This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json) Hash identifier: 7D0F292qSub3onfPKR/aSwMCsM7pCf6inZHWWUcOdT4= Subject key identifier: 97:71:CA:84:CC:43:51:EA:2B:9A:1E:A7:20:60:00:62:F8:C0:40:2E Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34 Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34 Certificate serial: 019B2552854E28D57873903D05C4E5EDDA86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft Manifest number: 0E70 Signing time: Tue 16 Dec 2025 04:02:03 +0000 Manifest this update: Tue 16 Dec 2025 04:02:03 +0000 Manifest next update: Wed 17 Dec 2025 04:02:03 +0000 Files and hashes: 1: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: e8T9nTuqClcuoj+6MzagT5jy5TvJeH8zpD6VCtl/SL4=) 2: hrRjboaEddMTvU1wn6u0WdMEQ5k.roa (hash: R2w89TKLu5CTfHL7zBMhtJ8zldIghHv3KwB06EytEuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:85:4e:28:d5:78:73:90:3d:05:c4:e5:ed:da:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34 Validity Not Before: Dec 16 04:02:03 2025 GMT Not After : Dec 17 04:02:03 2025 GMT Subject: CN=9771ca84cc4351ea2b9a1ea720600062f8c0402e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:84:7c:bd:53:e8:95:c3:b3:f2:a9:2a:dc: 6e:24:5e:14:df:cf:b5:bd:2e:0a:3d:ba:44:b3:8f: 4c:6e:90:2c:c1:da:43:92:2c:bf:bd:8e:47:e7:9b: 88:df:e4:39:3a:97:2a:f9:ff:67:0a:6c:df:d3:e0: 54:2e:9e:f6:01:0f:31:6c:ab:16:84:09:b7:8e:f9: 99:4d:c9:ae:3c:90:e0:0b:50:65:a1:a7:14:cc:2a: cf:24:0f:60:5e:c3:6a:5d:7e:b9:f6:0a:36:f6:c7: 32:5a:61:d7:d2:9e:26:47:6c:11:c2:83:58:3d:b8: 33:15:90:19:0b:a6:51:6e:8f:4a:26:17:6f:62:b5: ca:76:93:23:6d:5d:30:e4:a3:b5:72:23:b0:41:27: a3:85:73:ea:eb:f1:ae:fe:ee:25:43:d0:88:fd:e1: 0d:fe:6d:e7:a1:6c:95:55:5c:f5:1a:9f:ed:d2:05: f5:fe:b9:e0:db:dc:de:3d:42:54:2e:27:21:90:5d: 9c:8d:61:1c:e8:65:10:a4:05:4a:ab:31:e3:37:5c: d4:02:b7:58:55:91:1f:32:ba:be:de:8b:89:d5:ea: 9f:b8:a5:77:21:52:30:ce:49:83:29:b8:8f:5a:f4: ce:b6:56:7c:6b:3f:98:91:c4:3d:c4:00:81:4f:fb: e6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:71:CA:84:CC:43:51:EA:2B:9A:1E:A7:20:60:00:62:F8:C0:40:2E X509v3 Authority Key Identifier: keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:df:5f:27:8f:b7:b5:04:1c:c2:95:b4:13:29:ee:e3:72:58: cd:e0:26:2c:27:5e:64:21:09:11:08:47:1a:3d:6f:91:e6:75: c5:99:3f:ad:03:c0:8f:39:09:96:6c:d1:49:89:80:4b:42:8b: 41:52:7c:09:c9:ab:a5:14:7f:f1:1d:f9:e7:ef:9d:d7:c2:87: b0:96:f0:97:52:50:76:0b:2c:c6:80:2e:83:36:22:28:26:42: 29:b5:d9:37:ae:3c:f6:ed:05:f4:0d:a3:d4:5c:ce:d7:94:ad: 03:3a:e0:33:8f:24:8c:64:6f:e6:12:d4:3d:4b:fb:af:fd:bb: 21:82:c6:ea:be:49:d6:49:63:22:ed:21:96:ef:54:d8:63:af: 4d:a8:37:83:d8:bc:6a:e8:0c:40:3a:7f:ff:46:e7:b2:dc:6f: d5:9c:81:cf:23:ac:a6:a7:47:63:9c:be:d2:bf:67:61:d0:c5: 91:03:e4:8f:94:31:25:ce:87:2d:2f:87:8c:c3:04:51:a5:6c: 40:58:1c:f2:11:5d:de:e1:7e:6f:57:68:99:ed:eb:8f:43:c6: b4:11:69:29:1b:89:c8:7c:14:48:93:4b:9c:6f:3e:bf:98:8a: ac:c0:fb:82:0f:1e:17:68:cd:65:fe:48:3a:4e:b3:37:6b:ad: 34:a1:ed:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUoVOKNV4c5A9BcTl7dqGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdi Y2VmMzQwHhcNMjUxMjE2MDQwMjAzWhcNMjUxMjE3MDQwMjAzWjAzMTEwLwYDVQQD Eyg5NzcxY2E4NGNjNDM1MWVhMmI5YTFlYTcyMDYwMDA2MmY4YzA0MDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSyEfL1T6JXDs/KpKtxuJF4U38+1 vS4KPbpEs49MbpAswdpDkiy/vY5H55uI3+Q5Opcq+f9nCmzf0+BULp72AQ8xbKsW hAm3jvmZTcmuPJDgC1BloacUzCrPJA9gXsNqXX659go29scyWmHX0p4mR2wRwoNY PbgzFZAZC6ZRbo9KJhdvYrXKdpMjbV0w5KO1ciOwQSejhXPq6/Gu/u4lQ9CI/eEN /m3noWyVVVz1Gp/t0gX1/rng29zePUJULichkF2cjWEc6GUQpAVKqzHjN1zUArdY VZEfMrq+3ouJ1eqfuKV3IVIwzkmDKbiPWvTOtlZ8az+YkcQ9xACBT/vm3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdxyoTMQ1HqK5oepyBgAGL4wEAuMB8GA1UdIwQY MBaAFIe5duKquSMkjugO5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMt ZTFiOGZmMjVmNjBiLzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBi LzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAed9fJ4+3 tQQcwpW0Eynu43JYzeAmLCdeZCEJEQhHGj1vkeZ1xZk/rQPAjzkJlmzRSYmAS0KL QVJ8CcmrpRR/8R355++d18KHsJbwl1JQdgssxoAugzYiKCZCKbXZN6489u0F9A2j 1FzO15StAzrgM48kjGRv5hLUPUv7r/27IYLG6r5J1kljIu0hlu9U2GOvTag3g9i8 augMQDp//0bnstxv1ZyBzyOspqdHY5y+0r9nYdDFkQPkj5QxJc6HLS+HjMMEUaVs QFgc8hFd3uF+b1dome3rj0PGtBFpKRuJyHwUSJNLnG8+v5iKrMD7gg8eF2jNZf5I Ok6zN2utNKHteQ== -----END CERTIFICATE-----Generated at Tue Dec 16 09:27:37 2025 by rpki-client