This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json) Hash identifier: 1M9Z9YrkxWwWJ5vxRpgX1X+tPfzR0pANU4CtFVaO9oc= Subject key identifier: 3C:5B:9A:4E:8C:4A:E5:0C:AD:62:32:4F:4D:F2:89:4C:10:A5:4C:5C Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d Certificate serial: 019B0F00497A2B6A1A0A57A3C032CC28C615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 20:00:35 +0000 Manifest this update: Thu 11 Dec 2025 20:00:35 +0000 Manifest next update: Fri 12 Dec 2025 20:00:35 +0000 Files and hashes: 1: 8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa (hash: uWux01M0AWL/b2xulUJtLGC3kzcykXei5DX70xijRPU=) 2: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: mDXAw98c0vzn1UJzcSg2WfNjdpZCZr610UwLZkUfQn8=) 3: ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa (hash: A1OTBfEgu4GjLmAVBKwQdSIcB/EXlvqAN5tdAvErj/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:49:7a:2b:6a:1a:0a:57:a3:c0:32:cc:28:c6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d Validity Not Before: Dec 11 20:00:35 2025 GMT Not After : Dec 12 20:00:35 2025 GMT Subject: CN=3c5b9a4e8c4ae50cad62324f4df2894c10a54c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8c:a2:95:e1:0e:1e:f5:93:29:e7:6f:3e:de: cf:db:2f:20:68:7e:50:95:db:12:dc:f3:0d:23:15: aa:f3:b2:b3:5f:06:4b:7f:92:87:d6:f6:42:f1:0d: 30:20:1e:3b:6f:27:e9:b6:e7:68:68:2e:29:33:3e: c4:cb:bb:05:94:2d:0d:de:e7:21:d7:3f:4a:42:65: 7f:1e:af:37:48:03:8a:32:fe:e8:25:19:51:fa:52: 1f:a6:0d:74:d0:8e:e6:57:37:a1:78:ce:79:30:15: dd:dc:55:41:5b:fa:61:46:d5:e5:e2:d5:e9:b3:69: 95:85:ce:a6:b3:0d:9a:33:a5:ee:5b:22:ba:20:ad: 61:59:3a:2d:2c:0f:b8:bc:97:09:30:94:4e:b5:50: 94:4f:e7:1f:10:7d:9c:a7:ce:56:9e:f9:99:2a:7d: 74:72:f4:c6:86:47:26:8d:f3:71:94:9f:43:0b:5d: a4:08:a7:1b:cf:2e:e3:e7:f6:9e:bb:e0:41:10:45: 4a:e5:43:d5:a9:44:af:ab:88:25:42:aa:3c:b4:e0: 99:69:af:bc:ae:eb:08:c0:a3:68:b1:4d:b7:63:51: a1:5e:0b:a1:1f:0f:00:fd:75:48:50:3b:a5:4a:b4: 8c:9d:6f:05:cf:96:83:d3:16:d1:89:c3:8c:15:ce: 68:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5B:9A:4E:8C:4A:E5:0C:AD:62:32:4F:4D:F2:89:4C:10:A5:4C:5C X509v3 Authority Key Identifier: keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3f:df:c3:7e:fd:9e:dc:8f:d6:27:a5:96:61:0d:25:55:f8: 30:15:62:32:d7:f8:d3:9e:28:61:42:aa:19:63:52:b3:65:da: a7:81:13:c7:a5:8b:4a:6a:a6:96:5c:5c:ae:a2:a6:83:f1:46: 30:eb:b8:ad:0f:de:b3:a4:82:d1:c7:bf:7b:f0:2a:e7:85:68: f1:4b:42:06:bd:cc:74:df:8e:fb:25:91:d0:f5:d9:2f:85:46: 4b:cb:3c:d4:f3:7e:c1:c1:d5:23:16:5f:d6:a7:d1:0d:5c:e3: 7a:4d:57:94:c4:9b:e5:2f:b4:1e:21:cd:7b:9d:28:9c:bb:b7: 58:bd:6b:dc:eb:9f:78:0e:92:fb:55:fc:b5:fb:ca:9b:61:3f: 29:4c:36:01:6a:6a:05:85:67:48:94:79:65:76:83:16:9c:93: 34:c3:bd:42:16:63:82:4a:39:3b:13:50:77:18:6b:b6:65:69: 4a:d6:c4:ab:15:14:3d:94:19:4d:ce:9b:86:f6:d1:7c:9d:59: 0a:b6:25:fe:24:48:8d:3f:87:7e:d6:44:cd:a4:9a:36:ed:15: ac:ff:dd:d1:84:b9:29:0b:4a:ed:fd:2c:f6:f5:78:db:8b:8d: d3:37:d5:26:6b:6e:37:8e:95:42:0c:64:71:cd:53:88:0a:fc: 6e:4b:9d:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAEl6K2oaClejwDLMKMYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OWI1ZDdiNTc1OTQwOTkzN2M1YzJjMjJmMGFkYmU4ZTgz MmEwNWQwHhcNMjUxMjExMjAwMDM1WhcNMjUxMjEyMjAwMDM1WjAzMTEwLwYDVQQD EygzYzViOWE0ZThjNGFlNTBjYWQ2MjMyNGY0ZGYyODk0YzEwYTU0YzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YyileEOHvWTKedvPt7P2y8gaH5Q ldsS3PMNIxWq87KzXwZLf5KH1vZC8Q0wIB47byfptudoaC4pMz7Ey7sFlC0N3uch 1z9KQmV/Hq83SAOKMv7oJRlR+lIfpg100I7mVzeheM55MBXd3FVBW/phRtXl4tXp s2mVhc6msw2aM6XuWyK6IK1hWTotLA+4vJcJMJROtVCUT+cfEH2cp85WnvmZKn10 cvTGhkcmjfNxlJ9DC12kCKcbzy7j5/aeu+BBEEVK5UPVqUSvq4glQqo8tOCZaa+8 rusIwKNosU23Y1GhXguhHw8A/XVIUDulSrSMnW8Fz5aD0xbRicOMFc5oCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxbmk6MSuUMrWIyT03yiUwQpUxcMB8GA1UdIwQY MBaAFIebXXtXWUCZN8XCwi8K2+joMqBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgt NWEwNmY3ODg3ZGJkLzEvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgtNWEwNmY3ODg3ZGJk LzEvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATj/fw379 ntyP1iellmENJVX4MBViMtf4054oYUKqGWNSs2Xap4ETx6WLSmqmllxcrqKmg/FG MOu4rQ/es6SC0ce/e/Aq54Vo8UtCBr3MdN+O+yWR0PXZL4VGS8s81PN+wcHVIxZf 1qfRDVzjek1XlMSb5S+0HiHNe50onLu3WL1r3OufeA6S+1X8tfvKm2E/KUw2AWpq BYVnSJR5ZXaDFpyTNMO9QhZjgko5OxNQdxhrtmVpStbEqxUUPZQZTc6bhvbRfJ1Z CrYl/iRIjT+HftZEzaSaNu0VrP/d0YS5KQtK7f0s9vV424uN0zfVJmtuN46VQgxk cc1TiAr8bkudaQ== -----END CERTIFICATE-----Generated at Fri Dec 12 03:38:53 2025 by rpki-client