This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json) Hash identifier: KckFX4kQiTrznru1AhIhTEsq+bgNROocnzq5jEN3BIM= Subject key identifier: 9A:28:A4:8A:58:C5:94:0A:2D:5D:07:B6:F5:15:BB:BC:D9:A6:D9:88 Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9 Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9 Certificate serial: 019B18714B55D2B512D6600E9BC6668FDD1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft Manifest number: 1777 Signing time: Sat 13 Dec 2025 16:00:36 +0000 Manifest this update: Sat 13 Dec 2025 16:00:36 +0000 Manifest next update: Sun 14 Dec 2025 16:00:36 +0000 Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=) 2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: dgX7X0cWJyahMxeM9gFdGCtMruBK/4O3zVwOkD4+2w8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:4b:55:d2:b5:12:d6:60:0e:9b:c6:66:8f:dd:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9 Validity Not Before: Dec 13 16:00:36 2025 GMT Not After : Dec 14 16:00:36 2025 GMT Subject: CN=9a28a48a58c5940a2d5d07b6f515bbbcd9a6d988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:72:a1:51:09:95:47:bc:87:a2:f5:d3:b5:0c: c0:7c:66:ce:cf:6e:7b:c2:fe:66:bc:d4:e1:76:97: 88:ad:e8:e3:56:88:70:7a:7f:fb:ac:36:8a:5d:8a: d6:38:b7:68:bc:81:8c:e4:0c:a4:30:a2:b8:76:9a: 16:82:9c:87:7d:27:ac:ca:25:ff:69:ef:85:3c:62: c0:b7:25:6f:b9:71:93:ea:69:4c:f9:eb:53:10:19: a4:63:67:8b:bc:b4:81:25:52:e6:31:3e:c5:2a:a1: 01:09:25:a9:ac:56:e4:4d:73:17:af:7e:14:e6:6e: 34:df:3c:9b:7d:b6:0d:56:e3:e5:b8:bf:2a:a7:a4: 1c:c8:f4:e2:e6:c7:ef:d3:41:2f:2c:c2:d4:af:08: 42:1e:f9:55:46:1a:46:60:be:1e:f8:f1:2b:49:8b: 98:6e:b1:81:99:81:a1:8a:5e:12:16:4f:76:c6:33: f0:da:4e:be:3b:43:35:46:73:dc:74:fd:61:a6:d1: 5a:8e:13:8a:c5:cd:1c:dd:42:12:8f:49:28:d1:8d: de:fd:02:98:f2:f8:03:21:88:8e:79:36:2d:8f:a9: 8e:14:a3:8f:d1:b9:84:0d:32:51:03:51:79:fa:23: 94:4a:8c:5b:2e:36:af:f5:5f:3d:b6:f6:85:0b:f7: 43:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:28:A4:8A:58:C5:94:0A:2D:5D:07:B6:F5:15:BB:BC:D9:A6:D9:88 X509v3 Authority Key Identifier: keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d5:c7:4f:e1:bd:43:78:88:a8:74:f6:b5:95:c8:dc:db:15: 9a:fa:86:20:16:c7:7b:c2:7c:4d:25:4d:20:92:63:91:7b:81: 09:f9:37:bc:fe:a8:fd:23:5c:22:14:d2:4e:9c:cf:16:dd:43: 14:93:d5:f2:f3:e5:78:09:fa:f6:e2:46:be:fb:dd:ab:f5:9f: fa:a9:ee:a8:87:8f:0d:02:f0:47:39:77:e1:1f:2c:72:8d:c2: 2d:29:18:56:49:c2:65:96:4b:67:5a:fc:ed:fe:10:34:06:63: f6:ac:de:af:d3:dc:87:6c:78:54:72:ab:36:c5:47:00:ac:14: 9d:6e:ab:f4:95:3a:0a:6b:d2:a0:78:50:07:e4:2e:be:61:75: c7:a4:07:e7:d3:17:c6:23:18:6f:78:d2:b1:21:7e:f6:8a:f6: 76:45:23:2d:0e:34:19:de:28:82:ee:b4:bf:78:8b:6d:69:5b: cd:65:61:d1:e8:d2:7c:34:3e:a4:da:8e:4d:24:4d:a0:0c:42: 48:0c:81:06:1d:14:91:5b:a8:63:dc:f7:03:e2:ce:07:30:bc: e9:a0:26:45:12:ff:b9:8e:50:80:3e:7c:86:3e:f6:d2:ec:3f: c4:57:43:0c:23:58:22:9e:f4:14:d8:d7:81:ea:45:aa:79:e3: f1:ec:ae:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcUtV0rUS1mAOm8Zmj90aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZjg2MmRmZTBjMzQ4NzQxMjBkMmNjMTY5ZmMzMTQ0OTM4 ZWU4ZDkwHhcNMjUxMjEzMTYwMDM2WhcNMjUxMjE0MTYwMDM2WjAzMTEwLwYDVQQD Eyg5YTI4YTQ4YTU4YzU5NDBhMmQ1ZDA3YjZmNTE1YmJiY2Q5YTZkOTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznKhUQmVR7yHovXTtQzAfGbOz257 wv5mvNThdpeIrejjVohwen/7rDaKXYrWOLdovIGM5AykMKK4dpoWgpyHfSesyiX/ ae+FPGLAtyVvuXGT6mlM+etTEBmkY2eLvLSBJVLmMT7FKqEBCSWprFbkTXMXr34U 5m403zybfbYNVuPluL8qp6QcyPTi5sfv00EvLMLUrwhCHvlVRhpGYL4e+PErSYuY brGBmYGhil4SFk92xjPw2k6+O0M1RnPcdP1hptFajhOKxc0c3UISj0ko0Y3e/QKY 8vgDIYiOeTYtj6mOFKOP0bmEDTJRA1F5+iOUSoxbLjav9V89tvaFC/dD2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoopIpYxZQKLV0HtvUVu7zZptmIMB8GA1UdIwQY MBaAFHL4Yt/gw0h0Eg0swWn8MUSTjujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xMzVmYzQtYjM1YS00MmRiLTgxNDEt MjIwNzY0ZGMzNDVjLzEvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8xMzVmYzQtYjM1YS00MmRiLTgxNDEtMjIwNzY0ZGMzNDVj LzEvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9XHT+G9 Q3iIqHT2tZXI3NsVmvqGIBbHe8J8TSVNIJJjkXuBCfk3vP6o/SNcIhTSTpzPFt1D FJPV8vPleAn69uJGvvvdq/Wf+qnuqIePDQLwRzl34R8sco3CLSkYVknCZZZLZ1r8 7f4QNAZj9qzer9Pch2x4VHKrNsVHAKwUnW6r9JU6CmvSoHhQB+QuvmF1x6QH59MX xiMYb3jSsSF+9or2dkUjLQ40Gd4ogu60v3iLbWlbzWVh0ejSfDQ+pNqOTSRNoAxC SAyBBh0UkVuoY9z3A+LOBzC86aAmRRL/uY5QgD58hj720uw/xFdDDCNYIp70FNjX gepFqnnj8eyuLA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:05:48 2025 by rpki-client