This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json) Hash identifier: y6dKPM0zz+42Ndg8qDYCOc8CBKbOUpO1vPSs6ZKtbCg= Subject key identifier: 0A:5D:92:21:32:15:CE:84:D2:C0:2F:DB:94:C2:42:F5:34:1F:04:C0 Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac Certificate serial: 019AF1645A0C2BD5627D5798CE93799219C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: cJQMfm3Nb-Yj_wiSeqPIhYmhihg.roa (hash: H1zjWIW+Nmv7M4Qo9+faRg9JdVHFVBqi+Ji0husl1dg=) 2: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: hZ6oTBfEAowhMr3NH/FFCAtZzW/habMedanWCeENQRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5a:0c:2b:d5:62:7d:57:98:ce:93:79:92:19:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=0a5d92213215ce84d2c02fdb94c242f5341f04c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:15:6f:ea:83:68:a1:71:df:3e:e0:3e:da: 42:d9:0b:84:39:31:b1:6a:65:75:54:95:e5:e1:95: 99:ab:30:a6:ca:61:5d:5f:bf:cd:aa:54:3b:8b:c6: f9:a3:3c:7f:25:29:fb:1e:b3:b2:68:30:12:bb:c3: 30:03:8d:36:bd:f7:6a:77:5f:4b:1e:49:6e:47:84: 4c:2e:9f:08:69:c0:79:5c:ff:33:7d:eb:90:cc:a8: b8:27:42:97:66:87:a8:74:51:6f:fe:f3:c0:23:2f: f4:96:07:43:85:27:c9:22:11:15:ca:c8:d0:ef:1c: c1:fc:67:e2:0a:3e:3c:bc:0a:89:0e:de:fe:1d:23: c4:76:cf:7f:6f:59:b0:89:4e:74:e4:40:8a:64:c3: ad:b8:8f:df:04:2b:34:0e:c2:a4:a1:94:da:f9:8e: 6d:a2:33:59:d8:3d:68:c4:04:e4:6d:c3:4e:85:7c: 21:51:e8:22:93:e3:61:10:57:5f:be:a8:eb:2b:9f: 44:3d:03:43:ad:bd:ac:ac:14:ea:4d:0c:4d:a5:97: 97:5d:47:85:88:5a:39:94:40:4d:9c:fe:d2:93:58: d3:6f:7b:aa:fa:c4:06:83:37:ef:11:55:be:bd:da: 14:4c:03:19:a6:ee:0f:7e:c8:36:80:b7:b8:00:ad: 15:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5D:92:21:32:15:CE:84:D2:C0:2F:DB:94:C2:42:F5:34:1F:04:C0 X509v3 Authority Key Identifier: keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ad:10:2d:0a:eb:3f:9d:e9:a8:ba:a3:65:b4:3c:ca:11:ff: 23:03:e9:21:5c:43:02:2a:ea:e2:b8:9f:19:0d:4b:23:0a:52: 16:57:9b:d7:d3:4f:55:75:0f:eb:e2:a5:0c:b1:e8:f6:eb:23: a2:5d:fb:43:14:7c:41:0d:0b:59:1d:9d:3f:38:35:4a:88:67: 8a:85:6e:80:37:2b:65:93:3a:a0:66:0a:b5:31:87:6e:14:20: 53:fd:49:d1:25:ee:c5:2e:58:d5:96:40:c2:c8:c0:5e:4a:d8: ef:ab:84:5b:50:47:25:73:47:09:16:e2:bc:e5:6d:fc:62:af: a3:95:f8:d8:4d:ab:c8:14:3f:1e:fb:16:0e:45:c4:3f:5a:bd: 6e:aa:7f:c1:b6:4a:43:be:da:53:11:45:ee:45:04:a6:4c:97: 8f:9d:eb:fb:25:26:bf:40:83:b5:cc:6e:22:b4:68:9b:42:30: 58:2a:3c:03:13:81:ea:4e:b3:3b:32:99:6d:c9:80:40:89:fd: 3b:ba:8f:1b:7e:4c:c3:4e:c4:2c:e5:f0:ab:36:fb:4c:32:56: 07:c2:e6:7f:01:4c:0d:35:5f:81:69:76:d5:4b:1d:9e:9d:3b: 3c:df:d9:60:7d:80:a5:e5:ee:de:41:21:ec:e9:a7:dc:16:9c: 17:d3:c7:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFoMK9VifVeYzpN5khnDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0Yjg3YWY1MzM0YzVjNDUxNDFiNjY3NWE5ZWQ0NmU1N2I3 OTc2YWMwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD EygwYTVkOTIyMTMyMTVjZTg0ZDJjMDJmZGI5NGMyNDJmNTM0MWYwNGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2kVb+qDaKFx3z7gPtpC2QuEOTGx amV1VJXl4ZWZqzCmymFdX7/NqlQ7i8b5ozx/JSn7HrOyaDASu8MwA402vfdqd19L HkluR4RMLp8IacB5XP8zfeuQzKi4J0KXZoeodFFv/vPAIy/0lgdDhSfJIhEVysjQ 7xzB/GfiCj48vAqJDt7+HSPEds9/b1mwiU505ECKZMOtuI/fBCs0DsKkoZTa+Y5t ojNZ2D1oxATkbcNOhXwhUegik+NhEFdfvqjrK59EPQNDrb2srBTqTQxNpZeXXUeF iFo5lEBNnP7Sk1jTb3uq+sQGgzfvEVW+vdoUTAMZpu4Pfsg2gLe4AK0VzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApdkiEyFc6E0sAv25TCQvU0HwTAMB8GA1UdIwQY MBaAFIS4evUzTFxFFBtmdantRuV7eXasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2Mt MmU5ODRmYmZmOGIxLzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2MtMmU5ODRmYmZmOGIx LzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh60QLQrr P53pqLqjZbQ8yhH/IwPpIVxDAirq4rifGQ1LIwpSFleb19NPVXUP6+KlDLHo9usj ol37QxR8QQ0LWR2dPzg1SohnioVugDcrZZM6oGYKtTGHbhQgU/1J0SXuxS5Y1ZZA wsjAXkrY76uEW1BHJXNHCRbivOVt/GKvo5X42E2ryBQ/HvsWDkXEP1q9bqp/wbZK Q77aUxFF7kUEpkyXj53r+yUmv0CDtcxuIrRom0IwWCo8AxOB6k6zOzKZbcmAQIn9 O7qPG35Mw07ELOXwqzb7TDJWB8LmfwFMDTVfgWl21Usdnp07PN/ZYH2ApeXu3kEh 7Omn3BacF9PHcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:44 2025 by rpki-client