This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft File: h-ll54gxqIuo-kGUMqnXusnbOKM.mft (raw, json) Hash identifier: IBGsmmhCFdWIMvn47sctrJDawlVfyvp+UdqrwhFxyhQ= Subject key identifier: CF:DA:50:7C:A5:B2:DA:3D:B1:88:26:2E:D9:D8:1A:9C:61:6F:9C:21 Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3 Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3 Certificate serial: 019B375792C8CA7908A4D6C938695516919B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft Manifest number: 081A Signing time: Fri 19 Dec 2025 16:00:44 +0000 Manifest this update: Fri 19 Dec 2025 16:00:44 +0000 Manifest next update: Sat 20 Dec 2025 16:00:44 +0000 Files and hashes: 1: P67W-sp0mORZMv4IJYWq4ebl3DI.roa (hash: 1jNCeGYTIsfay6y/1fIn4OYexq/lwmYvxij2ON0v7bU=) 2: h-ll54gxqIuo-kGUMqnXusnbOKM.crl (hash: gQ+pj8g0UwiN27uFnb91rE2LD3MeB+iOckmN26UAtN8=) 3: tb7b-pMyLuFzVUUaYd4D0tYvrVM.roa (hash: kplquuozq7s5NkeQhsxsJ048qcIZPUbW30XHKIIbIL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:92:c8:ca:79:08:a4:d6:c9:38:69:55:16:91:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3 Validity Not Before: Dec 19 16:00:44 2025 GMT Not After : Dec 20 16:00:44 2025 GMT Subject: CN=cfda507ca5b2da3db188262ed9d81a9c616f9c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:df:b7:5b:fc:c9:fb:1b:84:dc:2e:cd:d1: 54:c3:c2:c3:4d:90:fd:c8:aa:11:23:17:27:ff:92: bc:66:85:dc:55:2d:cf:ad:4c:80:a7:07:e2:72:32: 7f:d6:e9:b5:c3:65:c0:72:06:d4:91:b0:ad:f8:23: 44:30:8e:c0:b3:15:b4:a1:ae:71:68:40:79:44:22: c4:37:85:d6:39:a3:7a:db:54:ac:5c:cc:31:a1:cf: bd:c8:d6:30:a6:d9:fe:cd:8d:9c:2a:5a:01:77:93: 9b:56:a6:b8:83:01:9d:e0:b3:b0:96:99:8d:40:5a: 8d:11:59:50:3e:f6:0f:38:40:df:d3:1e:bc:bc:0c: 2e:90:e6:90:fd:12:25:42:d7:fb:46:9e:4b:f5:c3: b4:e9:fc:0e:5c:44:f6:ac:3a:f0:05:7d:ed:c9:25: ab:0a:71:01:1d:22:21:23:6f:70:de:98:a8:85:1c: 56:6d:5b:2f:7e:e8:c1:13:29:30:ec:e3:ca:d1:63: 88:b4:70:64:7e:94:0e:73:a8:29:cc:d8:b4:8e:f2: 65:6e:79:5a:38:23:b8:c2:9b:99:d8:21:16:6b:f5: 9f:0f:32:74:89:b4:f2:db:0b:0c:f3:b5:f8:5c:db: f8:bd:ec:e6:d1:7c:a2:72:8a:9e:9a:89:08:24:6b: 16:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DA:50:7C:A5:B2:DA:3D:B1:88:26:2E:D9:D8:1A:9C:61:6F:9C:21 X509v3 Authority Key Identifier: keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a5:69:9c:c7:71:c0:c1:b7:10:8f:35:c3:44:b2:ad:84:a7: e3:db:56:f5:57:a7:83:a7:c9:bc:8e:11:9b:1b:42:ee:85:91: ff:0a:fd:ea:b4:7d:d3:f7:45:43:62:10:1d:98:95:37:99:62: e9:e7:b9:70:64:75:b8:5f:bc:de:5e:9c:19:00:fb:f7:34:db: 18:1e:63:e4:76:1e:33:c3:c1:73:68:49:97:f9:de:50:77:b2: bc:07:31:24:0c:01:cc:55:36:9c:14:20:73:8f:e1:7e:56:31: 51:67:59:b7:41:9d:f8:e3:07:05:6c:b1:ef:bd:29:8e:b2:d1: 2b:ce:9c:76:18:7b:d2:3f:cb:a8:7c:8a:3f:6c:a7:9c:59:be: 06:0b:0f:ec:6e:b3:ee:fe:39:28:2b:ac:37:2d:04:d6:dd:23: 95:fc:27:7a:c5:90:f6:ff:6f:7f:67:ed:d9:20:83:90:92:f1: 37:b5:2c:35:72:a9:0a:ed:6a:d7:7a:a8:ed:b1:b8:23:5a:46: 01:76:e4:b4:52:b4:c4:df:f5:81:81:fe:d7:e0:b4:e9:8d:ec: 7c:a0:26:ee:c8:1f:72:01:cb:21:0b:8f:dc:3d:16:a1:80:8f: ee:72:da:bf:3b:a5:72:0b:8e:42:d2:72:4c:39:44:fe:be:c1: 22:49:db:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V5LIynkIpNbJOGlVFpGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZTk2NWU3ODgzMWE4OGJhOGZhNDE5NDMyYTlkN2JhYzlk YjM4YTMwHhcNMjUxMjE5MTYwMDQ0WhcNMjUxMjIwMTYwMDQ0WjAzMTEwLwYDVQQD EyhjZmRhNTA3Y2E1YjJkYTNkYjE4ODI2MmVkOWQ4MWE5YzYxNmY5YzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGfft1v8yfsbhNwuzdFUw8LDTZD9 yKoRIxcn/5K8ZoXcVS3PrUyApwficjJ/1um1w2XAcgbUkbCt+CNEMI7AsxW0oa5x aEB5RCLEN4XWOaN621SsXMwxoc+9yNYwptn+zY2cKloBd5ObVqa4gwGd4LOwlpmN QFqNEVlQPvYPOEDf0x68vAwukOaQ/RIlQtf7Rp5L9cO06fwOXET2rDrwBX3tySWr CnEBHSIhI29w3piohRxWbVsvfujBEykw7OPK0WOItHBkfpQOc6gpzNi0jvJlbnla OCO4wpuZ2CEWa/WfDzJ0ibTy2wsM87X4XNv4vezm0XyicoqemokIJGsWhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/aUHylsto9sYgmLtnYGpxhb5whMB8GA1UdIwQY MBaAFIfpZeeIMaiLqPpBlDKp17rJ2zijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaC1sbDU0Z3hxSXVvLWtHVU1xblh1c25iT0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wNTA1MzMtYTU3ZS00YThiLWJmMGQt Y2VlM2I0OTI5MDJlLzEvaC1sbDU0Z3hxSXVvLWtHVU1xblh1c25iT0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wNTA1MzMtYTU3ZS00YThiLWJmMGQtY2VlM2I0OTI5MDJl LzEvaC1sbDU0Z3hxSXVvLWtHVU1xblh1c25iT0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKVpnMdx wMG3EI81w0SyrYSn49tW9Veng6fJvI4RmxtC7oWR/wr96rR90/dFQ2IQHZiVN5li 6ee5cGR1uF+83l6cGQD79zTbGB5j5HYeM8PBc2hJl/neUHeyvAcxJAwBzFU2nBQg c4/hflYxUWdZt0Gd+OMHBWyx770pjrLRK86cdhh70j/LqHyKP2ynnFm+BgsP7G6z 7v45KCusNy0E1t0jlfwnesWQ9v9vf2ft2SCDkJLxN7UsNXKpCu1q13qo7bG4I1pG AXbktFK0xN/1gYH+1+C06Y3sfKAm7sgfcgHLIQuP3D0WoYCP7nLavzulcguOQtJy TDlE/r7BIknbvw== -----END CERTIFICATE-----Generated at Sat Dec 20 01:54:06 2025 by rpki-client