This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft File: h679om6egcITEDruPQGowoqv_Pg.mft (raw, json) Hash identifier: bj6xwTZDUI+fYQDuqIJN7m7XDca4lhl5QTj6CFI+Fu0= Subject key identifier: A4:E8:3A:D1:4C:AD:33:6D:DA:C1:0E:3A:7F:C9:F0:7A:64:74:5E:DB Authority key identifier: 87:AE:FD:A2:6E:9E:81:C2:13:10:3A:EE:3D:01:A8:C2:8A:AF:FC:F8 Certificate issuer: /CN=87aefda26e9e81c213103aee3d01a8c28aaffcf8 Certificate serial: 019B5A51BC06CCC22B434B569CD7F8449A20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h679om6egcITEDruPQGowoqv_Pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft Manifest number: 6E Signing time: Fri 26 Dec 2025 11:01:04 +0000 Manifest this update: Fri 26 Dec 2025 11:01:04 +0000 Manifest next update: Sat 27 Dec 2025 11:01:04 +0000 Files and hashes: 1: h679om6egcITEDruPQGowoqv_Pg.crl (hash: RbJmMT4gsriefDXj5EzPoQyDfEe4fsfZcBrmpfiUhP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft rsync://rpki.ripe.net/repository/DEFAULT/h679om6egcITEDruPQGowoqv_Pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:bc:06:cc:c2:2b:43:4b:56:9c:d7:f8:44:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87aefda26e9e81c213103aee3d01a8c28aaffcf8 Validity Not Before: Dec 26 11:01:04 2025 GMT Not After : Dec 27 11:01:04 2025 GMT Subject: CN=a4e83ad14cad336ddac10e3a7fc9f07a64745edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8b:3b:64:35:08:e5:73:7e:cb:e4:d2:3d:7d: 72:53:7f:c8:69:78:f7:d1:a2:5b:4d:5c:f1:ab:03: 74:5d:b3:b0:1c:3c:57:a7:d9:e0:a9:0f:ab:be:ff: 17:bf:fa:04:ab:db:3a:b0:b5:11:68:b0:97:43:ff: bf:d9:00:d2:78:01:a1:28:d2:ad:20:e6:8d:dd:48: a2:c6:11:40:7b:5a:28:cd:b3:25:14:2f:39:ff:60: 4b:bf:85:a8:8c:49:a9:65:3b:a4:3f:ef:c7:a7:57: eb:c3:6e:e8:62:de:6c:1b:2a:3b:e5:f0:10:f3:e8: 8c:64:15:0e:ad:1d:de:bc:fd:68:ae:85:73:bd:ae: 75:58:e8:18:9f:7a:85:c8:4b:d4:cc:33:dd:f6:3c: 72:d9:f2:97:9e:8f:7b:02:28:00:58:8e:57:3d:0b: 61:ce:57:ae:2b:1c:88:ed:9f:e6:46:a0:5c:41:28: 2c:53:84:62:0c:60:6a:5f:be:f9:20:ae:66:94:9e: 8c:1b:a1:50:0b:a3:7f:10:b3:30:06:75:ba:8c:ba: 75:a5:19:fc:b8:69:73:02:07:58:93:eb:fe:41:65: 26:10:64:27:99:ff:62:84:85:8f:14:2b:74:e6:19: b5:f6:f6:84:42:e7:4d:13:87:77:d4:9f:31:62:07: 8b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E8:3A:D1:4C:AD:33:6D:DA:C1:0E:3A:7F:C9:F0:7A:64:74:5E:DB X509v3 Authority Key Identifier: keyid:87:AE:FD:A2:6E:9E:81:C2:13:10:3A:EE:3D:01:A8:C2:8A:AF:FC:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h679om6egcITEDruPQGowoqv_Pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f2:9f:9b:98:90:81:86:a0:31:6c:99:f9:76:82:a5:6e:d3: 01:fb:87:62:f1:1c:6e:a9:8b:44:93:07:8f:a3:2c:74:71:af: d3:d3:48:3d:5e:b8:0b:d2:74:7f:55:87:18:08:e5:c3:04:26: 15:9e:c1:cc:f7:3b:e8:57:a8:1b:e3:37:c7:00:6b:b4:be:6e: ed:88:99:cd:1e:f1:2e:92:c8:a2:d6:41:72:b0:71:03:7f:93: c8:28:d6:2a:78:af:7b:05:bd:23:6b:0c:b1:56:fa:d9:c7:da: f0:0a:94:16:7e:d4:da:ef:7a:2b:d2:4a:4e:d9:d6:ad:0b:31: e9:5b:66:69:97:85:b3:9f:d7:2b:74:81:d3:40:28:ac:4f:c2: 40:6e:5b:89:16:6c:32:56:23:c0:46:c2:63:1b:84:ee:a3:e1: 7d:85:28:1b:65:94:09:fa:64:7f:b0:2c:ea:ec:fa:8e:2c:71: cf:08:27:86:bd:16:6b:ca:6f:24:db:21:99:6f:68:6f:a9:34: 33:1c:6e:9d:a6:99:08:94:a4:64:5c:6d:18:2b:6a:5e:9e:b0: 1c:f0:9c:7e:85:73:31:1e:86:8e:a5:6e:11:e9:8e:d8:d3:12: e7:f9:b0:b0:76:5c:0e:b6:8f:f6:f9:dc:f4:fa:d1:4b:91:29: 08:77:a3:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUbwGzMIrQ0tWnNf4RJogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YWVmZGEyNmU5ZTgxYzIxMzEwM2FlZTNkMDFhOGMyOGFh ZmZjZjgwHhcNMjUxMjI2MTEwMTA0WhcNMjUxMjI3MTEwMTA0WjAzMTEwLwYDVQQD EyhhNGU4M2FkMTRjYWQzMzZkZGFjMTBlM2E3ZmM5ZjA3YTY0NzQ1ZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04s7ZDUI5XN+y+TSPX1yU3/IaXj3 0aJbTVzxqwN0XbOwHDxXp9ngqQ+rvv8Xv/oEq9s6sLURaLCXQ/+/2QDSeAGhKNKt IOaN3UiixhFAe1oozbMlFC85/2BLv4WojEmpZTukP+/Hp1frw27oYt5sGyo75fAQ 8+iMZBUOrR3evP1oroVzva51WOgYn3qFyEvUzDPd9jxy2fKXno97AigAWI5XPQth zleuKxyI7Z/mRqBcQSgsU4RiDGBqX775IK5mlJ6MG6FQC6N/ELMwBnW6jLp1pRn8 uGlzAgdYk+v+QWUmEGQnmf9ihIWPFCt05hm19vaEQudNE4d31J8xYgeL8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKToOtFMrTNt2sEOOn/J8HpkdF7bMB8GA1UdIwQY MBaAFIeu/aJunoHCExA67j0BqMKKr/z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDY3OW9tNmVnY0lURURydVBRR293b3F2X1BnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hYWE5YjMtNjdmYi00Mjc0LWI5NzEt ZDJhNzNmM2RlZGI3LzEvaDY3OW9tNmVnY0lURURydVBRR293b3F2X1BnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hYWE5YjMtNjdmYi00Mjc0LWI5NzEtZDJhNzNmM2RlZGI3 LzEvaDY3OW9tNmVnY0lURURydVBRR293b3F2X1BnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPKfm5iQ gYagMWyZ+XaCpW7TAfuHYvEcbqmLRJMHj6MsdHGv09NIPV64C9J0f1WHGAjlwwQm FZ7BzPc76FeoG+M3xwBrtL5u7YiZzR7xLpLIotZBcrBxA3+TyCjWKnivewW9I2sM sVb62cfa8AqUFn7U2u96K9JKTtnWrQsx6VtmaZeFs5/XK3SB00AorE/CQG5biRZs MlYjwEbCYxuE7qPhfYUoG2WUCfpkf7As6uz6jixxzwgnhr0Wa8pvJNshmW9ob6k0 MxxunaaZCJSkZFxtGCtqXp6wHPCcfoVzMR6GjqVuEemO2NMS5/mwsHZcDraP9vnc 9PrRS5EpCHejmA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:23 2025 by rpki-client