This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json) Hash identifier: opG66+oxR97l5XDgRz0QHMf2gWjblbTAzqIATbf5Fao= Subject key identifier: 08:E7:A1:6D:85:4A:81:05:73:10:EB:BE:27:A6:C2:35:13:94:60:A4 Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7 Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7 Certificate serial: 019AF31B6D1823FE92E87853BE8CCCD82504 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 10:00:52 +0000 Manifest this update: Sat 06 Dec 2025 10:00:52 +0000 Manifest next update: Sun 07 Dec 2025 10:00:52 +0000 Files and hashes: 1: Jd9KhT8D9dzrmclXzaM2LsTcdvk.roa (hash: Xz0hJFnyzCZED2jN3f6gRmu551al736EIaABcjiPvLQ=) 2: Ms_pDtAjK9tb1e5h7bLoQWbyHs8.roa (hash: cL+zxxB8p9BDEROGB77OysHEV8P4dX2U5M5xqP9Q6C0=) 3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: LMaBhiSGg1ePx/utbq3ZGysH/UHmjctlLfhIQtF8MMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6d:18:23:fe:92:e8:78:53:be:8c:cc:d8:25:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7 Validity Not Before: Dec 6 10:00:52 2025 GMT Not After : Dec 7 10:00:52 2025 GMT Subject: CN=08e7a16d854a81057310ebbe27a6c235139460a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:3d:59:9c:a3:e9:3e:9f:5c:96:ab:a4:9d: 3a:56:54:e6:3a:01:46:81:84:2c:d5:c3:e6:e0:9a: 7d:8d:e8:53:d9:56:ac:bb:0d:f1:f0:71:24:c9:d8: e5:40:ce:cb:b1:14:d0:13:e9:a2:cb:75:d0:9b:33: f9:38:65:4e:c4:2a:37:41:f5:20:24:d6:ad:6b:6f: 74:03:dd:8d:40:be:b8:a3:9e:5e:f2:44:1a:a3:dc: 5c:1c:8c:49:20:ed:e3:c5:95:87:b6:9a:5e:93:34: 4f:72:08:08:ca:71:f9:e6:22:d0:15:5d:66:ef:f5: 07:8e:3a:ab:21:d4:92:07:74:bd:0c:46:5c:de:d8: ce:7c:bb:06:53:0c:f2:c3:41:6b:e8:1d:d9:91:b6: 0b:0e:97:82:34:e2:ef:ee:ac:8c:5c:41:c3:39:14: 08:42:f1:f5:26:cc:df:1a:47:2b:b9:c6:42:00:10: 7d:64:79:aa:24:5f:bb:80:f3:e1:e2:3a:ea:66:f0: 7d:d5:fc:ba:5c:88:da:14:4c:d9:b0:0a:5d:22:2b: ce:0a:f9:ae:17:d3:c3:64:4e:87:6c:3a:74:02:08: 42:1b:df:76:7f:6b:af:42:29:3e:df:c7:e4:09:37: 01:ee:8d:b3:9f:a1:4c:9e:1c:b2:03:19:53:32:de: 7a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E7:A1:6D:85:4A:81:05:73:10:EB:BE:27:A6:C2:35:13:94:60:A4 X509v3 Authority Key Identifier: keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a0:b3:75:e8:63:0a:ec:fc:46:ed:3b:b1:8f:55:56:35:6a: 05:d9:78:3e:99:cd:91:55:f3:f8:39:d4:1d:7f:c5:3b:45:82: cd:a0:08:d7:f1:3a:07:4b:16:9c:56:48:05:25:02:f7:f7:55: 8f:e7:df:64:cb:07:d6:36:ec:50:68:e4:31:ff:63:db:fe:b7: 4a:49:df:00:bd:57:12:cf:93:79:0b:82:3e:5b:83:2d:34:e3: 7e:02:80:1e:17:a1:d5:7f:8c:08:44:a7:aa:63:71:39:e3:f7: 24:cd:58:54:f0:33:9c:56:03:74:ba:82:8e:08:a1:2d:e1:09: d1:1a:c5:4e:d7:24:db:a2:31:88:21:76:0d:45:be:1b:dc:e5: 83:b8:6e:ce:b5:e1:72:86:b5:7e:72:d3:e3:0a:6a:33:0e:4b: a4:3a:c3:0b:85:7b:d6:ea:17:d9:f4:76:23:8e:64:9e:09:e6: 4e:ee:e4:32:ba:b1:3c:99:b1:cf:01:3a:16:3a:36:59:6b:d0: af:b9:db:d0:73:d1:28:82:3e:38:f2:7a:de:a7:32:86:c4:3d: f8:61:58:4c:f0:46:38:90:03:01:33:98:5a:a8:b9:98:c9:b8: bd:aa:c9:74:e4:de:8c:2a:e6:e0:51:39:35:e2:85:d3:83:57: 92:83:4d:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG20YI/6S6HhTvozM2CUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZjQxYWUwNzc5ZTM3ZGVmYzY5YjJhNWIwZjdhYjhmZDQw Y2QzZTcwHhcNMjUxMjA2MTAwMDUyWhcNMjUxMjA3MTAwMDUyWjAzMTEwLwYDVQQD EygwOGU3YTE2ZDg1NGE4MTA1NzMxMGViYmUyN2E2YzIzNTEzOTQ2MGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0c9WZyj6T6fXJarpJ06VlTmOgFG gYQs1cPm4Jp9jehT2Vasuw3x8HEkydjlQM7LsRTQE+miy3XQmzP5OGVOxCo3QfUg JNata290A92NQL64o55e8kQao9xcHIxJIO3jxZWHtppekzRPcggIynH55iLQFV1m 7/UHjjqrIdSSB3S9DEZc3tjOfLsGUwzyw0Fr6B3ZkbYLDpeCNOLv7qyMXEHDORQI QvH1JszfGkcrucZCABB9ZHmqJF+7gPPh4jrqZvB91fy6XIjaFEzZsApdIivOCvmu F9PDZE6HbDp0AghCG992f2uvQik+38fkCTcB7o2zn6FMnhyyAxlTMt56QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjnoW2FSoEFcxDrviemwjUTlGCkMB8GA1UdIwQY MBaAFIf0GuB3njfe/GmypbD3q4/UDNPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYt YzQzYWIyYTEyZDU1LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYtYzQzYWIyYTEyZDU1 LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaCzdehj Cuz8Ru07sY9VVjVqBdl4PpnNkVXz+DnUHX/FO0WCzaAI1/E6B0sWnFZIBSUC9/dV j+ffZMsH1jbsUGjkMf9j2/63SknfAL1XEs+TeQuCPluDLTTjfgKAHheh1X+MCESn qmNxOeP3JM1YVPAznFYDdLqCjgihLeEJ0RrFTtck26IxiCF2DUW+G9zlg7huzrXh coa1fnLT4wpqMw5LpDrDC4V71uoX2fR2I45kngnmTu7kMrqxPJmxzwE6Fjo2WWvQ r7nb0HPRKII+OPJ63qcyhsQ9+GFYTPBGOJADATOYWqi5mMm4varJdOTejCrm4FE5 NeKF04NXkoNN2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:35 2025 by rpki-client