This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft File: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft (raw, json) Hash identifier: U/PQHxNj0mqgUf+gV2D6SpXRqVzIwJjMcLKoLUBY0AQ= Subject key identifier: 92:7E:C9:C4:A0:0F:81:6E:71:E3:D3:5A:3E:61:A6:D7:AF:F2:35:97 Authority key identifier: 87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2 Certificate issuer: /CN=87b9313753bc0931af4393dbda009b0ff45ec7c2 Certificate serial: 019AF35261B6C4906FCB0D1AB92005C88E32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft Manifest number: 0C2C Signing time: Sat 06 Dec 2025 11:00:53 +0000 Manifest this update: Sat 06 Dec 2025 11:00:53 +0000 Manifest next update: Sun 07 Dec 2025 11:00:53 +0000 Files and hashes: 1: ETVPLHc_dvqJDflGIPJgHzJaWt8.roa (hash: Jimm5bhH1qmUZnAAKaN20vij/bbKy4j6GEesqJVn7gk=) 2: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl (hash: INqUpx8Wx1/3cXvq222S60HjzwgjYAC9oKws0DimAf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:61:b6:c4:90:6f:cb:0d:1a:b9:20:05:c8:8e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b9313753bc0931af4393dbda009b0ff45ec7c2 Validity Not Before: Dec 6 11:00:53 2025 GMT Not After : Dec 7 11:00:53 2025 GMT Subject: CN=927ec9c4a00f816e71e3d35a3e61a6d7aff23597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:56:5a:7b:31:e0:87:25:31:59:11:c2:35: 23:37:ae:11:f8:4f:6f:c5:3a:30:7b:43:18:42:d2: 0a:f2:d6:03:f6:c5:1c:48:7a:b6:5a:7a:b2:7f:73: 01:49:1b:09:7a:f3:fd:d6:9e:cf:60:88:0b:f6:ab: 74:3a:b0:74:04:a1:93:94:93:ad:fb:ce:ba:85:1a: a1:58:dd:f0:8a:56:49:34:3a:6b:b2:ec:e9:98:ed: 52:e6:de:de:d4:ef:52:ad:46:fc:c8:43:a4:74:b1: 8f:05:9b:1a:a2:61:87:35:5c:cd:2a:50:6e:46:fa: d2:2b:22:1e:98:32:f4:92:41:9c:a5:b9:1f:bd:79: 44:9b:1a:2c:dd:ac:fd:c2:6a:15:0a:0b:35:50:27: c7:29:15:9e:b0:3b:07:76:56:d0:e4:e7:ba:f0:10: 24:ac:e6:92:df:8e:09:53:d2:05:13:3d:68:03:65: 5d:4e:51:28:d8:79:7b:6b:70:a8:8c:e0:25:7c:43: e4:71:9a:a7:8b:85:04:de:72:ac:b0:1e:cc:06:f5: 74:91:ee:17:32:86:80:59:01:32:c0:16:2f:91:df: 40:13:9a:65:21:1f:1c:dc:96:92:46:31:8d:28:0e: 70:77:71:ff:e8:29:9e:c0:e7:a6:3b:f4:70:fb:35: 0f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7E:C9:C4:A0:0F:81:6E:71:E3:D3:5A:3E:61:A6:D7:AF:F2:35:97 X509v3 Authority Key Identifier: keyid:87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4d:16:4f:20:a1:53:68:44:c8:9b:e0:3f:e0:75:3d:5f:70: 7e:f6:f6:d3:df:7b:d6:a5:54:a9:30:bc:b3:95:a0:68:90:31: 41:2f:85:54:5e:54:98:7f:eb:d4:d8:d8:ca:d7:97:15:52:b5: 80:d0:81:e3:79:50:e5:f6:73:2d:54:b3:e3:04:f8:67:8a:dd: 09:41:61:7b:38:05:85:7c:c0:80:cb:87:f4:78:15:d8:c2:d3: cd:fb:96:33:fb:63:07:b2:48:51:c6:e8:b1:b0:be:0d:2a:2a: 98:99:8b:61:df:1c:7a:da:2a:b4:d3:0f:07:38:25:6f:27:4d: b7:46:46:af:c9:66:29:b7:cf:03:9f:de:7f:4a:5f:6b:e5:01: ab:a8:e0:e4:32:0a:10:44:a5:f2:1f:1c:3e:89:39:b0:af:65: e8:36:23:92:d9:3e:4c:2c:28:31:bc:62:7a:9a:b2:cd:b5:b1: 1a:2b:78:09:e0:ae:86:83:29:75:02:dd:6b:9a:3e:26:c9:66: f1:90:71:63:35:7a:06:05:53:84:d9:60:5c:51:2c:07:3f:d6: 4a:1e:57:1d:b1:89:c0:a8:5b:2f:37:c9:f0:91:e9:f1:1d:f3: fd:a5:f4:a1:96:54:54:eb:89:07:0a:f5:bb:ef:a7:10:3d:d4: 07:b4:bd:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUmG2xJBvyw0auSAFyI4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YjkzMTM3NTNiYzA5MzFhZjQzOTNkYmRhMDA5YjBmZjQ1 ZWM3YzIwHhcNMjUxMjA2MTEwMDUzWhcNMjUxMjA3MTEwMDUzWjAzMTEwLwYDVQQD Eyg5MjdlYzljNGEwMGY4MTZlNzFlM2QzNWEzZTYxYTZkN2FmZjIzNTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4JWWnsx4IclMVkRwjUjN64R+E9v xTowe0MYQtIK8tYD9sUcSHq2Wnqyf3MBSRsJevP91p7PYIgL9qt0OrB0BKGTlJOt +866hRqhWN3wilZJNDprsuzpmO1S5t7e1O9SrUb8yEOkdLGPBZsaomGHNVzNKlBu RvrSKyIemDL0kkGcpbkfvXlEmxos3az9wmoVCgs1UCfHKRWesDsHdlbQ5Oe68BAk rOaS344JU9IFEz1oA2VdTlEo2Hl7a3CojOAlfEPkcZqni4UE3nKssB7MBvV0ke4X MoaAWQEywBYvkd9AE5plIR8c3JaSRjGNKA5wd3H/6CmewOemO/Rw+zUPCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJ+ycSgD4FucePTWj5hptev8jWXMB8GA1UdIwQY MBaAFIe5MTdTvAkxr0OT29oAmw/0XsfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83MWNiMGMtM2JlMC00YTllLTliODIt N2Q2ODM2NmI1OWI3LzEvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83MWNiMGMtM2JlMC00YTllLTliODItN2Q2ODM2NmI1OWI3 LzEvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO00WTyCh U2hEyJvgP+B1PV9wfvb209971qVUqTC8s5WgaJAxQS+FVF5UmH/r1NjYyteXFVK1 gNCB43lQ5fZzLVSz4wT4Z4rdCUFhezgFhXzAgMuH9HgV2MLTzfuWM/tjB7JIUcbo sbC+DSoqmJmLYd8cetoqtNMPBzglbydNt0ZGr8lmKbfPA5/ef0pfa+UBq6jg5DIK EESl8h8cPok5sK9l6DYjktk+TCwoMbxiepqyzbWxGit4CeCuhoMpdQLda5o+Jslm 8ZBxYzV6BgVThNlgXFEsBz/WSh5XHbGJwKhbLzfJ8JHp8R3z/aX0oZZUVOuJBwr1 u++nED3UB7S9WQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:37:24 2025 by rpki-client