This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft File: h6WU4wS2ghg6ojWeQOHc75P-BXA.mft (raw, json) Hash identifier: 5wDutzq3EP6aJwmkg9k5ie8KpYP7kG/M3cDRdZgycUA= Subject key identifier: 9D:2A:A3:64:67:9C:82:42:08:2E:2F:8D:CB:7B:E4:E2:29:24:F8:FD Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70 Certificate issuer: /CN=87a594e304b682183aa2359e40e1dcef93fe0570 Certificate serial: 019AF276808D2066092C8F18F59610991E96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft Manifest number: 0676 Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: Vzz9bAfXoV_CbBlQ5On5u4sMVy4.roa (hash: 9L5UOAnznGuqnwBvCvaXb3wcpMtqdknz4TA8q7GIbmw=) 2: h6WU4wS2ghg6ojWeQOHc75P-BXA.crl (hash: OBSY8wu0PgKhr79+5iCNT5bf3otJnJVy8xx80zwS9fU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:80:8d:20:66:09:2c:8f:18:f5:96:10:99:1e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570 Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=9d2aa364679c8242082e2f8dcb7be4e22924f8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ba:de:11:38:c2:b3:04:1f:4c:c9:ff:04:55: 20:36:7f:c1:1c:ce:07:7a:31:ac:ab:40:59:6a:2e: 20:11:c7:bc:c8:b5:68:d2:a6:18:f4:93:8e:64:65: 2d:00:67:77:c7:bd:c9:6d:79:1c:bf:2b:fd:e0:e5: 46:62:51:f8:d2:3e:d4:96:36:21:60:03:00:d4:4a: 23:83:7f:6b:7d:c6:7e:8e:9d:7c:4c:f3:04:e7:2e: 32:b7:99:f1:5d:df:95:dc:5c:9c:44:97:9b:ca:2c: 73:4a:23:31:de:8d:4d:3f:65:91:0a:09:14:9f:87: 5c:7f:c2:74:86:ca:f9:39:d9:43:71:23:ec:c4:cd: e3:24:e4:82:77:fa:aa:9a:c0:81:6f:be:d6:75:96: 1d:bc:6e:8f:39:57:24:cf:c6:cc:f9:82:1f:1c:fb: 95:6c:7f:9a:fe:5c:0c:78:a6:79:73:25:65:55:81: c7:fb:d6:13:f0:d2:4c:9d:fc:89:b5:9c:ee:b6:ba: 50:16:94:de:eb:56:c0:03:c5:3b:aa:a9:fb:0c:08: c1:01:ec:41:17:43:c0:a7:a8:92:e3:5e:df:29:3d: ad:92:0b:1f:ce:78:6f:a9:9f:92:e4:63:99:c1:e7: 2b:72:05:28:fe:3e:cd:e8:eb:72:87:f3:00:be:5b: 76:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2A:A3:64:67:9C:82:42:08:2E:2F:8D:CB:7B:E4:E2:29:24:F8:FD X509v3 Authority Key Identifier: keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0e:af:f6:05:cd:a3:17:db:a4:76:0e:2e:8f:f2:2a:f7:51: d4:28:31:0e:77:e9:d2:9e:3a:b8:33:76:67:4f:c0:0b:73:ab: da:89:0c:49:7b:4e:1b:9e:ca:3e:b8:a5:37:3a:74:e2:f3:1c: 88:47:5e:c5:18:93:2b:d1:68:93:be:e4:0e:49:be:0b:c2:fa: a1:43:5f:9c:aa:2f:8c:29:d0:67:16:4a:55:b3:af:6f:3c:ae: 20:8f:2f:d3:a6:10:28:2e:89:cd:7a:72:00:85:60:c7:0a:10: 24:78:8e:83:3d:c6:14:11:7c:ee:a0:17:27:ed:2b:fb:f4:fd: ac:5c:e6:32:a8:75:02:b8:8d:ea:8f:37:b3:89:87:e4:5f:bc: 62:7b:03:0e:e6:2a:00:62:dd:fe:3d:19:75:e8:ca:d1:77:a6: aa:c5:d1:9e:20:3b:1f:59:aa:8c:c2:7d:44:a9:67:ce:c9:0d: 83:40:b4:41:e1:83:20:17:b8:80:d0:fb:55:02:55:b4:b6:2f: 70:aa:ec:18:bf:2b:d7:5c:d8:26:04:ed:13:fb:29:8b:96:93: b4:37:22:ca:f4:8e:b4:9c:ba:07:d0:89:fa:4b:c6:24:17:43: f5:a2:a6:89:25:8e:17:0f:9d:bc:0c:10:ec:97:c9:5b:38:b6: 8d:ef:1f:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoCNIGYJLI8Y9ZYQmR6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YTU5NGUzMDRiNjgyMTgzYWEyMzU5ZTQwZTFkY2VmOTNm ZTA1NzAwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD Eyg5ZDJhYTM2NDY3OWM4MjQyMDgyZTJmOGRjYjdiZTRlMjI5MjRmOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0breETjCswQfTMn/BFUgNn/BHM4H ejGsq0BZai4gEce8yLVo0qYY9JOOZGUtAGd3x73JbXkcvyv94OVGYlH40j7UljYh YAMA1Eojg39rfcZ+jp18TPME5y4yt5nxXd+V3FycRJebyixzSiMx3o1NP2WRCgkU n4dcf8J0hsr5OdlDcSPsxM3jJOSCd/qqmsCBb77WdZYdvG6POVckz8bM+YIfHPuV bH+a/lwMeKZ5cyVlVYHH+9YT8NJMnfyJtZzutrpQFpTe61bAA8U7qqn7DAjBAexB F0PAp6iS417fKT2tkgsfznhvqZ+S5GOZwecrcgUo/j7N6Otyh/MAvlt2aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0qo2RnnIJCCC4vjct75OIpJPj9MB8GA1UdIwQY MBaAFIellOMEtoIYOqI1nkDh3O+T/gVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAt YjllMzRhMzhmM2E5LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAtYjllMzRhMzhmM2E5 LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADg6v9gXN oxfbpHYOLo/yKvdR1CgxDnfp0p46uDN2Z0/AC3Or2okMSXtOG57KPrilNzp04vMc iEdexRiTK9Fok77kDkm+C8L6oUNfnKovjCnQZxZKVbOvbzyuII8v06YQKC6JzXpy AIVgxwoQJHiOgz3GFBF87qAXJ+0r+/T9rFzmMqh1AriN6o83s4mH5F+8YnsDDuYq AGLd/j0ZdejK0XemqsXRniA7H1mqjMJ9RKlnzskNg0C0QeGDIBe4gND7VQJVtLYv cKrsGL8r11zYJgTtE/spi5aTtDciyvSOtJy6B9CJ+kvGJBdD9aKmiSWOFw+dvAwQ 7JfJWzi2je8fog== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:12 2025 by rpki-client