This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft File: h5Q8uG46cDgTd4-reQ1l8NohYVo.mft (raw, json) Hash identifier: BlnJVP+c9wj9hj9WuHGDVsPMSCzvrjh7FvCatr1jIEo= Subject key identifier: 7F:B1:2F:D7:53:9D:5B:78:29:1A:87:D0:6F:C5:77:B9:76:9E:A8:D6 Authority key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A Certificate issuer: /CN=87943cb86e3a703813778fab790d65f0da21615a Certificate serial: 019B35326631044C3736B836ED69EC2B6C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft Manifest number: 178B Signing time: Fri 19 Dec 2025 06:00:53 +0000 Manifest this update: Fri 19 Dec 2025 06:00:53 +0000 Manifest next update: Sat 20 Dec 2025 06:00:53 +0000 Files and hashes: 1: UyiCJXS5zLJCJ-mb2r3uZMMtApg.roa (hash: 6+o4TOXaHYgYpVjpt7E7at5geUDl0m5s/WhQVOEUlU0=) 2: h5Q8uG46cDgTd4-reQ1l8NohYVo.crl (hash: rgRZ/hv+QzNVcEy+EeeiKNyE/GN8BzLgMSabtYu79lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:66:31:04:4c:37:36:b8:36:ed:69:ec:2b:6c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87943cb86e3a703813778fab790d65f0da21615a Validity Not Before: Dec 19 06:00:53 2025 GMT Not After : Dec 20 06:00:53 2025 GMT Subject: CN=7fb12fd7539d5b78291a87d06fc577b9769ea8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7f:77:52:a0:cd:d1:d9:28:9b:b6:c0:59:a6: 3b:a0:f1:4e:a6:92:06:45:57:92:50:ae:a3:41:3b: c8:a0:92:8a:10:e7:61:63:c5:28:6f:90:ca:cc:bd: e0:b0:10:48:97:3a:26:ed:c3:8d:6f:ce:10:f8:9f: 81:a4:04:71:85:12:9e:8a:45:9e:57:f1:f7:7f:7f: d0:14:5f:8f:9d:b3:60:87:2e:35:3c:98:70:84:b5: 46:b7:3e:60:79:bf:3c:4f:00:1c:45:f1:c1:5e:35: 80:f1:dc:6d:6f:99:f0:ec:a7:cc:88:b2:9f:55:eb: c1:8c:d9:32:00:eb:60:72:f3:e7:a4:d2:c8:50:e1: be:2e:4a:cf:a2:2c:96:d1:7d:92:d0:18:50:4d:50: 09:da:a9:66:e5:3a:25:11:2d:5b:22:8a:37:46:e1: ce:41:0a:8f:80:01:f7:43:06:30:81:af:9b:b2:b7: 0f:3f:57:34:3d:2e:1f:ce:ca:6f:fa:ac:6d:f1:e8: 1c:11:fc:06:0b:ea:1b:da:8b:7d:2a:4e:7b:73:91: 67:01:18:c0:d0:a0:5b:78:56:2a:4e:d5:ca:89:ac: 34:1d:76:de:9a:5a:70:9a:36:f6:49:f0:e7:35:95: e8:0d:bd:d5:cf:56:9e:e7:20:80:4c:bb:71:c8:ec: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B1:2F:D7:53:9D:5B:78:29:1A:87:D0:6F:C5:77:B9:76:9E:A8:D6 X509v3 Authority Key Identifier: keyid:87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ed:c4:bd:6a:37:a0:03:66:0c:c7:94:1b:80:b0:f1:a6:db: e9:78:38:34:2d:e0:c7:99:2e:e9:69:8e:13:39:64:1e:70:6d: ce:5c:39:cf:49:c8:f6:a2:0e:69:b7:56:51:f1:14:d2:05:5e: 2b:2e:2b:f6:e7:38:79:99:ae:bc:72:97:f6:a8:0d:86:79:25: 89:0a:75:1e:bf:54:2c:22:2c:94:74:04:b2:a3:c6:59:19:e3: 57:dd:c5:9d:69:de:6f:9f:09:cf:ad:b2:7a:f3:1b:34:86:42: bc:54:14:4d:b3:6d:02:ae:d0:fe:db:a2:b2:8f:da:ff:1b:b7: 68:e5:a4:87:83:d1:24:dc:68:a7:c3:65:41:b8:80:c1:c0:2f: b3:fb:45:eb:b6:7c:bc:e2:b1:79:7e:20:ce:b3:74:c7:43:a0: 09:64:f8:0c:12:32:75:e3:34:5c:d8:5c:cb:ff:d6:39:85:57: 2f:61:97:fc:a2:ea:27:a7:1c:4d:38:b7:f3:aa:66:37:84:60: 88:10:2d:92:12:68:3b:f8:2b:69:e2:65:74:ca:a9:88:28:60: 66:ce:14:46:a4:20:72:ae:65:f9:84:57:98:63:7d:ab:3c:26: a4:56:4e:4f:bd:fd:fd:75:9e:a6:81:77:b5:9c:85:02:bb:86: f8:be:f8:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MmYxBEw3Nrg27WnsK2woMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTQzY2I4NmUzYTcwMzgxMzc3OGZhYjc5MGQ2NWYwZGEy MTYxNWEwHhcNMjUxMjE5MDYwMDUzWhcNMjUxMjIwMDYwMDUzWjAzMTEwLwYDVQQD Eyg3ZmIxMmZkNzUzOWQ1Yjc4MjkxYTg3ZDA2ZmM1NzdiOTc2OWVhOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX93UqDN0dkom7bAWaY7oPFOppIG RVeSUK6jQTvIoJKKEOdhY8Uob5DKzL3gsBBIlzom7cONb84Q+J+BpARxhRKeikWe V/H3f3/QFF+PnbNghy41PJhwhLVGtz5geb88TwAcRfHBXjWA8dxtb5nw7KfMiLKf VevBjNkyAOtgcvPnpNLIUOG+LkrPoiyW0X2S0BhQTVAJ2qlm5TolES1bIoo3RuHO QQqPgAH3QwYwga+bsrcPP1c0PS4fzspv+qxt8egcEfwGC+ob2ot9Kk57c5FnARjA 0KBbeFYqTtXKiaw0HXbemlpwmjb2SfDnNZXoDb3Vz1ae5yCATLtxyOzi6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+xL9dTnVt4KRqH0G/Fd7l2nqjWMB8GA1UdIwQY MBaAFIeUPLhuOnA4E3ePq3kNZfDaIWFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEt Y2M1ODA1MjFkMDBmLzEvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEtY2M1ODA1MjFkMDBm LzEvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHe3EvWo3 oANmDMeUG4Cw8abb6Xg4NC3gx5ku6WmOEzlkHnBtzlw5z0nI9qIOabdWUfEU0gVe Ky4r9uc4eZmuvHKX9qgNhnkliQp1Hr9ULCIslHQEsqPGWRnjV93FnWneb58Jz62y evMbNIZCvFQUTbNtAq7Q/tuiso/a/xu3aOWkh4PRJNxop8NlQbiAwcAvs/tF67Z8 vOKxeX4gzrN0x0OgCWT4DBIydeM0XNhcy//WOYVXL2GX/KLqJ6ccTTi386pmN4Rg iBAtkhJoO/graeJldMqpiChgZs4URqQgcq5l+YRXmGN9qzwmpFZOT739/XWepoF3 tZyFAruG+L746A== -----END CERTIFICATE-----Generated at Fri Dec 19 07:51:42 2025 by rpki-client