This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json) Hash identifier: YY/NnXmXxi1Jx7iP1t7MvTVQldxP0cUmuOnRNTlE8b4= Subject key identifier: 50:18:B5:DB:DF:88:12:28:FA:A6:B8:75:73:33:00:FF:C9:3E:8D:37 Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7 Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7 Certificate serial: 019B19F248E2AC04BEEC93342C56A9D4C568 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft Manifest number: 068E Signing time: Sat 13 Dec 2025 23:01:07 +0000 Manifest this update: Sat 13 Dec 2025 23:01:07 +0000 Manifest next update: Sun 14 Dec 2025 23:01:07 +0000 Files and hashes: 1: HxD2Tgnl9DbU7Fb8vyXYt-Ezj6A.roa (hash: 21Z2ZIhjOIjkwftoPhASqvQtUr2MxHlKe4XS++23wKw=) 2: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: rlSyDyFoHBqQm3g7ghOfkTTmSSKtpP909c8xAbiJH3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:48:e2:ac:04:be:ec:93:34:2c:56:a9:d4:c5:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7 Validity Not Before: Dec 13 23:01:07 2025 GMT Not After : Dec 14 23:01:07 2025 GMT Subject: CN=5018b5dbdf881228faa6b875733300ffc93e8d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:87:8d:f8:b3:06:10:00:eb:95:d5:b2:a2:28: 5f:58:5b:f1:65:2f:26:8c:cc:1f:b8:58:f4:40:71: 0e:6f:ba:1e:db:8d:96:6d:8d:6d:64:60:a9:6f:dd: 76:73:fa:a2:cf:a3:b4:1f:20:4d:31:98:00:7e:c4: 3d:f8:40:0c:76:69:f8:51:f1:47:83:fa:5f:88:af: 34:52:5c:5d:70:da:57:2d:95:f0:ef:fe:b5:f4:12: 0d:5a:52:33:37:d7:c7:ec:91:a5:da:a4:6c:0d:68: 60:47:8c:91:1b:b8:d6:3c:75:43:82:5d:91:ea:78: 07:8f:01:c2:c4:1e:5a:43:c4:1d:33:e3:c0:06:84: 35:f3:5e:59:2d:3c:41:27:f4:57:66:57:42:e5:f5: 6f:3d:fd:5f:01:6f:6a:02:6e:7f:42:54:48:10:85: 55:f7:87:bc:ec:1f:09:41:41:1f:90:31:7c:0c:e6: a3:97:3b:cf:db:dc:5f:e6:df:43:a7:5b:3f:e0:5d: 84:1b:73:cb:0a:30:db:75:de:ac:6d:75:b1:af:75: d8:b5:5d:2e:97:dc:72:80:9a:0b:d8:40:ed:7b:5b: bc:e6:b0:aa:ba:64:89:cb:a3:75:e4:29:51:e7:c8: 0a:f7:bc:bb:09:2a:5c:78:81:9c:65:0c:f6:e5:a6: a7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:18:B5:DB:DF:88:12:28:FA:A6:B8:75:73:33:00:FF:C9:3E:8D:37 X509v3 Authority Key Identifier: keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:57:75:06:34:b4:fe:1d:b7:e7:21:94:8b:1f:84:55:32:8c: 8a:4f:1f:0b:74:3b:8c:be:eb:55:d3:d5:bc:83:de:23:bb:97: b2:b0:a3:b2:12:83:12:d9:cb:b2:be:9c:86:73:3e:d7:95:67: 71:e0:69:43:8b:7f:4e:c5:64:8c:74:af:95:64:f1:7d:f1:40: 4f:9f:bf:4a:ab:51:b0:19:74:bc:8e:9a:f8:42:7a:31:ee:8d: 63:f8:ab:20:34:c9:0c:9f:53:4f:3a:90:65:75:db:4e:44:87: 9a:ca:ec:08:b8:e7:e8:43:87:92:7b:33:51:91:de:c2:ae:ec: e2:3b:df:40:e1:ba:3e:77:e5:42:56:c5:28:93:d2:44:7e:77: e2:9f:cc:7a:2e:52:49:93:fb:ba:c1:21:bb:be:d9:d7:ac:7e: 00:0b:9c:1d:61:36:8e:4c:37:fc:d2:74:43:56:d5:77:cb:47: 6e:88:3d:6d:f6:47:82:c5:6b:ad:6c:56:69:67:16:25:9b:d6: 0a:46:14:5a:53:de:e2:5d:5c:a7:0b:5e:98:c1:79:cc:5a:65: be:e6:80:a8:d2:15:41:3a:31:16:d3:ae:88:09:a4:f1:5d:e6: be:89:6c:b8:51:48:c8:b8:6f:8c:b3:09:fb:d7:4d:e5:14:c5: f9:4f:f9:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8kjirAS+7JM0LFap1MVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YjEzOTZmZDExYzczMGVmMjA0NDgxMjliMjgyODU2YWM1 MDRjYjcwHhcNMjUxMjEzMjMwMTA3WhcNMjUxMjE0MjMwMTA3WjAzMTEwLwYDVQQD Eyg1MDE4YjVkYmRmODgxMjI4ZmFhNmI4NzU3MzMzMDBmZmM5M2U4ZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YeN+LMGEADrldWyoihfWFvxZS8m jMwfuFj0QHEOb7oe242WbY1tZGCpb912c/qiz6O0HyBNMZgAfsQ9+EAMdmn4UfFH g/pfiK80UlxdcNpXLZXw7/619BINWlIzN9fH7JGl2qRsDWhgR4yRG7jWPHVDgl2R 6ngHjwHCxB5aQ8QdM+PABoQ1815ZLTxBJ/RXZldC5fVvPf1fAW9qAm5/QlRIEIVV 94e87B8JQUEfkDF8DOajlzvP29xf5t9Dp1s/4F2EG3PLCjDbdd6sbXWxr3XYtV0u l9xygJoL2EDte1u85rCqumSJy6N15ClR58gK97y7CSpceIGcZQz25aanqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAYtdvfiBIo+qa4dXMzAP/JPo03MB8GA1UdIwQY MBaAFIexOW/RHHMO8gRIEpsoKFasUEy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGIt ZjRlN2M5Y2M0M2ZmLzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGItZjRlN2M5Y2M0M2Zm LzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1d1BjS0 /h235yGUix+EVTKMik8fC3Q7jL7rVdPVvIPeI7uXsrCjshKDEtnLsr6chnM+15Vn ceBpQ4t/TsVkjHSvlWTxffFAT5+/SqtRsBl0vI6a+EJ6Me6NY/irIDTJDJ9TTzqQ ZXXbTkSHmsrsCLjn6EOHknszUZHewq7s4jvfQOG6PnflQlbFKJPSRH534p/Mei5S SZP7usEhu77Z16x+AAucHWE2jkw3/NJ0Q1bVd8tHbog9bfZHgsVrrWxWaWcWJZvW CkYUWlPe4l1cpwtemMF5zFplvuaAqNIVQToxFtOuiAmk8V3mvolsuFFIyLhvjLMJ +9dN5RTF+U/5zA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:50:20 2025 by rpki-client