This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json) Hash identifier: aRq3r4EZ9BiQFqwtfHQS96gAXoehrCMtMiOxd3wUo9U= Subject key identifier: 53:64:21:79:98:B1:D4:CC:C3:3B:05:CA:CB:69:5D:05:1C:FB:92:34 Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53 Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153 Certificate serial: 019B0EC9A4BBBCDD57987B65F628AC2C6025 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft Manifest number: 0BA7 Signing time: Thu 11 Dec 2025 19:00:54 +0000 Manifest this update: Thu 11 Dec 2025 19:00:54 +0000 Manifest next update: Fri 12 Dec 2025 19:00:54 +0000 Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: nDc9Ik1AvL9KPuNABFKuP7tWa2EKJEd5vJ9dcxwhVlQ=) 2: VUf_eExQI714X29LkFd3HNL5qOc.roa (hash: qlXkcSYlvviPgCfxmngZKQMwauhcQqJeFXxSq0WXurQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:a4:bb:bc:dd:57:98:7b:65:f6:28:ac:2c:60:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153 Validity Not Before: Dec 11 19:00:54 2025 GMT Not After : Dec 12 19:00:54 2025 GMT Subject: CN=5364217998b1d4ccc33b05cacb695d051cfb9234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:21:1b:e7:9f:b8:51:0e:18:40:e7:4a:cd:3f: e8:05:e5:6c:62:3b:e4:4a:b0:c6:9b:ee:79:50:1e: af:de:d5:dd:9f:a0:27:6e:74:05:7c:fc:2a:fe:fe: a3:a0:bf:c2:36:ea:b8:25:91:15:e6:79:fa:36:27: 0d:48:1f:25:40:5d:2c:36:4c:0c:90:58:92:e4:66: 3e:2d:3b:e7:4f:f0:05:8d:80:de:0e:11:1f:f2:82: 85:38:30:7a:1b:82:7b:17:6a:cc:a0:d1:5d:3c:8b: 57:33:a6:05:d3:dc:5e:e3:48:19:d1:47:6b:86:a2: b1:e3:1c:8d:ef:9a:41:01:d6:fe:3a:29:b4:c5:d0: 28:0e:24:82:f2:3d:a2:03:8c:b6:eb:0a:61:90:a0: 6d:6f:a5:48:63:70:ae:36:26:d9:4f:e5:c4:ef:9b: 29:81:73:e3:93:db:2a:b7:56:32:90:96:6e:ad:81: 99:77:d9:e9:4b:d2:ae:66:af:ab:de:a4:0f:ed:ec: db:b4:29:5e:89:a4:28:53:eb:76:f4:15:62:b9:b8: 35:e0:3c:9e:f1:8d:a0:e1:b6:25:5c:ef:66:97:6a: 43:99:f8:41:db:fa:1a:ac:98:b1:6d:36:0a:21:65: 1f:ee:fb:79:6d:68:12:8c:b5:a1:92:62:c4:c4:f5: 29:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:64:21:79:98:B1:D4:CC:C3:3B:05:CA:CB:69:5D:05:1C:FB:92:34 X509v3 Authority Key Identifier: keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:cd:c5:fb:33:6b:ed:8e:5d:f6:9c:45:f0:27:83:ed:9f:23: 26:3a:4d:88:51:08:22:8c:b1:4a:1f:f4:98:33:3d:3a:77:df: 70:f0:a6:5c:91:60:bc:c3:67:09:c8:32:1a:e9:55:b5:d4:36: 72:b0:79:64:79:50:af:4f:19:1b:09:23:5f:ee:ad:9f:b4:ff: 64:27:a0:2a:0f:17:cd:b8:46:77:09:49:86:ba:33:be:a1:34: 55:78:3b:40:ba:17:d1:71:66:4d:13:9d:ac:ee:fb:a6:62:7a: 00:99:18:f2:31:05:20:26:5f:bc:f5:26:ee:be:75:41:d5:19: e0:b3:c4:35:77:73:26:0d:aa:44:ec:f5:f6:ff:44:3a:11:af: 26:e0:e0:da:4c:60:83:89:c8:50:c4:83:0a:bb:4d:09:94:18: 5d:14:48:9c:cd:ff:72:4b:cc:87:1d:3e:5e:0e:4a:8c:02:af: b8:22:06:f5:38:3f:bf:91:0c:48:01:da:c4:49:07:ac:50:48: 3e:d5:08:f6:3b:a3:42:34:ce:09:23:8a:9f:07:c5:25:45:ff: d2:fb:d2:36:45:79:7a:e0:ce:7f:da:e5:7b:49:69:cd:a3:8e: fd:4b:c4:12:6c:19:db:0c:ff:3a:35:b4:6b:99:ba:61:51:0f: d7:e6:2a:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyaS7vN1XmHtl9iisLGAlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmN2I3YzBkNmY3YjM0NjA4ZWIyNGNmYTFhODg4YmYzM2Ix YjYxNTMwHhcNMjUxMjExMTkwMDU0WhcNMjUxMjEyMTkwMDU0WjAzMTEwLwYDVQQD Eyg1MzY0MjE3OTk4YjFkNGNjYzMzYjA1Y2FjYjY5NWQwNTFjZmI5MjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSEb55+4UQ4YQOdKzT/oBeVsYjvk SrDGm+55UB6v3tXdn6AnbnQFfPwq/v6joL/CNuq4JZEV5nn6NicNSB8lQF0sNkwM kFiS5GY+LTvnT/AFjYDeDhEf8oKFODB6G4J7F2rMoNFdPItXM6YF09xe40gZ0Udr hqKx4xyN75pBAdb+Oim0xdAoDiSC8j2iA4y26wphkKBtb6VIY3CuNibZT+XE75sp gXPjk9sqt1YykJZurYGZd9npS9KuZq+r3qQP7ezbtCleiaQoU+t29BViubg14Dye 8Y2g4bYlXO9ml2pDmfhB2/oarJixbTYKIWUf7vt5bWgSjLWhkmLExPUprwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNkIXmYsdTMwzsFystpXQUc+5I0MB8GA1UdIwQY MBaAFB97fA1vezRgjrJM+hqIi/M7G2FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDN0OERXOTdOR0NPc2t6NkdvaUw4enNiWVZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zZTYwYWQtZDZiYi00NWEzLWFlZjMt MmI5MzJlNjgyM2FkLzEvSDN0OERXOTdOR0NPc2t6NkdvaUw4enNiWVZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zZTYwYWQtZDZiYi00NWEzLWFlZjMtMmI5MzJlNjgyM2Fk LzEvSDN0OERXOTdOR0NPc2t6NkdvaUw4enNiWVZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYM3F+zNr 7Y5d9pxF8CeD7Z8jJjpNiFEIIoyxSh/0mDM9OnffcPCmXJFgvMNnCcgyGulVtdQ2 crB5ZHlQr08ZGwkjX+6tn7T/ZCegKg8XzbhGdwlJhrozvqE0VXg7QLoX0XFmTROd rO77pmJ6AJkY8jEFICZfvPUm7r51QdUZ4LPENXdzJg2qROz19v9EOhGvJuDg2kxg g4nIUMSDCrtNCZQYXRRInM3/ckvMhx0+Xg5KjAKvuCIG9Tg/v5EMSAHaxEkHrFBI PtUI9jujQjTOCSOKnwfFJUX/0vvSNkV5euDOf9rle0lpzaOO/UvEEmwZ2wz/OjW0 a5m6YVEP1+Yq5A== -----END CERTIFICATE-----Generated at Fri Dec 12 02:04:33 2025 by rpki-client