This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft File: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft (raw, json) Hash identifier: WwugoizAn8b799sMX7Yb/OKRqgsAXFDPhh/Vrxr2S/s= Subject key identifier: 0E:8E:7E:5B:B3:07:55:74:F5:E1:45:09:42:DC:D6:58:98:B8:C7:0E Authority key identifier: 87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2 Certificate issuer: /CN=87b9313753bc0931af4393dbda009b0ff45ec7c2 Certificate serial: 019B2399A4D0E4205ECDD57115583AA8913B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft Manifest number: 0C45 Signing time: Mon 15 Dec 2025 20:00:30 +0000 Manifest this update: Mon 15 Dec 2025 20:00:30 +0000 Manifest next update: Tue 16 Dec 2025 20:00:30 +0000 Files and hashes: 1: ETVPLHc_dvqJDflGIPJgHzJaWt8.roa (hash: Jimm5bhH1qmUZnAAKaN20vij/bbKy4j6GEesqJVn7gk=) 2: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl (hash: pJYT7khPQXVcVwaatZqLoYfKP+eQy7L55/ER41Z23lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:a4:d0:e4:20:5e:cd:d5:71:15:58:3a:a8:91:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b9313753bc0931af4393dbda009b0ff45ec7c2 Validity Not Before: Dec 15 20:00:30 2025 GMT Not After : Dec 16 20:00:30 2025 GMT Subject: CN=0e8e7e5bb3075574f5e1450942dcd65898b8c70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:09:ae:2d:6e:cd:4d:82:1d:4d:48:83:43: ed:00:9c:ff:07:4e:56:6f:bb:d2:23:e1:71:c5:1d: 58:96:7f:03:23:d0:64:1c:19:13:46:5f:f9:7b:2c: 06:1f:6f:4c:52:36:46:3d:17:59:dc:9d:89:f3:96: c7:de:29:5b:37:31:f0:04:66:68:52:53:37:e5:6a: 7e:4c:90:fb:48:7d:27:d3:f9:68:9e:17:5f:78:42: d4:44:35:d2:6c:7c:f5:d1:2e:4b:bb:1d:c4:47:07: ab:e9:01:78:02:3a:81:72:ac:46:5e:3d:00:b7:17: ec:32:6d:3e:39:eb:a0:b5:02:70:bb:35:37:5f:5d: 38:47:a9:f1:3f:96:fb:9a:93:1d:65:68:0c:41:c3: fe:fa:b9:72:88:93:5c:b8:30:18:77:f0:73:e4:e8: a3:2e:d1:f4:3b:f2:ff:7f:bf:7e:3f:44:bf:b2:93: f7:bf:ce:03:60:f1:71:52:73:b6:ed:75:06:e1:c3: 5f:9e:f9:95:0c:ff:ea:75:f2:1b:6c:99:80:fd:b3: 56:21:7f:12:30:18:4b:53:20:17:7e:17:aa:18:9b: 4d:45:f0:b8:a2:38:f9:a1:23:ac:28:94:a7:da:5c: 9a:42:f6:5b:16:ae:fb:a0:3f:f3:dd:de:e6:d1:19: a3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8E:7E:5B:B3:07:55:74:F5:E1:45:09:42:DC:D6:58:98:B8:C7:0E X509v3 Authority Key Identifier: keyid:87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b9:ec:2b:44:de:c0:b5:22:b5:ca:c4:f7:34:f7:04:57:6c: cc:51:03:8c:40:b2:05:1b:21:29:e9:b5:8b:50:a4:91:a1:7c: e9:b1:d7:e0:81:dc:f0:f4:0f:9b:20:cd:ac:d3:f3:cb:72:db: 6a:c2:36:41:1b:c2:49:25:ae:70:86:32:a8:d3:14:87:d1:24: ca:63:ef:5a:2f:05:52:f6:91:2c:cd:95:3c:0a:66:71:b4:3f: de:6f:d5:db:ea:22:de:14:e4:e9:e6:ea:a8:8c:a4:e8:06:71: 2d:62:fb:32:ca:11:2a:b9:a6:82:70:54:12:41:68:13:01:10: 4a:c5:f1:f2:a4:a2:4b:de:44:6d:27:cf:90:99:f3:f8:53:a8: ee:85:32:2d:1b:7b:ff:94:0b:c0:f2:96:4e:4a:d6:d2:19:08: c0:f8:72:16:5b:51:fa:46:31:26:5b:8f:c9:e4:60:ee:14:fa: 7d:06:90:33:fd:1a:ed:54:fd:50:38:37:c3:9b:a0:13:c2:8d: 79:3e:cb:9d:4f:13:af:c7:86:51:b7:f3:73:54:0d:2a:70:b4: 79:9f:dd:8a:5c:6e:89:36:96:d7:67:72:e0:a5:29:e8:68:73: b3:5a:8d:eb:d4:04:5c:38:5c:e7:0b:46:48:16:5e:41:0e:a5: 25:b7:34:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmaTQ5CBezdVxFVg6qJE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YjkzMTM3NTNiYzA5MzFhZjQzOTNkYmRhMDA5YjBmZjQ1 ZWM3YzIwHhcNMjUxMjE1MjAwMDMwWhcNMjUxMjE2MjAwMDMwWjAzMTEwLwYDVQQD EygwZThlN2U1YmIzMDc1NTc0ZjVlMTQ1MDk0MmRjZDY1ODk4YjhjNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV4Jri1uzU2CHU1Ig0PtAJz/B05W b7vSI+FxxR1Yln8DI9BkHBkTRl/5eywGH29MUjZGPRdZ3J2J85bH3ilbNzHwBGZo UlM35Wp+TJD7SH0n0/lonhdfeELURDXSbHz10S5Lux3ERwer6QF4AjqBcqxGXj0A txfsMm0+OeugtQJwuzU3X104R6nxP5b7mpMdZWgMQcP++rlyiJNcuDAYd/Bz5Oij LtH0O/L/f79+P0S/spP3v84DYPFxUnO27XUG4cNfnvmVDP/qdfIbbJmA/bNWIX8S MBhLUyAXfheqGJtNRfC4ojj5oSOsKJSn2lyaQvZbFq77oD/z3d7m0RmjLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6OfluzB1V09eFFCULc1liYuMcOMB8GA1UdIwQY MBaAFIe5MTdTvAkxr0OT29oAmw/0XsfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83MWNiMGMtM2JlMC00YTllLTliODIt N2Q2ODM2NmI1OWI3LzEvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83MWNiMGMtM2JlMC00YTllLTliODItN2Q2ODM2NmI1OWI3 LzEvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrnsK0Te wLUitcrE9zT3BFdszFEDjECyBRshKem1i1CkkaF86bHX4IHc8PQPmyDNrNPzy3Lb asI2QRvCSSWucIYyqNMUh9EkymPvWi8FUvaRLM2VPApmcbQ/3m/V2+oi3hTk6ebq qIyk6AZxLWL7MsoRKrmmgnBUEkFoEwEQSsXx8qSiS95EbSfPkJnz+FOo7oUyLRt7 /5QLwPKWTkrW0hkIwPhyFltR+kYxJluPyeRg7hT6fQaQM/0a7VT9UDg3w5ugE8KN eT7LnU8Tr8eGUbfzc1QNKnC0eZ/dilxuiTaW12dy4KUp6Ghzs1qN69QEXDhc5wtG SBZeQQ6lJbc0/g== -----END CERTIFICATE-----Generated at Tue Dec 16 06:19:53 2025 by rpki-client