This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft File: h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json) Hash identifier: ogry0VZ+p1Fn1B751nLXbaiD2LniOTeTOVvgomPdNM8= Subject key identifier: 66:9D:39:EA:C0:16:7F:02:2D:83:29:DF:BB:F2:40:83:69:E4:89:4D Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39 Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39 Certificate serial: 019AF1D25C9479855D0000F3681A09B32D2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft Manifest number: 1772 Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: BpGdK4vNgugH_zIwdKpTLTonzFI.roa (hash: XCtnPAQsPAejFAsLvLkAMfASQaAA0TQU3hCkuPs7vLM=) 2: MTIEPm-UTrRJO5GkIDAlc0UbzLQ.roa (hash: nVeKeAW6vJuUEVgfnDWMk7tY9g53T2JINJDassyHDH8=) 3: XOmOBh50cvCvJmnFjaJhaHYW2sE.roa (hash: 6F6wNjub6rC7wNAaFOeBE6JJ3w2cU7C6GJM4bNB9ZQQ=) 4: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: N65peD5iv2m3DF4dhQ5LZH245xAcBuA5rCc285rDfjU=) 5: viZJ1ILrK-Lhvo6EpJnhGu2o9Q4.roa (hash: VBEvk2C209Y5tb0FL9tK/NrEWGQ6MCpm2RIBK/aQkDU=) 6: yXMAz21dFW6Sf1HAb5KDTn2Yy0g.roa (hash: dMxwivy3WoBvzsdqovQyIDGqZ1EWhn2L/4sgtoX9AUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5c:94:79:85:5d:00:00:f3:68:1a:09:b3:2d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39 Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=669d39eac0167f022d8329dfbbf2408369e4894d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:65:c5:00:d6:e6:55:74:9f:08:eb:e6:5d:4c: f2:51:4c:bb:56:84:8b:e7:93:c2:34:9d:b0:03:f3: 92:28:08:e2:48:f3:51:79:0d:b6:8b:15:43:bb:b2: 05:42:57:4a:1a:2d:47:36:02:3e:27:38:43:7f:54: 32:f6:f5:a0:1d:1a:0d:57:a7:c5:51:79:9a:ed:8f: 1a:b5:c9:5b:f5:de:f9:2f:09:3f:6e:04:d0:1f:d9: fb:8d:d9:1f:84:71:5f:08:e5:4a:f3:49:29:8d:6c: e8:08:c5:b9:ea:1f:d2:1c:f9:77:38:c6:6f:c4:73: 71:62:90:dc:88:74:81:03:a0:be:49:c1:53:30:a5: 60:4a:89:68:f0:2f:30:36:03:eb:27:41:da:f5:4b: 9b:9a:cb:3b:b0:89:a8:c8:45:6b:9f:f8:7d:a0:8e: 7a:76:40:34:f2:ea:ab:b1:20:7d:fa:9c:32:36:a3: ea:ab:cf:bc:69:44:85:fc:ff:8e:cc:75:77:2d:29: 05:5c:1c:04:32:ad:f2:b3:f6:22:3d:6b:2b:16:6b: a3:39:ca:ae:e7:0b:2b:c1:97:82:c7:6c:4a:c6:01: da:ef:12:02:52:3f:41:30:2e:b0:73:c8:37:7e:9a: 9f:ef:1e:87:4a:52:3a:63:40:e4:dc:c1:1b:59:d9: 37:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9D:39:EA:C0:16:7F:02:2D:83:29:DF:BB:F2:40:83:69:E4:89:4D X509v3 Authority Key Identifier: keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d7:e0:cb:29:07:43:2e:ab:97:ac:48:2c:16:99:63:70:b2: 1f:73:70:83:52:3f:00:28:60:5e:c5:42:68:e6:f5:ed:1c:bb: 82:e8:96:00:78:bf:7a:55:c5:36:35:0f:28:6c:6c:20:5f:1a: ef:b7:7f:78:2e:3c:d4:f1:d2:cd:36:b3:87:91:2f:75:69:65: b0:2f:e2:5e:28:9e:20:0a:2c:44:af:6a:f9:6a:ee:35:63:00: 18:02:27:16:a8:ac:7c:89:bc:21:b0:74:e5:f3:3f:83:a4:38: 9c:04:92:34:d5:89:24:54:97:cc:1f:14:76:5a:4f:d4:4a:04: ed:bd:c3:01:7c:23:d5:6c:cd:14:ba:26:d6:1d:02:28:1f:24: 9e:ca:bb:84:db:eb:3c:be:41:e5:1f:96:b9:15:26:79:5e:14: 09:d3:d2:a6:95:71:f4:a0:2a:21:aa:cc:34:7e:ce:68:a8:de: 76:66:60:b8:3e:7a:63:f7:09:47:bf:96:b3:3c:33:6e:a6:0e: 9a:58:ca:7f:ce:e4:47:83:8d:ba:b2:b9:4b:2a:9d:9c:9a:17: 0b:76:45:d9:5e:7d:78:27:91:c9:5f:69:e4:be:f3:4c:2a:96: 6d:ad:7f:00:0b:15:45:ca:0b:9e:91:bc:4c:16:1b:b8:1a:17: 6a:9f:ac:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lyUeYVdAADzaBoJsy0qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZDk5MDEzMTQ2N2I3N2QxMTE2MmI3OWZiZTNiMDZjYThh YjJkMzkwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD Eyg2NjlkMzllYWMwMTY3ZjAyMmQ4MzI5ZGZiYmYyNDA4MzY5ZTQ4OTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWXFANbmVXSfCOvmXUzyUUy7VoSL 55PCNJ2wA/OSKAjiSPNReQ22ixVDu7IFQldKGi1HNgI+JzhDf1Qy9vWgHRoNV6fF UXma7Y8atclb9d75Lwk/bgTQH9n7jdkfhHFfCOVK80kpjWzoCMW56h/SHPl3OMZv xHNxYpDciHSBA6C+ScFTMKVgSolo8C8wNgPrJ0Ha9Uubmss7sImoyEVrn/h9oI56 dkA08uqrsSB9+pwyNqPqq8+8aUSF/P+OzHV3LSkFXBwEMq3ys/YiPWsrFmujOcqu 5wsrwZeCx2xKxgHa7xICUj9BMC6wc8g3fpqf7x6HSlI6Y0Dk3MEbWdk3gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGadOerAFn8CLYMp37vyQINp5IlNMB8GA1UdIwQY MBaAFIfZkBMUZ7d9ERYrefvjsGyoqy05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMt YjhlOGIzNGRiMjkwLzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMtYjhlOGIzNGRiMjkw LzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9fgyykH Qy6rl6xILBaZY3CyH3Nwg1I/AChgXsVCaOb17Ry7guiWAHi/elXFNjUPKGxsIF8a 77d/eC481PHSzTazh5EvdWllsC/iXiieIAosRK9q+WruNWMAGAInFqisfIm8IbB0 5fM/g6Q4nASSNNWJJFSXzB8UdlpP1EoE7b3DAXwj1WzNFLom1h0CKB8knsq7hNvr PL5B5R+WuRUmeV4UCdPSppVx9KAqIarMNH7OaKjedmZguD56Y/cJR7+WszwzbqYO mljKf87kR4ONurK5SyqdnJoXC3ZF2V59eCeRyV9p5L7zTCqWba1/AAsVRcoLnpG8 TBYbuBoXap+sjw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:07 2025 by rpki-client