This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json) Hash identifier: smQL+zPgewxwSZ6zXN5b7nyX4g7bpB7S9c6CER5gXlM= Subject key identifier: 56:5E:73:93:B1:3B:D3:F1:1F:C4:DB:63:8F:2B:CF:37:08:9D:15:D9 Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6 Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6 Certificate serial: 019B2F9E1D45AD5847618C1A443327B1705A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft Manifest number: 0B9B Signing time: Thu 18 Dec 2025 04:00:49 +0000 Manifest this update: Thu 18 Dec 2025 04:00:49 +0000 Manifest next update: Fri 19 Dec 2025 04:00:49 +0000 Files and hashes: 1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: 4etFQL0CE7DhZdnNc4U7mpdxeMcnNo7mlzSRZTZpaUc=) 2: iHSrTbxet8j5uaWQ6yDr02jRxjY.roa (hash: oCfYmcjvyzUP7DhCDsHSSh72gSgXxnVFLGRLc0v5Xfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:1d:45:ad:58:47:61:8c:1a:44:33:27:b1:70:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6 Validity Not Before: Dec 18 04:00:49 2025 GMT Not After : Dec 19 04:00:49 2025 GMT Subject: CN=565e7393b13bd3f11fc4db638f2bcf37089d15d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:91:0f:a9:3e:51:70:3c:2b:a2:83:b0:a8:3c: e4:c6:6c:a6:d5:1a:84:f9:fb:ab:a8:8d:99:ed:54: 5e:bd:86:b9:79:22:81:9d:d6:06:f7:65:08:e2:d7: 02:6e:e8:6d:19:62:b6:34:52:71:79:2d:7a:eb:b2: e8:ae:b1:6a:ce:7d:77:3d:03:53:54:89:85:18:78: 30:e1:68:29:92:2d:f0:ac:b9:e0:f3:5d:78:d2:29: 9b:f1:28:b9:62:51:35:65:ed:96:cb:c9:6e:24:5c: 32:83:32:99:3f:76:51:99:22:06:22:3c:61:7d:83: be:a1:7f:a1:3f:30:83:6b:7c:6d:65:42:83:e7:00: d8:72:f0:58:80:ff:d2:20:1d:cc:12:5c:0b:ba:2d: d8:23:c5:af:5c:7d:55:c9:12:41:a9:3d:fa:da:2a: 07:23:15:36:50:bb:a7:9f:8e:e3:3a:66:fe:3c:1a: 9f:2e:4f:10:3b:45:6c:69:f4:0a:9c:26:b3:25:a9: 70:68:37:c7:20:94:5b:f8:bf:9b:22:5e:da:b3:3a: b2:5a:88:2d:19:a8:fd:79:63:18:1d:1e:8c:4e:6b: 1f:1c:95:f3:5f:6e:ac:8f:db:fc:2c:30:45:04:76: 40:6e:cc:c1:e7:96:5a:17:fd:c9:6a:1c:5a:aa:f4: 50:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5E:73:93:B1:3B:D3:F1:1F:C4:DB:63:8F:2B:CF:37:08:9D:15:D9 X509v3 Authority Key Identifier: keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:2d:ec:5d:9e:e8:ec:85:a9:52:79:f3:46:0b:60:04:3e:60: 60:6b:04:a7:1f:69:27:f8:63:c4:57:cf:a9:bb:18:36:8a:c7: 68:5e:c2:9f:ff:6c:e7:1a:7d:e3:d2:3f:6f:42:8d:61:aa:83: da:81:b8:b6:15:13:74:9c:73:f5:f8:28:18:c7:f4:52:54:dd: f2:f7:2e:57:26:a9:8f:4c:27:fb:41:57:fb:71:a1:84:9b:70: 8e:42:7b:40:76:ed:3c:b3:6e:3e:6a:7f:c9:d2:3f:58:ed:3d: 5e:92:12:89:64:61:92:8d:a9:13:75:47:5b:4c:89:43:6a:74: b9:e7:d5:5a:f0:96:3a:47:2e:2e:8c:e8:8a:45:61:ea:f1:e9: de:78:9d:9f:82:5e:19:e4:fa:ed:d7:5b:54:ac:16:ca:e1:ce: c9:e6:54:f6:6f:44:81:c6:f7:89:3b:cd:41:8a:27:16:db:84: 3e:10:77:cf:2a:c8:5a:c2:ce:0f:cd:19:f8:42:26:49:bc:1b: 12:0b:8d:00:3e:31:2f:14:34:8b:4d:05:f5:23:af:de:9e:96: 95:23:12:b1:15:5b:48:4a:26:93:44:76:50:62:52:37:fd:f6: d0:cd:b2:30:d1:39:66:24:67:30:49:8b:da:9a:1e:0e:c4:17: 47:9a:ad:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnh1FrVhHYYwaRDMnsXBaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNzE0MmI0NWI1Y2UzOTAxNmUyNWUwOWIyZmVkNTc5YTli ZDc3ZDYwHhcNMjUxMjE4MDQwMDQ5WhcNMjUxMjE5MDQwMDQ5WjAzMTEwLwYDVQQD Eyg1NjVlNzM5M2IxM2JkM2YxMWZjNGRiNjM4ZjJiY2YzNzA4OWQxNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5EPqT5RcDwrooOwqDzkxmym1RqE +furqI2Z7VRevYa5eSKBndYG92UI4tcCbuhtGWK2NFJxeS1667LorrFqzn13PQNT VImFGHgw4Wgpki3wrLng81140imb8Si5YlE1Ze2Wy8luJFwygzKZP3ZRmSIGIjxh fYO+oX+hPzCDa3xtZUKD5wDYcvBYgP/SIB3MElwLui3YI8WvXH1VyRJBqT362ioH IxU2ULunn47jOmb+PBqfLk8QO0VsafQKnCazJalwaDfHIJRb+L+bIl7aszqyWogt Gaj9eWMYHR6MTmsfHJXzX26sj9v8LDBFBHZAbszB55ZaF/3JahxaqvRQ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZec5OxO9PxH8TbY48rzzcInRXZMB8GA1UdIwQY MBaAFB9xQrRbXOOQFuJeCbL+1XmpvXfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZmVhZDctNTg2YS00YjM1LWIxOTkt ZGZlNDVmNjcyZjgxLzEvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kZmVhZDctNTg2YS00YjM1LWIxOTktZGZlNDVmNjcyZjgx LzEvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwi3sXZ7o 7IWpUnnzRgtgBD5gYGsEpx9pJ/hjxFfPqbsYNorHaF7Cn/9s5xp949I/b0KNYaqD 2oG4thUTdJxz9fgoGMf0UlTd8vcuVyapj0wn+0FX+3GhhJtwjkJ7QHbtPLNuPmp/ ydI/WO09XpISiWRhko2pE3VHW0yJQ2p0uefVWvCWOkcuLozoikVh6vHp3nidn4Je GeT67ddbVKwWyuHOyeZU9m9Egcb3iTvNQYonFtuEPhB3zyrIWsLOD80Z+EImSbwb EguNAD4xLxQ0i00F9SOv3p6WlSMSsRVbSEomk0R2UGJSN/320M2yMNE5ZiRnMEmL 2poeDsQXR5qtjg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:30:51 2025 by rpki-client