This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: AfAp0XVop3Z3AaOUI4wo0IJnl6S7EIJqhuIfZPGh3fk= Subject key identifier: A5:1E:63:36:78:00:F7:66:45:94:69:AF:DF:9A:DE:47:F6:62:B6:BC Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 019B353329B83F857AEB59E133E7642F5610 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 1414 Signing time: Fri 19 Dec 2025 06:01:43 +0000 Manifest this update: Fri 19 Dec 2025 06:01:43 +0000 Manifest next update: Sat 20 Dec 2025 06:01:43 +0000 Files and hashes: 1: 58EBygRjdS7517jE8ijFSPfVOH4.roa (hash: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=) 2: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (hash: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=) 3: CjTW9-CUmuY1lxZ8OqndS2FXSrY.roa (hash: 9DQ0LnRbHYpMYq+dl7Z0Jfv0Jx2DrmotGXluT5sxbiI=) 4: UYD_ol6L79u8glgaI6wKUZit3aI.roa (hash: Gf9BtC+mpY9FQr0OFj9WV8BSFzyS8ChMq/mXIibBTC4=) 5: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (hash: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=) 6: cgfWhp9nnNlIFwxwBmM9ufcXLT8.roa (hash: d9o/0tEnmxkRdMrExtvCAvZnhgV08vpjue2h9xSnd5M=) 7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: imcWOhiJisCabWuo038FOxWjZ42iUojmT6qgL3ejwKY=) 8: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (hash: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=) 9: l73XbGk7c4j4MjyLCnCZ2AhSa5g.roa (hash: zN4KADzvP9RDaA1coLbTnlm7K8otMtISf3HRhyFdP4I=) 10: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (hash: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:29:b8:3f:85:7a:eb:59:e1:33:e7:64:2f:56:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Dec 19 06:01:43 2025 GMT Not After : Dec 20 06:01:43 2025 GMT Subject: CN=a51e63367800f766459469afdf9ade47f662b6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:9b:57:7b:74:aa:a3:2d:3e:ba:50:c3:e8: 5b:80:68:2f:1d:37:18:5a:00:91:9f:63:57:ef:46: 63:47:4b:b9:eb:94:b1:ff:0a:da:cb:e5:fc:1e:b3: 08:34:9e:b7:12:de:cf:7d:da:31:0a:8c:7b:f3:31: 0f:25:7a:c8:a1:14:b9:f1:f4:54:11:e0:0d:a7:1d: b3:f6:4e:fc:f4:09:a5:d1:ee:06:b3:eb:4a:91:22: 62:03:b8:26:8e:37:3e:1b:ef:23:14:f1:c5:1f:66: 64:e8:67:09:df:ce:3b:ec:da:c7:1a:b1:f6:79:c1: 29:a0:30:88:96:ec:c3:4b:04:db:db:1e:c9:52:b8: 5a:c4:5d:f2:6f:c1:7c:92:ef:e6:13:5c:b3:75:62: 4b:40:d8:75:dc:09:68:8f:f1:b1:c5:04:84:c8:6d: 08:e8:77:27:6c:0e:15:a7:06:53:65:05:86:c2:0c: 76:2f:ee:3f:5a:24:bb:9b:95:b8:14:27:5a:8b:f3: 3d:5e:b1:66:e5:fe:69:5f:7c:bc:44:4a:cf:4a:fd: 00:91:c3:cd:32:2b:2c:bf:b1:81:67:d7:ff:ee:56: ab:c8:5f:2e:1a:c7:3c:7f:3f:17:76:09:e3:25:de: 93:42:ba:4b:ae:4b:c7:84:c5:49:ae:eb:1d:38:8a: 78:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1E:63:36:78:00:F7:66:45:94:69:AF:DF:9A:DE:47:F6:62:B6:BC X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c9:62:ff:b6:f9:33:74:f6:a7:2c:06:15:70:73:0f:7a:08: 38:72:ce:5f:e9:50:89:16:b6:af:62:f2:65:4f:c0:ed:6a:ef: db:70:40:d5:0d:8e:0c:83:e9:c8:2d:29:dd:68:90:48:09:70: 07:56:8d:e1:18:70:05:8d:08:cb:cf:1c:c9:8d:46:58:5a:e9: da:55:dd:06:04:a1:fe:86:2b:80:85:4c:52:15:77:97:69:e1: da:29:8e:7c:de:a3:bd:da:d6:5a:9e:b7:37:6d:0e:32:0d:2b: bc:2f:a6:fc:5d:db:fb:76:85:ff:2b:ce:88:02:e7:ac:5d:80: de:75:57:07:fb:dd:1e:57:d4:bd:bc:91:72:bd:64:3a:8e:95: 24:dd:2a:8a:74:67:7d:e8:cc:a7:96:4b:74:a3:de:cc:f7:8f: f2:c2:ef:0d:71:62:b7:76:e1:78:81:b1:d8:fd:7a:63:3c:19: 4d:59:7b:93:33:f4:b1:69:fb:25:60:5e:21:75:b5:6e:e6:81: 0a:3b:11:a3:70:43:6b:c8:f7:b6:4a:35:0f:b8:47:df:05:3a: f6:4f:01:ca:ba:8c:0d:92:54:ff:12:99:22:e5:63:f0:12:5f: 5d:8f:cf:e4:2c:ee:89:b8:01:9a:09:c4:da:94:4d:38:8e:ed: b5:ae:02:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mym4P4V661nhM+dkL1YQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjUxMjE5MDYwMTQzWhcNMjUxMjIwMDYwMTQzWjAzMTEwLwYDVQQD EyhhNTFlNjMzNjc4MDBmNzY2NDU5NDY5YWZkZjlhZGU0N2Y2NjJiNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc2bV3t0qqMtPrpQw+hbgGgvHTcY WgCRn2NX70ZjR0u565Sx/wray+X8HrMINJ63Et7PfdoxCox78zEPJXrIoRS58fRU EeANpx2z9k789Aml0e4Gs+tKkSJiA7gmjjc+G+8jFPHFH2Zk6GcJ38477NrHGrH2 ecEpoDCIluzDSwTb2x7JUrhaxF3yb8F8ku/mE1yzdWJLQNh13Aloj/GxxQSEyG0I 6HcnbA4VpwZTZQWGwgx2L+4/WiS7m5W4FCdai/M9XrFm5f5pX3y8RErPSv0AkcPN Missv7GBZ9f/7laryF8uGsc8fz8XdgnjJd6TQrpLrkvHhMVJrusdOIp4fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUeYzZ4APdmRZRpr9+a3kf2Yra8MB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMli/7b5 M3T2pywGFXBzD3oIOHLOX+lQiRa2r2LyZU/A7Wrv23BA1Q2ODIPpyC0p3WiQSAlw B1aN4RhwBY0Iy88cyY1GWFrp2lXdBgSh/oYrgIVMUhV3l2nh2imOfN6jvdrWWp63 N20OMg0rvC+m/F3b+3aF/yvOiALnrF2A3nVXB/vdHlfUvbyRcr1kOo6VJN0qinRn fejMp5ZLdKPezPeP8sLvDXFit3bheIGx2P16YzwZTVl7kzP0sWn7JWBeIXW1buaB CjsRo3BDa8j3tko1D7hH3wU69k8ByrqMDZJU/xKZIuVj8BJfXY/P5CzuibgBmgnE 2pRNOI7tta4CCw== -----END CERTIFICATE-----Generated at Fri Dec 19 15:21:21 2025 by rpki-client