This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json) Hash identifier: v5nbapKIOxkAptF5IOeB8MMuEVwdijCf4raKsjmdRY4= Subject key identifier: 6E:42:6D:F7:41:12:85:D4:C4:B5:E0:EF:10:95:8C:A5:58:E9:CC:10 Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27 Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27 Certificate serial: 019B0E24E867FABB226EA22BA0D2EA68DEF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft Manifest number: 152B Signing time: Thu 11 Dec 2025 16:00:58 +0000 Manifest this update: Thu 11 Dec 2025 16:00:58 +0000 Manifest next update: Fri 12 Dec 2025 16:00:58 +0000 Files and hashes: 1: FsnHQCl3YIPQ-Kr--FXccxOvsak.roa (hash: 36hDdDotapDvjoXAZEUVlMvaerSFU32EL1uK11igVxs=) 2: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: GGXTqOp540y0IX2NVVvhnLfMZFBgTY/8A9ydkyiv06c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:e8:67:fa:bb:22:6e:a2:2b:a0:d2:ea:68:de:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27 Validity Not Before: Dec 11 16:00:58 2025 GMT Not After : Dec 12 16:00:58 2025 GMT Subject: CN=6e426df7411285d4c4b5e0ef10958ca558e9cc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:96:d2:44:61:cf:9e:e1:a8:ec:87:df:ef:92: ac:51:f7:93:63:1e:36:cf:1d:47:99:ce:91:ef:b3: 20:8e:ea:ca:92:c3:88:7e:e8:cb:c4:76:66:9c:38: 6f:02:7a:f1:88:d6:f0:37:fb:ba:18:67:02:d1:fb: db:98:e9:5a:5b:66:62:0d:a8:c1:22:20:d1:b2:67: 64:52:40:73:05:78:cc:a8:c9:b0:e1:35:c9:6f:03: 17:b5:d0:6c:71:76:a8:2f:ad:e8:be:0e:c8:a8:5b: a8:48:fe:0e:74:32:28:78:ae:e0:88:c3:9e:45:c1: e1:b8:43:36:8f:e8:27:0c:0d:c7:8a:e0:5d:4b:e9: 37:3e:5a:97:06:7d:b2:71:ac:f8:08:a1:85:33:c1: 9f:09:2a:bd:ab:20:ea:69:08:95:76:05:60:2a:35: ab:50:be:37:c3:e4:ab:f0:a7:fa:2a:79:68:7f:2c: 99:3d:80:96:78:41:c6:eb:09:6e:9c:0f:86:7c:b7: 67:8b:10:a8:97:6c:bb:7e:7f:2b:b4:f2:b5:d0:cf: 4d:cc:e9:bc:a0:e6:9b:b2:50:2b:8c:6a:a3:d5:1c: c8:5f:ec:28:b5:0c:41:7d:73:a7:7a:69:21:07:e0: fd:04:aa:fa:68:85:d4:3d:dc:b4:fb:3c:e6:6a:48: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:42:6D:F7:41:12:85:D4:C4:B5:E0:EF:10:95:8C:A5:58:E9:CC:10 X509v3 Authority Key Identifier: keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:49:ed:44:1f:51:c4:69:3b:a0:69:ea:21:0e:06:2f:ac:85: ec:a8:24:0b:49:3a:5f:3f:18:f4:75:71:44:ef:25:86:0c:af: 98:e9:03:8f:16:c8:17:41:36:86:ca:92:0d:2d:fe:ba:a4:b8: d3:46:03:2e:74:56:10:b5:f0:a6:90:b3:d2:80:d1:32:72:4e: 34:86:f4:8d:b3:d9:2b:a7:aa:4b:01:8f:25:3e:c4:f2:16:a4: 91:19:da:8f:73:b2:1b:3d:af:f1:73:3d:82:30:18:94:bd:0a: e0:06:93:f0:69:19:f8:b3:83:cc:83:99:bf:85:37:84:9e:15: 11:ff:dc:6c:b9:32:6e:bc:89:36:f7:f0:d3:2c:c9:51:f7:f8: cb:d6:44:b7:62:ff:d1:3e:60:6d:a2:f0:6b:08:0a:a4:eb:af: dd:5a:59:5f:2b:08:cb:8b:20:28:15:c0:39:86:64:7f:ce:3b: d5:07:cc:f4:3a:9d:4a:fa:23:4a:ab:ac:f0:3a:a4:03:4a:d6: 15:fc:52:03:ba:55:82:ab:2b:9f:02:ab:56:03:36:15:00:b0: 56:69:8f:4e:36:ff:99:8f:b7:db:7b:db:2f:3c:84:df:84:0c: a0:e3:8c:09:25:d9:33:e2:ac:29:d9:36:20:10:4a:aa:0f:86: b2:f8:e1:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJOhn+rsibqIroNLqaN7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ODUxNTQ0YTY0MjdkMmM4ZTI3OWU0Yjk0YjkyYWFmMDAw OWVkMjcwHhcNMjUxMjExMTYwMDU4WhcNMjUxMjEyMTYwMDU4WjAzMTEwLwYDVQQD Eyg2ZTQyNmRmNzQxMTI4NWQ0YzRiNWUwZWYxMDk1OGNhNTU4ZTljYzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5bSRGHPnuGo7Iff75KsUfeTYx42 zx1Hmc6R77MgjurKksOIfujLxHZmnDhvAnrxiNbwN/u6GGcC0fvbmOlaW2ZiDajB IiDRsmdkUkBzBXjMqMmw4TXJbwMXtdBscXaoL63ovg7IqFuoSP4OdDIoeK7giMOe RcHhuEM2j+gnDA3HiuBdS+k3PlqXBn2ycaz4CKGFM8GfCSq9qyDqaQiVdgVgKjWr UL43w+Sr8Kf6KnlofyyZPYCWeEHG6wlunA+GfLdnixCol2y7fn8rtPK10M9NzOm8 oOabslArjGqj1RzIX+wotQxBfXOnemkhB+D9BKr6aIXUPdy0+zzmakgIHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5CbfdBEoXUxLXg7xCVjKVY6cwQMB8GA1UdIwQY MBaAFIeFFUSmQn0sjieeS5S5Kq8ACe0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYt ODU0MzRmNjE2OWYxLzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYtODU0MzRmNjE2OWYx LzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkntRB9R xGk7oGnqIQ4GL6yF7KgkC0k6Xz8Y9HVxRO8lhgyvmOkDjxbIF0E2hsqSDS3+uqS4 00YDLnRWELXwppCz0oDRMnJONIb0jbPZK6eqSwGPJT7E8hakkRnaj3OyGz2v8XM9 gjAYlL0K4AaT8GkZ+LODzIOZv4U3hJ4VEf/cbLkybryJNvfw0yzJUff4y9ZEt2L/ 0T5gbaLwawgKpOuv3VpZXysIy4sgKBXAOYZkf8471QfM9DqdSvojSqus8DqkA0rW FfxSA7pVgqsrnwKrVgM2FQCwVmmPTjb/mY+323vbLzyE34QMoOOMCSXZM+KsKdk2 IBBKqg+GsvjhYw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:00 2025 by rpki-client