This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft File: h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json) Hash identifier: gS44simq7dUw2etiovTfQnNPTHuW3596k2y3JeeQbuM= Subject key identifier: BE:D9:76:F9:83:C9:40:4E:10:AC:C6:F7:CF:9B:F8:A2:F0:38:B1:6D Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2 Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2 Certificate serial: 019B46946D7502BB45149CFB9612F7F15935 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft Manifest number: 141F Signing time: Mon 22 Dec 2025 15:01:30 +0000 Manifest this update: Mon 22 Dec 2025 15:01:30 +0000 Manifest next update: Tue 23 Dec 2025 15:01:30 +0000 Files and hashes: 1: Xaf_adaEk34l87Y0UzQQZjHD3uU.roa (hash: RtEuhMllYELC+PU6yqfyctqQo+07f0YVdbie5OODqqY=) 2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: UyKEd1eTeIlTTL0vu4WIJ+7vuvgkue3gtGAmX9wJbFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:6d:75:02:bb:45:14:9c:fb:96:12:f7:f1:59:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2 Validity Not Before: Dec 22 15:01:30 2025 GMT Not After : Dec 23 15:01:30 2025 GMT Subject: CN=bed976f983c9404e10acc6f7cf9bf8a2f038b16d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:8f:3a:42:68:16:76:12:92:44:5e:3d:82: cc:ba:ea:e5:98:d5:8a:00:c5:31:da:3a:10:6c:79: c4:5c:04:f6:4e:13:65:44:de:67:dc:ea:b4:96:fd: 6c:c9:3a:81:6c:fb:c8:40:79:10:dc:4e:73:a8:d6: bb:9f:77:57:f0:be:11:cd:69:ff:98:02:b8:d1:2b: 16:55:d1:9b:24:b7:5c:fa:f7:12:41:16:d2:0e:c9: 67:64:cf:93:64:08:74:7b:2d:5e:33:ac:50:c5:4f: 3f:30:c2:8c:66:2b:30:a3:f4:f4:3a:e2:fd:b6:58: 83:4a:ce:76:75:86:29:b0:3a:2e:a4:f1:8d:e8:62: a7:74:9e:58:b1:8f:c1:5a:d5:dd:54:38:31:8c:f0: fd:c8:e4:97:2f:73:ec:61:3b:f0:de:41:f6:fa:6d: 36:98:f2:32:c2:c0:6e:09:d3:42:af:ac:fe:7e:45: 90:33:9c:80:52:9d:63:ec:b6:c9:9e:af:54:ae:e9: c5:74:25:62:1d:e4:72:5c:b3:31:bb:db:34:47:4d: 51:d7:4b:2c:44:21:49:97:6b:69:58:31:9a:c5:7a: d8:df:71:29:03:3c:7a:fb:b8:04:a1:76:73:77:48: 2d:a0:68:67:df:a8:a9:48:4e:6a:82:26:eb:4c:76: 25:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D9:76:F9:83:C9:40:4E:10:AC:C6:F7:CF:9B:F8:A2:F0:38:B1:6D X509v3 Authority Key Identifier: keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:94:e1:43:aa:3e:71:90:d3:03:d8:00:d6:c7:3c:19:d7:a3: ab:9e:4c:64:8f:7e:20:1b:48:59:96:c0:eb:47:8e:f8:76:02: d7:14:68:8f:81:03:92:dc:d9:50:98:d9:de:81:05:fa:48:a7: 04:df:f9:a7:c8:b1:78:59:50:ba:ec:99:11:dd:8d:a0:f9:f9: 7c:b3:0e:7d:a1:68:45:58:e2:8d:0f:b8:3b:db:f6:58:55:d8: b6:30:fc:d3:b0:1f:ea:ba:cc:35:02:42:b6:6c:72:8f:c7:8a: 06:6e:23:86:ea:bd:16:fe:97:26:9e:95:44:06:7f:c4:ad:92: c5:54:2a:e0:10:50:08:db:dd:42:83:3f:d5:eb:b7:5f:13:b7: 8c:2a:61:1b:ad:56:ef:f3:25:f0:86:65:37:85:f6:6c:33:64: a1:98:31:de:7a:67:f5:c3:9d:f1:a8:63:08:e7:80:ad:e9:95: d8:e7:b8:a3:78:c7:2c:93:fe:4d:a2:ca:72:59:2c:26:ce:ed: 8a:52:de:2c:06:1b:7a:4e:4e:49:33:fb:20:05:5c:bc:da:e9: f8:45:75:b8:2d:01:e7:fd:83:53:43:a4:d3:9d:ee:c9:f8:b5: 6f:c2:dd:4e:14:62:cc:69:fe:04:e0:a6:1d:7e:84:9c:85:6d: 8a:93:32:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlG11ArtFFJz7lhL38Vk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTZiMWMzMWZkZGUyYmQ1ZTk4ZjhmYmI3Nzk4YWJjNDc0 OTNjZjIwHhcNMjUxMjIyMTUwMTMwWhcNMjUxMjIzMTUwMTMwWjAzMTEwLwYDVQQD EyhiZWQ5NzZmOTgzYzk0MDRlMTBhY2M2ZjdjZjliZjhhMmYwMzhiMTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiWPOkJoFnYSkkRePYLMuurlmNWK AMUx2joQbHnEXAT2ThNlRN5n3Oq0lv1syTqBbPvIQHkQ3E5zqNa7n3dX8L4RzWn/ mAK40SsWVdGbJLdc+vcSQRbSDslnZM+TZAh0ey1eM6xQxU8/MMKMZiswo/T0OuL9 tliDSs52dYYpsDoupPGN6GKndJ5YsY/BWtXdVDgxjPD9yOSXL3PsYTvw3kH2+m02 mPIywsBuCdNCr6z+fkWQM5yAUp1j7LbJnq9UrunFdCViHeRyXLMxu9s0R01R10ss RCFJl2tpWDGaxXrY33EpAzx6+7gEoXZzd0gtoGhn36ipSE5qgibrTHYlxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7ZdvmDyUBOEKzG98+b+KLwOLFtMB8GA1UdIwQY MBaAFIeWscMf3eK9Xpj4+7d5irxHSTzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVheHd4X2Q0cjFlbVBqN3QzbUt2RWRKUFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8yMzQzYTMtZDBmMi00ZThhLTg3ZDQt NGFlMzMwNmRhNzkzLzEvaDVheHd4X2Q0cjFlbVBqN3QzbUt2RWRKUFBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8yMzQzYTMtZDBmMi00ZThhLTg3ZDQtNGFlMzMwNmRhNzkz LzEvaDVheHd4X2Q0cjFlbVBqN3QzbUt2RWRKUFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZThQ6o+ cZDTA9gA1sc8Gdejq55MZI9+IBtIWZbA60eO+HYC1xRoj4EDktzZUJjZ3oEF+kin BN/5p8ixeFlQuuyZEd2NoPn5fLMOfaFoRVjijQ+4O9v2WFXYtjD807Af6rrMNQJC tmxyj8eKBm4jhuq9Fv6XJp6VRAZ/xK2SxVQq4BBQCNvdQoM/1eu3XxO3jCphG61W 7/Ml8IZlN4X2bDNkoZgx3npn9cOd8ahjCOeAremV2Oe4o3jHLJP+TaLKclksJs7t ilLeLAYbek5OSTP7IAVcvNrp+EV1uC0B5/2DU0Ok053uyfi1b8LdThRizGn+BOCm HX6EnIVtipMyRA== -----END CERTIFICATE-----Generated at Mon Dec 22 20:43:00 2025 by rpki-client