This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json) Hash identifier: j5fWnmAeUIsvo0vI0PfOAKTbLsgpJz27C2juVYwqCCM= Subject key identifier: AA:C4:39:B7:DA:B9:46:85:9A:C5:BC:70:87:33:A3:74:42:E1:70:E5 Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d Certificate serial: 019AF38999B28370835960FB8A90D8FA7333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 12:01:12 +0000 Manifest this update: Sat 06 Dec 2025 12:01:12 +0000 Manifest next update: Sun 07 Dec 2025 12:01:12 +0000 Files and hashes: 1: 1-cISFCJjrOXOH13uOfejSN0t07U.roa (hash: CsZ+l20+WvDp7ZAvLuoQUu3eyz/VH/hBFp+Sltnj4u8=) 2: Cz4X9MPRs8p_ImW4tUel1Ly3B_A.roa (hash: mCOTukj35b5NKqry7uD/1PQ8/wQManDEmCJ3x3rHtng=) 3: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: 7mOZTk2UMvx6xxszwrRhiL1OwAe9WaTO4Y7ppKGB3Xo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:99:b2:83:70:83:59:60:fb:8a:90:d8:fa:73:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d Validity Not Before: Dec 6 12:01:12 2025 GMT Not After : Dec 7 12:01:12 2025 GMT Subject: CN=aac439b7dab946859ac5bc708733a37442e170e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fd:1a:40:61:22:02:d3:f8:b6:69:03:fb:64: 10:b0:4a:de:36:f4:03:65:7e:2b:f0:e4:47:d1:31: 34:11:dc:7c:47:b2:64:75:6c:ce:e8:0a:4d:19:12: cc:a8:4e:c5:ec:10:6e:59:53:95:8f:90:8e:79:e6: 0c:93:cd:00:bb:f2:7b:79:a0:ee:6c:cd:47:5e:7a: cd:a9:a8:c7:fd:fe:8a:02:7d:ae:a0:23:46:d2:35: ea:6a:b3:e0:a3:41:76:7a:bf:38:54:19:ad:c6:e8: 66:36:c3:e9:9d:98:53:cc:a3:5d:f1:c6:5e:5f:78: cd:72:a9:31:d7:07:b7:4f:70:01:27:b1:14:44:4a: cf:a4:37:59:ef:a0:4b:84:5b:6f:8d:bc:0e:5c:59: 97:41:d4:55:44:fd:30:32:0f:36:2a:2f:05:92:69: 68:5c:af:6d:6c:c5:b5:05:d9:57:76:8c:dc:70:bc: 8d:ae:59:81:a5:46:d5:a4:55:04:57:44:5c:3e:ff: 5e:bf:6e:97:ac:58:d9:ed:63:fe:05:5f:3c:51:30: 9c:00:63:a1:44:de:bf:36:bb:91:c3:7e:f7:0d:e0: 9d:58:e9:c4:8c:7b:b4:7d:16:81:ad:eb:7d:20:d3: 88:cb:b3:e7:43:f0:9d:31:7c:5c:01:3d:54:96:13: 3a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C4:39:B7:DA:B9:46:85:9A:C5:BC:70:87:33:A3:74:42:E1:70:E5 X509v3 Authority Key Identifier: keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:74:cb:f3:f3:69:b4:34:8f:a7:58:59:ea:e9:73:17:24:fc: e1:9c:57:11:8a:31:b4:7b:35:a8:78:2f:01:e6:67:42:41:9e: e2:0e:88:ba:47:3c:89:b4:74:81:c6:92:ca:0c:22:bb:78:a8: a5:e7:99:0f:15:3d:5d:17:63:31:cb:5c:a3:1e:78:6e:a7:f8: eb:23:ab:78:21:ca:e2:14:a9:d6:6c:b2:03:33:a3:ab:75:b0: 60:9b:3e:72:48:4f:1a:15:9f:cd:41:4b:17:87:f1:d9:90:bd: a5:05:5b:f3:70:d1:38:74:de:d9:77:b7:cc:cb:45:49:58:7b: 48:da:99:78:4c:9e:0b:0f:67:4e:23:f3:81:21:24:33:93:fe: 81:24:7b:5a:d0:7a:d7:83:64:6e:38:b9:d0:b1:dd:04:c4:88: 99:9d:55:df:c7:23:8a:fa:db:8f:45:25:e6:57:0f:a3:0b:67: 42:d0:a2:ca:b2:04:21:11:27:d9:b1:7b:9b:88:ad:35:db:9d: c6:9b:15:a8:99:39:a4:cb:21:df:ac:10:ed:a8:4f:17:d5:f8: 37:57:e4:e1:3f:0d:73:e5:78:03:0d:44:f3:75:fa:51:1d:92: d4:fc:55:8f:cf:22:7b:53:33:df:5c:bb:90:47:40:aa:02:6c: fd:11:54:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZmyg3CDWWD7ipDY+nMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZTY0MTcwZjlkODJjNTE2NzBiOWE0NGYzMjliMjA2MTNh ODA4MmQwHhcNMjUxMjA2MTIwMTEyWhcNMjUxMjA3MTIwMTEyWjAzMTEwLwYDVQQD EyhhYWM0MzliN2RhYjk0Njg1OWFjNWJjNzA4NzMzYTM3NDQyZTE3MGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/0aQGEiAtP4tmkD+2QQsEreNvQD ZX4r8ORH0TE0Edx8R7JkdWzO6ApNGRLMqE7F7BBuWVOVj5COeeYMk80Au/J7eaDu bM1HXnrNqajH/f6KAn2uoCNG0jXqarPgo0F2er84VBmtxuhmNsPpnZhTzKNd8cZe X3jNcqkx1we3T3ABJ7EURErPpDdZ76BLhFtvjbwOXFmXQdRVRP0wMg82Ki8Fkmlo XK9tbMW1BdlXdozccLyNrlmBpUbVpFUEV0RcPv9ev26XrFjZ7WP+BV88UTCcAGOh RN6/NruRw373DeCdWOnEjHu0fRaBret9INOIy7PnQ/CdMXxcAT1UlhM6QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrEObfauUaFmsW8cIczo3RC4XDlMB8GA1UdIwQY MBaAFIfmQXD52CxRZwuaRPMpsgYTqAgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDIt NmUxM2NjYmY0OTA2LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDItNmUxM2NjYmY0OTA2 LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXTL8/Np tDSPp1hZ6ulzFyT84ZxXEYoxtHs1qHgvAeZnQkGe4g6Iukc8ibR0gcaSygwiu3io peeZDxU9XRdjMctcox54bqf46yOreCHK4hSp1myyAzOjq3WwYJs+ckhPGhWfzUFL F4fx2ZC9pQVb83DROHTe2Xe3zMtFSVh7SNqZeEyeCw9nTiPzgSEkM5P+gSR7WtB6 14Nkbji50LHdBMSImZ1V38cjivrbj0Ul5lcPowtnQtCiyrIEIREn2bF7m4itNdud xpsVqJk5pMsh36wQ7ahPF9X4N1fk4T8Nc+V4Aw1E83X6UR2S1PxVj88ie1Mz31y7 kEdAqgJs/RFUyg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:27:37 2025 by rpki-client