This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft File: h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json) Hash identifier: uPtX2qsZ9gMc5piOkzRYqC8MCWCaTNJmWDk3I78/1QA= Subject key identifier: F6:C0:89:0C:04:B3:36:57:68:73:01:7F:38:2B:D7:57:B7:F3:43:AE Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2 Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2 Certificate serial: 019B0E92D34015EB7B1AEEF6440027BD7999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft Manifest number: 1402 Signing time: Thu 11 Dec 2025 18:01:01 +0000 Manifest this update: Thu 11 Dec 2025 18:01:01 +0000 Manifest next update: Fri 12 Dec 2025 18:01:01 +0000 Files and hashes: 1: Xaf_adaEk34l87Y0UzQQZjHD3uU.roa (hash: RtEuhMllYELC+PU6yqfyctqQo+07f0YVdbie5OODqqY=) 2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: Gej9C6Hf6h07oPuqWdk2icybTpToK3BfaQU5z6dFShE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:d3:40:15:eb:7b:1a:ee:f6:44:00:27:bd:79:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2 Validity Not Before: Dec 11 18:01:01 2025 GMT Not After : Dec 12 18:01:01 2025 GMT Subject: CN=f6c0890c04b336576873017f382bd757b7f343ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:db:3c:92:2a:7a:fd:33:4a:2f:13:d9:7e:fb: 9d:25:c9:d7:00:20:6f:26:b6:18:74:df:3a:03:8f: 88:04:6d:12:a4:d4:93:16:3c:2f:13:c3:b8:08:82: fa:7e:b9:29:d5:17:c0:82:15:e3:2c:e3:3f:81:81: 00:c7:65:d0:d9:ab:54:00:88:11:65:33:1c:8d:f1: 44:9a:2b:e5:ed:22:fa:2a:da:f6:54:64:87:d0:a9: b8:77:b3:97:8b:03:eb:79:07:3c:cc:b5:31:78:ef: a3:63:56:65:2e:12:1b:18:1d:26:43:f1:23:3c:25: 4c:e0:f7:a3:42:06:06:f0:db:fa:eb:dc:63:46:f6: ce:80:09:a2:7a:c5:d1:4b:10:01:23:7f:4c:5c:01: cb:a7:f5:b1:bc:ab:75:b2:c4:8d:1a:0e:d7:9c:97: 7a:66:c8:8c:8f:ea:74:49:43:8d:81:99:73:50:68: 69:cb:2a:8d:4a:8c:cf:47:8a:85:5c:9f:3f:fd:5c: d5:73:4f:61:c9:ed:1c:f4:4a:ec:07:74:49:44:c3: 6a:57:66:0f:15:c8:1f:a2:48:de:9e:22:49:3a:24: 42:16:be:e9:94:7e:09:a9:83:a0:34:a2:21:33:0a: 7b:a6:07:59:52:04:e5:36:f1:93:14:b6:ef:81:fa: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C0:89:0C:04:B3:36:57:68:73:01:7F:38:2B:D7:57:B7:F3:43:AE X509v3 Authority Key Identifier: keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:54:d6:18:36:0f:d9:6a:92:25:59:ae:2f:1f:68:30:7c:16: 80:9c:66:45:0f:ae:96:3c:66:d8:45:a7:df:18:88:ec:e1:de: 89:cb:5f:b4:84:8d:36:f0:02:41:57:56:35:48:50:39:a7:c7: 15:0f:d4:e0:c4:f8:07:47:39:67:9a:30:d2:53:ff:47:3d:30: c3:2c:8a:eb:17:3f:90:b5:b2:bf:2b:81:d9:f7:4c:b0:8c:d7: c3:17:57:75:11:64:50:17:ca:a6:a5:93:07:9b:e9:6d:8a:fe: c1:46:7a:2c:7e:4e:7c:24:09:ad:b3:95:27:d7:4e:47:ec:eb: 85:f7:c4:3a:4d:8f:d9:35:04:6f:c4:8c:35:8f:8d:15:09:04: 73:82:24:38:2c:84:4b:74:fa:b6:be:02:89:4f:a1:96:5f:05: ff:04:2e:16:84:a4:53:5b:1a:7f:f7:c0:d2:ab:71:dc:7f:15: 48:1b:d7:0f:b6:a2:48:9b:b7:49:27:e5:d7:02:52:40:59:bc: 81:2c:58:34:7a:61:4b:26:f8:40:fe:84:33:23:45:7f:96:1f: 4a:68:e0:07:65:2b:67:d4:b5:15:ee:80:1f:e2:d3:ed:9b:34: e1:34:46:fc:59:52:a9:f7:b3:e1:04:8c:6e:70:7d:b6:54:24: a3:2c:81:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOktNAFet7Gu72RAAnvXmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTZiMWMzMWZkZGUyYmQ1ZTk4ZjhmYmI3Nzk4YWJjNDc0 OTNjZjIwHhcNMjUxMjExMTgwMTAxWhcNMjUxMjEyMTgwMTAxWjAzMTEwLwYDVQQD EyhmNmMwODkwYzA0YjMzNjU3Njg3MzAxN2YzODJiZDc1N2I3ZjM0M2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9s8kip6/TNKLxPZfvudJcnXACBv JrYYdN86A4+IBG0SpNSTFjwvE8O4CIL6frkp1RfAghXjLOM/gYEAx2XQ2atUAIgR ZTMcjfFEmivl7SL6Ktr2VGSH0Km4d7OXiwPreQc8zLUxeO+jY1ZlLhIbGB0mQ/Ej PCVM4PejQgYG8Nv669xjRvbOgAmiesXRSxABI39MXAHLp/WxvKt1ssSNGg7XnJd6 ZsiMj+p0SUONgZlzUGhpyyqNSozPR4qFXJ8//VzVc09hye0c9ErsB3RJRMNqV2YP FcgfokjeniJJOiRCFr7plH4JqYOgNKIhMwp7pgdZUgTlNvGTFLbvgfpaCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbAiQwEszZXaHMBfzgr11e380OuMB8GA1UdIwQY MBaAFIeWscMf3eK9Xpj4+7d5irxHSTzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVheHd4X2Q0cjFlbVBqN3QzbUt2RWRKUFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8yMzQzYTMtZDBmMi00ZThhLTg3ZDQt NGFlMzMwNmRhNzkzLzEvaDVheHd4X2Q0cjFlbVBqN3QzbUt2RWRKUFBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8yMzQzYTMtZDBmMi00ZThhLTg3ZDQtNGFlMzMwNmRhNzkz LzEvaDVheHd4X2Q0cjFlbVBqN3QzbUt2RWRKUFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1TWGDYP 2WqSJVmuLx9oMHwWgJxmRQ+uljxm2EWn3xiI7OHeictftISNNvACQVdWNUhQOafH FQ/U4MT4B0c5Z5ow0lP/Rz0wwyyK6xc/kLWyvyuB2fdMsIzXwxdXdRFkUBfKpqWT B5vpbYr+wUZ6LH5OfCQJrbOVJ9dOR+zrhffEOk2P2TUEb8SMNY+NFQkEc4IkOCyE S3T6tr4CiU+hll8F/wQuFoSkU1saf/fA0qtx3H8VSBvXD7aiSJu3SSfl1wJSQFm8 gSxYNHphSyb4QP6EMyNFf5YfSmjgB2UrZ9S1Fe6AH+LT7Zs04TRG/FlSqfez4QSM bnB9tlQkoyyBrA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:26:22 2025 by rpki-client