This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json) Hash identifier: OOjQJ4zm+ClUcx4sVuzIdAh5KapU2lh/+BqU+7KDK8k= Subject key identifier: BC:AC:79:E5:46:44:4D:F7:10:6B:47:8A:B1:4A:A5:42:30:C1:F0:8E Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52 Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52 Certificate serial: 019B03D7C97BC4522DF0AD5F33D3055064D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft Manifest number: 03C4 Signing time: Tue 09 Dec 2025 16:00:31 +0000 Manifest this update: Tue 09 Dec 2025 16:00:31 +0000 Manifest next update: Wed 10 Dec 2025 16:00:31 +0000 Files and hashes: 1: mah4AWfXC0pa7vVaoRQiMo894vo.roa (hash: FRBDBjNrcarz6+cgNnWqdZSbwkqTq4d1ETUAtkcAHtM=) 2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: /2sjM0DI6y+Wwsu16XF3RTC1SYzTK7De0T8Xla0ScdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:d7:c9:7b:c4:52:2d:f0:ad:5f:33:d3:05:50:64:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52 Validity Not Before: Dec 9 16:00:31 2025 GMT Not After : Dec 10 16:00:31 2025 GMT Subject: CN=bcac79e546444df7106b478ab14aa54230c1f08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b9:7e:51:6b:13:66:57:17:91:d4:4f:87:0c: 4c:3b:51:d0:83:35:e7:76:dd:dd:e1:59:a1:5f:33: c1:97:40:c6:8e:32:09:e5:0d:0d:27:bb:f1:33:91: 4b:41:48:f0:4c:da:6d:11:7b:1d:41:5f:23:1b:44: d5:ef:a3:81:b3:80:83:76:38:d8:6c:4e:86:0f:3a: 71:5c:7e:f9:e0:33:b2:90:d0:24:89:d8:fb:fc:ff: ca:20:5b:b6:17:f2:d0:c2:c6:0e:c5:1c:f8:32:9c: 03:19:e6:50:99:a2:f3:6f:e7:86:3e:aa:bf:11:eb: 85:fc:ab:01:a1:71:20:22:a9:16:1a:97:66:1a:c0: b1:3c:d2:16:55:15:de:7f:f5:38:aa:8e:f9:f9:f5: 3d:e1:08:53:f6:2d:20:86:ff:4b:29:87:13:82:0a: fc:e6:2c:89:e8:48:d9:3c:dc:24:07:a6:fe:46:36: 10:e5:9d:54:5b:d9:66:a1:75:17:30:d6:25:6b:18: 1e:aa:ce:4b:53:12:a7:2e:33:99:93:9c:8b:b3:31: 62:57:b8:51:0c:a9:26:d3:e9:66:bb:54:da:12:46: 76:99:bb:61:64:e2:cb:8e:09:69:2d:ef:b4:d4:cb: 5f:f2:35:49:7c:0b:30:8a:33:8c:32:dd:8e:e2:d5: 1b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AC:79:E5:46:44:4D:F7:10:6B:47:8A:B1:4A:A5:42:30:C1:F0:8E X509v3 Authority Key Identifier: keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d7:93:e6:2c:5c:de:b7:4e:8c:28:54:9f:08:c6:50:a0:18: 1a:37:b0:f7:b7:49:d1:1b:52:28:d2:59:ef:a3:04:01:df:27: 83:43:d5:7a:52:ca:ce:9f:a5:ac:0b:d2:6f:30:c0:fe:a8:32: 9b:bb:cc:7b:91:0d:4d:6d:6e:57:69:a7:c2:42:8e:23:e3:a4: fa:4b:34:24:f2:67:22:42:58:8f:8a:2a:b7:08:e4:0a:83:62: 1e:09:fc:fa:1f:db:13:d6:3c:2d:09:49:d7:1d:72:8a:4e:06: 83:d5:8a:5e:24:e5:11:5f:d4:80:7c:82:b5:33:41:e6:29:d4: 1d:fa:38:14:76:36:c2:0c:24:1b:db:8b:e6:0b:f3:fa:3e:17: 4f:7b:45:b6:c3:5c:25:c2:b7:98:71:86:8a:c6:22:13:69:ce: b6:91:af:e8:2a:fc:f2:32:6b:02:48:32:e7:20:44:07:be:1f: 7f:1c:3c:31:b8:59:2c:1e:88:c2:df:fb:d7:7a:61:31:2a:c8: d9:b6:45:74:b4:82:9f:fe:6c:ff:6a:3a:fd:8f:e0:ab:a3:2f: 83:3e:95:77:42:7d:3b:bc:9d:43:e8:eb:37:5b:40:31:1e:2c: b0:19:97:5f:29:4c:88:c8:c3:3f:c6:2f:99:78:bf:c3:01:79: 25:37:cb:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsD18l7xFIt8K1fM9MFUGTRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZGRjNzNiNTlhMWZjZGVlMjJlMjU4MjRkNDBhY2MyNzI4 NmFhNTIwHhcNMjUxMjA5MTYwMDMxWhcNMjUxMjEwMTYwMDMxWjAzMTEwLwYDVQQD EyhiY2FjNzllNTQ2NDQ0ZGY3MTA2YjQ3OGFiMTRhYTU0MjMwYzFmMDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLl+UWsTZlcXkdRPhwxMO1HQgzXn dt3d4VmhXzPBl0DGjjIJ5Q0NJ7vxM5FLQUjwTNptEXsdQV8jG0TV76OBs4CDdjjY bE6GDzpxXH754DOykNAkidj7/P/KIFu2F/LQwsYOxRz4MpwDGeZQmaLzb+eGPqq/ EeuF/KsBoXEgIqkWGpdmGsCxPNIWVRXef/U4qo75+fU94QhT9i0ghv9LKYcTggr8 5iyJ6EjZPNwkB6b+RjYQ5Z1UW9lmoXUXMNYlaxgeqs5LUxKnLjOZk5yLszFiV7hR DKkm0+lmu1TaEkZ2mbthZOLLjglpLe+01Mtf8jVJfAswijOMMt2O4tUbcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyseeVGRE33EGtHirFKpUIwwfCOMB8GA1UdIwQY MBaAFKzdxztZofze4i4lgk1ArMJyhqpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84Nzg4ZTUtOGFiOC00M2U5LTlkYWIt YTBlYzg0YTMxMzkzLzEvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS84Nzg4ZTUtOGFiOC00M2U5LTlkYWItYTBlYzg0YTMxMzkz LzEvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFteT5ixc 3rdOjChUnwjGUKAYGjew97dJ0RtSKNJZ76MEAd8ng0PVelLKzp+lrAvSbzDA/qgy m7vMe5ENTW1uV2mnwkKOI+Ok+ks0JPJnIkJYj4oqtwjkCoNiHgn8+h/bE9Y8LQlJ 1x1yik4Gg9WKXiTlEV/UgHyCtTNB5inUHfo4FHY2wgwkG9uL5gvz+j4XT3tFtsNc JcK3mHGGisYiE2nOtpGv6Cr88jJrAkgy5yBEB74ffxw8MbhZLB6Iwt/713phMSrI 2bZFdLSCn/5s/2o6/Y/gq6Mvgz6Vd0J9O7ydQ+jrN1tAMR4ssBmXXylMiMjDP8Yv mXi/wwF5JTfLgA== -----END CERTIFICATE-----Generated at Wed Dec 10 02:32:13 2025 by rpki-client