This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft File: h338-RVp2BViJvwnkOZ5BnY6KwM.mft (raw, json) Hash identifier: r1ZqqI4MsfDVTzUd4x+59CDiPe7o1nqCkaa2PLkGPG4= Subject key identifier: 38:8D:3F:2B:D0:0F:98:7F:F1:A6:C3:BC:BE:1B:5E:D5:92:9F:25:ED Authority key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03 Certificate issuer: /CN=877dfcf91569d8156226fc2790e67906763a2b03 Certificate serial: 019AF209629859AE7A039E0E9B8768AFD726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:32 +0000 Manifest this update: Sat 06 Dec 2025 05:01:32 +0000 Manifest next update: Sun 07 Dec 2025 05:01:32 +0000 Files and hashes: 1: h338-RVp2BViJvwnkOZ5BnY6KwM.crl (hash: l56BxqRao5Muin9yK/nreO1XsXFDa3GPKlz02yQA6BI=) 2: hw2W04D1is42TOmflaN39hcxH9E.roa (hash: fNZHjDeAyo42LcaysmyiDifSO0kt6UxDpr+XhWr9MzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:62:98:59:ae:7a:03:9e:0e:9b:87:68:af:d7:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=877dfcf91569d8156226fc2790e67906763a2b03 Validity Not Before: Dec 6 05:01:32 2025 GMT Not After : Dec 7 05:01:32 2025 GMT Subject: CN=388d3f2bd00f987ff1a6c3bcbe1b5ed5929f25ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0b:02:74:5c:e5:1b:12:3e:6e:14:6a:ef:be: d9:82:03:d0:94:06:5d:d7:55:b0:c1:29:78:eb:b0: 43:0c:d8:94:d3:fe:35:e2:a2:31:30:46:c5:d7:2a: d5:5f:b0:43:62:a1:b4:6a:af:9e:eb:8d:7f:13:ca: 42:14:61:00:ab:2b:57:39:54:3d:c3:39:68:33:eb: f3:16:da:93:68:a7:a3:bc:74:c1:82:9d:b3:06:77: 78:fd:f6:46:9d:d2:a9:46:c7:14:a0:7d:5c:c3:9b: 6e:bc:62:93:93:38:0b:f6:14:40:50:ee:8c:d9:40: 49:a3:50:ae:a3:a5:a9:aa:ba:2a:53:9b:80:1b:9b: b9:fb:23:ad:49:7d:21:61:b4:18:31:37:ae:4d:51: 3a:ff:f8:d1:49:e1:4c:67:b3:80:f4:df:2e:8e:31: 28:9f:fa:5d:ae:94:ed:a2:36:6d:88:84:59:33:21: 80:9b:92:23:aa:d6:10:66:c2:61:92:ea:d4:5a:a3: 3f:4c:39:79:71:28:62:5c:bd:e0:25:29:51:97:31: c2:11:51:15:ce:0d:ed:49:67:1a:1a:dc:b6:54:1f: fc:3c:f7:4f:ef:05:c7:ec:11:a9:f8:6f:77:b9:0a: d3:6e:e3:9a:fc:22:01:b4:31:f6:e4:7c:e4:af:5a: 9a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8D:3F:2B:D0:0F:98:7F:F1:A6:C3:BC:BE:1B:5E:D5:92:9F:25:ED X509v3 Authority Key Identifier: keyid:87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d0:71:2e:fd:c7:ea:43:4b:db:b9:a3:ff:f7:99:3c:4e:9b: 70:e3:f9:c1:1b:ea:55:3b:bc:60:f2:4c:93:31:01:2b:f6:bc: a9:b0:c2:c5:c5:e8:ae:73:4b:66:55:67:92:80:2a:0d:90:65: c4:ce:dd:4d:db:a0:62:bc:89:be:72:e1:a4:36:63:e3:dc:1e: 9c:26:7e:99:14:c1:2b:1f:7b:1a:b8:8e:54:0c:67:8f:56:84: f2:37:9c:f8:c9:88:06:ae:2f:67:2e:11:52:b4:09:92:d6:95: 1c:46:6d:ad:ad:38:89:52:06:bc:0b:d3:4d:0d:3d:6c:bc:08: a0:7c:5d:3e:19:f5:3c:af:f5:8b:90:15:a2:8e:06:32:0c:6e: e8:ee:3e:82:61:df:48:65:1d:76:72:76:0b:01:d0:41:7c:86: 5a:12:1c:61:04:df:72:0a:02:a2:18:cd:29:96:02:72:6e:00: 25:8d:0c:36:c3:9a:10:61:f6:b3:7e:ca:51:4c:37:df:57:b1: 34:59:91:4b:49:0f:a0:49:b6:35:d0:89:c4:f2:72:4d:f2:cb: 47:1d:dd:81:a3:0b:01:2d:11:01:5f:c4:4b:6e:f0:0c:e2:0b: da:51:4f:e0:71:ac:31:a4:05:03:9a:2d:9a:d0:58:b0:81:9f: 97:27:b4:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWKYWa56A54Om4dor9cmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3N2RmY2Y5MTU2OWQ4MTU2MjI2ZmMyNzkwZTY3OTA2NzYz YTJiMDMwHhcNMjUxMjA2MDUwMTMyWhcNMjUxMjA3MDUwMTMyWjAzMTEwLwYDVQQD EygzODhkM2YyYmQwMGY5ODdmZjFhNmMzYmNiZTFiNWVkNTkyOWYyNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAsCdFzlGxI+bhRq777ZggPQlAZd 11WwwSl467BDDNiU0/414qIxMEbF1yrVX7BDYqG0aq+e641/E8pCFGEAqytXOVQ9 wzloM+vzFtqTaKejvHTBgp2zBnd4/fZGndKpRscUoH1cw5tuvGKTkzgL9hRAUO6M 2UBJo1Cuo6WpqroqU5uAG5u5+yOtSX0hYbQYMTeuTVE6//jRSeFMZ7OA9N8ujjEo n/pdrpTtojZtiIRZMyGAm5IjqtYQZsJhkurUWqM/TDl5cShiXL3gJSlRlzHCEVEV zg3tSWcaGty2VB/8PPdP7wXH7BGp+G93uQrTbuOa/CIBtDH25Hzkr1qaQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiNPyvQD5h/8abDvL4bXtWSnyXtMB8GA1UdIwQY MBaAFId9/PkVadgVYib8J5DmeQZ2OisDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMmJkYzgtNzllNy00OGNkLWE5OTQt YWQ0OTU4NThiMzJjLzEvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mMmJkYzgtNzllNy00OGNkLWE5OTQtYWQ0OTU4NThiMzJj LzEvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdBxLv3H 6kNL27mj//eZPE6bcOP5wRvqVTu8YPJMkzEBK/a8qbDCxcXornNLZlVnkoAqDZBl xM7dTdugYryJvnLhpDZj49wenCZ+mRTBKx97GriOVAxnj1aE8jec+MmIBq4vZy4R UrQJktaVHEZtra04iVIGvAvTTQ09bLwIoHxdPhn1PK/1i5AVoo4GMgxu6O4+gmHf SGUddnJ2CwHQQXyGWhIcYQTfcgoCohjNKZYCcm4AJY0MNsOaEGH2s37KUUw331ex NFmRS0kPoEm2NdCJxPJyTfLLRx3dgaMLAS0RAV/ES27wDOIL2lFP4HGsMaQFA5ot mtBYsIGflye0HQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:54 2025 by rpki-client