This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft File: h4R32LYtCfmui_29gSpT-X7UxXY.mft (raw, json) Hash identifier: WeWp82a8U279PBTl3sjRYWzKf9XNCJO7gyCW3QkAa/U= Subject key identifier: 9A:3D:A9:6C:BA:D3:DA:9B:B3:EC:DC:B9:8D:49:64:F1:AD:78:80:75 Authority key identifier: 87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76 Certificate issuer: /CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576 Certificate serial: 019AF19B6F5545BD9C5A5BEE26C95B4CCCC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft Manifest number: 0589 Signing time: Sat 06 Dec 2025 03:01:26 +0000 Manifest this update: Sat 06 Dec 2025 03:01:26 +0000 Manifest next update: Sun 07 Dec 2025 03:01:26 +0000 Files and hashes: 1: 1-chTvEPLKpclBFunFsZudwhteCw.roa (hash: Mk7QbJ14tNyeCXu9wD1n7MpPtkSCXANni+lDYxJDiAk=) 2: h4R32LYtCfmui_29gSpT-X7UxXY.crl (hash: /2ZGgU/jskIFZrTzRn8mJM7MTpcZRZfoyugnfACzhbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6f:55:45:bd:9c:5a:5b:ee:26:c9:5b:4c:cc:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576 Validity Not Before: Dec 6 03:01:26 2025 GMT Not After : Dec 7 03:01:26 2025 GMT Subject: CN=9a3da96cbad3da9bb3ecdcb98d4964f1ad788075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:26:84:50:4d:73:3e:fa:4b:ea:05:86:ae: ed:20:87:06:7c:9c:10:87:6d:ab:61:ea:ee:a3:4e: 07:19:9f:37:e9:8d:4f:7e:89:4d:53:cb:61:7d:03: 3c:46:43:64:e3:ac:90:f7:1d:5b:23:99:58:16:bb: 75:8a:9b:a7:5a:28:ae:47:45:64:cb:49:cc:20:c4: c8:bb:0f:00:e1:88:b1:6a:ca:21:d0:5b:63:4a:e1: 29:ba:f0:f6:e4:d9:6a:48:52:a0:ad:16:8f:22:b2: 78:d0:26:eb:9b:11:6e:3c:20:ae:3c:18:c6:ef:c1: 97:b4:20:32:be:30:50:34:c8:03:76:a6:2d:02:ae: b3:62:8a:ce:8a:8c:e0:ad:d2:77:5f:49:67:4b:ae: 56:2f:ef:54:52:8e:87:4b:47:d7:22:77:86:ee:f6: 18:3f:a4:9c:45:e3:59:83:76:f6:3a:35:1b:6e:10: 02:ff:d9:23:12:2e:8b:8b:0c:9f:ac:df:e1:3c:f0: e3:f6:0b:e7:4e:4a:53:40:60:ef:dc:d8:82:62:8d: 41:a8:ab:29:43:0c:2d:51:36:ef:87:3e:71:1b:ec: a6:17:c6:45:d6:7f:cc:72:2f:d3:47:e3:6a:fe:d2: f8:0c:2e:47:e9:6c:a4:12:41:6b:3b:8b:a3:37:9d: 2d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3D:A9:6C:BA:D3:DA:9B:B3:EC:DC:B9:8D:49:64:F1:AD:78:80:75 X509v3 Authority Key Identifier: keyid:87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:7b:18:5c:47:aa:7c:a7:d8:5f:c6:17:70:c4:f7:08:61:6c: 17:f0:56:0e:87:7a:da:04:d0:a8:12:d4:d6:18:87:90:27:4d: cf:0c:35:36:b0:b1:10:35:9a:b6:24:3b:ad:f0:25:90:c4:de: 8e:98:92:34:a1:cd:36:4b:1d:ce:02:36:0e:9b:2d:88:18:43: c7:a3:87:e2:a8:5a:73:71:5f:75:75:78:af:ff:1d:e9:78:37: 3b:c2:fe:83:d7:e5:46:8d:63:50:a5:46:ce:fe:78:dd:5c:c9: f1:c9:e6:f7:c7:07:e9:6d:21:5c:f8:7e:df:18:3b:9e:ab:17: 07:2c:15:36:ce:56:44:93:e1:a3:d6:a2:30:f4:0e:e8:4c:87: b2:5e:32:92:f3:4c:d2:aa:db:a8:58:65:81:b9:3b:6d:b2:ca: 52:db:ac:db:e2:91:d3:16:b2:bb:97:08:b0:f4:be:89:57:9f: d3:c2:21:7e:bd:c0:47:bc:77:58:d9:2b:e2:fc:5d:3b:54:0b: 6b:e5:0d:05:a5:64:9a:0c:c6:61:5a:0d:e0:69:80:2e:e1:7b: ec:fc:b9:16:67:31:64:6f:8f:3f:35:49:71:14:92:f1:2b:25: 0d:38:2f:9c:09:4c:3b:ea:e1:dd:38:53:43:59:45:df:4c:d9: 46:6e:e7:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm29VRb2cWlvuJslbTMzHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ODQ3N2Q4YjYyZDA5ZjlhZThiZmRiZDgxMmE1M2Y5N2Vk NGM1NzYwHhcNMjUxMjA2MDMwMTI2WhcNMjUxMjA3MDMwMTI2WjAzMTEwLwYDVQQD Eyg5YTNkYTk2Y2JhZDNkYTliYjNlY2RjYjk4ZDQ5NjRmMWFkNzg4MDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC0mhFBNcz76S+oFhq7tIIcGfJwQ h22rYeruo04HGZ836Y1PfolNU8thfQM8RkNk46yQ9x1bI5lYFrt1ipunWiiuR0Vk y0nMIMTIuw8A4Yixasoh0FtjSuEpuvD25NlqSFKgrRaPIrJ40CbrmxFuPCCuPBjG 78GXtCAyvjBQNMgDdqYtAq6zYorOiozgrdJ3X0lnS65WL+9UUo6HS0fXIneG7vYY P6ScReNZg3b2OjUbbhAC/9kjEi6LiwyfrN/hPPDj9gvnTkpTQGDv3NiCYo1BqKsp QwwtUTbvhz5xG+ymF8ZF1n/Mci/TR+Nq/tL4DC5H6WykEkFrO4ujN50tJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo9qWy609qbs+zcuY1JZPGteIB1MB8GA1UdIwQY MBaAFIeEd9i2LQn5rov9vYEqU/l+1MV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRSMzJMWXRDZm11aV8yOWdTcFQtWDdVeFhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lODNhYzUtNDQ4Yi00ZTQ5LThlYmYt ODg0MmU1ZWRjZTAyLzEvaDRSMzJMWXRDZm11aV8yOWdTcFQtWDdVeFhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lODNhYzUtNDQ4Yi00ZTQ5LThlYmYtODg0MmU1ZWRjZTAy LzEvaDRSMzJMWXRDZm11aV8yOWdTcFQtWDdVeFhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHsYXEeq fKfYX8YXcMT3CGFsF/BWDod62gTQqBLU1hiHkCdNzww1NrCxEDWatiQ7rfAlkMTe jpiSNKHNNksdzgI2DpstiBhDx6OH4qhac3FfdXV4r/8d6Xg3O8L+g9flRo1jUKVG zv543VzJ8cnm98cH6W0hXPh+3xg7nqsXBywVNs5WRJPho9aiMPQO6EyHsl4ykvNM 0qrbqFhlgbk7bbLKUtus2+KR0xayu5cIsPS+iVef08Ihfr3AR7x3WNkr4vxdO1QL a+UNBaVkmgzGYVoN4GmALuF77Py5FmcxZG+PPzVJcRSS8SslDTgvnAlMO+rh3ThT Q1lF30zZRm7naQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:52:52 2025 by rpki-client