This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft File: 0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json) Hash identifier: osynX7+Ez6TKiktR2Hidx3gPC3iRobx6l+D1oF18K40= Subject key identifier: CA:49:89:45:0E:A0:D5:FF:36:16:D4:D7:03:BD:00:BF:9A:5F:EC:87 Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62 Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262 Certificate serial: 019B22F500E51F74BDBC4768E81DC07DDE85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 17:00:40 +0000 Manifest this update: Mon 15 Dec 2025 17:00:40 +0000 Manifest next update: Tue 16 Dec 2025 17:00:40 +0000 Files and hashes: 1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: xi+R6+GxTr1ztkBNWQEj1dQlIgBPBJaRPjw4D1Ih9gw=) 2: UtfGmlfffX0cIYFRWQAmKmCxHBQ.roa (hash: eIoevFtzl4KgjvBzeT/oQJHdGPIhlQ4d3q4XFG6eYig=) 3: pkGGNBdhq4ZpQRqIZMsggNSolf0.roa (hash: y34zQyNQE6Dt9rgo+TKZCABmiXucQM6cXI6cZVCrI5E=) 4: qMKz0iOTV-AipsqG6OSykAqBmcw.roa (hash: evn2bcSDR90liMyPkIBPgdH2fICEje6rbDEpXsqQ5bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:00:e5:1f:74:bd:bc:47:68:e8:1d:c0:7d:de:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262 Validity Not Before: Dec 15 17:00:40 2025 GMT Not After : Dec 16 17:00:40 2025 GMT Subject: CN=ca4989450ea0d5ff3616d4d703bd00bf9a5fec87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c9:9c:fc:ba:13:4a:4b:40:c4:24:57:79:68: bd:6a:1d:61:96:42:6b:ba:11:75:66:72:bc:6e:d0: 53:ca:c4:11:42:7f:6b:fb:31:22:67:1f:7b:de:3d: 61:fa:01:65:67:c2:a2:ce:a6:cb:ba:97:64:11:bd: ab:ae:47:e5:5c:2c:ff:97:de:66:a7:1a:16:cd:14: 70:f7:5d:a9:a0:43:57:da:d2:13:f7:bd:9c:34:83: 3e:f0:8e:ca:30:0e:b4:b3:13:6d:b9:98:36:4d:37: 47:49:25:d9:4b:18:df:95:3b:73:86:b5:84:5b:b7: 22:d7:05:29:47:fa:13:9d:88:97:54:af:79:8d:2b: c6:53:54:9b:9c:44:11:f9:68:7a:3c:0e:69:d4:66: 5a:15:d7:77:26:25:ce:c3:9d:d7:e7:e9:13:96:f5: 28:9f:fa:0b:76:3b:83:66:6f:ff:8f:18:57:bd:60: a5:77:b8:25:14:8f:fc:c5:71:df:9f:4c:15:1c:30: e9:54:dd:3d:7d:59:93:92:c0:0d:33:91:7d:eb:25: e1:33:13:e8:7e:ca:e6:05:51:a1:35:1a:de:a7:1f: 57:95:0e:60:08:31:38:8f:c6:fc:db:cb:a0:8a:0b: c2:05:cc:5e:2d:da:af:80:3f:7a:18:ff:0a:1a:0f: 67:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:49:89:45:0E:A0:D5:FF:36:16:D4:D7:03:BD:00:BF:9A:5F:EC:87 X509v3 Authority Key Identifier: keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:68:15:dd:41:78:3c:c4:0f:66:54:7c:09:25:42:35:da:61: 48:fd:19:b6:46:50:98:1a:17:94:e4:1f:00:cc:51:d2:6b:0f: 70:25:83:15:72:14:24:27:c7:1c:70:44:f2:18:42:b2:d4:5b: 3a:75:c5:b8:8b:ba:3d:99:28:f8:be:87:48:a6:77:b7:65:d6: a1:0a:c2:0e:a4:a5:d4:b5:b5:29:fc:48:20:11:27:d4:9d:2f: b3:44:5c:0f:9c:d1:7e:dc:0a:98:9a:b4:c3:93:8c:1d:09:cd: 06:90:ec:e1:51:51:80:33:35:9e:02:f5:19:1d:11:d5:c8:b6: f1:07:01:16:04:e4:2e:c0:ad:91:39:5c:53:96:72:6d:a1:59: 1d:85:f3:58:9d:67:66:aa:8d:77:2d:ca:2a:4b:bb:b6:c9:2e: 59:1d:32:cd:de:2e:4e:0a:0f:0a:4b:29:9f:c7:07:ce:93:cd: 44:4d:bb:3b:a3:fa:33:92:de:f5:02:2f:8a:83:42:06:d8:7b: ef:d7:d1:40:f6:01:6a:8e:8d:8a:2e:d3:8a:95:45:d2:94:7b: 95:81:d3:0b:d6:1e:42:4b:65:45:3e:69:5c:fb:44:d0:a4:6c: 5b:f0:ae:86:ee:33:70:c0:29:e8:60:4e:23:81:f2:33:da:1c: bb:53:0c:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9QDlH3S9vEdo6B3Afd6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2RjMzVlYmNkODhkZDBlMmE4ZGIzYTVhMDg2NTRiYzNi ZTAyNjIwHhcNMjUxMjE1MTcwMDQwWhcNMjUxMjE2MTcwMDQwWjAzMTEwLwYDVQQD EyhjYTQ5ODk0NTBlYTBkNWZmMzYxNmQ0ZDcwM2JkMDBiZjlhNWZlYzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58mc/LoTSktAxCRXeWi9ah1hlkJr uhF1ZnK8btBTysQRQn9r+zEiZx973j1h+gFlZ8KizqbLupdkEb2rrkflXCz/l95m pxoWzRRw912poENX2tIT972cNIM+8I7KMA60sxNtuZg2TTdHSSXZSxjflTtzhrWE W7ci1wUpR/oTnYiXVK95jSvGU1SbnEQR+Wh6PA5p1GZaFdd3JiXOw53X5+kTlvUo n/oLdjuDZm//jxhXvWCld7glFI/8xXHfn0wVHDDpVN09fVmTksANM5F96yXhMxPo fsrmBVGhNRrepx9XlQ5gCDE4j8b828ugigvCBcxeLdqvgD96GP8KGg9nGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpJiUUOoNX/NhbU1wO9AL+aX+yHMB8GA1UdIwQY MBaAFNB9w1682I3Q4qjbOloIZUvDvgJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xYzcxOGQtZTdhMC00MGFjLWExODEt Y2JhYTQyYTYyNzI3LzEvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8xYzcxOGQtZTdhMC00MGFjLWExODEtY2JhYTQyYTYyNzI3 LzEvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWgV3UF4 PMQPZlR8CSVCNdphSP0ZtkZQmBoXlOQfAMxR0msPcCWDFXIUJCfHHHBE8hhCstRb OnXFuIu6PZko+L6HSKZ3t2XWoQrCDqSl1LW1KfxIIBEn1J0vs0RcD5zRftwKmJq0 w5OMHQnNBpDs4VFRgDM1ngL1GR0R1ci28QcBFgTkLsCtkTlcU5ZybaFZHYXzWJ1n ZqqNdy3KKku7tskuWR0yzd4uTgoPCkspn8cHzpPNRE27O6P6M5Le9QIvioNCBth7 79fRQPYBao6Nii7TipVF0pR7lYHTC9YeQktlRT5pXPtE0KRsW/Cuhu4zcMAp6GBO I4HyM9ocu1MMJg== -----END CERTIFICATE-----Generated at Mon Dec 15 20:33:29 2025 by rpki-client