This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json) Hash identifier: pDO3kCKqJ8lU6KSQVTb8Rteuhpvxms7dBZJzR1a0pSI= Subject key identifier: A7:16:BF:40:AE:DE:A4:C0:D6:8F:30:1D:53:5B:50:46:F3:61:11:A7 Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8 Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8 Certificate serial: 019B0E265A8D1452B8ED4091641D501A7288 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft Manifest number: 10E4 Signing time: Thu 11 Dec 2025 16:02:32 +0000 Manifest this update: Thu 11 Dec 2025 16:02:32 +0000 Manifest next update: Fri 12 Dec 2025 16:02:32 +0000 Files and hashes: 1: TwlfNDSczGUl34rteJgSuHXTO94.roa (hash: gBwK3ZQY+snmvfWIA0VgAvr4/MBSK9FpiTLSXZrUgpg=) 2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: XrHC7OaGZZ7cY1LcmA2g4zs+d1MILHOiVORdY9hfIm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:5a:8d:14:52:b8:ed:40:91:64:1d:50:1a:72:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8 Validity Not Before: Dec 11 16:02:32 2025 GMT Not After : Dec 12 16:02:32 2025 GMT Subject: CN=a716bf40aedea4c0d68f301d535b5046f36111a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:37:be:c3:a9:c7:aa:9d:d2:a4:c9:6b:45:db: 65:56:ce:bb:f6:4f:10:40:92:e8:cd:f6:0d:80:1f: 4c:3b:88:c8:a3:78:2c:4a:5c:1b:eb:36:8f:a6:95: ea:9e:2e:80:61:a2:ba:74:12:25:e9:33:e2:e5:c9: ab:19:d4:c1:32:3d:01:73:e0:58:4a:8d:b9:13:c2: 14:a8:90:83:6d:53:37:95:e6:f2:e5:a6:d1:a5:87: 06:84:2a:44:1a:39:1f:05:07:cc:d1:ec:97:65:82: 54:c2:b9:d8:1c:56:9f:2d:d6:3d:5f:a9:cb:7d:ed: 71:f0:59:a7:0b:be:91:38:3c:8d:e3:5a:89:74:2a: 4c:8e:4e:9e:1e:a7:77:43:7c:10:63:ae:be:a9:a4: 88:bd:29:0b:ab:cb:91:9a:7f:34:81:c1:bd:47:23: b3:ae:54:99:43:f6:73:19:0c:0c:bb:0e:df:cd:40: 7e:e7:58:28:a9:fd:6a:72:87:82:c7:c8:d2:98:d0: 6a:72:c5:5d:35:a4:c1:89:34:2f:e1:f2:3a:46:66: 07:68:68:b9:d8:09:c7:47:e0:f6:d9:4c:79:54:44: 58:84:88:58:cf:41:10:99:f3:6f:f7:ae:fa:33:67: 60:1f:7f:ce:bd:9c:43:0a:b6:e0:15:a8:65:17:bb: 05:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:16:BF:40:AE:DE:A4:C0:D6:8F:30:1D:53:5B:50:46:F3:61:11:A7 X509v3 Authority Key Identifier: keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b7:29:dc:75:cf:8e:a0:80:0a:51:ef:d1:af:7a:da:98:b5: cb:c1:c2:81:8c:a6:4e:8d:8d:1c:6e:91:68:1d:68:25:df:b8: f0:3d:e9:7c:b2:b8:14:80:0e:46:8a:1e:37:2e:d4:f0:71:08: 77:b0:06:b1:00:f6:5e:e0:00:8b:85:b0:5f:d7:60:a5:f0:d0: a1:c0:e0:05:69:03:a6:0d:21:55:d0:5a:60:4b:eb:93:0c:12: ef:74:6f:94:1c:ba:6c:57:cf:16:7c:a6:92:b9:24:a9:18:24: e7:74:a8:fb:55:6f:56:4d:3a:65:36:6e:69:07:b8:93:10:90: e1:d3:52:86:f8:fe:20:81:ee:87:a7:bf:31:a8:58:cd:e9:dd: 12:e4:bb:d0:a5:2e:64:80:38:74:bc:52:92:db:30:87:15:40: bc:4c:64:8f:9e:c5:4b:e6:60:5f:07:24:89:84:5a:2d:8e:5e: 97:11:4b:4f:5a:02:39:a2:c5:9d:f7:0e:92:3c:6e:eb:d2:30: 51:f3:8d:b7:1b:4e:b6:d4:a8:2e:20:fd:2f:b0:9b:f6:1e:f4: 61:7b:d7:47:d4:34:f8:8f:8a:f2:fd:11:97:00:31:95:fa:3e: 32:74:cb:ed:56:45:b6:fb:8b:69:73:a6:51:bd:1a:8a:6f:40: 38:79:5e:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJlqNFFK47UCRZB1QGnKIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGFhMTZmZDJhMmM5MzZjMGFhNGZiNTYyNGY2MmJjNTZh NTRkZjgwHhcNMjUxMjExMTYwMjMyWhcNMjUxMjEyMTYwMjMyWjAzMTEwLwYDVQQD EyhhNzE2YmY0MGFlZGVhNGMwZDY4ZjMwMWQ1MzViNTA0NmYzNjExMWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvje+w6nHqp3SpMlrRdtlVs679k8Q QJLozfYNgB9MO4jIo3gsSlwb6zaPppXqni6AYaK6dBIl6TPi5cmrGdTBMj0Bc+BY So25E8IUqJCDbVM3leby5abRpYcGhCpEGjkfBQfM0eyXZYJUwrnYHFafLdY9X6nL fe1x8FmnC76RODyN41qJdCpMjk6eHqd3Q3wQY66+qaSIvSkLq8uRmn80gcG9RyOz rlSZQ/ZzGQwMuw7fzUB+51goqf1qcoeCx8jSmNBqcsVdNaTBiTQv4fI6RmYHaGi5 2AnHR+D22Ux5VERYhIhYz0EQmfNv9676M2dgH3/OvZxDCrbgFahlF7sF4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcWv0Cu3qTA1o8wHVNbUEbzYRGnMB8GA1UdIwQY MBaAFIdKoW/Sosk2wKpPtWJPYrxWpU34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTct ZmRiYzdjNGNmNDllLzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTctZmRiYzdjNGNmNDll LzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7cp3HXP jqCAClHv0a962pi1y8HCgYymTo2NHG6RaB1oJd+48D3pfLK4FIAORooeNy7U8HEI d7AGsQD2XuAAi4WwX9dgpfDQocDgBWkDpg0hVdBaYEvrkwwS73RvlBy6bFfPFnym krkkqRgk53So+1VvVk06ZTZuaQe4kxCQ4dNShvj+IIHuh6e/MahYzendEuS70KUu ZIA4dLxSktswhxVAvExkj57FS+ZgXwckiYRaLY5elxFLT1oCOaLFnfcOkjxu69Iw UfONtxtOttSoLiD9L7Cb9h70YXvXR9Q0+I+K8v0RlwAxlfo+MnTL7VZFtvuLaXOm Ub0aim9AOHleew== -----END CERTIFICATE-----Generated at Fri Dec 12 00:10:49 2025 by rpki-client