This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft File: MH3iES3L0Gv7x-h_O_8jcinS0XM.mft (raw, json) Hash identifier: sv9oLG72aQ+i2tbREdZhjbYMp9cuuFCnkSRRj+EJBHY= Subject key identifier: 0D:B2:92:FA:CD:04:93:D6:29:BE:F9:E0:64:49:CE:7C:F4:B3:3C:5B Authority key identifier: 30:7D:E2:11:2D:CB:D0:6B:FB:C7:E8:7F:3B:FF:23:72:29:D2:D1:73 Certificate issuer: /CN=307de2112dcbd06bfbc7e87f3bff237229d2d173 Certificate serial: 019B2C2EF5A0F69F32BA616A362E49FE2E3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH3iES3L0Gv7x-h_O_8jcinS0XM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft Manifest number: 02B3 Signing time: Wed 17 Dec 2025 12:00:33 +0000 Manifest this update: Wed 17 Dec 2025 12:00:33 +0000 Manifest next update: Thu 18 Dec 2025 12:00:33 +0000 Files and hashes: 1: MH3iES3L0Gv7x-h_O_8jcinS0XM.crl (hash: 2Kr25qyRUvje304cexE4Y24FHER7Mi3Fr8KhNXeTbk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft rsync://rpki.ripe.net/repository/DEFAULT/MH3iES3L0Gv7x-h_O_8jcinS0XM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2e:f5:a0:f6:9f:32:ba:61:6a:36:2e:49:fe:2e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307de2112dcbd06bfbc7e87f3bff237229d2d173 Validity Not Before: Dec 17 12:00:33 2025 GMT Not After : Dec 18 12:00:33 2025 GMT Subject: CN=0db292facd0493d629bef9e06449ce7cf4b33c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:02:db:81:3d:a8:80:63:0e:b4:82:02:0b:f5: 0b:15:cd:2a:68:d9:bb:5a:2a:96:a2:8b:e5:e6:e9: 38:ec:07:93:bc:6d:3d:70:2e:92:08:b8:03:8c:03: ce:4e:10:61:15:f7:f0:32:50:74:1c:eb:17:cb:02: d7:0d:c6:33:aa:8f:7d:8b:de:6f:30:39:4c:f7:58: a8:28:78:4b:e0:1d:bf:89:1b:60:56:c2:c6:98:2e: 20:85:b7:32:8b:23:1a:02:ce:60:69:f6:9a:9a:95: 76:51:69:ed:f1:f7:1e:74:47:15:0e:4f:59:0d:b8: 8a:7f:49:bc:0a:10:df:f8:0b:78:50:d1:89:b7:43: 61:ce:94:68:92:c7:33:cb:da:eb:5e:ca:61:1b:14: 7e:ff:e3:09:0b:57:3c:a9:30:51:e5:c0:61:a6:3d: b7:3c:35:13:5d:71:65:91:e6:7d:1f:d1:69:eb:4e: 04:2b:a7:14:56:0b:5a:5a:c2:6f:64:e0:43:57:52: d4:68:39:f5:ee:bc:a9:ed:75:1d:51:f6:4a:29:d2: df:51:16:9b:7b:11:e9:f8:fc:50:ac:92:40:8b:ec: ad:3e:32:f5:2f:4a:a4:20:9b:96:c0:37:c3:6c:e7: b7:39:f2:7b:ac:c9:19:b1:2f:1c:f3:43:4f:04:3b: 82:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B2:92:FA:CD:04:93:D6:29:BE:F9:E0:64:49:CE:7C:F4:B3:3C:5B X509v3 Authority Key Identifier: keyid:30:7D:E2:11:2D:CB:D0:6B:FB:C7:E8:7F:3B:FF:23:72:29:D2:D1:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH3iES3L0Gv7x-h_O_8jcinS0XM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:6a:76:13:6c:68:8d:23:2f:ff:35:87:d5:4f:d5:d2:ac:9e: 80:0b:a5:d1:e8:e8:07:a4:f6:a3:3d:a3:67:e3:ea:27:93:6d: 9a:ec:0a:5b:67:a1:47:e4:2f:c3:3c:25:37:f1:bc:9e:c9:e3: 2a:43:4d:5b:12:55:b8:4a:97:b6:6f:92:f9:75:b9:20:53:f1: 95:45:db:90:88:d8:ff:2e:b2:2c:43:7a:57:5f:1b:a6:3f:b4: 8e:a7:84:67:04:f0:bd:db:a8:8b:39:42:83:b1:bd:87:1b:e9: c3:f1:87:c9:23:d3:82:a1:e3:da:01:a7:b5:3e:bf:86:ee:f6: 89:73:cc:ba:d9:de:6d:dd:d1:ac:77:ee:87:94:56:ef:39:58: 8f:66:6f:41:d2:43:6c:32:d0:93:06:20:3d:e5:07:a8:64:e3: 9f:da:a8:5e:87:b0:5d:94:05:a5:6c:5c:69:81:17:25:38:0a: f0:9d:00:d7:8a:26:b4:f6:23:e1:96:af:58:9c:52:9a:ae:89: ea:dc:c7:6f:d3:df:1b:13:1a:10:49:00:52:38:d9:6a:ea:ad: da:7a:24:e0:a9:67:a4:cd:fc:f5:f7:71:c2:c9:7c:75:2c:e8: 48:74:0a:08:94:88:7c:2f:c5:8c:3a:e6:29:b2:ea:61:69:bd: e7:d4:ce:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLvWg9p8yumFqNi5J/i49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2RlMjExMmRjYmQwNmJmYmM3ZTg3ZjNiZmYyMzcyMjlk MmQxNzMwHhcNMjUxMjE3MTIwMDMzWhcNMjUxMjE4MTIwMDMzWjAzMTEwLwYDVQQD EygwZGIyOTJmYWNkMDQ5M2Q2MjliZWY5ZTA2NDQ5Y2U3Y2Y0YjMzYzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogLbgT2ogGMOtIICC/ULFc0qaNm7 WiqWoovl5uk47AeTvG09cC6SCLgDjAPOThBhFffwMlB0HOsXywLXDcYzqo99i95v MDlM91ioKHhL4B2/iRtgVsLGmC4ghbcyiyMaAs5gafaampV2UWnt8fcedEcVDk9Z DbiKf0m8ChDf+At4UNGJt0NhzpRoksczy9rrXsphGxR+/+MJC1c8qTBR5cBhpj23 PDUTXXFlkeZ9H9Fp604EK6cUVgtaWsJvZOBDV1LUaDn17ryp7XUdUfZKKdLfURab exHp+PxQrJJAi+ytPjL1L0qkIJuWwDfDbOe3OfJ7rMkZsS8c80NPBDuCHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2ykvrNBJPWKb754GRJznz0szxbMB8GA1UdIwQY MBaAFDB94hEty9Br+8fofzv/I3Ip0tFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgzaUVTM0wwR3Y3eC1oX09fOGpjaW5TMFhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZWM4NzctNTlkNS00MmY5LTk2N2Ut MjczMjE1MWI4ZTg2LzEvTUgzaUVTM0wwR3Y3eC1oX09fOGpjaW5TMFhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9hZWM4NzctNTlkNS00MmY5LTk2N2UtMjczMjE1MWI4ZTg2 LzEvTUgzaUVTM0wwR3Y3eC1oX09fOGpjaW5TMFhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWp2E2xo jSMv/zWH1U/V0qyegAul0ejoB6T2oz2jZ+PqJ5NtmuwKW2ehR+QvwzwlN/G8nsnj KkNNWxJVuEqXtm+S+XW5IFPxlUXbkIjY/y6yLEN6V18bpj+0jqeEZwTwvduoizlC g7G9hxvpw/GHySPTgqHj2gGntT6/hu72iXPMutnebd3RrHfuh5RW7zlYj2ZvQdJD bDLQkwYgPeUHqGTjn9qoXoewXZQFpWxcaYEXJTgK8J0A14omtPYj4ZavWJxSmq6J 6tzHb9PfGxMaEEkAUjjZauqt2nok4KlnpM389fdxwsl8dSzoSHQKCJSIfC/FjDrm KbLqYWm959TOlg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:05:45 2025 by rpki-client