This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json) Hash identifier: AMY63zUEPHfsnZJUiDtk0EbUCuLOY+2stBuQ3EORzfc= Subject key identifier: 9E:11:E6:25:57:E3:81:10:16:66:56:48:29:68:EA:6F:53:48:AA:3B Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21 Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421 Certificate serial: 019B108108D037EA1C43AE5AEAA72D4D98E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft Manifest number: 033C Signing time: Fri 12 Dec 2025 03:00:50 +0000 Manifest this update: Fri 12 Dec 2025 03:00:50 +0000 Manifest next update: Sat 13 Dec 2025 03:00:50 +0000 Files and hashes: 1: f87u7kBdxRsndUbHafpkZkro0IU.roa (hash: zdIYsmtX/Gy6oFoVgbZrLwhX3d3gff2hTbpByuS7zVc=) 2: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: s9jWBniveBf+sK6qzKSR+bjTmGVCbrPZohV15bEhBjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:08:d0:37:ea:1c:43:ae:5a:ea:a7:2d:4d:98:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421 Validity Not Before: Dec 12 03:00:50 2025 GMT Not After : Dec 13 03:00:50 2025 GMT Subject: CN=9e11e62557e38110166656482968ea6f5348aa3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:89:13:13:27:f3:8b:1d:31:80:30:1e:21:8e: 86:ef:09:ee:6f:be:1a:93:05:0e:b3:45:a7:92:92: 24:a2:4f:1c:ee:c4:72:36:9f:92:2c:30:e5:b3:9f: d7:a5:1e:47:17:46:b3:a9:18:c1:9d:d9:f3:b0:89: 5d:df:fb:55:99:05:e4:35:81:b4:f7:37:e9:53:a8: b6:7b:ee:18:15:9f:44:7c:3e:f6:84:b4:1b:5a:5a: 50:9c:9f:bc:84:a3:ba:42:af:ad:36:af:fc:4d:e4: f0:0a:cc:d1:8b:7a:90:ea:7a:f3:ac:c4:95:05:46: 30:4c:f8:40:14:c4:b3:07:80:85:1b:67:da:cd:aa: 13:e0:e3:f4:73:e1:24:bb:8b:9b:08:94:59:c8:10: 10:e2:7d:a2:49:92:a8:e2:98:b3:3d:51:4d:a1:33: 8b:53:0f:5f:88:7a:26:c3:d5:68:64:17:9b:4a:92: a4:24:89:cf:bc:d9:d7:9f:fc:e3:3e:44:9c:71:1b: 91:97:aa:5e:9e:4a:6a:36:a2:05:7d:b0:51:95:de: f7:02:b6:04:25:62:d9:80:20:72:fd:58:56:ef:43: 81:9a:85:8b:f9:9f:a7:7a:b6:7c:fd:ca:a8:fe:6d: 65:7d:af:6e:32:fa:f7:0e:ee:ee:e8:35:0e:6f:4f: 46:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:11:E6:25:57:E3:81:10:16:66:56:48:29:68:EA:6F:53:48:AA:3B X509v3 Authority Key Identifier: keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e1:11:c9:b2:34:3c:35:f5:26:32:ed:9d:6e:32:3d:0f:f3: 29:28:22:50:e8:a5:a0:b2:c2:49:d0:99:50:61:f9:6a:38:13: 69:b8:5e:4b:ef:e4:d3:c8:db:ee:58:85:08:f7:7d:5e:c9:0c: 20:7f:64:51:7e:c9:d4:65:24:7d:df:f4:f5:e7:31:91:ab:94: a8:0c:8b:f9:80:cd:83:1d:39:01:56:4b:1e:51:36:66:4e:d2: 01:84:60:8f:61:c5:e2:e7:1b:71:70:65:05:c5:02:7b:bb:86: 5f:eb:bc:bd:c0:69:71:13:e2:61:e2:28:8e:9a:6b:b6:e0:42: 63:41:e9:51:1d:10:f1:38:3f:a4:39:40:c0:90:92:c1:89:b7: 31:5c:29:40:b7:12:79:33:ac:e4:5b:b1:58:34:d2:ce:4e:3c: 1c:29:ad:0e:72:de:37:66:4e:1a:e0:45:a9:d1:17:f4:87:84: 18:a8:da:40:47:76:23:4c:1c:2c:e3:f5:4e:44:d9:19:12:1e: 90:d6:87:75:ac:88:a4:21:cd:b9:cb:97:6b:be:ca:f4:93:e3: 76:60:ea:53:7f:bf:28:da:83:43:58:8e:85:86:57:0d:81:da: 7d:92:58:da:de:c8:0f:d2:14:88:e3:39:f5:88:77:16:de:cd: cf:a0:b3:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgQjQN+ocQ65a6qctTZjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZWI5N2Y5OGM4ODJlZjQyNmIzNjY2MzQxMWQ0MDgxNDMw YWM0MjEwHhcNMjUxMjEyMDMwMDUwWhcNMjUxMjEzMDMwMDUwWjAzMTEwLwYDVQQD Eyg5ZTExZTYyNTU3ZTM4MTEwMTY2NjU2NDgyOTY4ZWE2ZjUzNDhhYTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IkTEyfzix0xgDAeIY6G7wnub74a kwUOs0WnkpIkok8c7sRyNp+SLDDls5/XpR5HF0azqRjBndnzsIld3/tVmQXkNYG0 9zfpU6i2e+4YFZ9EfD72hLQbWlpQnJ+8hKO6Qq+tNq/8TeTwCszRi3qQ6nrzrMSV BUYwTPhAFMSzB4CFG2fazaoT4OP0c+Eku4ubCJRZyBAQ4n2iSZKo4pizPVFNoTOL Uw9fiHomw9VoZBebSpKkJInPvNnXn/zjPkSccRuRl6penkpqNqIFfbBRld73ArYE JWLZgCBy/VhW70OBmoWL+Z+nerZ8/cqo/m1lfa9uMvr3Du7u6DUOb09GfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4R5iVX44EQFmZWSClo6m9TSKo7MB8GA1UdIwQY MBaAFIfrl/mMiC70JrNmY0EdQIFDCsQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjkt M2Y2ZDdkN2VhMWIwLzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kZWE4ZjQtZDY4OC00NTI0LWFmMjktM2Y2ZDdkN2VhMWIw LzEvaC11WC1ZeUlMdlFtczJaalFSMUFnVU1LeENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOERybI0 PDX1JjLtnW4yPQ/zKSgiUOiloLLCSdCZUGH5ajgTabheS+/k08jb7liFCPd9XskM IH9kUX7J1GUkfd/09ecxkauUqAyL+YDNgx05AVZLHlE2Zk7SAYRgj2HF4ucbcXBl BcUCe7uGX+u8vcBpcRPiYeIojpprtuBCY0HpUR0Q8Tg/pDlAwJCSwYm3MVwpQLcS eTOs5FuxWDTSzk48HCmtDnLeN2ZOGuBFqdEX9IeEGKjaQEd2I0wcLOP1TkTZGRIe kNaHdayIpCHNucuXa77K9JPjdmDqU3+/KNqDQ1iOhYZXDYHafZJY2t7ID9IUiOM5 9Yh3Ft7Nz6CzjA== -----END CERTIFICATE-----Generated at Fri Dec 12 07:02:12 2025 by rpki-client