This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json) Hash identifier: kh33IBNmCZW3KY9LxNt13i3Mztwc1gmnzLOR1AH3weg= Subject key identifier: 54:AA:D0:38:68:F2:1F:31:98:0B:5A:8C:51:C5:D0:6C:E3:7A:B4:D8 Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5 Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5 Certificate serial: 019B5A520969EECB291E90DE0A1CF6A9413C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft Manifest number: 1A Signing time: Fri 26 Dec 2025 11:01:24 +0000 Manifest this update: Fri 26 Dec 2025 11:01:24 +0000 Manifest next update: Sat 27 Dec 2025 11:01:24 +0000 Files and hashes: 1: ddlEpIhToBBmUqKyBNsnU2oYOtY.roa (hash: id5h4OEOXQV86K+jo42aa+Zw+KrBlkfB4exB025ocOM=) 2: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: S+wa6NAPvsCLr9tIxU0LIBEzcizg7PLjFGUo+gAHEgI=) 3: zHLIRVvP3DMXL_pxYZ-vISEw8PA.roa (hash: rjexzqv/p+4z8m2gvPLKL3b1mTiDMdeytglSUbt0/vU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:09:69:ee:cb:29:1e:90:de:0a:1c:f6:a9:41:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5 Validity Not Before: Dec 26 11:01:24 2025 GMT Not After : Dec 27 11:01:24 2025 GMT Subject: CN=54aad03868f21f31980b5a8c51c5d06ce37ab4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:92:a7:67:43:01:e6:41:e8:0e:6f:b5:75: 61:a7:8d:79:24:19:4a:a0:1e:c7:64:3e:aa:20:b5: 41:b7:62:e2:85:fb:60:dc:e9:73:49:6d:d4:69:53: 88:24:c8:08:9c:44:8b:b8:8a:4b:4c:a5:6d:75:14: 06:d5:98:6e:11:74:34:98:a2:88:7a:36:4c:56:24: b7:5a:26:8c:53:e3:d9:ff:cc:4b:98:08:c8:2e:31: ad:78:a4:ef:6b:12:cd:30:b9:07:f6:1f:e2:67:80: 54:23:3b:e5:d0:ab:27:df:13:a2:f6:b1:fd:a9:df: ee:47:05:9d:f5:de:ff:50:fc:e0:66:86:ad:5e:94: ea:62:74:93:6c:91:fa:e0:6c:f4:f8:dd:2c:a9:4c: f1:58:1e:e2:da:f8:28:17:c7:2a:23:db:19:b6:7b: 4e:2e:c8:58:f2:f7:74:3d:36:6a:03:cf:5a:4e:7e: 12:1f:be:97:73:6f:81:00:6f:9f:04:52:36:53:8e: 54:bf:00:43:a7:11:ba:eb:a3:bf:a4:8d:6e:2b:b8: fe:c0:01:ad:54:81:a5:4a:d5:7e:6e:c0:ea:e1:07: 94:96:cc:9d:c2:90:1a:54:b9:6c:72:71:93:62:75: 09:37:7f:92:b6:8b:5f:3c:01:b0:36:b6:b0:08:00: 91:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AA:D0:38:68:F2:1F:31:98:0B:5A:8C:51:C5:D0:6C:E3:7A:B4:D8 X509v3 Authority Key Identifier: keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:28:58:40:c3:9b:cb:30:f9:d4:c4:b1:ee:45:62:d9:72:bb: 29:57:ec:93:1b:be:3c:22:17:f1:21:ee:c0:04:e4:95:41:8b: b6:c8:bf:d2:9b:bf:cd:37:da:94:28:f5:da:d7:9b:96:13:c4: 05:b2:94:ef:a6:ff:6e:3a:89:49:61:d4:c1:7f:f2:ea:ff:6a: 62:9d:20:89:50:3c:57:16:94:60:71:bf:c8:c6:7d:02:5d:e8: 85:67:8c:5c:2c:cd:90:57:13:64:9c:b5:f7:b6:84:b2:86:1c: ef:92:5a:61:bb:35:24:3d:68:eb:85:f1:cc:7b:99:f0:7e:aa: 39:44:27:a2:49:cc:3c:a1:2f:2e:ba:ba:5f:25:6b:2d:25:bb: 1d:6b:fa:ea:3e:01:03:37:48:d3:76:92:f2:50:65:53:db:94: b5:74:29:61:77:e2:78:75:74:4e:af:9a:42:9d:d2:4b:43:52: b4:ca:31:91:5b:70:28:de:b7:23:ce:6e:05:ef:4f:9a:71:64: be:9b:af:e1:36:d1:f1:ab:ee:da:da:c3:1f:35:f1:29:38:e8: 22:34:fe:c7:8b:62:1d:e3:f3:64:d6:e0:06:03:d1:1f:ee:fe: cf:12:50:a6:35:58:27:65:02:b4:65:a3:57:90:e1:2c:31:90: 49:a5:c8:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUglp7sspHpDeChz2qUE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTRkNTY0MzYwYTUyMWRiNTk4YWVlNmU2YTJmOGQ2Njky MWI2YzUwHhcNMjUxMjI2MTEwMTI0WhcNMjUxMjI3MTEwMTI0WjAzMTEwLwYDVQQD Eyg1NGFhZDAzODY4ZjIxZjMxOTgwYjVhOGM1MWM1ZDA2Y2UzN2FiNGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJeSp2dDAeZB6A5vtXVhp415JBlK oB7HZD6qILVBt2Lihftg3OlzSW3UaVOIJMgInESLuIpLTKVtdRQG1ZhuEXQ0mKKI ejZMViS3WiaMU+PZ/8xLmAjILjGteKTvaxLNMLkH9h/iZ4BUIzvl0Ksn3xOi9rH9 qd/uRwWd9d7/UPzgZoatXpTqYnSTbJH64Gz0+N0sqUzxWB7i2vgoF8cqI9sZtntO LshY8vd0PTZqA89aTn4SH76Xc2+BAG+fBFI2U45UvwBDpxG666O/pI1uK7j+wAGt VIGlStV+bsDq4QeUlsydwpAaVLlscnGTYnUJN3+StotfPAGwNrawCACRSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSq0Dho8h8xmAtajFHF0GzjerTYMB8GA1UdIwQY MBaAFIeU1WQ2ClIdtZiu5uai+NZpIbbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jYTE2NjctZGU4Zi00NWRjLTkwMDct NWFmZTBjNDJjZjc3LzEvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jYTE2NjctZGU4Zi00NWRjLTkwMDctNWFmZTBjNDJjZjc3 LzEvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxihYQMOb yzD51MSx7kVi2XK7KVfskxu+PCIX8SHuwATklUGLtsi/0pu/zTfalCj12teblhPE BbKU76b/bjqJSWHUwX/y6v9qYp0giVA8VxaUYHG/yMZ9Al3ohWeMXCzNkFcTZJy1 97aEsoYc75JaYbs1JD1o64XxzHuZ8H6qOUQnoknMPKEvLrq6XyVrLSW7HWv66j4B AzdI03aS8lBlU9uUtXQpYXfieHV0Tq+aQp3SS0NStMoxkVtwKN63I85uBe9PmnFk vpuv4TbR8avu2trDHzXxKTjoIjT+x4tiHePzZNbgBgPRH+7+zxJQpjVYJ2UCtGWj V5DhLDGQSaXIxg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:12 2025 by rpki-client