This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft File: h5Q8uG46cDgTd4-reQ1l8NohYVo.mft (raw, json) Hash identifier: F/oyBJvgryKe67JsNHjVWMCnpe3YNoWGcqAuR3s4ViI= Subject key identifier: 56:F2:A8:08:43:E2:0F:80:1C:26:6C:A3:90:54:9C:FE:A9:A0:63:63 Authority key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A Certificate issuer: /CN=87943cb86e3a703813778fab790d65f0da21615a Certificate serial: 019B3CEBF5B83023FB496891879B7FA6D7EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 18:00:55 +0000 Manifest this update: Sat 20 Dec 2025 18:00:55 +0000 Manifest next update: Sun 21 Dec 2025 18:00:55 +0000 Files and hashes: 1: UyiCJXS5zLJCJ-mb2r3uZMMtApg.roa (hash: 6+o4TOXaHYgYpVjpt7E7at5geUDl0m5s/WhQVOEUlU0=) 2: h5Q8uG46cDgTd4-reQ1l8NohYVo.crl (hash: oBmTi7J9aJ0jAtlJWKvrPL4MO2wq9hjyumMVvY5BjOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:f5:b8:30:23:fb:49:68:91:87:9b:7f:a6:d7:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87943cb86e3a703813778fab790d65f0da21615a Validity Not Before: Dec 20 18:00:55 2025 GMT Not After : Dec 21 18:00:55 2025 GMT Subject: CN=56f2a80843e20f801c266ca390549cfea9a06363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:af:85:45:61:9f:a8:5b:62:34:41:52:83:e7: e7:52:c1:40:0a:61:74:ff:32:c9:24:18:51:98:f0: b4:09:aa:60:47:91:f0:bc:5f:3b:cc:1a:52:4d:20: 4b:95:2d:dc:7d:14:ef:77:97:eb:a4:af:e5:f1:8a: 66:8a:ac:08:26:c2:fc:1a:2f:67:a7:cd:18:51:2d: e4:ca:0a:95:6f:0f:de:b5:07:bc:0d:ef:5e:f6:31: 05:41:ee:32:bc:5e:33:92:9f:2b:e8:aa:5f:27:3e: 75:f0:83:92:d4:24:34:db:ba:50:70:6d:38:7e:75: 1a:75:1c:47:40:97:77:c8:10:17:3e:93:b1:0e:dd: 24:dd:f2:22:1c:30:83:3b:c6:ed:34:92:6e:d8:99: 8f:0f:18:c9:c4:37:84:e9:e3:25:57:09:2c:06:c7: 5a:c0:db:9c:6a:41:dd:52:15:c6:79:21:0b:9f:69: 50:91:ff:64:1d:9a:47:26:cd:3e:79:3a:72:d2:86: b5:b7:f2:65:fd:ee:4c:5a:7c:2d:4c:89:bf:db:1e: ad:60:40:cb:64:8c:bc:de:8b:ca:1a:94:45:2b:b3: 2e:ab:8c:0f:6e:9f:08:c6:a5:2e:3e:03:1d:5e:77: a6:a7:5e:fc:37:01:25:48:30:eb:ee:8d:4f:0c:ef: e6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F2:A8:08:43:E2:0F:80:1C:26:6C:A3:90:54:9C:FE:A9:A0:63:63 X509v3 Authority Key Identifier: keyid:87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3f:69:22:65:08:f5:6b:32:7d:2c:dd:de:25:9f:49:b3:a3: 72:60:a6:e1:77:6d:83:0e:00:65:87:e8:89:65:bc:0c:0c:bd: 85:be:83:ec:47:8c:00:ef:0b:b8:ea:19:2d:39:4f:1c:49:9f: 47:71:34:ac:27:ad:f2:81:e6:d8:eb:5d:1e:cf:c8:1c:e8:d1: c9:63:43:f9:e3:53:a8:e6:68:58:d6:47:57:2e:78:55:7f:b2: ef:08:b5:84:fc:dd:46:ee:02:1d:7a:41:31:2e:e7:93:11:97: 13:21:bd:4e:22:b3:02:b1:76:5c:1a:b2:af:9c:52:b6:84:aa: bb:fc:f1:98:d2:b6:9a:95:f7:30:d8:44:42:60:4c:4c:96:8a: 79:da:5b:e1:bd:20:62:86:87:3c:04:00:9f:f8:ce:18:b6:31: 34:35:1d:ef:e7:9f:ed:16:46:1c:2c:c5:c1:08:51:a7:f9:8b: b1:98:4c:f3:27:97:22:41:a9:e1:be:66:38:3e:78:7e:06:e7: 1b:87:5a:97:b3:2b:37:4c:f4:71:d8:26:93:f5:2e:0a:4a:0f: 88:35:1e:a9:c9:3f:e1:a1:ec:f1:93:b7:b6:90:56:03:37:71: 3d:2d:99:8b:05:fd:fd:28:f8:55:5c:cc:c4:43:8f:51:dd:7e: ca:16:fe:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/W4MCP7SWiRh5t/ptfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTQzY2I4NmUzYTcwMzgxMzc3OGZhYjc5MGQ2NWYwZGEy MTYxNWEwHhcNMjUxMjIwMTgwMDU1WhcNMjUxMjIxMTgwMDU1WjAzMTEwLwYDVQQD Eyg1NmYyYTgwODQzZTIwZjgwMWMyNjZjYTM5MDU0OWNmZWE5YTA2MzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q+FRWGfqFtiNEFSg+fnUsFACmF0 /zLJJBhRmPC0CapgR5HwvF87zBpSTSBLlS3cfRTvd5frpK/l8YpmiqwIJsL8Gi9n p80YUS3kygqVbw/etQe8De9e9jEFQe4yvF4zkp8r6KpfJz518IOS1CQ027pQcG04 fnUadRxHQJd3yBAXPpOxDt0k3fIiHDCDO8btNJJu2JmPDxjJxDeE6eMlVwksBsda wNucakHdUhXGeSELn2lQkf9kHZpHJs0+eTpy0oa1t/Jl/e5MWnwtTIm/2x6tYEDL ZIy83ovKGpRFK7Muq4wPbp8IxqUuPgMdXnemp178NwElSDDr7o1PDO/muQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbyqAhD4g+AHCZso5BUnP6poGNjMB8GA1UdIwQY MBaAFIeUPLhuOnA4E3ePq3kNZfDaIWFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEt Y2M1ODA1MjFkMDBmLzEvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEtY2M1ODA1MjFkMDBm LzEvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMj9pImUI 9WsyfSzd3iWfSbOjcmCm4Xdtgw4AZYfoiWW8DAy9hb6D7EeMAO8LuOoZLTlPHEmf R3E0rCet8oHm2OtdHs/IHOjRyWND+eNTqOZoWNZHVy54VX+y7wi1hPzdRu4CHXpB MS7nkxGXEyG9TiKzArF2XBqyr5xStoSqu/zxmNK2mpX3MNhEQmBMTJaKedpb4b0g YoaHPAQAn/jOGLYxNDUd7+ef7RZGHCzFwQhRp/mLsZhM8yeXIkGp4b5mOD54fgbn G4dal7MrN0z0cdgmk/UuCkoPiDUeqck/4aHs8ZO3tpBWAzdxPS2ZiwX9/Sj4VVzM xEOPUd1+yhb+eQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:49:52 2025 by rpki-client