This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json) Hash identifier: S8qGJe+b1dNA9tCnjnJz4qEs4xv7sRBdMIaDmaFRGcg= Subject key identifier: AC:9E:29:CD:DE:00:D1:DB:B2:7E:E7:04:13:EC:06:12:83:91:BC:15 Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea Certificate serial: 019B3CEBB9549FB76B795A4127094D91BBCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft Manifest number: 09E8 Signing time: Sat 20 Dec 2025 18:00:39 +0000 Manifest this update: Sat 20 Dec 2025 18:00:39 +0000 Manifest next update: Sun 21 Dec 2025 18:00:39 +0000 Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: ZcBFrP6KDnCLNQ0TtAZzUViwq2/B/RhUvSj8j63Fcf8=) 2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:b9:54:9f:b7:6b:79:5a:41:27:09:4d:91:bb:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea Validity Not Before: Dec 20 18:00:39 2025 GMT Not After : Dec 21 18:00:39 2025 GMT Subject: CN=ac9e29cdde00d1dbb27ee70413ec06128391bc15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:41:35:a8:ec:88:1b:49:e0:90:c6:71:28:9d: 8a:d4:ef:80:2b:02:cb:13:97:1b:80:d2:00:5e:79: de:f8:ca:39:99:e0:c9:bc:9a:15:a1:71:2b:47:8a: b5:95:f3:a1:e8:2f:8c:ae:b5:fa:d0:7b:06:d5:87: ad:d9:c9:cc:3f:38:6d:12:e3:7c:db:bd:48:36:03: bb:37:37:6a:7b:cd:ce:c8:c4:94:7b:27:4c:71:03: 30:f6:a8:6f:38:11:c4:fc:da:92:bf:71:d6:f4:e8: 57:6b:35:50:a7:8c:b2:b8:cb:3a:d4:96:f8:ed:e6: fa:68:4d:d9:40:f6:a6:52:bf:5d:70:17:cd:03:92: f2:66:96:88:5a:e9:fe:7a:24:1f:b1:87:ae:9b:18: c4:91:64:99:2a:73:f3:de:a9:51:64:47:b0:c2:4d: 96:aa:bd:65:ff:40:63:c8:b6:0c:0c:e3:63:43:fb: d5:9d:a2:35:04:4e:1e:1f:7a:a3:bc:8e:f6:f7:cf: ae:4a:fc:6a:78:5b:c8:36:10:cc:a7:a3:3a:d4:f7: 92:47:67:c7:4e:19:d1:5f:6f:81:ac:78:33:2b:97: c7:2e:eb:7e:11:41:02:2f:aa:df:7c:a0:98:63:84: 3c:2d:b5:3c:e3:da:f9:0b:ed:e2:6b:e8:c5:e5:69: 18:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9E:29:CD:DE:00:D1:DB:B2:7E:E7:04:13:EC:06:12:83:91:BC:15 X509v3 Authority Key Identifier: keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:52:bb:a7:d9:d7:99:73:da:b5:ad:19:4d:39:c8:5d:b8:72: 1f:af:d7:82:7b:37:d2:03:a2:82:10:f1:67:23:f0:e3:f3:df: 26:76:77:4c:78:fa:35:6a:a7:3a:de:be:48:6e:00:1d:81:6b: c2:28:ae:0d:34:cb:69:fd:80:e2:3b:e5:64:7c:16:3d:d1:7c: 73:ad:fc:18:1c:1a:ca:63:3c:3e:1b:57:96:a9:73:b7:2d:9e: 29:c3:4a:5e:27:ad:27:ca:3e:aa:d0:48:72:b3:10:b6:55:8b: 48:dd:33:d2:4d:81:f5:c6:c1:42:45:94:14:62:e1:ea:0e:b1: 99:aa:7a:c9:7a:d0:44:df:67:c6:4b:1c:01:f7:15:89:7f:47: 51:ca:14:1a:b4:45:82:d1:e1:31:f9:32:0b:95:c4:19:f5:08: f1:35:2f:13:4f:dd:6f:e6:99:b7:20:0d:eb:6b:f0:0d:be:84: 0c:04:6f:7a:70:0f:7e:fc:d1:84:e9:3b:54:67:42:99:1d:4f: ba:50:d9:89:c9:0b:96:f2:3f:88:0a:9d:03:02:11:2a:77:b4: 19:4b:c4:f7:e6:3e:03:4f:c3:3b:04:62:c4:a1:6f:ca:2a:f7: 57:07:f8:78:4c:dd:33:1f:05:87:84:d4:1f:77:a4:4f:5e:15: f1:8d:5c:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs867lUn7dreVpBJwlNkbvLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZGMxYTliZmZhMmNmMTVhN2Q4MDk5YzhhM2MzMTdjZTA3 ZGI1ZWEwHhcNMjUxMjIwMTgwMDM5WhcNMjUxMjIxMTgwMDM5WjAzMTEwLwYDVQQD EyhhYzllMjljZGRlMDBkMWRiYjI3ZWU3MDQxM2VjMDYxMjgzOTFiYzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEE1qOyIG0ngkMZxKJ2K1O+AKwLL E5cbgNIAXnne+Mo5meDJvJoVoXErR4q1lfOh6C+MrrX60HsG1Yet2cnMPzhtEuN8 271INgO7Nzdqe83OyMSUeydMcQMw9qhvOBHE/NqSv3HW9OhXazVQp4yyuMs61Jb4 7eb6aE3ZQPamUr9dcBfNA5LyZpaIWun+eiQfsYeumxjEkWSZKnPz3qlRZEewwk2W qr1l/0BjyLYMDONjQ/vVnaI1BE4eH3qjvI7298+uSvxqeFvINhDMp6M61PeSR2fH ThnRX2+BrHgzK5fHLut+EUECL6rffKCYY4Q8LbU849r5C+3ia+jF5WkYaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyeKc3eANHbsn7nBBPsBhKDkbwVMB8GA1UdIwQY MBaAFIfcGpv/os8Vp9gJnIo8MXzgfbXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMt NDlhZDk2ODRiMjE3LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMtNDlhZDk2ODRiMjE3 LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFK7p9nX mXPata0ZTTnIXbhyH6/Xgns30gOighDxZyPw4/PfJnZ3THj6NWqnOt6+SG4AHYFr wiiuDTTLaf2A4jvlZHwWPdF8c638GBwaymM8PhtXlqlzty2eKcNKXietJ8o+qtBI crMQtlWLSN0z0k2B9cbBQkWUFGLh6g6xmap6yXrQRN9nxkscAfcViX9HUcoUGrRF gtHhMfkyC5XEGfUI8TUvE0/db+aZtyAN62vwDb6EDARvenAPfvzRhOk7VGdCmR1P ulDZickLlvI/iAqdAwIRKne0GUvE9+Y+A0/DOwRixKFvyir3Vwf4eEzdMx8Fh4TU H3ekT14V8Y1crw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:04:17 2025 by rpki-client