This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json) Hash identifier: z6qkFgpfYpJPk7JRyNlmCdSfySIFkZhUVnuRLmnad5Q= Subject key identifier: E1:D8:33:1D:D0:7B:79:87:42:6C:79:AC:F8:EB:99:2A:89:1E:3A:67 Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34 Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34 Certificate serial: 019AF208CD64A5196F4667C17F4D4FF1B53F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft Manifest number: 0629 Signing time: Sat 06 Dec 2025 05:00:54 +0000 Manifest this update: Sat 06 Dec 2025 05:00:54 +0000 Manifest next update: Sun 07 Dec 2025 05:00:54 +0000 Files and hashes: 1: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: q8RbLSmXZr9ZrcLSX3OT9Os8OgdsWezDZ2+ZKdNZ8Bo=) 2: mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa (hash: F4Jtc5+FUEqcLwMhPjxlPH6jWlgxGrbFa+YLXHGjjaE=) 3: tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa (hash: 26ICYZJOvq605v0CSl1cezfNjCXPU7AckP1ImmTpFUQ=) 4: u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa (hash: z1DWJwaHbuR/Qct83OIrMO/3C45DlWrhtr2MVeCX/hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:cd:64:a5:19:6f:46:67:c1:7f:4d:4f:f1:b5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34 Validity Not Before: Dec 6 05:00:54 2025 GMT Not After : Dec 7 05:00:54 2025 GMT Subject: CN=e1d8331dd07b7987426c79acf8eb992a891e3a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ef:47:8c:0f:12:23:0c:b4:e5:a8:57:3f:1d: c2:b9:74:b7:71:63:6d:92:fb:0d:8e:38:0d:b5:85: 4e:8c:58:db:93:2f:43:84:30:12:11:9b:98:f2:75: 68:00:55:32:df:c5:66:27:11:dc:93:90:8d:f2:c4: 38:0e:d3:90:20:d9:07:d8:cc:00:20:0d:00:41:b5: 22:71:41:fa:e7:af:f7:1f:18:48:fe:e6:f2:ae:a2: 2e:b9:11:00:e8:42:1c:d1:fb:a1:6b:27:99:2e:10: b5:e4:ef:a7:3f:42:b1:e3:b7:f6:43:9f:52:71:c9: e7:0b:8f:9f:11:9b:d8:27:1d:36:23:65:c7:f5:05: 04:21:ff:6a:ee:5f:8a:d9:56:93:c9:ad:75:43:98: a4:a9:6d:72:fc:0e:b7:6c:2a:33:26:7c:d0:6a:2c: b4:09:97:2a:58:bd:c9:5f:7e:1e:1b:56:82:9b:7b: 22:40:65:fb:29:0e:38:4c:c1:75:e0:cb:7f:ed:08: 49:ad:db:1a:97:31:b9:2d:7c:39:ec:1d:9e:23:fa: aa:1a:9f:4c:4a:5c:27:af:e4:62:2c:44:76:d7:b7: 43:bf:66:f5:1b:50:6b:4a:5d:18:c7:f8:e3:74:74: 09:cb:f8:61:eb:cf:11:1b:52:59:ab:60:da:c8:a9: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D8:33:1D:D0:7B:79:87:42:6C:79:AC:F8:EB:99:2A:89:1E:3A:67 X509v3 Authority Key Identifier: keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:fd:8a:70:9d:dc:c6:bd:ca:68:bd:0e:b1:6c:f9:a2:44:53: 7f:e0:fa:08:30:ea:3b:62:bc:71:a4:f1:99:72:73:f3:e6:da: 84:8b:f6:0a:20:7c:a0:fe:fc:dc:bc:63:4c:9b:13:db:e2:52: 09:00:ce:fc:fc:e6:da:10:57:1f:bd:e5:a6:83:fb:4a:52:84: c3:8d:97:9e:01:8a:14:d7:4b:9a:ba:0d:d8:c9:5d:6e:dc:e4: 36:ef:dd:01:8b:fe:18:b4:34:f8:b1:5a:e8:83:03:2f:ce:79: 6c:9c:e1:df:65:35:4a:85:a7:3b:38:7f:9d:ae:73:65:82:6b: 53:25:59:f8:6d:5d:0b:0e:26:5f:b0:e1:51:da:39:9d:3a:6a: c0:18:51:e5:5d:2b:36:bc:2e:38:6c:9a:93:85:63:ce:dd:e4: f4:61:44:24:43:a7:a1:bb:48:b3:ee:8b:d1:3d:c1:0a:c7:c4: cb:c4:15:e4:47:68:1a:6d:9a:40:0d:91:55:3e:93:17:4c:bc: 36:da:7a:bc:3d:ae:ff:a4:d0:8f:63:a3:e3:33:87:90:c4:a9: ca:c9:d1:15:d0:9d:a2:de:86:9d:04:99:b7:a9:db:48:1a:7f: db:af:c3:02:8f:10:75:4f:be:90:c7:72:cc:ea:0a:6c:69:c1: d2:8d:cf:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCM1kpRlvRmfBf01P8bU/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjN2M3ZDQ4ODg3ZTJmMDg2NWQ3MDFjZGM2ZTBiYjdkZWVk NWRiMzQwHhcNMjUxMjA2MDUwMDU0WhcNMjUxMjA3MDUwMDU0WjAzMTEwLwYDVQQD EyhlMWQ4MzMxZGQwN2I3OTg3NDI2Yzc5YWNmOGViOTkyYTg5MWUzYTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+9HjA8SIwy05ahXPx3CuXS3cWNt kvsNjjgNtYVOjFjbky9DhDASEZuY8nVoAFUy38VmJxHck5CN8sQ4DtOQINkH2MwA IA0AQbUicUH656/3HxhI/ubyrqIuuREA6EIc0fuhayeZLhC15O+nP0Kx47f2Q59S ccnnC4+fEZvYJx02I2XH9QUEIf9q7l+K2VaTya11Q5ikqW1y/A63bCozJnzQaiy0 CZcqWL3JX34eG1aCm3siQGX7KQ44TMF14Mt/7QhJrdsalzG5LXw57B2eI/qqGp9M Slwnr+RiLER217dDv2b1G1BrSl0Yx/jjdHQJy/hh688RG1JZq2DayKkA9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHYMx3Qe3mHQmx5rPjrmSqJHjpnMB8GA1UdIwQY MBaAFHx8fUiIfi8IZdcBzcbgu33u1ds0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYt ZjdhYmVmM2M4YTJiLzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYtZjdhYmVmM2M4YTJi LzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVf2KcJ3c xr3KaL0OsWz5okRTf+D6CDDqO2K8caTxmXJz8+bahIv2CiB8oP783LxjTJsT2+JS CQDO/Pzm2hBXH73lpoP7SlKEw42XngGKFNdLmroN2MldbtzkNu/dAYv+GLQ0+LFa 6IMDL855bJzh32U1SoWnOzh/na5zZYJrUyVZ+G1dCw4mX7DhUdo5nTpqwBhR5V0r NrwuOGyak4Vjzt3k9GFEJEOnobtIs+6L0T3BCsfEy8QV5EdoGm2aQA2RVT6TF0y8 Ntp6vD2u/6TQj2Oj4zOHkMSpysnRFdCdot6GnQSZt6nbSBp/26/DAo8QdU++kMdy zOoKbGnB0o3PYw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:19 2025 by rpki-client