This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json) Hash identifier: hUaIgSy6Q6oE0GcACgJEz/tns3COWboqaU3xgL6IeRc= Subject key identifier: C7:27:E7:34:25:96:FB:73:17:99:06:10:8A:F5:05:27:E9:82:F9:D8 Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea Certificate serial: 019AF389F7E06B8F06F470960D4163B9E629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft Manifest number: 09C2 Signing time: Sat 06 Dec 2025 12:01:36 +0000 Manifest this update: Sat 06 Dec 2025 12:01:36 +0000 Manifest next update: Sun 07 Dec 2025 12:01:36 +0000 Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: Vy8ChBGyvKtO3kKhZHuBLWx+cOJ1y+1c3FnfGv0LMSM=) 2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f7:e0:6b:8f:06:f4:70:96:0d:41:63:b9:e6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea Validity Not Before: Dec 6 12:01:36 2025 GMT Not After : Dec 7 12:01:36 2025 GMT Subject: CN=c727e7342596fb73179906108af50527e982f9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bd:52:4d:dc:d1:f9:a3:e1:29:23:06:29:52: ef:3f:b8:c0:0f:ad:57:be:b1:d7:c1:7b:fb:a9:e1: 2c:d3:be:43:48:e1:a9:09:47:a4:82:49:06:fe:97: d4:f8:0f:b2:e7:10:11:51:90:7f:2e:79:30:45:42: 8c:8c:b4:b8:1d:3a:b9:84:5c:da:6d:b5:7e:88:ee: e2:79:04:29:e9:b9:0e:1d:23:05:4c:63:21:4a:a0: c2:3c:3a:87:fa:12:76:00:a9:3a:29:13:8c:a3:30: af:07:b9:11:30:fa:2f:4a:dc:ed:20:46:fe:c1:34: ba:d8:a0:2a:f8:8d:b8:d8:d4:39:ef:9b:de:2d:c8: 39:a4:8a:2e:17:d8:83:fb:93:5f:05:15:d5:e0:58: b4:c8:3d:24:dc:6b:a3:e1:2f:14:5a:2a:0d:b0:a4: 10:03:5c:d0:e6:d9:55:7f:d0:b5:35:07:1a:3f:35: a2:3f:5b:4c:ec:95:3c:06:d2:0f:de:54:2d:32:c3: 1f:b3:7d:de:54:c9:cb:b6:5c:d8:35:70:bc:5b:e9: 76:7a:53:a4:d8:43:7f:7d:1d:f5:98:e3:88:eb:99: 65:d7:43:87:dc:f2:ff:85:b8:e5:a7:c1:0d:e7:60: af:17:e6:93:54:1a:86:5f:1b:2d:6a:10:c3:e9:9a: 97:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:27:E7:34:25:96:FB:73:17:99:06:10:8A:F5:05:27:E9:82:F9:D8 X509v3 Authority Key Identifier: keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:69:85:5e:92:01:54:3e:d0:9a:b4:7a:88:5b:01:6f:42:86: dc:47:b0:32:31:65:98:8d:22:c3:b9:6c:d8:e2:cb:bb:31:b3: 7e:64:ae:f7:46:41:50:f4:27:e7:f5:52:e8:b2:2a:e6:91:58: f7:f7:94:3d:2e:2c:55:d8:0f:ea:26:3e:9d:29:f1:56:91:af: dc:bd:ee:14:c8:11:3b:a0:bc:c7:62:88:75:56:f3:3c:7a:aa: 2c:60:9a:79:69:54:e3:87:9d:8b:77:b3:57:dd:0f:28:4c:f7: a2:8e:57:45:3f:74:31:de:ee:f1:74:65:02:99:0f:37:9a:15: 8a:26:1e:4c:f3:a8:3d:5f:d2:c3:54:d9:e5:9d:f7:be:42:2b: 95:45:8b:01:97:a8:14:59:81:d0:31:42:e1:3f:28:dc:38:ed: c2:22:db:cf:ae:4b:19:cf:06:20:ad:ca:33:8c:e4:4f:c7:5e: 66:5e:4f:46:01:6c:5b:3b:82:43:71:80:63:83:0a:f4:84:ed: 27:56:6a:13:16:89:1b:7b:41:a3:56:36:45:43:44:29:8a:82: 5c:56:93:6b:93:03:9a:6d:53:80:83:f0:c7:a7:7f:f0:93:97: cc:60:f4:1e:92:82:55:d5:88:47:ba:d0:1b:9c:ae:ec:46:37: e4:24:94:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziffga48G9HCWDUFjueYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZGMxYTliZmZhMmNmMTVhN2Q4MDk5YzhhM2MzMTdjZTA3 ZGI1ZWEwHhcNMjUxMjA2MTIwMTM2WhcNMjUxMjA3MTIwMTM2WjAzMTEwLwYDVQQD EyhjNzI3ZTczNDI1OTZmYjczMTc5OTA2MTA4YWY1MDUyN2U5ODJmOWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy71STdzR+aPhKSMGKVLvP7jAD61X vrHXwXv7qeEs075DSOGpCUekgkkG/pfU+A+y5xARUZB/LnkwRUKMjLS4HTq5hFza bbV+iO7ieQQp6bkOHSMFTGMhSqDCPDqH+hJ2AKk6KROMozCvB7kRMPovStztIEb+ wTS62KAq+I242NQ575veLcg5pIouF9iD+5NfBRXV4Fi0yD0k3Guj4S8UWioNsKQQ A1zQ5tlVf9C1NQcaPzWiP1tM7JU8BtIP3lQtMsMfs33eVMnLtlzYNXC8W+l2elOk 2EN/fR31mOOI65ll10OH3PL/hbjlp8EN52CvF+aTVBqGXxstahDD6ZqXUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcn5zQllvtzF5kGEIr1BSfpgvnYMB8GA1UdIwQY MBaAFIfcGpv/os8Vp9gJnIo8MXzgfbXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMt NDlhZDk2ODRiMjE3LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMtNDlhZDk2ODRiMjE3 LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGmFXpIB VD7QmrR6iFsBb0KG3EewMjFlmI0iw7ls2OLLuzGzfmSu90ZBUPQn5/VS6LIq5pFY 9/eUPS4sVdgP6iY+nSnxVpGv3L3uFMgRO6C8x2KIdVbzPHqqLGCaeWlU44edi3ez V90PKEz3oo5XRT90Md7u8XRlApkPN5oViiYeTPOoPV/Sw1TZ5Z33vkIrlUWLAZeo FFmB0DFC4T8o3DjtwiLbz65LGc8GIK3KM4zkT8deZl5PRgFsWzuCQ3GAY4MK9ITt J1ZqExaJG3tBo1Y2RUNEKYqCXFaTa5MDmm1TgIPwx6d/8JOXzGD0HpKCVdWIR7rQ G5yu7EY35CSUJw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:37 2025 by rpki-client