This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json) Hash identifier: 8rYkscelQxKs2g/NHT8Cz3RAHm9tMkApkHm5WU6IXBA= Subject key identifier: 9D:81:EA:5A:E5:2B:6D:E2:60:3C:82:49:EA:A9:88:73:63:17:DA:55 Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7 Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7 Certificate serial: 019AF352DA9F966D2B6F6136FE1B6BB1DBE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft Manifest number: 0679 Signing time: Sat 06 Dec 2025 11:01:24 +0000 Manifest this update: Sat 06 Dec 2025 11:01:24 +0000 Manifest next update: Sun 07 Dec 2025 11:01:24 +0000 Files and hashes: 1: OxW0-GOR5UDSFAaTt546TZUCBGE.roa (hash: W3m4nhGM+s38jO9bqJSFGDvsDRVYHQusEq/+6tiODt8=) 2: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: ptzumYonUQNWl3biqjUPOO8nXwsgruVbcDx7+BH0Y7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:da:9f:96:6d:2b:6f:61:36:fe:1b:6b:b1:db:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7 Validity Not Before: Dec 6 11:01:24 2025 GMT Not After : Dec 7 11:01:24 2025 GMT Subject: CN=9d81ea5ae52b6de2603c8249eaa988736317da55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:86:8d:13:d3:9b:8e:c4:e4:4d:e0:f8:72:f9: cd:10:4e:6f:40:6a:09:84:1b:36:62:44:3f:fd:0c: 33:0a:5e:11:df:62:c1:5f:09:27:91:28:d3:a7:ba: ee:b6:78:4b:d8:a8:17:b8:d6:f2:16:ce:34:20:3c: 30:61:bc:78:e6:39:c7:f7:21:d7:de:5d:2c:72:30: ef:e7:12:86:72:a0:84:9b:b7:27:cc:01:76:e9:04: 50:73:ed:8c:30:68:1b:4c:7f:ce:df:30:0c:e7:5c: 49:1a:31:b7:9d:0c:07:07:9a:41:5c:da:74:99:f9: 13:e6:c0:78:ec:55:96:8f:ea:22:cf:1e:42:8a:6e: b4:f3:bf:b6:02:29:1f:fa:c0:26:2b:08:46:5f:f2: a7:7f:2e:95:66:e6:92:aa:08:6a:e4:60:61:10:f0: ee:c7:8a:55:28:36:47:cf:6f:7a:66:56:0f:38:88: 11:e4:42:65:35:a0:82:7e:7c:3b:44:f2:06:44:96: 88:a9:23:e1:c8:44:c9:49:28:b4:e8:8c:18:ee:31: 1c:da:98:b6:e6:37:06:bc:61:34:1d:54:a7:7f:e8: 44:ca:fc:20:75:80:fd:fd:58:36:09:24:4d:be:e8: 3c:cf:37:89:96:34:31:c3:04:4a:e5:67:14:57:bd: d8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:81:EA:5A:E5:2B:6D:E2:60:3C:82:49:EA:A9:88:73:63:17:DA:55 X509v3 Authority Key Identifier: keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d5:ff:82:fd:d3:1a:e5:96:a5:52:fe:a3:6c:33:89:18:50: 78:e8:31:e3:05:64:6a:68:2a:06:4d:b0:02:5c:0f:34:c5:52: 68:05:7a:fb:93:88:27:4d:62:02:c8:8a:ae:91:d1:17:19:21: 85:97:2c:e6:c8:37:44:0c:0c:18:1f:de:34:cc:57:49:3a:85: a5:35:bd:93:fa:fe:54:6b:65:38:df:34:39:5b:a1:92:4e:c2: d8:a3:21:73:0d:f4:72:b7:37:d5:13:5c:25:85:24:fb:22:3b: 12:3c:0c:75:ab:17:dc:77:b9:fb:74:a0:33:e3:30:2e:4a:aa: 48:80:8a:5e:21:91:f2:f0:c7:41:c9:36:be:30:8c:99:27:f7: 1d:7e:d3:bd:54:da:f9:5b:bb:26:f9:27:df:30:21:ea:04:13: 54:3a:d3:18:80:13:8a:7d:ce:54:45:8c:d3:48:a7:2e:63:25: 8d:d0:61:aa:92:8e:81:bf:4f:ca:f4:6f:19:a0:3c:0b:8d:3c: 9f:84:20:05:d9:2a:37:57:5e:55:cf:5f:de:14:28:ba:bc:12: 42:47:b9:5b:3c:70:8a:d9:3d:61:f7:85:bb:38:9c:17:85:5a: f4:ff:83:01:63:1f:3f:bd:88:93:5b:16:0d:19:f4:c3:61:fa: f1:53:98:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUtqflm0rb2E2/htrsdvoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YjEzOTZmZDExYzczMGVmMjA0NDgxMjliMjgyODU2YWM1 MDRjYjcwHhcNMjUxMjA2MTEwMTI0WhcNMjUxMjA3MTEwMTI0WjAzMTEwLwYDVQQD Eyg5ZDgxZWE1YWU1MmI2ZGUyNjAzYzgyNDllYWE5ODg3MzYzMTdkYTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oaNE9ObjsTkTeD4cvnNEE5vQGoJ hBs2YkQ//QwzCl4R32LBXwknkSjTp7rutnhL2KgXuNbyFs40IDwwYbx45jnH9yHX 3l0scjDv5xKGcqCEm7cnzAF26QRQc+2MMGgbTH/O3zAM51xJGjG3nQwHB5pBXNp0 mfkT5sB47FWWj+oizx5Cim6087+2Aikf+sAmKwhGX/Knfy6VZuaSqghq5GBhEPDu x4pVKDZHz296ZlYPOIgR5EJlNaCCfnw7RPIGRJaIqSPhyETJSSi06IwY7jEc2pi2 5jcGvGE0HVSnf+hEyvwgdYD9/Vg2CSRNvug8zzeJljQxwwRK5WcUV73YXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2B6lrlK23iYDyCSeqpiHNjF9pVMB8GA1UdIwQY MBaAFIexOW/RHHMO8gRIEpsoKFasUEy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGIt ZjRlN2M5Y2M0M2ZmLzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGItZjRlN2M5Y2M0M2Zm LzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtX/gv3T GuWWpVL+o2wziRhQeOgx4wVkamgqBk2wAlwPNMVSaAV6+5OIJ01iAsiKrpHRFxkh hZcs5sg3RAwMGB/eNMxXSTqFpTW9k/r+VGtlON80OVuhkk7C2KMhcw30crc31RNc JYUk+yI7EjwMdasX3He5+3SgM+MwLkqqSICKXiGR8vDHQck2vjCMmSf3HX7TvVTa +Vu7Jvkn3zAh6gQTVDrTGIATin3OVEWM00inLmMljdBhqpKOgb9PyvRvGaA8C408 n4QgBdkqN1deVc9f3hQourwSQke5Wzxwitk9YfeFuzicF4Va9P+DAWMfP72Ik1sW DRn0w2H68VOY3g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:43:52 2025 by rpki-client