This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json) Hash identifier: Gh7BCCZCGBXuI5n2QovuEjX9qzAB5G0bdl/1AbcXm3s= Subject key identifier: C9:EF:05:49:E2:65:32:CC:96:E2:42:3D:A2:A4:9A:09:33:83:A2:D6 Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34 Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34 Certificate serial: 019AF509BD02A56C4895229C0F0062225A01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft Manifest number: 0E57 Signing time: Sat 06 Dec 2025 19:00:47 +0000 Manifest this update: Sat 06 Dec 2025 19:00:47 +0000 Manifest next update: Sun 07 Dec 2025 19:00:47 +0000 Files and hashes: 1: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: Ve5R/OocZN4aBOpMoY9gI3pxekk8NXaTsJhyUgRjKa8=) 2: hrRjboaEddMTvU1wn6u0WdMEQ5k.roa (hash: R2w89TKLu5CTfHL7zBMhtJ8zldIghHv3KwB06EytEuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:bd:02:a5:6c:48:95:22:9c:0f:00:62:22:5a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34 Validity Not Before: Dec 6 19:00:47 2025 GMT Not After : Dec 7 19:00:47 2025 GMT Subject: CN=c9ef0549e26532cc96e2423da2a49a093383a2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:7f:81:c0:83:a0:42:5d:c1:3c:75:34:47: 78:36:73:1f:4e:5e:c6:75:df:ee:de:f5:31:96:0d: 3a:04:63:af:6d:7e:75:1c:e5:5f:ab:f5:f3:33:94: 95:9f:68:0f:0e:3d:a1:9a:52:1f:cd:e2:0b:21:49: fa:bb:73:a9:d6:2d:3f:00:72:d1:8e:39:75:78:1a: 6d:95:41:35:04:0e:2a:1c:23:83:5c:c6:be:e7:13: bd:90:90:56:67:cf:6b:40:2b:93:e2:42:0c:23:3c: 7e:1d:13:63:bb:4b:84:75:e5:73:78:25:4e:d8:59: e4:c1:71:b0:68:0e:dc:0c:e4:ee:5d:23:a6:d1:c2: f7:03:13:32:7c:f9:da:40:b9:55:d1:5a:a3:d6:d5: 6c:72:ec:29:2c:14:bf:a4:6d:90:ac:90:83:b6:c2: 26:f8:ba:cb:36:50:74:32:10:75:9f:20:9e:e7:56: fd:2e:9c:70:1c:39:2c:f7:c6:9e:e7:87:7d:f0:ac: d9:eb:4f:59:ad:72:e1:b2:c0:af:a2:d4:56:4a:d2: c6:f3:70:f6:2e:4f:b6:77:f9:a7:02:36:7c:39:79: fc:1b:c8:73:e7:bd:d7:5a:76:c7:35:47:6a:8c:89: cc:65:f5:5d:3b:04:5c:0d:8b:50:8c:84:88:55:fe: a0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EF:05:49:E2:65:32:CC:96:E2:42:3D:A2:A4:9A:09:33:83:A2:D6 X509v3 Authority Key Identifier: keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2b:3d:b0:ad:28:b8:b0:57:92:99:ee:a9:98:77:51:aa:53: 24:7e:83:55:37:80:eb:b4:e1:4b:59:b2:fe:a9:94:bc:e8:d9: e5:54:85:e7:2e:a4:62:c5:a8:38:3a:8a:23:8a:4d:05:db:45: 4e:0a:52:99:27:18:47:84:01:cd:1c:a9:23:d5:1d:a8:d2:00: 9d:40:c9:07:f8:40:fa:82:53:13:b0:d9:12:a0:12:c5:8e:5d: 7e:08:d5:70:14:cb:04:df:b7:d7:eb:32:63:67:b0:fc:76:23: 8e:c8:c3:01:5f:60:b9:89:19:7b:ca:84:4a:d4:02:12:e4:47: 0b:ae:2f:58:e8:2e:0f:7e:07:ea:c4:13:8d:9b:66:12:07:6f: 1d:f8:2f:20:46:34:44:cc:77:de:ef:eb:a5:dc:4f:e0:c0:23: b2:11:e7:7b:e4:3e:6b:65:d1:47:a5:c0:0f:63:f7:be:f0:c5: 8c:50:d5:a3:01:56:d7:06:6a:45:0e:e4:a6:f4:16:7a:6c:0e: a3:65:46:e0:20:35:04:87:ca:10:a2:c4:de:8c:fe:88:ec:18: f6:bf:06:63:50:8c:d2:8b:5f:a2:c3:fe:a3:06:8d:38:4b:3a: 54:8b:14:9c:64:f8:ca:56:b5:26:68:fa:83:e7:2f:2d:0d:14: 5d:53:6b:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cb0CpWxIlSKcDwBiIloBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdi Y2VmMzQwHhcNMjUxMjA2MTkwMDQ3WhcNMjUxMjA3MTkwMDQ3WjAzMTEwLwYDVQQD EyhjOWVmMDU0OWUyNjUzMmNjOTZlMjQyM2RhMmE0OWEwOTMzODNhMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+p/gcCDoEJdwTx1NEd4NnMfTl7G dd/u3vUxlg06BGOvbX51HOVfq/XzM5SVn2gPDj2hmlIfzeILIUn6u3Op1i0/AHLR jjl1eBptlUE1BA4qHCODXMa+5xO9kJBWZ89rQCuT4kIMIzx+HRNju0uEdeVzeCVO 2FnkwXGwaA7cDOTuXSOm0cL3AxMyfPnaQLlV0Vqj1tVscuwpLBS/pG2QrJCDtsIm +LrLNlB0MhB1nyCe51b9LpxwHDks98ae54d98KzZ609ZrXLhssCvotRWStLG83D2 Lk+2d/mnAjZ8OXn8G8hz573XWnbHNUdqjInMZfVdOwRcDYtQjISIVf6gyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnvBUniZTLMluJCPaKkmgkzg6LWMB8GA1UdIwQY MBaAFIe5duKquSMkjugO5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMt ZTFiOGZmMjVmNjBiLzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBi LzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSs9sK0o uLBXkpnuqZh3UapTJH6DVTeA67ThS1my/qmUvOjZ5VSF5y6kYsWoODqKI4pNBdtF TgpSmScYR4QBzRypI9UdqNIAnUDJB/hA+oJTE7DZEqASxY5dfgjVcBTLBN+31+sy Y2ew/HYjjsjDAV9guYkZe8qEStQCEuRHC64vWOguD34H6sQTjZtmEgdvHfgvIEY0 RMx33u/rpdxP4MAjshHne+Q+a2XRR6XAD2P3vvDFjFDVowFW1wZqRQ7kpvQWemwO o2VG4CA1BIfKEKLE3oz+iOwY9r8GY1CM0otfosP+owaNOEs6VIsUnGT4yla1Jmj6 g+cvLQ0UXVNrdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:03:02 2025 by rpki-client