This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft File: h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json) Hash identifier: jmLXGoHe5Rv+C/Ybl6jLJAsmnzL8bivCr7+I3NJUX0g= Subject key identifier: 46:5F:57:13:07:D5:1D:A1:64:86:EC:40:C8:BF:B2:EC:13:6F:04:4B Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f Certificate serial: 019AF50B243C7A5234AB8435B769605EA293 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:02:19 +0000 Manifest this update: Sat 06 Dec 2025 19:02:19 +0000 Manifest next update: Sun 07 Dec 2025 19:02:19 +0000 Files and hashes: 1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: PhEK3B6V7clyxxzuQbYYxdWo58jQGhVmNKRgVW+sQ2w=) 2: vH-eK3MDkjfjQIWGcNruZ1gYj6o.roa (hash: X8Ll3xNOyDNsY8OoD7P2fm6g2ckrfD35bOMThe6H4RM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:24:3c:7a:52:34:ab:84:35:b7:69:60:5e:a2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f Validity Not Before: Dec 6 19:02:19 2025 GMT Not After : Dec 7 19:02:19 2025 GMT Subject: CN=465f571307d51da16486ec40c8bfb2ec136f044b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:18:ee:1a:fe:2b:3b:b4:ae:6e:fe:b2:65: b3:59:ce:30:df:04:50:97:e5:a5:98:4c:2a:b0:e3: bd:78:b1:d6:aa:9c:0c:ca:b1:a1:c2:a6:6d:49:1f: 99:aa:68:ab:cd:f6:54:49:ad:23:c1:46:80:0c:65: 49:48:86:26:3b:3b:de:3e:fe:94:1c:fd:37:59:ed: ff:18:75:cb:85:26:8f:db:53:b8:7a:b1:85:48:93: 15:ed:e9:9b:65:02:0b:99:cf:1e:b4:d6:86:c7:b0: 57:11:8b:f4:be:5c:88:63:a4:29:e0:b6:3d:8d:c8: d6:21:2a:11:14:a5:13:60:40:ad:3a:1a:75:fb:56: 0e:82:ca:6e:9e:54:e5:e7:e9:0c:f6:39:9f:85:1a: a3:c6:c4:d0:ec:95:c5:b4:5e:28:95:54:3f:0c:40: 6e:85:fb:29:30:7a:61:7a:40:44:30:18:9f:2a:28: e9:25:70:48:bd:0a:18:82:6b:55:2a:d0:4a:99:47: 2f:2b:c1:5b:79:58:fb:6d:06:0b:4b:a4:25:5c:87: 33:52:33:46:6c:ea:e3:59:05:35:0f:e6:8f:d4:80: 9d:18:a7:14:51:e3:9e:4f:b1:83:48:e0:86:5c:3c: 72:c5:94:d0:e1:c1:81:37:a3:c4:b8:1b:8e:8a:ed: 7b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5F:57:13:07:D5:1D:A1:64:86:EC:40:C8:BF:B2:EC:13:6F:04:4B X509v3 Authority Key Identifier: keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:30:65:ae:64:71:f3:f4:29:49:5b:fe:4f:ad:62:d7:ca:79: c5:5a:08:43:d4:8f:99:a5:d6:e5:7a:68:5f:eb:51:94:87:33: 82:79:e3:b8:52:a3:f1:47:44:eb:eb:ff:cc:13:a6:94:f0:53: 05:7d:de:0f:b6:db:6b:6f:c9:94:06:ce:13:06:6e:0e:1c:ac: b1:18:0f:e1:ac:56:8b:13:d9:a5:1d:20:c3:9c:c4:32:2f:ba: e6:19:9f:21:9f:4f:fc:5f:41:02:61:3b:08:a5:db:76:cf:98: c8:02:d6:8f:67:55:56:74:76:63:14:3c:de:4b:a1:55:fc:b6: 62:dc:ba:93:68:a7:86:d5:5a:d2:24:c0:7d:bc:a9:04:55:eb: df:64:11:72:af:da:21:1a:15:1f:dd:4d:7f:17:c3:bf:c2:f9: c7:1b:41:eb:bf:d2:1b:8f:9b:31:21:0e:f2:0f:1b:33:32:20: 3e:9b:00:71:93:3f:d9:fc:0e:e5:16:ed:28:a5:a1:4a:60:17: b0:0b:9a:e2:23:89:42:da:64:de:4d:2b:e4:0a:da:70:76:2b: d9:9d:81:4d:e2:43:9e:78:d6:2f:04:65:4a:f1:9f:c4:fd:c8: 7f:c9:92:67:f9:51:09:a5:9a:99:5f:d2:15:6b:a8:46:53:82: 4d:97:86:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CyQ8elI0q4Q1t2lgXqKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTkyMDg4ZTc2NTVjYjEzNDAyMGNhOTViMGU1N2Q0ZTZk YWY0MGYwHhcNMjUxMjA2MTkwMjE5WhcNMjUxMjA3MTkwMjE5WjAzMTEwLwYDVQQD Eyg0NjVmNTcxMzA3ZDUxZGExNjQ4NmVjNDBjOGJmYjJlYzEzNmYwNDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArocY7hr+Kzu0rm7+smWzWc4w3wRQ l+WlmEwqsOO9eLHWqpwMyrGhwqZtSR+ZqmirzfZUSa0jwUaADGVJSIYmOzvePv6U HP03We3/GHXLhSaP21O4erGFSJMV7embZQILmc8etNaGx7BXEYv0vlyIY6Qp4LY9 jcjWISoRFKUTYECtOhp1+1YOgspunlTl5+kM9jmfhRqjxsTQ7JXFtF4olVQ/DEBu hfspMHphekBEMBifKijpJXBIvQoYgmtVKtBKmUcvK8FbeVj7bQYLS6QlXIczUjNG bOrjWQU1D+aP1ICdGKcUUeOeT7GDSOCGXDxyxZTQ4cGBN6PEuBuOiu17kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZfVxMH1R2hZIbsQMi/suwTbwRLMB8GA1UdIwQY MBaAFIeZIIjnZVyxNAIMqVsOV9Tm2vQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMt ODVlYTYzYzI0NDc0LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMtODVlYTYzYzI0NDc0 LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzBlrmRx 8/QpSVv+T61i18p5xVoIQ9SPmaXW5XpoX+tRlIczgnnjuFKj8UdE6+v/zBOmlPBT BX3eD7bba2/JlAbOEwZuDhyssRgP4axWixPZpR0gw5zEMi+65hmfIZ9P/F9BAmE7 CKXbds+YyALWj2dVVnR2YxQ83kuhVfy2Yty6k2inhtVa0iTAfbypBFXr32QRcq/a IRoVH91NfxfDv8L5xxtB67/SG4+bMSEO8g8bMzIgPpsAcZM/2fwO5RbtKKWhSmAX sAua4iOJQtpk3k0r5AracHYr2Z2BTeJDnnjWLwRlSvGfxP3If8mSZ/lRCaWamV/S FWuoRlOCTZeGlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:30 2025 by rpki-client