This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft File: h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json) Hash identifier: 04hSAj3DTE8IXy4VOJEG+tKwjnqGIKiynn05EUlvyvE= Subject key identifier: BD:8C:95:6A:46:FE:85:6D:26:6F:04:DC:3C:2C:A0:82:40:44:70:A5 Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea Certificate serial: 019B4249270F29303BD2CF521C13BAB45661 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft Manifest number: 0B13 Signing time: Sun 21 Dec 2025 19:00:48 +0000 Manifest this update: Sun 21 Dec 2025 19:00:48 +0000 Manifest next update: Mon 22 Dec 2025 19:00:48 +0000 Files and hashes: 1: M5PtAUB6C0YQZ-t3ZklapHkEf_k.roa (hash: HXU2DQvPMIqoZLirjVORFRzXbGSClbgxExOEkxTMUAM=) 2: go-J-JwBrpAVGCsK-19AMahhYuM.roa (hash: +GNiaHGQJG90H7ohhR5iHSqVdKCjsbU2hGuORBme6Qs=) 3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: PCeITGRk0PO3/Jt3Z104liBFn14UC7wgJ5O+pxhbllk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:27:0f:29:30:3b:d2:cf:52:1c:13:ba:b4:56:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea Validity Not Before: Dec 21 19:00:48 2025 GMT Not After : Dec 22 19:00:48 2025 GMT Subject: CN=bd8c956a46fe856d266f04dc3c2ca082404470a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:45:49:9d:be:6a:8f:2c:7e:87:ad:0f:bc:dd: cb:f9:48:c5:fd:35:a6:90:c8:11:d2:d8:5b:38:8d: 23:56:2f:63:b6:eb:ea:b2:f2:d1:dd:f8:50:14:c9: 0c:89:34:a7:bd:ae:b1:20:ad:34:94:d9:1a:c4:9c: ef:c7:f6:7e:8f:72:7c:ff:3e:d7:3f:ad:ba:23:f9: 82:ef:de:1e:51:4e:d5:3e:ed:d6:1d:45:39:0d:7e: 74:62:1c:0c:33:fb:bb:05:21:92:b2:09:9f:e7:30: 11:86:60:9c:7c:20:10:8c:58:8e:db:20:a6:3f:14: 1c:c2:47:88:17:88:5d:9d:52:bc:e1:0f:06:60:06: d2:5b:21:cc:b4:a1:cf:9c:99:0a:92:93:f9:c7:a0: d0:33:97:68:6c:6f:e5:80:92:ca:e9:49:92:05:62: b2:56:fb:07:04:97:73:0f:ac:4b:71:26:17:09:9a: e5:f7:a8:13:c1:ac:b8:e2:95:fe:54:18:98:98:e9: 7d:3d:93:a5:cd:25:a1:ef:61:9e:fd:a3:d6:c4:6f: c0:d5:43:e5:ae:ae:47:43:4a:78:77:ee:61:71:f6: e0:a1:93:a5:e7:a2:c8:a2:ba:1a:ea:66:3c:7c:75: 50:bf:81:f5:50:e0:31:72:f1:a8:19:59:12:7f:d8: 56:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8C:95:6A:46:FE:85:6D:26:6F:04:DC:3C:2C:A0:82:40:44:70:A5 X509v3 Authority Key Identifier: keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:02:95:a2:67:1a:ab:d9:04:6d:ea:5e:e1:e5:d2:78:5d:16: ce:39:3e:40:8e:02:a0:44:c4:8f:e3:88:35:eb:d1:1b:2a:f9: 85:ba:62:b6:10:d3:9a:79:f7:02:74:aa:47:5f:53:82:81:dc: f0:c3:7d:0c:fb:db:29:af:05:c5:9e:df:17:fc:03:08:24:b3: 6f:06:7d:23:41:e0:18:aa:ce:e6:56:3e:8e:30:16:c0:b1:e4: 80:b2:a2:31:44:1d:40:f4:95:b5:7b:56:21:62:3e:4d:7e:77: 4d:2d:1b:d5:18:9f:98:cb:37:ed:89:6e:33:98:be:15:c4:2c: b2:ce:5d:1e:d8:15:92:89:59:e8:92:c4:98:18:c8:63:c8:63: c9:da:e3:7f:75:55:91:03:84:55:87:dc:a9:73:4b:b1:de:4d: 3c:b8:27:ed:bb:67:d3:40:71:74:d2:a5:17:72:a2:6d:8d:a7: 82:0b:cc:a1:d4:ab:dd:2b:37:82:68:c4:7b:a1:cd:23:a6:16: 87:4d:b1:31:25:7a:e1:38:fd:5d:d6:8c:f3:16:0e:76:bc:52: d9:d1:8b:9c:f3:1d:57:20:cc:f8:72:02:39:e3:80:f5:16:d8: f2:32:9f:36:47:2f:2d:f0:a9:08:48:b4:33:85:05:1f:d2:ac: b5:e3:a9:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSScPKTA70s9SHBO6tFZhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NWY0Y2U5MTM5NjIxODFjZjdjOTM3NmRmYWI1YTIyNWQ2 ZTVhZWEwHhcNMjUxMjIxMTkwMDQ4WhcNMjUxMjIyMTkwMDQ4WjAzMTEwLwYDVQQD EyhiZDhjOTU2YTQ2ZmU4NTZkMjY2ZjA0ZGMzYzJjYTA4MjQwNDQ3MGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kVJnb5qjyx+h60PvN3L+UjF/TWm kMgR0thbOI0jVi9jtuvqsvLR3fhQFMkMiTSnva6xIK00lNkaxJzvx/Z+j3J8/z7X P626I/mC794eUU7VPu3WHUU5DX50YhwMM/u7BSGSsgmf5zARhmCcfCAQjFiO2yCm PxQcwkeIF4hdnVK84Q8GYAbSWyHMtKHPnJkKkpP5x6DQM5dobG/lgJLK6UmSBWKy VvsHBJdzD6xLcSYXCZrl96gTway44pX+VBiYmOl9PZOlzSWh72Ge/aPWxG/A1UPl rq5HQ0p4d+5hcfbgoZOl56LIoroa6mY8fHVQv4H1UOAxcvGoGVkSf9hWfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2MlWpG/oVtJm8E3DwsoIJARHClMB8GA1UdIwQY MBaAFIdfTOkTliGBz3yTdt+rWiJdblrqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDE5TTZST1dJWUhQZkpOMjM2dGFJbDF1V3VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84NzYwN2UtNWM5YS00M2E2LThkOGEt MzhkZmVhZjJiNzEwLzEvaDE5TTZST1dJWUhQZkpOMjM2dGFJbDF1V3VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84NzYwN2UtNWM5YS00M2E2LThkOGEtMzhkZmVhZjJiNzEw LzEvaDE5TTZST1dJWUhQZkpOMjM2dGFJbDF1V3VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAKVomca q9kEbepe4eXSeF0Wzjk+QI4CoETEj+OINevRGyr5hbpithDTmnn3AnSqR19TgoHc 8MN9DPvbKa8FxZ7fF/wDCCSzbwZ9I0HgGKrO5lY+jjAWwLHkgLKiMUQdQPSVtXtW IWI+TX53TS0b1RifmMs37YluM5i+FcQsss5dHtgVkolZ6JLEmBjIY8hjydrjf3VV kQOEVYfcqXNLsd5NPLgn7btn00BxdNKlF3KibY2nggvModSr3Ss3gmjEe6HNI6YW h02xMSV64Tj9XdaM8xYOdrxS2dGLnPMdVyDM+HICOeOA9RbY8jKfNkcvLfCpCEi0 M4UFH9KsteOpTw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:50:45 2025 by rpki-client