This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft File: 3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json) Hash identifier: Do70S/TXURZqoRmHZIWUpdPwrsyAXDOLpNPCOE/Vgzs= Subject key identifier: F5:A6:2D:F3:50:7B:B5:17:55:07:C3:36:68:88:9C:67:A9:A6:72:66 Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Certificate serial: 019B3A222FCD9DD53227C50416164EB1426D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft Manifest number: 16EE Signing time: Sat 20 Dec 2025 05:01:17 +0000 Manifest this update: Sat 20 Dec 2025 05:01:17 +0000 Manifest next update: Sun 21 Dec 2025 05:01:17 +0000 Files and hashes: 1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: OPYtbvPexPWGY4aTBty7piHvtm07SgTat5ugDGJ5zUc=) 2: 8FvfLLhDVksryfiQvcQGH50S9l8.roa (hash: Y6ZwtPZ/qOYxX0Ope9ofTfvB4VJme9ynbG6C6Iyw774=) 3: al8koS69bS-s8w2qJPy0DIH-LdM.roa (hash: 8dyaX5bVUEeKp0uMU4rnBV4TQ+sOGF79J4YeMsznYDw=) 4: iB-5Gh1pHVkAWY83mt70GWf7F_k.roa (hash: cjAD02BpLiwlKz0QWbmdYPtsy/2NR9/61nPXd4hWOkU=) 5: lICq0eo5P-Axsog5Hx6FXYSQY4k.roa (hash: JlcFYpOXnqLTDv9/pwm19BH50eR0rn9KZzLrCOo3RLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:2f:cd:9d:d5:32:27:c5:04:16:16:4e:b1:42:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Validity Not Before: Dec 20 05:01:17 2025 GMT Not After : Dec 21 05:01:17 2025 GMT Subject: CN=f5a62df3507bb5175507c33668889c67a9a67266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:ac:e0:4e:93:8a:2e:0f:7f:fa:9d:1b:17: eb:1f:15:d5:2c:34:3c:7d:cb:af:dd:dd:01:03:aa: 56:5a:15:dd:77:7f:6b:5c:60:76:be:45:74:3f:8e: b6:3f:94:12:71:82:66:79:49:be:8f:d2:68:26:5c: 3d:b3:41:9f:c0:ef:b9:7f:60:20:66:13:85:0a:24: f9:cb:b0:4d:eb:cf:7f:c4:1b:51:8e:cd:44:97:77: b8:76:dc:5a:a9:30:db:f8:47:88:ae:af:50:1a:71: 6c:ab:cc:0c:7a:41:ca:4a:39:8b:29:e1:34:2d:ec: 19:14:9d:fa:d2:e3:4a:a6:59:ac:c2:fa:19:dd:84: b4:97:e3:d7:1c:c9:a0:20:78:2a:75:c2:8d:f3:90: 9c:75:65:59:04:f2:f0:85:00:06:b7:47:25:49:ec: 7b:44:59:9c:b5:9e:02:c8:63:84:2b:0e:6f:44:6b: 3c:ae:5e:07:4f:8f:05:01:7c:2a:00:4c:2e:22:4e: 96:84:ff:af:1f:89:93:34:2b:1e:a6:df:81:71:fe: ed:46:92:05:59:bb:5b:06:fb:39:35:04:f2:9b:1c: 76:63:44:70:a8:7e:ac:ce:42:cd:b5:aa:0a:02:f6: bc:bd:d3:0d:f9:6a:ed:9f:55:d4:86:c3:92:99:7b: ff:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A6:2D:F3:50:7B:B5:17:55:07:C3:36:68:88:9C:67:A9:A6:72:66 X509v3 Authority Key Identifier: keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:34:c6:b3:ad:c4:31:98:8a:9c:e5:38:56:bb:89:b0:e2:a3: 9c:1a:94:3d:d2:5a:99:bc:c3:28:80:13:01:04:a7:a0:89:7d: 53:d0:ed:b8:5c:b0:7c:65:c9:0e:55:7c:a9:d2:07:3b:ed:70: a3:8d:c5:77:0d:8f:5b:b5:0a:69:d9:d0:35:3f:c1:aa:e6:5d: 61:9a:ba:a8:b4:ff:d1:d5:e7:d0:45:79:e9:50:55:f6:5a:70: 39:3f:f5:b2:4a:55:f6:4f:3a:bc:90:81:61:63:0f:d7:34:e4: 4e:8c:f0:b0:db:3d:ea:04:4e:b2:3e:b0:1a:f9:d8:bf:12:8e: c6:21:6d:29:a7:d9:7a:3d:46:f6:75:f1:04:b7:ee:54:a9:cf: 6c:30:0d:20:fc:61:58:8b:82:d2:44:01:74:54:83:cc:24:23: 45:c0:7e:b0:67:d8:b4:95:dc:2a:b2:29:05:02:a8:80:c2:20: 69:21:7b:5c:dc:7b:1b:58:c3:d7:77:6d:bc:2d:47:3d:4a:d4: 35:09:0a:30:63:0a:a9:b5:1c:92:c7:d3:c1:ef:c3:d2:65:da: d7:b1:e9:57:98:4f:25:92:12:84:d7:f3:43:92:ba:6d:15:fc: 43:8d:10:b1:1e:e6:66:88:d8:84:8e:a6:25:c6:3d:ce:5f:84: 2f:f8:3d:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ii/NndUyJ8UEFhZOsUJtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk NzExNTUwHhcNMjUxMjIwMDUwMTE3WhcNMjUxMjIxMDUwMTE3WjAzMTEwLwYDVQQD EyhmNWE2MmRmMzUwN2JiNTE3NTUwN2MzMzY2ODg4OWM2N2E5YTY3MjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUis4E6Tii4Pf/qdGxfrHxXVLDQ8 fcuv3d0BA6pWWhXdd39rXGB2vkV0P462P5QScYJmeUm+j9JoJlw9s0GfwO+5f2Ag ZhOFCiT5y7BN689/xBtRjs1El3e4dtxaqTDb+EeIrq9QGnFsq8wMekHKSjmLKeE0 LewZFJ360uNKplmswvoZ3YS0l+PXHMmgIHgqdcKN85CcdWVZBPLwhQAGt0clSex7 RFmctZ4CyGOEKw5vRGs8rl4HT48FAXwqAEwuIk6WhP+vH4mTNCsept+Bcf7tRpIF WbtbBvs5NQTymxx2Y0RwqH6szkLNtaoKAva8vdMN+Wrtn1XUhsOSmXv/gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWmLfNQe7UXVQfDNmiInGeppnJmMB8GA1UdIwQY MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt NjUyNDljYmM1NzNjLzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTTGs63E MZiKnOU4VruJsOKjnBqUPdJambzDKIATAQSnoIl9U9DtuFywfGXJDlV8qdIHO+1w o43Fdw2PW7UKadnQNT/BquZdYZq6qLT/0dXn0EV56VBV9lpwOT/1skpV9k86vJCB YWMP1zTkTozwsNs96gROsj6wGvnYvxKOxiFtKafZej1G9nXxBLfuVKnPbDANIPxh WIuC0kQBdFSDzCQjRcB+sGfYtJXcKrIpBQKogMIgaSF7XNx7G1jD13dtvC1HPUrU NQkKMGMKqbUcksfTwe/D0mXa17HpV5hPJZIShNfzQ5K6bRX8Q40QsR7mZojYhI6m JcY9zl+EL/g9oQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:43:58 2025 by rpki-client