This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json) Hash identifier: KSozcJ5up7hrIzNw4ZSZSehQpANFMg1DbPEKSESHL38= Subject key identifier: C2:69:5A:66:CF:4D:3B:1A:5C:1E:16:A9:36:6D:79:CD:E9:E9:95:2F Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1 Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1 Certificate serial: 019AFC55E88EC80679A77BDCF85CACD9A162 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft Manifest number: 0A93 Signing time: Mon 08 Dec 2025 05:01:19 +0000 Manifest this update: Mon 08 Dec 2025 05:01:19 +0000 Manifest next update: Tue 09 Dec 2025 05:01:19 +0000 Files and hashes: 1: cASyfuH0abUwpn-V7hmuZSIQ09c.roa (hash: U2HpSDc4zJjb5yR4FxelHkJvS6rW6HvOOx+N/+WSuMk=) 2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: ibn1eCNO3NXtyNKrAB/r+4KSCBGnuIBN5hbl9I6yXws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:55:e8:8e:c8:06:79:a7:7b:dc:f8:5c:ac:d9:a1:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1 Validity Not Before: Dec 8 05:01:19 2025 GMT Not After : Dec 9 05:01:19 2025 GMT Subject: CN=c2695a66cf4d3b1a5c1e16a9366d79cde9e9952f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:c8:b2:ea:c4:5e:ef:c1:aa:6f:65:03:84: 41:af:70:54:55:c0:16:96:c1:c5:19:52:64:9c:b8: c1:7a:51:66:b1:2f:08:51:93:d3:2e:b2:db:42:bd: e0:a6:b4:7e:74:7c:a8:f3:eb:0b:f2:57:0d:eb:63: 9e:8f:c4:26:c7:71:cb:41:b4:2d:0f:d9:36:cc:90: b5:f0:82:a4:ba:bf:3c:55:0b:92:59:ba:7b:51:9b: 83:bf:58:aa:c6:74:21:63:a9:e2:ce:7d:70:6a:33: 8d:91:95:ec:e5:da:4d:b2:1d:f8:fe:bd:cc:c2:16: 53:25:be:be:9a:b1:16:de:b9:dc:b1:de:a2:e9:e9: 5f:d7:10:4d:f2:d7:58:b4:cf:ab:96:9b:08:b5:14: ec:77:6f:4a:68:a8:f1:8d:45:77:5b:18:dd:c3:03: 5f:27:58:e9:2f:9d:a7:ea:a1:1f:48:55:22:10:80: 93:5a:76:57:63:b6:01:6c:95:7c:9b:de:22:13:bc: bb:30:3d:ec:0b:62:8a:1b:e5:b7:2d:f7:f2:02:64: 5f:41:11:30:bd:97:71:96:ff:3a:d0:70:40:f6:ee: a8:f9:47:62:97:28:cc:20:81:71:ac:2c:24:d4:6c: c2:cf:bc:80:e0:20:92:3c:2a:65:9b:60:b3:84:f8: d5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:69:5A:66:CF:4D:3B:1A:5C:1E:16:A9:36:6D:79:CD:E9:E9:95:2F X509v3 Authority Key Identifier: keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:16:e8:5c:c6:6e:e9:e4:fb:33:a7:d4:44:c0:46:ad:30:ca: e1:12:c2:f3:5d:c4:ef:67:91:91:67:e8:e2:32:b4:f7:ac:79: 46:f3:d5:4e:bb:a0:14:88:2b:03:49:e4:20:8e:ba:ac:22:4a: b5:87:6c:9f:3b:fa:65:20:74:b5:1a:ca:42:79:15:0d:e5:0c: d9:c9:44:26:b3:0c:84:3c:51:f7:e3:9d:ab:6a:e4:51:1f:22: 3f:e7:53:c4:47:28:19:b1:32:f9:09:cd:b1:f7:75:a2:ad:fe: 5b:5b:dd:d0:65:f7:d2:e1:e2:b6:7e:e4:9e:c4:6c:bd:9d:93: d6:d1:53:5f:9b:21:ef:aa:34:2e:df:3c:7c:7e:fb:66:fd:54: 18:80:74:cc:1e:b5:63:06:94:a1:45:db:11:b5:5f:60:07:37: 74:27:34:90:a7:e5:97:03:5b:f3:cf:13:7d:bf:d8:37:1e:e0: e6:bf:e4:74:f6:7c:52:4e:46:a2:4f:d7:22:c3:48:dc:36:26: 03:1e:97:7d:14:86:3a:c3:1c:b4:88:52:1e:6a:39:cb:c0:b2: 9d:ab:75:eb:0b:29:d7:cd:96:c5:15:48:2c:91:38:07:67:80: 7e:2d:87:f0:a7:0d:e9:21:18:f5:fa:df:86:ed:c6:79:01:ea: fc:c6:f6:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8VeiOyAZ5p3vc+Fys2aFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NDFlYzE3ZGMwMzA5YjEzZDg4YTY3ZWEyMmRjYmJiMjZh NGUzYTEwHhcNMjUxMjA4MDUwMTE5WhcNMjUxMjA5MDUwMTE5WjAzMTEwLwYDVQQD EyhjMjY5NWE2NmNmNGQzYjFhNWMxZTE2YTkzNjZkNzljZGU5ZTk5NTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOjIsurEXu/Bqm9lA4RBr3BUVcAW lsHFGVJknLjBelFmsS8IUZPTLrLbQr3gprR+dHyo8+sL8lcN62Oej8Qmx3HLQbQt D9k2zJC18IKkur88VQuSWbp7UZuDv1iqxnQhY6nizn1wajONkZXs5dpNsh34/r3M whZTJb6+mrEW3rncsd6i6elf1xBN8tdYtM+rlpsItRTsd29KaKjxjUV3WxjdwwNf J1jpL52n6qEfSFUiEICTWnZXY7YBbJV8m94iE7y7MD3sC2KKG+W3LffyAmRfQREw vZdxlv860HBA9u6o+UdilyjMIIFxrCwk1GzCz7yA4CCSPCplm2CzhPjVjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJpWmbPTTsaXB4WqTZtec3p6ZUvMB8GA1UdIwQY MBaAFIdB7BfcAwmxPYimfqIty7smpOOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zMjY2ZjEtN2M4OC00ZjU5LWI1NjYt MWFjNGE0MDA3ZGI0LzEvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zMjY2ZjEtN2M4OC00ZjU5LWI1NjYtMWFjNGE0MDA3ZGI0 LzEvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxboXMZu 6eT7M6fURMBGrTDK4RLC813E72eRkWfo4jK096x5RvPVTrugFIgrA0nkII66rCJK tYdsnzv6ZSB0tRrKQnkVDeUM2clEJrMMhDxR9+Odq2rkUR8iP+dTxEcoGbEy+QnN sfd1oq3+W1vd0GX30uHitn7knsRsvZ2T1tFTX5sh76o0Lt88fH77Zv1UGIB0zB61 YwaUoUXbEbVfYAc3dCc0kKfllwNb888Tfb/YNx7g5r/kdPZ8Uk5Gok/XIsNI3DYm Ax6XfRSGOsMctIhSHmo5y8Cynat16wsp182WxRVILJE4B2eAfi2H8KcN6SEY9frf hu3GeQHq/Mb2gw== -----END CERTIFICATE-----Generated at Mon Dec 8 06:46:50 2025 by rpki-client