This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json) Hash identifier: Q0nlIJGlQg3P5Fl5ajGIhgb4hCtO8VN1RfTcLyPMFMQ= Subject key identifier: 41:52:5F:17:39:B3:AB:58:59:BA:48:7B:58:B8:FF:B3:4E:FF:BA:7A Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34 Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34 Certificate serial: 019B48160D3A57DD98040491A3D8480A7C45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft Manifest number: 0E82 Signing time: Mon 22 Dec 2025 22:02:43 +0000 Manifest this update: Mon 22 Dec 2025 22:02:43 +0000 Manifest next update: Tue 23 Dec 2025 22:02:43 +0000 Files and hashes: 1: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: QvJL78zUGx8axnUV70ivQk43reTpQh/P+6pDAon8zVw=) 2: hrRjboaEddMTvU1wn6u0WdMEQ5k.roa (hash: R2w89TKLu5CTfHL7zBMhtJ8zldIghHv3KwB06EytEuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:16:0d:3a:57:dd:98:04:04:91:a3:d8:48:0a:7c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34 Validity Not Before: Dec 22 22:02:43 2025 GMT Not After : Dec 23 22:02:43 2025 GMT Subject: CN=41525f1739b3ab5859ba487b58b8ffb34effba7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:46:50:82:a6:7d:89:6f:fa:ed:3c:dc:7d:a4: c1:b4:77:17:55:81:a4:38:f8:43:ab:1c:6e:25:df: d3:c2:ca:04:82:d6:2f:08:36:86:62:be:d3:8e:2c: 80:09:24:8d:02:41:c4:fd:85:ae:af:6c:15:28:8d: c4:69:1d:1c:76:b1:e4:9b:b5:eb:ab:ce:aa:f4:84: 67:90:41:2b:05:e8:f1:10:aa:57:cc:c3:2c:ba:49: cf:a8:bc:8e:be:85:4b:f7:c6:62:2b:61:51:4c:53: 1c:89:a3:61:25:c3:e6:a7:c1:c3:d0:56:c5:a0:df: ad:f7:f5:e2:cf:0c:aa:40:79:69:a6:69:e9:52:6a: a4:59:9d:3c:4d:1c:08:40:9e:da:98:fb:cd:2d:61: 6b:68:bc:6c:5b:14:34:e3:99:4b:3b:84:9a:c5:a5: b4:55:80:3c:24:e3:6a:88:01:0c:06:35:02:f0:4e: 4b:92:a7:37:4e:87:99:c9:fa:04:b1:44:0c:46:34: b3:43:7d:a9:9d:9e:06:b9:ee:9f:3e:03:a8:de:e9: 35:e0:dc:36:72:80:b7:28:fd:3e:04:d2:43:ed:1d: 56:20:ef:f9:de:91:02:a4:ed:8c:45:5e:96:e1:72: ac:c0:aa:e6:11:0b:c9:3f:27:52:8c:8c:95:56:2f: ff:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:52:5F:17:39:B3:AB:58:59:BA:48:7B:58:B8:FF:B3:4E:FF:BA:7A X509v3 Authority Key Identifier: keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ec:b5:a9:1b:e7:77:0d:d9:96:08:3e:f5:fc:aa:be:ef:fa: c5:76:2a:fd:dc:00:3c:49:72:ea:8c:db:87:b1:94:72:39:8b: 7d:30:ab:c7:92:fb:64:3b:3c:a4:62:48:69:f2:2c:78:46:61: 63:c8:ea:af:99:f9:46:a5:e9:ab:07:0f:5a:f7:0c:87:b3:99: 60:d3:36:37:57:40:d0:f0:39:85:e2:16:02:76:4c:d7:bf:db: 9b:07:60:e1:07:5d:ac:e2:f8:43:f0:d4:59:c4:f0:71:44:fc: 16:b9:7e:6c:3b:7e:8f:38:7d:a5:8f:5c:c4:5b:dd:42:9d:1d: 6f:37:06:8a:32:d3:1d:66:e8:56:03:1c:cd:74:10:2a:eb:20: bf:bd:88:a3:29:bd:b3:53:ff:18:62:e4:55:8b:3e:86:34:e2: b8:6e:e7:0c:59:65:04:85:c2:79:77:36:96:34:04:61:b7:a6: e0:68:ab:50:63:5d:a7:af:de:99:71:ce:8b:fb:3d:6f:54:12: be:3c:0e:7a:13:16:18:24:9a:a0:4e:d1:9c:d7:f7:7d:74:e9: 61:21:ee:5c:e1:09:f3:af:f9:b1:4b:62:a1:9b:62:87:54:39: 13:5b:4d:16:f6:dd:b1:34:13:12:56:db:32:1a:ce:44:2f:ca: cf:40:1c:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFg06V92YBASRo9hICnxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdi Y2VmMzQwHhcNMjUxMjIyMjIwMjQzWhcNMjUxMjIzMjIwMjQzWjAzMTEwLwYDVQQD Eyg0MTUyNWYxNzM5YjNhYjU4NTliYTQ4N2I1OGI4ZmZiMzRlZmZiYTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkZQgqZ9iW/67TzcfaTBtHcXVYGk OPhDqxxuJd/TwsoEgtYvCDaGYr7TjiyACSSNAkHE/YWur2wVKI3EaR0cdrHkm7Xr q86q9IRnkEErBejxEKpXzMMsuknPqLyOvoVL98ZiK2FRTFMciaNhJcPmp8HD0FbF oN+t9/XizwyqQHlppmnpUmqkWZ08TRwIQJ7amPvNLWFraLxsWxQ045lLO4SaxaW0 VYA8JONqiAEMBjUC8E5Lkqc3ToeZyfoEsUQMRjSzQ32pnZ4Gue6fPgOo3uk14Nw2 coC3KP0+BNJD7R1WIO/53pECpO2MRV6W4XKswKrmEQvJPydSjIyVVi//awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFSXxc5s6tYWbpIe1i4/7NO/7p6MB8GA1UdIwQY MBaAFIe5duKquSMkjugO5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMt ZTFiOGZmMjVmNjBiLzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBi LzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+y1qRvn dw3Zlgg+9fyqvu/6xXYq/dwAPEly6ozbh7GUcjmLfTCrx5L7ZDs8pGJIafIseEZh Y8jqr5n5RqXpqwcPWvcMh7OZYNM2N1dA0PA5heIWAnZM17/bmwdg4QddrOL4Q/DU WcTwcUT8Frl+bDt+jzh9pY9cxFvdQp0dbzcGijLTHWboVgMczXQQKusgv72Ioym9 s1P/GGLkVYs+hjTiuG7nDFllBIXCeXc2ljQEYbem4GirUGNdp6/emXHOi/s9b1QS vjwOehMWGCSaoE7RnNf3fXTpYSHuXOEJ86/5sUtioZtih1Q5E1tNFvbdsTQTElbb MhrORC/Kz0AchA== -----END CERTIFICATE-----Generated at Tue Dec 23 01:55:57 2025 by rpki-client