This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json) Hash identifier: gLrtw9+vBvM7mmMA2Krn6rZlV9ADh+SHHeKN3Zv+X7Y= Subject key identifier: CB:66:19:26:AA:AF:3C:50:7A:17:D9:AD:58:59:EF:3D:6D:DC:E5:7C Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7 Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7 Certificate serial: 019B255170885A57594A54F84CBD564FD80F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft Manifest number: 1780 Signing time: Tue 16 Dec 2025 04:00:52 +0000 Manifest this update: Tue 16 Dec 2025 04:00:52 +0000 Manifest next update: Wed 17 Dec 2025 04:00:52 +0000 Files and hashes: 1: Jd9KhT8D9dzrmclXzaM2LsTcdvk.roa (hash: Xz0hJFnyzCZED2jN3f6gRmu551al736EIaABcjiPvLQ=) 2: Ms_pDtAjK9tb1e5h7bLoQWbyHs8.roa (hash: cL+zxxB8p9BDEROGB77OysHEV8P4dX2U5M5xqP9Q6C0=) 3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: wS+IUNU5P1TLVfQGMVYez3xE50zRrWgZNe6sBYmMpE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:70:88:5a:57:59:4a:54:f8:4c:bd:56:4f:d8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7 Validity Not Before: Dec 16 04:00:52 2025 GMT Not After : Dec 17 04:00:52 2025 GMT Subject: CN=cb661926aaaf3c507a17d9ad5859ef3d6ddce57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c2:84:fe:f4:5c:30:90:68:3d:af:e7:cc:c6: 9d:e1:3c:66:26:2a:b6:22:88:4a:9f:75:cb:bf:f2: 47:12:17:8a:7e:0a:e6:69:30:9a:57:80:ec:36:64: 40:6f:e9:de:35:5a:52:a1:d2:d8:b0:66:31:85:08: fa:e6:63:66:dd:c2:07:da:e0:51:7d:b8:a9:12:5c: f6:29:a4:75:97:c1:5c:cb:b0:b7:cf:42:53:93:2d: ad:f5:00:ea:39:59:2e:b0:70:fa:81:5f:38:5a:d1: 76:4b:aa:c5:37:0e:62:db:55:a7:42:00:a3:a3:13: 07:27:76:c1:87:e1:73:7c:b0:4b:4f:26:ae:74:b9: 0b:28:3c:ce:8f:c8:30:d4:f4:a3:f8:d5:1f:ab:9e: 73:5a:ce:b7:bc:de:c4:30:0e:d4:00:da:0c:c4:3b: bf:3e:90:5d:4a:9f:78:9b:30:91:06:08:8c:47:e2: 52:94:27:0a:c7:d0:37:8d:16:3d:53:90:62:41:11: ba:b0:fa:2f:d0:0f:09:9d:5e:42:03:69:0d:3b:ed: 48:e0:a4:3b:df:f7:94:c1:fe:81:7c:98:3d:9b:df: 7a:17:3f:c9:86:99:4b:48:d6:ae:bc:91:a9:b3:89: 8f:69:df:2e:df:9e:99:a3:1a:4a:27:26:c1:fb:37: a3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:66:19:26:AA:AF:3C:50:7A:17:D9:AD:58:59:EF:3D:6D:DC:E5:7C X509v3 Authority Key Identifier: keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f0:25:70:e3:e2:c5:09:92:f9:e1:99:12:3b:fe:c6:db:d1: b8:22:5e:ef:d8:c4:7a:6b:02:44:a9:ca:f9:12:5e:fd:5c:5c: 40:b9:e5:5b:0d:45:79:92:23:b3:4e:e3:2f:e2:a5:6c:81:93: c4:a8:20:9e:df:5f:26:ec:42:78:65:52:11:f8:02:92:56:cc: d8:8a:50:fd:7d:c0:b5:ed:21:d6:5c:1a:d4:34:ec:c3:5f:63: cf:b8:d1:7c:e3:77:b6:7a:0f:a8:44:a6:58:31:1c:29:9a:f0: b5:22:0c:cb:2b:53:6b:fc:43:e4:26:0d:fa:30:d2:74:1c:83: f1:cc:2d:b9:87:0f:e7:14:0b:4d:65:c2:76:95:ff:ab:3f:14: f2:ff:9d:06:9b:ab:e7:88:66:52:91:35:7f:f8:49:f4:29:79: 9b:ca:c5:1b:76:a3:b7:8c:37:e8:c3:35:77:50:b7:94:4a:3f: 5b:c0:5d:a1:fc:50:14:e0:8b:62:7a:a8:84:e4:cc:26:15:70: 17:3c:54:22:55:cb:30:dc:94:f2:cf:de:f1:7e:c3:5b:f7:ef: d5:b2:66:9d:23:86:7e:d5:9a:20:fe:6a:7e:3e:a6:0c:b7:73: 39:b7:1c:70:ac:f2:fa:11:cb:62:47:4c:62:98:7f:f2:eb:f4: f4:72:9c:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUXCIWldZSlT4TL1WT9gPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZjQxYWUwNzc5ZTM3ZGVmYzY5YjJhNWIwZjdhYjhmZDQw Y2QzZTcwHhcNMjUxMjE2MDQwMDUyWhcNMjUxMjE3MDQwMDUyWjAzMTEwLwYDVQQD EyhjYjY2MTkyNmFhYWYzYzUwN2ExN2Q5YWQ1ODU5ZWYzZDZkZGNlNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cKE/vRcMJBoPa/nzMad4TxmJiq2 IohKn3XLv/JHEheKfgrmaTCaV4DsNmRAb+neNVpSodLYsGYxhQj65mNm3cIH2uBR fbipElz2KaR1l8Fcy7C3z0JTky2t9QDqOVkusHD6gV84WtF2S6rFNw5i21WnQgCj oxMHJ3bBh+FzfLBLTyaudLkLKDzOj8gw1PSj+NUfq55zWs63vN7EMA7UANoMxDu/ PpBdSp94mzCRBgiMR+JSlCcKx9A3jRY9U5BiQRG6sPov0A8JnV5CA2kNO+1I4KQ7 3/eUwf6BfJg9m996Fz/JhplLSNauvJGps4mPad8u356ZoxpKJybB+zej3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtmGSaqrzxQehfZrVhZ7z1t3OV8MB8GA1UdIwQY MBaAFIf0GuB3njfe/GmypbD3q4/UDNPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYt YzQzYWIyYTEyZDU1LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYtYzQzYWIyYTEyZDU1 LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfAlcOPi xQmS+eGZEjv+xtvRuCJe79jEemsCRKnK+RJe/VxcQLnlWw1FeZIjs07jL+KlbIGT xKggnt9fJuxCeGVSEfgCklbM2IpQ/X3Ate0h1lwa1DTsw19jz7jRfON3tnoPqESm WDEcKZrwtSIMyytTa/xD5CYN+jDSdByD8cwtuYcP5xQLTWXCdpX/qz8U8v+dBpur 54hmUpE1f/hJ9Cl5m8rFG3ajt4w36MM1d1C3lEo/W8BdofxQFOCLYnqohOTMJhVw FzxUIlXLMNyU8s/e8X7DW/fv1bJmnSOGftWaIP5qfj6mDLdzObcccKzy+hHLYkdM Yph/8uv09HKc0g== -----END CERTIFICATE-----Generated at Tue Dec 16 07:26:33 2025 by rpki-client