This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json) Hash identifier: Ge0n4TCcN+u6+zZPPn7W0iiBIA2KOOM8vJq6TmcAjdU= Subject key identifier: E8:EC:3D:F7:0C:2B:3C:36:71:51:A1:B6:A3:AD:D7:9D:90:88:8D:71 Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d Certificate serial: 019B5A5186F01D70AE2DBE8638F30FE36FEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 11:00:50 +0000 Manifest this update: Fri 26 Dec 2025 11:00:50 +0000 Manifest next update: Sat 27 Dec 2025 11:00:50 +0000 Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: wIfdbSoYNWOR9Q3/S4ya2Hb+kAwYAIaIgJAqlisgMFU=) 2: 7ZfxbTG5XE7d3U698g7DhphadTg.roa (hash: Pr0+WF0lvDtFnCz/0c70Eot8c7E9jRvKLuNSr3PuDSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:86:f0:1d:70:ae:2d:be:86:38:f3:0f:e3:6f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d Validity Not Before: Dec 26 11:00:50 2025 GMT Not After : Dec 27 11:00:50 2025 GMT Subject: CN=e8ec3df70c2b3c367151a1b6a3add79d90888d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:de:33:80:7f:3a:45:41:02:0f:6e:40:a3: fb:c8:18:2a:a1:c4:bc:bc:08:81:82:0c:b8:b8:d1: b6:90:d3:37:41:eb:7e:ef:49:6a:a0:72:56:07:24: d5:bb:a9:d8:3c:e6:c9:3b:91:d1:9e:07:c5:68:64: 25:ab:2d:ad:eb:21:40:37:87:ec:d8:cb:7a:0b:15: c6:15:11:d4:40:af:c2:bd:c7:99:46:1c:82:97:6c: 69:33:c1:27:a8:5d:98:8f:88:ce:fb:d5:23:65:11: c0:08:18:91:f5:37:3b:9b:12:a1:29:25:56:3b:59: fb:89:b6:9b:ff:d4:b2:2d:19:c5:1d:3b:25:99:76: d2:21:c5:0a:1c:60:c9:93:1f:01:57:15:ed:8d:e8: 30:47:52:2c:68:a6:e9:c7:02:de:9a:45:10:e7:13: 5a:c6:95:43:ae:06:a5:f5:e0:8b:c8:f4:25:03:d7: 74:78:38:42:64:29:56:5e:ac:08:04:c8:7d:af:93: 96:3b:d2:e7:17:07:7b:6a:34:8c:a3:23:78:d9:77: 30:86:46:73:07:e1:f3:9b:70:7e:a5:fc:a6:c7:ae: 50:a9:5e:28:fd:58:90:a7:47:2e:57:f7:70:d0:4a: 07:82:7e:ee:b2:a3:10:ed:ea:4b:f9:31:8d:76:cd: 61:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EC:3D:F7:0C:2B:3C:36:71:51:A1:B6:A3:AD:D7:9D:90:88:8D:71 X509v3 Authority Key Identifier: keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:bd:b6:99:fe:65:f6:2c:03:0b:9e:eb:f9:2f:18:a2:d8:d7: fb:99:d7:b5:f9:f0:b4:49:e7:42:15:a6:ae:bb:2c:a9:f7:33: f9:2f:6f:7f:7e:cd:fb:b9:1b:21:0b:d3:82:7b:ff:d1:e0:59: 49:e9:6f:3c:95:e5:dd:75:83:cc:ee:25:58:88:14:09:4a:bf: 27:1a:04:18:9b:b3:6e:46:31:20:fe:15:de:bc:cc:16:5b:af: fc:fc:59:12:fe:a1:71:04:5c:4e:7b:93:5b:13:24:df:ce:ed: 7c:fb:82:2a:33:d8:dd:74:cf:5a:f4:3e:ec:0f:65:1a:9e:b9: 3c:9c:47:9d:34:44:c8:c4:cb:c4:ed:77:67:22:cd:19:d3:b4: 41:97:00:6f:0a:89:c2:3d:37:a7:16:92:9f:72:be:6f:29:37: 47:67:ae:35:d3:85:3b:eb:e7:a2:64:06:61:0e:0b:52:d4:5b: 4b:01:78:51:59:05:8a:c3:a7:39:46:cd:6d:59:60:22:8b:31: c1:a9:f7:f2:21:cf:9d:db:6c:5a:cb:ee:39:58:6c:97:a8:83: 75:d6:a4:50:14:ae:09:df:b6:20:ad:9b:5b:7b:98:2b:8c:c0: 10:a0:87:27:c8:01:86:5a:f0:fc:26:b9:1e:a1:76:38:b7:c6: c4:74:a1:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUYbwHXCuLb6GOPMP42/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2RmZjU0N2VhY2JlODFkYzM0NjU1OTg0NDZkM2IwMjdk Y2I3NmQwHhcNMjUxMjI2MTEwMDUwWhcNMjUxMjI3MTEwMDUwWjAzMTEwLwYDVQQD EyhlOGVjM2RmNzBjMmIzYzM2NzE1MWExYjZhM2FkZDc5ZDkwODg4ZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfLeM4B/OkVBAg9uQKP7yBgqocS8 vAiBggy4uNG2kNM3Qet+70lqoHJWByTVu6nYPObJO5HRngfFaGQlqy2t6yFAN4fs 2Mt6CxXGFRHUQK/CvceZRhyCl2xpM8EnqF2Yj4jO+9UjZRHACBiR9Tc7mxKhKSVW O1n7ibab/9SyLRnFHTslmXbSIcUKHGDJkx8BVxXtjegwR1IsaKbpxwLemkUQ5xNa xpVDrgal9eCLyPQlA9d0eDhCZClWXqwIBMh9r5OWO9LnFwd7ajSMoyN42XcwhkZz B+Hzm3B+pfymx65QqV4o/ViQp0cuV/dw0EoHgn7usqMQ7epL+TGNds1htwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjsPfcMKzw2cVGhtqOt152QiI1xMB8GA1UdIwQY MBaAFNB9/1R+rL6B3DRlWYRG07An3LdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgt Nzg1YWMxOTFiMzFhLzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgtNzg1YWMxOTFiMzFh LzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg722mf5l 9iwDC57r+S8YotjX+5nXtfnwtEnnQhWmrrssqfcz+S9vf37N+7kbIQvTgnv/0eBZ SelvPJXl3XWDzO4lWIgUCUq/JxoEGJuzbkYxIP4V3rzMFluv/PxZEv6hcQRcTnuT WxMk387tfPuCKjPY3XTPWvQ+7A9lGp65PJxHnTREyMTLxO13ZyLNGdO0QZcAbwqJ wj03pxaSn3K+byk3R2euNdOFO+vnomQGYQ4LUtRbSwF4UVkFisOnOUbNbVlgIosx wan38iHPndtsWsvuOVhsl6iDddakUBSuCd+2IK2bW3uYK4zAEKCHJ8gBhlrw/Ca5 HqF2OLfGxHShhw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:28 2025 by rpki-client