This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft File: h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json) Hash identifier: wXkXNwwzcet4PY3+TREglTLlOcU/RvwjWlPpD1pVc3o= Subject key identifier: 1A:30:9B:79:C9:21:46:93:AE:BB:62:18:51:BE:CC:CA:0E:69:F7:90 Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D Certificate issuer: /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d Certificate serial: 019AF49BFA8A9AA0B396700C3506995F2CE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft Manifest number: 085B Signing time: Sat 06 Dec 2025 17:00:54 +0000 Manifest this update: Sat 06 Dec 2025 17:00:54 +0000 Manifest next update: Sun 07 Dec 2025 17:00:54 +0000 Files and hashes: 1: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: W43OY1kQON1LXJ5ExJIbmDY5Urg+DeePm5fZYM9q80Y=) 2: hlby1xXJUtbaqPmELmi7xbziBY8.roa (hash: QsHPEqttrfF2zMx3M7sZxcReCt1hljy1sF+KTN49S3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:fa:8a:9a:a0:b3:96:70:0c:35:06:99:5f:2c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d Validity Not Before: Dec 6 17:00:54 2025 GMT Not After : Dec 7 17:00:54 2025 GMT Subject: CN=1a309b79c9214693aebb621851beccca0e69f790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:2f:ee:d1:1d:11:fa:2f:e8:50:87:95:40: 70:e5:90:df:65:77:94:94:6c:3d:2d:94:13:ea:ee: cb:89:50:d7:df:28:91:e5:7e:34:29:1a:67:34:42: 5c:fd:9d:79:03:30:77:36:28:a6:c5:70:a5:0b:42: dd:30:55:6c:0e:80:3e:47:f9:17:ce:60:a6:68:3d: 0c:1b:66:db:22:4a:c2:67:0a:76:87:d6:3d:61:45: 99:a8:35:84:89:23:3d:0a:1e:e7:69:63:5a:45:1a: 48:7b:e2:d8:33:3f:ab:3f:15:9d:97:4b:59:ef:d5: 7b:a4:ab:f5:c7:eb:2b:4e:7e:58:7f:33:c4:43:29: c0:ac:4e:8c:4f:c8:47:fc:fe:87:0b:14:2c:e4:25: 71:94:d2:35:cf:b7:84:8c:09:78:d4:c6:fb:34:64: e1:5e:eb:38:c3:fd:c1:4a:e6:db:6d:7f:8e:52:b4: 7e:90:2f:81:bc:01:f5:d1:ae:40:3e:bc:e7:61:bc: d7:de:ab:3d:43:03:d1:28:e6:33:ff:0f:da:0d:29: fa:8e:17:e9:26:c5:70:23:d4:77:de:d8:5b:ca:f6: 81:d2:c5:2f:86:c8:a7:69:77:04:48:f4:b4:86:ed: cb:ac:16:cf:5c:bb:d8:4f:22:84:c2:6f:24:48:18: 86:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:30:9B:79:C9:21:46:93:AE:BB:62:18:51:BE:CC:CA:0E:69:F7:90 X509v3 Authority Key Identifier: keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e9:e1:eb:7d:de:34:f7:7f:a1:cf:48:61:2c:be:86:ed:e7: fe:5b:b0:6a:f5:a7:20:94:21:e9:03:16:09:f5:37:67:1b:38: 7f:67:41:6f:91:fa:5e:45:4d:c0:a8:ee:81:e4:23:f6:07:94: a3:d8:68:01:66:68:4f:46:d3:2c:fa:42:a8:8b:f9:df:5a:1b: b4:75:dd:8b:66:de:3c:31:1d:14:b7:48:9a:05:e4:60:1f:9f: 04:95:2e:e8:37:fc:5e:c7:41:c1:af:c4:a5:a2:c5:8d:2a:1a: 10:d2:d6:4c:3a:7f:71:28:fd:09:d0:f1:f2:fb:ef:e4:20:3e: 3b:e4:8e:b2:c2:bd:8c:f2:df:d5:11:3f:1d:aa:94:22:5a:43: 8f:ba:eb:88:4c:17:dc:11:f7:83:58:66:18:11:dc:63:b0:42: 9f:f9:19:9c:f8:7f:ff:53:53:44:21:07:45:e3:17:a8:c2:ef: 6d:44:e0:6e:8b:b3:4a:a4:13:a3:21:cb:69:21:ae:46:40:69: 83:8f:1b:5c:fb:6f:40:ae:58:55:fb:9c:e3:49:28:eb:d0:01: f2:df:85:de:09:9f:8a:ac:55:ef:0e:4f:a1:30:6a:75:17:1a: 80:b6:32:3e:ec:4c:b1:48:9c:cd:18:dd:02:84:dd:43:f0:0d: e9:cd:03:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m/qKmqCzlnAMNQaZXyzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGMzZGNjY2JmMDJiYTg1MDFhYjFjNzA2ZDMxZTEzN2Zk ZGY0MWQwHhcNMjUxMjA2MTcwMDU0WhcNMjUxMjA3MTcwMDU0WjAzMTEwLwYDVQQD EygxYTMwOWI3OWM5MjE0NjkzYWViYjYyMTg1MWJlY2NjYTBlNjlmNzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCkv7tEdEfov6FCHlUBw5ZDfZXeU lGw9LZQT6u7LiVDX3yiR5X40KRpnNEJc/Z15AzB3NiimxXClC0LdMFVsDoA+R/kX zmCmaD0MG2bbIkrCZwp2h9Y9YUWZqDWEiSM9Ch7naWNaRRpIe+LYMz+rPxWdl0tZ 79V7pKv1x+srTn5YfzPEQynArE6MT8hH/P6HCxQs5CVxlNI1z7eEjAl41Mb7NGTh Xus4w/3BSubbbX+OUrR+kC+BvAH10a5APrznYbzX3qs9QwPRKOYz/w/aDSn6jhfp JsVwI9R33thbyvaB0sUvhsinaXcESPS0hu3LrBbPXLvYTyKEwm8kSBiGZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBowm3nJIUaTrrtiGFG+zMoOafeQMB8GA1UdIwQY MBaAFIdMPczL8CuoUBqxxwbTHhN/3fQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTNkMzgtMjE4OC00YTdiLWJjMzct YTA0NzYyMDk1ZWU2LzEvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85OTNkMzgtMjE4OC00YTdiLWJjMzctYTA0NzYyMDk1ZWU2 LzEvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPenh633e NPd/oc9IYSy+hu3n/luwavWnIJQh6QMWCfU3Zxs4f2dBb5H6XkVNwKjugeQj9geU o9hoAWZoT0bTLPpCqIv531obtHXdi2bePDEdFLdImgXkYB+fBJUu6Df8XsdBwa/E paLFjSoaENLWTDp/cSj9CdDx8vvv5CA+O+SOssK9jPLf1RE/HaqUIlpDj7rriEwX 3BH3g1hmGBHcY7BCn/kZnPh//1NTRCEHReMXqMLvbUTgbouzSqQToyHLaSGuRkBp g48bXPtvQK5YVfuc40ko69AB8t+F3gmfiqxV7w5PoTBqdRcagLYyPuxMsUiczRjd AoTdQ/AN6c0DmQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:16:18 2025 by rpki-client