This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json) Hash identifier: vNt1NqywHP2W4jx+RRCLfWnckdbx+b7cDEvTNWEUhek= Subject key identifier: E0:F9:5F:88:8E:67:1E:E7:F5:DA:C5:E5:6F:F8:A8:2E:BC:2A:B1:90 Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1 Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1 Certificate serial: 019B3456899508069300999E92382A06A395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft Manifest number: 0AB0 Signing time: Fri 19 Dec 2025 02:00:44 +0000 Manifest this update: Fri 19 Dec 2025 02:00:44 +0000 Manifest next update: Sat 20 Dec 2025 02:00:44 +0000 Files and hashes: 1: cASyfuH0abUwpn-V7hmuZSIQ09c.roa (hash: U2HpSDc4zJjb5yR4FxelHkJvS6rW6HvOOx+N/+WSuMk=) 2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: doyZmu1TM0fw5bLhf5PiohAURoExsb551wPblS8rWRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:89:95:08:06:93:00:99:9e:92:38:2a:06:a3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1 Validity Not Before: Dec 19 02:00:44 2025 GMT Not After : Dec 20 02:00:44 2025 GMT Subject: CN=e0f95f888e671ee7f5dac5e56ff8a82ebc2ab190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:97:ce:18:ff:6e:8b:e5:3b:e2:ad:18:47:03: 76:9f:2c:0e:e6:af:9c:fb:fb:9a:1d:66:f4:bc:1b: f0:b5:f4:00:a9:d9:c8:9f:e9:27:7e:12:6f:76:82: 68:b5:2f:6d:c3:4e:49:03:4f:4e:34:ec:b1:34:0f: 4f:45:65:d1:29:85:21:f7:c0:47:35:11:5e:b0:9b: 7c:e8:8f:ce:f1:b7:0b:0a:55:01:e2:00:32:e6:1c: 0e:3f:b6:d9:27:ca:6d:93:9b:d1:30:07:02:fa:98: 44:ca:56:1c:ac:4c:ed:21:b6:87:11:c1:01:2b:24: 95:a2:63:c9:12:d0:18:53:4c:09:ff:ec:81:57:5f: 2e:14:f3:b0:b7:e4:d8:34:a1:20:b4:64:f3:d1:49: 1e:e1:55:db:4a:ef:ed:a6:af:c5:ce:6a:45:e9:94: d7:17:4d:f7:f6:36:cc:d2:44:73:37:e6:bc:2f:6b: 55:52:e6:f1:1c:71:a0:4e:8a:99:eb:6d:08:18:75: 75:a9:c0:4a:6a:ed:5e:3d:a3:87:2f:da:31:a2:6f: e8:0a:a4:18:ea:bb:d5:57:62:f8:1f:b0:3b:2a:7c: a2:49:0c:ef:ea:04:06:0f:ae:39:56:f9:37:78:66: ac:8d:45:63:07:86:f1:e9:b9:13:ef:6b:58:2b:f1: ce:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F9:5F:88:8E:67:1E:E7:F5:DA:C5:E5:6F:F8:A8:2E:BC:2A:B1:90 X509v3 Authority Key Identifier: keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:98:3f:53:ad:36:2e:a6:08:20:f5:76:fd:70:61:8e:88:cc: 0c:16:67:13:11:92:ae:82:01:37:60:24:ec:da:9b:68:10:e8: 65:b1:72:1a:a9:99:b8:e9:17:42:eb:33:aa:14:b4:7c:72:34: 00:95:7b:7a:b2:0a:3c:08:eb:69:dd:f0:67:6f:3b:e2:37:63: 11:8d:ae:5f:17:ea:a5:b7:2b:fa:00:8e:b6:da:f8:b9:23:a2: 98:aa:4e:07:51:c2:87:0b:38:a1:c0:c8:16:6f:c8:5e:7b:55: 44:eb:ac:84:46:be:5b:d0:d0:ae:f2:d4:45:f3:47:4c:43:6f: 60:15:8a:d7:9a:ce:98:20:1c:d5:e3:03:7f:31:e8:17:6f:7d: af:24:70:0a:8b:a0:2d:0d:c6:9e:7b:eb:20:d7:0a:86:2d:a9: 38:23:28:e8:5f:76:81:87:31:66:48:ec:68:38:48:59:aa:52: c9:ee:8d:d6:d1:de:50:74:1b:c4:f1:a3:7b:01:14:af:5e:7c: 32:ce:4b:4c:aa:bb:6d:a7:22:ee:f3:68:2c:96:c8:87:ae:c4: 1a:26:a0:24:c7:40:eb:dd:db:26:39:9e:2c:46:2f:63:01:f4: fa:47:46:fa:0f:c8:68:2b:5b:0f:fd:e7:5a:2c:33:c8:60:da: 01:55:15:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VomVCAaTAJmekjgqBqOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NDFlYzE3ZGMwMzA5YjEzZDg4YTY3ZWEyMmRjYmJiMjZh NGUzYTEwHhcNMjUxMjE5MDIwMDQ0WhcNMjUxMjIwMDIwMDQ0WjAzMTEwLwYDVQQD EyhlMGY5NWY4ODhlNjcxZWU3ZjVkYWM1ZTU2ZmY4YTgyZWJjMmFiMTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZfOGP9ui+U74q0YRwN2nywO5q+c +/uaHWb0vBvwtfQAqdnIn+knfhJvdoJotS9tw05JA09ONOyxNA9PRWXRKYUh98BH NRFesJt86I/O8bcLClUB4gAy5hwOP7bZJ8ptk5vRMAcC+phEylYcrEztIbaHEcEB KySVomPJEtAYU0wJ/+yBV18uFPOwt+TYNKEgtGTz0Uke4VXbSu/tpq/FzmpF6ZTX F0339jbM0kRzN+a8L2tVUubxHHGgToqZ620IGHV1qcBKau1ePaOHL9oxom/oCqQY 6rvVV2L4H7A7KnyiSQzv6gQGD645Vvk3eGasjUVjB4bx6bkT72tYK/HOtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOD5X4iOZx7n9drF5W/4qC68KrGQMB8GA1UdIwQY MBaAFIdB7BfcAwmxPYimfqIty7smpOOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zMjY2ZjEtN2M4OC00ZjU5LWI1NjYt MWFjNGE0MDA3ZGI0LzEvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zMjY2ZjEtN2M4OC00ZjU5LWI1NjYtMWFjNGE0MDA3ZGI0 LzEvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZg/U602 LqYIIPV2/XBhjojMDBZnExGSroIBN2Ak7NqbaBDoZbFyGqmZuOkXQuszqhS0fHI0 AJV7erIKPAjrad3wZ2874jdjEY2uXxfqpbcr+gCOttr4uSOimKpOB1HChws4ocDI Fm/IXntVROushEa+W9DQrvLURfNHTENvYBWK15rOmCAc1eMDfzHoF299ryRwCoug LQ3GnnvrINcKhi2pOCMo6F92gYcxZkjsaDhIWapSye6N1tHeUHQbxPGjewEUr158 Ms5LTKq7baci7vNoLJbIh67EGiagJMdA693bJjmeLEYvYwH0+kdG+g/IaCtbD/3n WiwzyGDaAVUVng== -----END CERTIFICATE-----Generated at Fri Dec 19 10:27:33 2025 by rpki-client