This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json) Hash identifier: oJvF41yfeuyajTdNSX3wW7IjH3ChFXuExXfk3P4bURE= Subject key identifier: 94:D0:4F:01:1D:79:7C:88:63:4D:AF:79:AB:33:DE:E1:3D:AE:F8:B2 Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d Certificate serial: 019B10815EED6FB4AC977B1B86B13A230039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft Manifest number: 1704 Signing time: Fri 12 Dec 2025 03:01:12 +0000 Manifest this update: Fri 12 Dec 2025 03:01:12 +0000 Manifest next update: Sat 13 Dec 2025 03:01:12 +0000 Files and hashes: 1: 1-cISFCJjrOXOH13uOfejSN0t07U.roa (hash: CsZ+l20+WvDp7ZAvLuoQUu3eyz/VH/hBFp+Sltnj4u8=) 2: Cz4X9MPRs8p_ImW4tUel1Ly3B_A.roa (hash: mCOTukj35b5NKqry7uD/1PQ8/wQManDEmCJ3x3rHtng=) 3: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: ig9bFJKkzNkGASS1cAxJCcxVcyiM36eX10JksVWbkcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:5e:ed:6f:b4:ac:97:7b:1b:86:b1:3a:23:00:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d Validity Not Before: Dec 12 03:01:12 2025 GMT Not After : Dec 13 03:01:12 2025 GMT Subject: CN=94d04f011d797c88634daf79ab33dee13daef8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:a4:f7:6c:84:f1:cd:49:7c:29:f1:b9:50: f3:24:30:1b:66:a6:3a:d0:1d:4b:5b:0d:7f:2f:30: 16:f6:47:e9:72:9a:21:df:06:54:56:32:10:85:7e: d7:0e:81:a8:83:19:22:f3:1c:3b:23:46:b7:d5:1f: 73:db:7a:a9:25:b0:77:57:ac:78:d6:7c:93:bf:1d: 85:2a:1e:b3:f8:e9:b9:3a:aa:75:96:cb:a3:09:6a: a1:ec:b1:c1:86:3d:e0:45:1c:b0:a5:98:0b:de:73: f9:37:18:40:b6:8f:5c:26:a6:42:b4:c5:28:ad:5e: bf:0b:08:b1:21:b4:91:1f:b5:8c:2e:bd:e6:92:67: fc:10:de:c6:57:32:34:cd:f2:26:d6:f7:f6:73:36: 5a:e8:a0:e5:e6:2c:26:79:5d:4b:c0:4e:18:64:13: 78:1f:62:da:99:4a:5c:44:90:7d:56:db:6f:a7:43: 36:94:b2:4a:35:2d:fb:4d:ea:22:0c:f2:8d:cd:3d: fc:f6:7d:a9:19:7d:e6:1b:69:71:35:fc:2e:e8:aa: 90:04:a1:bf:32:e1:92:f6:1c:e2:76:fd:ac:5f:a2: b3:07:9c:ee:01:d6:05:19:85:fb:50:79:8d:ad:de: 56:3f:24:3e:15:90:d8:a6:5c:54:87:32:fb:8e:6d: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D0:4F:01:1D:79:7C:88:63:4D:AF:79:AB:33:DE:E1:3D:AE:F8:B2 X509v3 Authority Key Identifier: keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0f:25:21:42:fa:99:a6:4b:08:65:64:a9:52:de:d6:65:92: d7:04:47:9b:55:8a:d2:10:17:a5:e9:2e:56:d7:45:3b:c6:b1: 23:b4:b6:d1:7c:63:de:84:ee:60:50:a3:89:d0:19:ec:30:0d: d5:92:cd:0e:7c:ac:d8:36:d0:c8:26:45:c1:36:0b:73:80:76: 83:07:03:6c:ff:c1:dc:82:90:aa:0a:3d:e9:9e:09:a9:ee:76: c7:1c:8b:a2:03:9b:fb:e1:89:29:dd:00:b8:4c:51:eb:87:a4: df:5e:bd:e2:f3:81:12:c8:76:9b:8e:b4:52:d4:7c:fe:fa:e5: 68:43:7c:f2:3b:0b:79:77:72:41:c6:fb:27:66:17:a0:8b:b9: bd:3e:8d:16:6e:a9:d2:a1:aa:06:b1:88:55:86:ee:d6:84:87: ea:dd:dd:47:fd:e7:28:1d:43:33:35:15:50:3d:19:16:9e:9a: 9b:44:f1:9f:e5:71:3e:71:4b:7d:0d:f9:fb:af:d2:0e:ef:2e: fa:44:10:31:6d:e5:f7:e5:0f:43:1a:8a:c2:d3:c2:39:df:9b: 60:84:73:33:14:21:d6:28:22:63:40:d0:bc:5e:55:08:4f:17: 76:bb:d0:88:88:92:0a:e4:69:c0:c9:cb:e1:d9:a7:07:e9:78: fe:58:f9:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgV7tb7Ssl3sbhrE6IwA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZTY0MTcwZjlkODJjNTE2NzBiOWE0NGYzMjliMjA2MTNh ODA4MmQwHhcNMjUxMjEyMDMwMTEyWhcNMjUxMjEzMDMwMTEyWjAzMTEwLwYDVQQD Eyg5NGQwNGYwMTFkNzk3Yzg4NjM0ZGFmNzlhYjMzZGVlMTNkYWVmOGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMik92yE8c1JfCnxuVDzJDAbZqY6 0B1LWw1/LzAW9kfpcpoh3wZUVjIQhX7XDoGogxki8xw7I0a31R9z23qpJbB3V6x4 1nyTvx2FKh6z+Om5Oqp1lsujCWqh7LHBhj3gRRywpZgL3nP5NxhAto9cJqZCtMUo rV6/CwixIbSRH7WMLr3mkmf8EN7GVzI0zfIm1vf2czZa6KDl5iwmeV1LwE4YZBN4 H2LamUpcRJB9Vttvp0M2lLJKNS37TeoiDPKNzT389n2pGX3mG2lxNfwu6KqQBKG/ MuGS9hzidv2sX6KzB5zuAdYFGYX7UHmNrd5WPyQ+FZDYplxUhzL7jm1mUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTQTwEdeXyIY02veasz3uE9rviyMB8GA1UdIwQY MBaAFIfmQXD52CxRZwuaRPMpsgYTqAgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDIt NmUxM2NjYmY0OTA2LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDItNmUxM2NjYmY0OTA2 LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiw8lIUL6 maZLCGVkqVLe1mWS1wRHm1WK0hAXpekuVtdFO8axI7S20Xxj3oTuYFCjidAZ7DAN 1ZLNDnys2DbQyCZFwTYLc4B2gwcDbP/B3IKQqgo96Z4Jqe52xxyLogOb++GJKd0A uExR64ek31694vOBEsh2m460UtR8/vrlaEN88jsLeXdyQcb7J2YXoIu5vT6NFm6p 0qGqBrGIVYbu1oSH6t3dR/3nKB1DMzUVUD0ZFp6am0Txn+VxPnFLfQ35+6/SDu8u +kQQMW3l9+UPQxqKwtPCOd+bYIRzMxQh1igiY0DQvF5VCE8XdrvQiIiSCuRpwMnL 4dmnB+l4/lj52A== -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:23 2025 by rpki-client