This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json) Hash identifier: dttkBHyJcAc0cDdBkvmI95Wr8DrmIN97L5xzuByogqY= Subject key identifier: 8E:FA:BD:77:D9:58:1D:38:56:59:3C:50:D4:6E:FE:6E:F0:76:95:DA Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8 Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8 Certificate serial: 019B590853354500821E5525188C5295B962 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 05:01:14 +0000 Manifest this update: Fri 26 Dec 2025 05:01:14 +0000 Manifest next update: Sat 27 Dec 2025 05:01:14 +0000 Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=) 2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=) 3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: iRy7zbzt2u13PtmZPs9R4kdfDK2jxhYVudafxSWQT+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:53:35:45:00:82:1e:55:25:18:8c:52:95:b9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8 Validity Not Before: Dec 26 05:01:14 2025 GMT Not After : Dec 27 05:01:14 2025 GMT Subject: CN=8efabd77d9581d3856593c50d46efe6ef07695da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:11:47:9c:31:bd:62:af:4b:36:c5:2a:94: 45:4f:d3:1f:72:95:5c:54:d8:36:21:8a:a0:98:8a: 0f:d3:55:ee:c3:58:72:f7:4a:c4:32:b3:aa:0d:4e: e6:1c:6c:88:18:d4:b4:95:15:b9:8f:74:c1:3b:c7: 3e:71:f3:bb:41:d9:e3:c3:bd:0e:bf:1d:b0:d7:f0: ff:98:b8:c5:e8:fe:09:83:d2:1e:1a:d2:87:57:03: c2:9c:4f:67:10:f5:2c:43:5b:5a:a1:36:a5:74:fb: 4d:28:6e:26:98:5c:69:72:10:86:0c:1b:d9:b2:d9: 07:ef:36:7f:0a:1c:c0:54:37:ec:34:47:11:4a:06: 66:78:3f:7b:e4:e3:1c:a2:bd:ef:18:e2:2e:08:a4: 2d:84:d4:26:0a:83:fc:78:af:7b:65:65:ce:5a:83: f4:34:5b:96:89:8f:9e:e1:93:27:26:f6:e0:5b:69: 6b:86:f3:a8:7f:f0:f8:f6:9c:5b:df:b8:60:23:fe: db:70:0e:58:fb:02:d9:45:53:d7:59:f0:45:f7:e1: d7:cc:22:2e:7a:d2:2c:99:e8:01:45:e3:a3:75:e7: 38:01:a1:83:48:31:83:4a:2b:2a:e5:fa:86:28:03: 76:50:59:53:ff:39:4e:b9:36:4c:48:05:f1:c1:60: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FA:BD:77:D9:58:1D:38:56:59:3C:50:D4:6E:FE:6E:F0:76:95:DA X509v3 Authority Key Identifier: keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:15:8e:da:35:28:db:db:72:3a:50:52:1a:ac:1a:66:55:7c: 59:12:2a:b1:5c:6b:75:1f:8a:1f:86:9e:e6:7b:d5:cc:a5:f8: 2c:20:bd:e2:7b:64:e4:8f:72:71:36:21:46:e7:52:0c:9a:91: d3:57:cc:a3:24:be:a9:14:21:43:c0:e9:b0:ec:f7:43:96:18: 7b:f3:7b:98:90:92:1f:f3:bb:b7:5c:7e:76:b6:d0:08:b7:76: a1:28:9d:c1:ff:38:ac:9e:73:97:40:14:76:83:f9:71:43:71: fa:85:44:75:e0:57:48:44:e2:c3:0e:f0:cb:51:0a:02:d1:29: 84:08:0c:8f:b6:64:eb:dc:0b:4b:a9:0d:3b:c6:9c:74:3c:09: a7:e7:c3:8f:ce:7e:e8:f6:23:34:34:88:7f:15:5d:00:8b:a8: 37:37:ae:10:c0:70:d0:19:af:ba:83:c2:a6:61:ec:06:49:d0: 2b:0c:c9:28:20:9c:ae:58:ff:cc:c1:8f:61:d3:0b:37:2d:50: c3:ab:d0:12:fb:94:7c:47:b8:09:0f:23:e4:a1:06:5e:88:ac: a5:52:a0:07:a5:b9:c8:94:f1:62:e8:01:96:bd:6f:82:08:f6: be:df:14:88:0b:3e:95:c4:34:72:0b:66:76:eb:3f:3a:8e:21: 0f:80:15:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCFM1RQCCHlUlGIxSlbliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMWRjMThhNGIxZmJmZTJjMmJhYmQ4YmJiNDdmZTFmZDFj ZjIyZjgwHhcNMjUxMjI2MDUwMTE0WhcNMjUxMjI3MDUwMTE0WjAzMTEwLwYDVQQD Eyg4ZWZhYmQ3N2Q5NTgxZDM4NTY1OTNjNTBkNDZlZmU2ZWYwNzY5NWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV0RR5wxvWKvSzbFKpRFT9MfcpVc VNg2IYqgmIoP01Xuw1hy90rEMrOqDU7mHGyIGNS0lRW5j3TBO8c+cfO7Qdnjw70O vx2w1/D/mLjF6P4Jg9IeGtKHVwPCnE9nEPUsQ1taoTaldPtNKG4mmFxpchCGDBvZ stkH7zZ/ChzAVDfsNEcRSgZmeD975OMcor3vGOIuCKQthNQmCoP8eK97ZWXOWoP0 NFuWiY+e4ZMnJvbgW2lrhvOof/D49pxb37hgI/7bcA5Y+wLZRVPXWfBF9+HXzCIu etIsmegBReOjdec4AaGDSDGDSisq5fqGKAN2UFlT/zlOuTZMSAXxwWDeNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI76vXfZWB04Vlk8UNRu/m7wdpXaMB8GA1UdIwQY MBaAFK4dwYpLH7/iwrq9i7tH/h/RzyL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMt OGU3MTQ5ZjA0YTRlLzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMtOGU3MTQ5ZjA0YTRl LzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhWO2jUo 29tyOlBSGqwaZlV8WRIqsVxrdR+KH4ae5nvVzKX4LCC94ntk5I9ycTYhRudSDJqR 01fMoyS+qRQhQ8DpsOz3Q5YYe/N7mJCSH/O7t1x+drbQCLd2oSidwf84rJ5zl0AU doP5cUNx+oVEdeBXSETiww7wy1EKAtEphAgMj7Zk69wLS6kNO8acdDwJp+fDj85+ 6PYjNDSIfxVdAIuoNzeuEMBw0BmvuoPCpmHsBknQKwzJKCCcrlj/zMGPYdMLNy1Q w6vQEvuUfEe4CQ8j5KEGXoispVKgB6W5yJTxYugBlr1vggj2vt8UiAs+lcQ0cgtm dus/Oo4hD4AVgg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:27 2025 by rpki-client