This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json) Hash identifier: KunRCbwmgPs6UdLSLOUiOjXuupADLCeqeSwhSlt0Ry8= Subject key identifier: DB:D3:67:2A:AD:A4:36:34:26:2A:F8:F2:AB:3F:54:6F:F6:65:F1:29 Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57 Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157 Certificate serial: 019B239A415CB86232C2A87A733555E022E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft Manifest number: 06A3 Signing time: Mon 15 Dec 2025 20:01:10 +0000 Manifest this update: Mon 15 Dec 2025 20:01:10 +0000 Manifest next update: Tue 16 Dec 2025 20:01:10 +0000 Files and hashes: 1: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: 1DTrEzF2VfppPaoOQJi5JQq5Y9KK5z1xO6w3Cs/ezHk=) 2: qK0r22fc4dStcfs-iJMEOqc-e8I.roa (hash: szAPsZBmBxrbRZJWId/rghs7S63YVBb1wXhPcGatKBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:9a:41:5c:b8:62:32:c2:a8:7a:73:35:55:e0:22:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157 Validity Not Before: Dec 15 20:01:10 2025 GMT Not After : Dec 16 20:01:10 2025 GMT Subject: CN=dbd3672aada43634262af8f2ab3f546ff665f129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:55:47:d5:01:f0:25:ca:fc:60:a5:05:ff:93: b4:81:52:e9:25:72:78:a0:93:f1:2d:40:f5:e9:06: e9:31:82:4c:23:c6:6f:96:91:01:62:9b:da:34:e8: 6e:fa:64:34:63:ec:4e:0d:48:46:3a:bf:18:15:87: 4b:fa:cb:b9:36:91:f2:11:f6:f6:25:7b:de:69:aa: 26:5d:c2:98:1e:14:36:b9:d9:41:b5:69:a9:f7:60: b1:15:13:6f:21:d8:0e:b6:fd:90:31:38:99:4b:30: 39:fa:98:8d:f1:b2:19:e2:cc:3a:fd:5e:da:6b:f8: 09:7b:fc:49:65:cd:d0:cb:2f:71:01:40:63:c6:c7: 53:ab:63:da:a0:91:85:e0:6a:aa:1a:c4:92:c9:f1: e1:a8:5b:37:d4:26:e7:1d:99:f4:1b:d2:2d:33:aa: 2f:bb:3d:6f:e5:97:68:08:a9:0f:2a:b1:14:7c:e7: 04:98:40:13:45:95:56:3f:71:b1:99:cf:2b:3c:dd: 29:dd:40:5c:e6:67:dc:cf:3e:30:7b:f7:a6:4a:85: e2:fd:23:19:2d:cb:54:af:0d:1f:d1:8f:fc:74:c7: 80:a1:de:2c:97:cb:0a:0b:5b:cf:e5:ba:cb:bb:8b: 60:a6:2b:7a:69:da:8e:95:8d:40:85:c6:57:a4:aa: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D3:67:2A:AD:A4:36:34:26:2A:F8:F2:AB:3F:54:6F:F6:65:F1:29 X509v3 Authority Key Identifier: keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:6b:cb:4d:4a:1d:4d:63:3b:5a:fc:37:5e:86:30:a8:67:42: ab:7f:15:f0:63:7e:bc:1e:ef:c0:ff:2b:e7:d4:15:67:66:eb: 7d:91:0f:af:c8:bc:88:9a:ec:d7:67:88:27:ef:2e:15:63:48: 5a:b5:fd:a5:a1:71:4a:54:9e:79:16:d3:39:2d:aa:ee:5f:04: 31:86:fd:79:a7:97:17:aa:60:34:dd:ef:88:35:3e:b0:47:fc: c1:01:14:1b:66:be:79:47:c9:4c:36:fa:51:25:2b:22:89:62: 89:83:08:15:70:d2:89:05:a4:2e:c2:1b:9e:56:b7:5b:12:36: 9f:26:b1:ba:8a:a3:17:ed:aa:8f:05:38:42:0c:85:c9:01:d9: 71:ad:9b:a4:22:b1:bd:06:9d:d3:48:2b:67:1e:39:29:12:ba: ec:8c:0b:f4:e4:ba:8f:2a:18:d6:b3:18:16:1d:88:77:02:5b: 27:d2:b0:44:d5:c5:88:7f:2d:f2:8a:69:27:37:dd:b5:93:31: a4:9c:86:9c:e0:c1:67:d9:09:fd:1d:6b:b5:67:bd:7d:04:50: 81:13:56:d8:97:d9:a0:51:93:35:a1:ce:ed:04:ab:46:0f:6b: fd:ca:9a:44:d8:32:cb:2a:0c:34:50:95:db:95:19:5b:cf:8d: 35:ab:6a:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmkFcuGIywqh6czVV4CLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YjNjYjJkNmZiNjhlNmVkYjg0NDJmZWIwYWJmYzk1YWVi NWIxNTcwHhcNMjUxMjE1MjAwMTEwWhcNMjUxMjE2MjAwMTEwWjAzMTEwLwYDVQQD EyhkYmQzNjcyYWFkYTQzNjM0MjYyYWY4ZjJhYjNmNTQ2ZmY2NjVmMTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VVH1QHwJcr8YKUF/5O0gVLpJXJ4 oJPxLUD16QbpMYJMI8ZvlpEBYpvaNOhu+mQ0Y+xODUhGOr8YFYdL+su5NpHyEfb2 JXveaaomXcKYHhQ2udlBtWmp92CxFRNvIdgOtv2QMTiZSzA5+piN8bIZ4sw6/V7a a/gJe/xJZc3Qyy9xAUBjxsdTq2PaoJGF4GqqGsSSyfHhqFs31CbnHZn0G9ItM6ov uz1v5ZdoCKkPKrEUfOcEmEATRZVWP3Gxmc8rPN0p3UBc5mfczz4we/emSoXi/SMZ LctUrw0f0Y/8dMeAod4sl8sKC1vP5brLu4tgpit6adqOlY1AhcZXpKq/FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvTZyqtpDY0Jir48qs/VG/2ZfEpMB8GA1UdIwQY MBaAFIezyy1vto5u24RC/rCr/JWutbFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdQTExXLTJqbTdiaEVMLXNLdjhsYTYxc1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85OWQ5YTYtMTNiZS00MGFiLWJlNTMt YjQyYTRjM2U5MTZiLzEvaDdQTExXLTJqbTdiaEVMLXNLdjhsYTYxc1ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85OWQ5YTYtMTNiZS00MGFiLWJlNTMtYjQyYTRjM2U5MTZi LzEvaDdQTExXLTJqbTdiaEVMLXNLdjhsYTYxc1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2vLTUod TWM7Wvw3XoYwqGdCq38V8GN+vB7vwP8r59QVZ2brfZEPr8i8iJrs12eIJ+8uFWNI WrX9paFxSlSeeRbTOS2q7l8EMYb9eaeXF6pgNN3viDU+sEf8wQEUG2a+eUfJTDb6 USUrIoliiYMIFXDSiQWkLsIbnla3WxI2nyaxuoqjF+2qjwU4QgyFyQHZca2bpCKx vQad00grZx45KRK67IwL9OS6jyoY1rMYFh2IdwJbJ9KwRNXFiH8t8oppJzfdtZMx pJyGnODBZ9kJ/R1rtWe9fQRQgRNW2JfZoFGTNaHO7QSrRg9r/cqaRNgyyyoMNFCV 25UZW8+NNatqNw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:20:58 2025 by rpki-client