This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json) Hash identifier: VEOQFnEiWBPblPyQxmjNJAat9W4hqslv1at0vqS55I0= Subject key identifier: 69:E9:DB:A6:C9:74:64:77:70:5D:38:2C:9E:C7:DC:0A:82:7F:2E:29 Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8 Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8 Certificate serial: 019AF50A1EF768757678E154E6E1B065281A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft Manifest number: 10D7 Signing time: Sat 06 Dec 2025 19:01:12 +0000 Manifest this update: Sat 06 Dec 2025 19:01:12 +0000 Manifest next update: Sun 07 Dec 2025 19:01:12 +0000 Files and hashes: 1: TwlfNDSczGUl34rteJgSuHXTO94.roa (hash: gBwK3ZQY+snmvfWIA0VgAvr4/MBSK9FpiTLSXZrUgpg=) 2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: JRh1PnDrwFVTs1+68yHT6zcwmATK6M5DjJWi1TgNEeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:1e:f7:68:75:76:78:e1:54:e6:e1:b0:65:28:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8 Validity Not Before: Dec 6 19:01:12 2025 GMT Not After : Dec 7 19:01:12 2025 GMT Subject: CN=69e9dba6c9746477705d382c9ec7dc0a827f2e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:48:32:42:ef:1a:ea:04:ac:2d:16:3d:77: a3:79:23:08:a4:ce:f5:e5:61:37:dd:33:37:a1:01: b2:df:d1:f6:c7:37:70:88:ee:4a:49:d1:c9:e5:31: 40:82:d7:56:fd:6f:bf:a8:8a:70:fa:6e:8a:39:73: a4:cf:10:d7:15:0a:42:c9:a3:eb:74:45:c5:06:c1: e7:10:c7:ab:de:5c:fd:b1:52:61:64:9b:df:2f:dc: 6b:20:c5:f1:1c:7d:b2:1c:60:ea:11:bb:b6:21:9f: 32:f2:86:b6:06:2c:a3:59:11:b8:ff:1c:53:87:d4: 22:b3:77:c3:65:64:f6:64:ab:3c:f4:04:3f:f6:4a: 98:3f:8d:d0:d2:a6:e0:73:15:87:3d:f9:92:5f:3b: 2b:1f:4a:4b:77:84:5d:5a:48:4b:3a:60:ce:d2:e7: b4:b7:58:f7:c5:57:d6:90:5c:10:d6:25:e9:79:e4: 03:f4:d1:ea:67:4a:95:49:f8:c5:21:b7:8a:a7:32: 2b:95:17:d3:81:8e:e0:8f:a3:a3:8f:0a:20:e8:4e: fe:93:40:03:10:ff:95:6a:cf:d4:51:d1:c6:d8:9c: b2:28:53:9f:59:e6:42:4d:fa:71:b7:4a:ee:63:00: e2:a0:93:4d:bb:82:3e:4c:67:85:8e:b1:0e:df:a1: 67:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E9:DB:A6:C9:74:64:77:70:5D:38:2C:9E:C7:DC:0A:82:7F:2E:29 X509v3 Authority Key Identifier: keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:51:c1:b1:e3:ee:a2:4c:1c:f6:ea:4f:57:31:07:11:bc:12: 7f:a4:8d:9c:b1:ce:d1:7a:e8:61:32:40:eb:99:dc:89:e7:cf: 31:b1:5c:81:33:ac:58:66:64:ec:ce:c8:6c:78:c6:9a:cf:59: 9f:c3:12:93:69:b4:3f:53:ac:bb:ce:46:7e:ad:fb:76:c0:4c: 6c:ac:44:14:17:57:d1:5f:12:07:c8:4b:52:f7:1d:ab:07:80: 04:fb:7d:d6:57:8b:bc:2c:a2:16:ee:b3:d5:a0:1d:e1:e5:5a: f6:5c:d3:d6:b9:b8:fc:bd:c1:66:46:36:a2:0a:9b:db:b3:a0: 92:5e:c7:70:0e:65:c6:42:8e:77:96:46:e4:c9:a9:78:08:91: f1:72:c9:0b:ec:22:ac:dc:51:4d:21:e0:1a:5f:59:41:fc:9d: a1:03:24:08:8c:e5:47:aa:fa:3a:ae:ee:8f:96:e6:3c:30:26: b0:3a:77:d3:0d:5b:90:48:c2:e8:21:b2:78:4a:24:9f:25:1a: 77:13:f4:a7:b2:01:54:6d:df:20:21:f3:2b:53:89:3f:da:76: f1:54:56:d5:57:eb:8c:16:cb:3b:75:b2:a9:32:28:27:45:89: 5b:10:b8:16:5f:95:2a:06:72:0a:15:be:e2:b4:8e:0b:85:91: ee:ce:94:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ch73aHV2eOFU5uGwZSgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGFhMTZmZDJhMmM5MzZjMGFhNGZiNTYyNGY2MmJjNTZh NTRkZjgwHhcNMjUxMjA2MTkwMTEyWhcNMjUxMjA3MTkwMTEyWjAzMTEwLwYDVQQD Eyg2OWU5ZGJhNmM5NzQ2NDc3NzA1ZDM4MmM5ZWM3ZGMwYTgyN2YyZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qRIMkLvGuoErC0WPXejeSMIpM71 5WE33TM3oQGy39H2xzdwiO5KSdHJ5TFAgtdW/W+/qIpw+m6KOXOkzxDXFQpCyaPr dEXFBsHnEMer3lz9sVJhZJvfL9xrIMXxHH2yHGDqEbu2IZ8y8oa2BiyjWRG4/xxT h9Qis3fDZWT2ZKs89AQ/9kqYP43Q0qbgcxWHPfmSXzsrH0pLd4RdWkhLOmDO0ue0 t1j3xVfWkFwQ1iXpeeQD9NHqZ0qVSfjFIbeKpzIrlRfTgY7gj6Ojjwog6E7+k0AD EP+Vas/UUdHG2JyyKFOfWeZCTfpxt0ruYwDioJNNu4I+TGeFjrEO36FnawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnp26bJdGR3cF04LJ7H3AqCfy4pMB8GA1UdIwQY MBaAFIdKoW/Sosk2wKpPtWJPYrxWpU34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTct ZmRiYzdjNGNmNDllLzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTctZmRiYzdjNGNmNDll LzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblHBsePu okwc9upPVzEHEbwSf6SNnLHO0XroYTJA65nciefPMbFcgTOsWGZk7M7IbHjGms9Z n8MSk2m0P1Osu85Gfq37dsBMbKxEFBdX0V8SB8hLUvcdqweABPt91leLvCyiFu6z 1aAd4eVa9lzT1rm4/L3BZkY2ogqb27Ogkl7HcA5lxkKOd5ZG5MmpeAiR8XLJC+wi rNxRTSHgGl9ZQfydoQMkCIzlR6r6Oq7uj5bmPDAmsDp30w1bkEjC6CGyeEoknyUa dxP0p7IBVG3fICHzK1OJP9p28VRW1VfrjBbLO3WyqTIoJ0WJWxC4Fl+VKgZyChW+ 4rSOC4WR7s6U3A== -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:29 2025 by rpki-client