This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft File: h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json) Hash identifier: Ajz8+uR3KOOYdr8COAHEtE3YPkdSX8wAUl7p5GhbwCI= Subject key identifier: A2:2F:E4:37:B4:8E:0F:40:F1:72:71:30:10:3D:12:F1:B3:A8:EA:08 Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5 Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5 Certificate serial: 019AF0884D23C49DD954B178B60ED2CD8734 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft Manifest number: 0403 Signing time: Fri 05 Dec 2025 22:00:55 +0000 Manifest this update: Fri 05 Dec 2025 22:00:55 +0000 Manifest next update: Sat 06 Dec 2025 22:00:55 +0000 Files and hashes: 1: Nh0GqKuGF98gKb-Cwk1kMbr-cyA.roa (hash: aK8xZBnqjnIOBr0tWt4e6+4KcSJi3YeptqQiZQTdYjA=) 2: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: hn0MaCcfbQZnPr4zJXuJ3/3150FoHdtWNeQmn+Lwvbw=) 3: ppcuybJ2dVTx8Oi4Rb_BK3tcepQ.roa (hash: kVGDPxLEKz3xBW5mOWtq1nIn17YH7foWW8L0WvSguOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:4d:23:c4:9d:d9:54:b1:78:b6:0e:d2:cd:87:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5 Validity Not Before: Dec 5 22:00:55 2025 GMT Not After : Dec 6 22:00:55 2025 GMT Subject: CN=a22fe437b48e0f40f1727130103d12f1b3a8ea08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:1c:9c:8d:bf:18:eb:c3:99:de:99:94:c0: 40:be:06:bc:01:f2:cd:f7:d2:08:30:6b:42:65:66: e6:d5:fe:01:e7:55:da:33:81:ae:78:ea:62:77:d0: 0d:62:2d:97:0c:47:ab:62:e0:75:4b:12:f8:1e:2e: 79:28:48:fe:9a:6c:aa:ba:a6:40:2c:de:21:79:59: 91:1f:16:7a:4f:92:f5:a3:8c:5d:85:9e:08:d0:50: e8:53:fa:b2:bb:6a:56:d7:e1:34:33:97:4e:09:0c: 31:85:ed:5c:fc:57:76:14:db:8d:28:23:01:0d:4f: 57:c1:aa:c7:95:4d:01:a5:e8:5f:7c:7f:8e:ee:f3: e9:cc:d5:2b:a5:8b:23:0b:39:83:1c:44:64:0f:d1: 67:2d:8e:b2:28:ce:cb:6d:be:93:e9:43:61:19:0e: 1c:6f:3f:89:9f:56:48:55:5f:ab:cd:48:cd:94:f0: 4c:3a:8d:a7:9a:3a:63:60:63:ff:d2:3f:2f:62:96: ce:18:65:3b:0f:d1:c5:ee:7d:07:e2:7b:e0:2e:a0: bd:b9:c1:a5:d3:58:27:15:d5:00:f2:46:87:49:f1: c3:4f:ba:db:0a:a9:c6:a5:0c:c4:65:77:ac:10:c7: cd:47:2c:ce:e2:17:4f:69:f2:4c:29:51:07:99:70: 30:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2F:E4:37:B4:8E:0F:40:F1:72:71:30:10:3D:12:F1:B3:A8:EA:08 X509v3 Authority Key Identifier: keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:34:6f:88:4d:9d:a7:ec:75:fc:29:3a:f9:28:a8:d7:24:6a: 83:1d:f6:be:49:0a:0b:73:f8:a8:2b:b9:b9:99:06:9d:d0:7e: e4:09:ef:ba:e3:87:30:7d:61:a3:b3:9d:43:fc:81:91:8f:85: 5a:50:32:fb:c7:26:fd:3c:91:74:1e:8d:6d:b7:f4:99:21:e5: 17:b0:ef:46:f6:a9:2f:c8:e2:e3:b7:99:78:7c:a1:03:eb:b0: d3:ea:c0:f3:2a:54:63:e3:87:12:e2:56:7e:73:fe:d9:b6:74: 09:5d:84:16:19:b0:dc:81:ce:12:c4:0b:9e:b9:0b:c6:b4:fd: 98:d0:4e:f1:45:2b:05:f2:6e:b2:2c:bf:6c:8d:87:a2:f8:04: da:c2:1d:75:dd:5c:38:ac:d9:7b:81:c4:2c:69:6d:08:c7:9a: 9a:bb:c2:b4:3b:ae:eb:06:6e:72:ba:4e:68:32:7a:09:72:49: 82:26:61:a7:30:45:5f:a2:6d:11:42:fd:e0:7a:e1:7b:e3:e1: e7:56:a5:44:a8:39:10:0c:c7:db:fa:bf:6e:78:51:20:9a:06: 16:04:30:7c:c1:1c:84:11:dd:0e:e8:14:17:3d:c9:50:1b:d1: ea:83:22:50:9f:dd:b4:0e:92:4e:7e:a1:21:02:f7:ad:63:11: 3e:f1:37:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiE0jxJ3ZVLF4tg7SzYc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OGFiYjI5OTc3YTY1YjE0MGNhY2I2ZTcyYWIyNGNlZGRk NGU4YzUwHhcNMjUxMjA1MjIwMDU1WhcNMjUxMjA2MjIwMDU1WjAzMTEwLwYDVQQD EyhhMjJmZTQzN2I0OGUwZjQwZjE3MjcxMzAxMDNkMTJmMWIzYThlYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFkcnI2/GOvDmd6ZlMBAvga8AfLN 99IIMGtCZWbm1f4B51XaM4GueOpid9ANYi2XDEerYuB1SxL4Hi55KEj+mmyquqZA LN4heVmRHxZ6T5L1o4xdhZ4I0FDoU/qyu2pW1+E0M5dOCQwxhe1c/Fd2FNuNKCMB DU9XwarHlU0BpehffH+O7vPpzNUrpYsjCzmDHERkD9FnLY6yKM7Lbb6T6UNhGQ4c bz+Jn1ZIVV+rzUjNlPBMOo2nmjpjYGP/0j8vYpbOGGU7D9HF7n0H4nvgLqC9ucGl 01gnFdUA8kaHSfHDT7rbCqnGpQzEZXesEMfNRyzO4hdPafJMKVEHmXAwYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIv5De0jg9A8XJxMBA9EvGzqOoIMB8GA1UdIwQY MBaAFIeKuymXemWxQMrLbnKrJM7d1OjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2Et YWM4NjQ3ZDA1NThhLzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2EtYWM4NjQ3ZDA1NThh LzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTRviE2d p+x1/Ck6+Sio1yRqgx32vkkKC3P4qCu5uZkGndB+5AnvuuOHMH1ho7OdQ/yBkY+F WlAy+8cm/TyRdB6Nbbf0mSHlF7DvRvapL8ji47eZeHyhA+uw0+rA8ypUY+OHEuJW fnP+2bZ0CV2EFhmw3IHOEsQLnrkLxrT9mNBO8UUrBfJusiy/bI2HovgE2sIddd1c OKzZe4HELGltCMeamrvCtDuu6wZucrpOaDJ6CXJJgiZhpzBFX6JtEUL94Hrhe+Ph 51alRKg5EAzH2/q/bnhRIJoGFgQwfMEchBHdDugUFz3JUBvR6oMiUJ/dtA6STn6h IQL3rWMRPvE3dQ== -----END CERTIFICATE-----Generated at Sat Dec 6 03:58:52 2025 by rpki-client