rOyj1KNFDuOQ/MtpSTikR6UdSuQGUK6joJyTTJb2AK comdj+f9bVStRUNK13MoE2XyxTQ96/5O/7IzUZ3nKWaSZvD4LpY5WztJVUxtqLQm dzUYVNwsMSIiIyvaghFv7CtapwiSUhf4kGHhrDm3R9YCvVCFgHPDBOOiIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNc2tZT59fYGqtYkJ5g3rQH1j4fMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaSsVTA5 1OCYs6KznsevRCo4Nt7CA1r9RYpq5jkNuu7jBgSwjIrmmItiQZ1OdKsgM6LHEhR9 IVENq9E10/xxsX7bI/zssreloQjdamLvgmlBOyVMtcLmTnWjEYsA8Go0T1JWWC48 3MkpvB5z8Z3JTzJOqxurFYHNcsHsT79D3Ku4vPWWLaXxBDhs00k91ULtKIFmN+BB eXTEETnPhLKAvHHW1CHy4nBUQeErGxGkdB2TK9bSx4eCPBJDeTh0wkCXu1QY2JWw 9HKZFL8YoWPW+QuF/PK8MJa5F15tJwFtlEihlHnd8l6Cl+EkBB2AP6l36s8enNYx sBsdC7cwfbaaqA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:17 2025 by rpki-client