This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json) Hash identifier: IIGUVkIZMG3MNF2e5fWmv+A3/XE10DBqXG4cjLTe/vs= Subject key identifier: 7E:6C:EB:B1:E2:C2:5C:DF:53:FA:39:C9:BC:E6:94:9B:8B:33:45:8D Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca Certificate serial: 019B123856B7EEE41328A2D1C017009165AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft Manifest number: 177C Signing time: Fri 12 Dec 2025 11:00:40 +0000 Manifest this update: Fri 12 Dec 2025 11:00:40 +0000 Manifest next update: Sat 13 Dec 2025 11:00:40 +0000 Files and hashes: 1: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (hash: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=) 2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: J7z8X6V669CxZ04G44FLPYr2l9CZ9qKGssL6YTwtg9w=) 3: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (hash: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:56:b7:ee:e4:13:28:a2:d1:c0:17:00:91:65:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca Validity Not Before: Dec 12 11:00:40 2025 GMT Not After : Dec 13 11:00:40 2025 GMT Subject: CN=7e6cebb1e2c25cdf53fa39c9bce6949b8b33458d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:68:4c:05:ed:15:51:a8:eb:a1:91:b9:65:19: f1:7c:cd:73:e9:a0:62:7a:3e:32:ea:d8:ee:be:39: 33:72:cd:89:d1:9c:74:96:6d:40:5c:9d:4d:7f:97: 43:7a:bd:8f:0b:b0:ad:9e:ae:98:fa:70:7b:a6:6c: 81:d4:6a:9f:55:f0:d9:45:4c:20:62:9b:c3:91:d9: 7e:5e:84:b8:0f:ba:6c:44:92:8b:8d:eb:13:be:11: b4:2a:6e:34:4c:4a:63:4f:15:b1:3b:d9:4a:59:f1: db:00:38:61:8f:08:94:85:ef:e2:37:55:f1:b1:14: 27:23:a4:48:b9:bf:72:98:96:16:fd:b7:e9:66:92: 37:b8:65:e3:18:64:73:b0:a9:33:b9:db:9f:f2:d7: 75:48:27:17:a4:5f:e3:76:8f:e6:dc:10:c7:0f:11: 12:19:ec:ae:ba:27:55:93:6c:d3:13:65:2c:01:3e: 96:3a:99:47:f4:26:a5:d9:c2:cf:30:b4:7b:21:62: ce:3f:d8:02:2f:af:be:97:29:21:5f:4f:74:45:c5: 33:f3:92:61:1d:55:43:ad:24:0d:cd:2e:e5:ea:5e: 38:85:7b:e1:a7:3f:8c:1b:ab:e8:28:06:7e:a8:1d: 9f:6e:4d:f2:02:31:34:e2:54:71:b4:e4:dc:58:87: 91:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6C:EB:B1:E2:C2:5C:DF:53:FA:39:C9:BC:E6:94:9B:8B:33:45:8D X509v3 Authority Key Identifier: keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:fa:3c:f1:71:7d:c7:f9:36:e8:64:1a:84:7e:74:fd:83:ff: 11:bc:a5:5c:ef:6b:59:07:eb:c3:d1:c9:5b:ea:2c:6e:c3:fc: 38:57:d3:72:10:14:c0:76:a4:8b:0b:40:a0:0c:16:a0:70:d4: 06:44:fc:1e:9c:ae:70:fa:f1:f1:1b:57:16:58:12:e2:00:86: af:59:03:3f:06:be:0f:d9:1d:9a:1b:21:d1:f7:36:69:b7:38: c4:dd:b1:3c:c6:ad:4e:ea:8b:1b:62:fc:b1:33:91:da:26:67: 8a:cd:bf:e6:ea:4b:39:c4:5e:e3:95:93:ba:21:1c:1b:a5:3c: 74:d7:e3:b0:a1:ce:0a:56:1e:7f:c4:fa:b4:5d:37:db:f9:2d: 24:12:d4:f9:7f:f0:98:57:3f:ae:ce:85:ab:2c:df:98:7e:7a: c8:c7:e1:79:9b:59:f1:92:a4:c6:cc:29:1b:3c:5a:30:de:d7: 5d:f2:86:d8:cd:a9:f2:e0:79:a6:f4:1b:68:f4:54:e9:ba:7d: c0:9a:c3:5b:9e:a3:22:18:18:af:e4:b8:39:56:8f:fb:5b:39: e0:60:81:39:2a:2e:e6:4f:26:47:fc:97:f7:fb:25:b8:b6:8f: 41:2a:95:6c:12:57:4d:bf:01:f4:e7:04:5f:14:8c:74:4a:7b: 76:60:22:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOFa37uQTKKLRwBcAkWWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNzM5ZDIxM2E0MzhmNjc4YjMyMmE4ZjhmODRlMmQ4Yzc4 MTRhY2EwHhcNMjUxMjEyMTEwMDQwWhcNMjUxMjEzMTEwMDQwWjAzMTEwLwYDVQQD Eyg3ZTZjZWJiMWUyYzI1Y2RmNTNmYTM5YzliY2U2OTQ5YjhiMzM0NThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmhMBe0VUajroZG5ZRnxfM1z6aBi ej4y6tjuvjkzcs2J0Zx0lm1AXJ1Nf5dDer2PC7Ctnq6Y+nB7pmyB1GqfVfDZRUwg YpvDkdl+XoS4D7psRJKLjesTvhG0Km40TEpjTxWxO9lKWfHbADhhjwiUhe/iN1Xx sRQnI6RIub9ymJYW/bfpZpI3uGXjGGRzsKkzuduf8td1SCcXpF/jdo/m3BDHDxES GeyuuidVk2zTE2UsAT6WOplH9Cal2cLPMLR7IWLOP9gCL6++lykhX090RcUz85Jh HVVDrSQNzS7l6l44hXvhpz+MG6voKAZ+qB2fbk3yAjE04lRxtOTcWIeRRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5s67HiwlzfU/o5ybzmlJuLM0WNMB8GA1UdIwQY MBaAFB9znSE6Q49nizIqj4+E4tjHgUrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEt MzkyZTA1YTg0Mjc3LzEvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEtMzkyZTA1YTg0Mjc3 LzEvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPo88XF9 x/k26GQahH50/YP/EbylXO9rWQfrw9HJW+osbsP8OFfTchAUwHakiwtAoAwWoHDU BkT8HpyucPrx8RtXFlgS4gCGr1kDPwa+D9kdmhsh0fc2abc4xN2xPMatTuqLG2L8 sTOR2iZnis2/5upLOcRe45WTuiEcG6U8dNfjsKHOClYef8T6tF032/ktJBLU+X/w mFc/rs6FqyzfmH56yMfheZtZ8ZKkxswpGzxaMN7XXfKG2M2p8uB5pvQbaPRU6bp9 wJrDW56jIhgYr+S4OVaP+1s54GCBOSou5k8mR/yX9/sluLaPQSqVbBJXTb8B9OcE XxSMdEp7dmAiuQ== -----END CERTIFICATE-----Generated at Fri Dec 12 19:29:15 2025 by rpki-client