This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft File: h3YEKrfwcZWY6znlPvkuCsz6T6M.mft (raw, json) Hash identifier: asNqAgI+AOfgjd2vFZUp/BQuGpj4mIVNrfRHY3og1TA= Subject key identifier: 30:A7:FD:31:54:03:64:5D:A6:77:FF:0E:53:04:ED:3D:BE:B8:C7:65 Authority key identifier: 87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3 Certificate issuer: /CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3 Certificate serial: 019B5976E9397D96C07BC1F2E7B22BC7916E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft Manifest number: 0B98 Signing time: Fri 26 Dec 2025 07:02:03 +0000 Manifest this update: Fri 26 Dec 2025 07:02:03 +0000 Manifest next update: Sat 27 Dec 2025 07:02:03 +0000 Files and hashes: 1: h3YEKrfwcZWY6znlPvkuCsz6T6M.crl (hash: oqCima/yekt7AvOvX/s0RT8/9hFb5xdmXdnQ1glZ2Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:e9:39:7d:96:c0:7b:c1:f2:e7:b2:2b:c7:91:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3 Validity Not Before: Dec 26 07:02:03 2025 GMT Not After : Dec 27 07:02:03 2025 GMT Subject: CN=30a7fd315403645da677ff0e5304ed3dbeb8c765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:1f:38:c2:87:54:33:9c:d6:bb:85:08:5e: df:eb:ab:e6:ae:d9:37:58:d5:6d:db:23:63:f8:1c: 55:74:95:e5:3d:4a:e4:a4:12:e9:ae:8a:90:74:a5: 1b:84:d3:ae:11:70:2b:47:23:27:a3:a1:67:3c:ac: 87:3f:56:b0:e2:27:0e:b8:7b:82:9b:95:24:15:1f: a6:7c:2c:c9:01:06:01:24:c6:b7:73:2a:0d:da:0f: 8b:8b:5f:c4:d1:a9:26:b8:13:ad:ea:a4:ea:00:e6: 5a:11:99:08:18:ad:d2:67:fc:a5:5d:9a:e3:ce:fd: c5:69:c9:1d:26:f7:1b:bb:f8:ea:f0:5d:87:2f:c8: 21:fc:66:c1:28:ad:d4:f8:6a:93:10:93:d2:97:10: 0e:52:b5:94:d7:7e:b9:d4:c5:89:7c:05:f4:36:3a: 5f:ce:30:0b:0a:84:c0:cc:57:10:dc:8b:fe:23:c5: e2:ef:ab:c4:2c:ba:da:74:1c:2f:43:ab:cb:ce:25: a3:fb:8b:1f:c9:4b:6c:bb:a7:97:10:29:20:0f:12: f2:22:e1:3a:0e:2a:42:5e:6c:56:58:56:8a:65:7e: 27:ed:99:31:95:05:cb:25:a7:ab:c5:91:52:c4:cd: f0:7c:81:b3:59:ee:49:26:6b:14:71:b6:1e:50:32: 1d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A7:FD:31:54:03:64:5D:A6:77:FF:0E:53:04:ED:3D:BE:B8:C7:65 X509v3 Authority Key Identifier: keyid:87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:91:32:d8:4b:41:3f:39:fb:42:90:22:74:5e:de:b9:ef:8a: 58:e6:58:18:44:d5:e3:04:b6:d1:22:67:33:e9:5a:93:5a:28: 06:be:df:2a:c3:07:52:79:ce:32:81:2d:a6:0c:c0:9c:33:eb: 31:da:d1:eb:cb:09:f7:d2:c4:8e:c8:bd:83:a2:09:23:42:60: 77:61:71:31:41:de:f8:62:f2:ca:a2:ba:4e:70:56:60:bb:ad: 43:5d:52:23:6f:07:13:1b:a5:e5:81:ba:a6:6f:8e:31:6c:a6: 02:08:64:a0:9e:ce:83:4f:1f:5c:be:ce:a0:1a:24:10:c5:b4: 8d:d8:f6:e6:f9:56:48:2c:22:3c:b2:f6:4a:65:64:ba:a8:74: 8a:7d:27:94:14:a7:75:33:19:49:a7:ff:98:19:92:06:b3:13: 53:ec:58:9c:13:8e:56:b4:ad:7c:2d:94:45:3e:a7:33:c3:69: c2:7c:cf:64:39:42:ac:24:d5:34:fb:11:2f:1e:71:59:2d:6c: 4a:e5:5d:ab:f6:58:0d:c9:9c:aa:14:d8:f0:28:f0:e2:69:0b: 22:32:bd:3c:63:8a:03:a7:b2:df:a7:55:75:f2:13:49:35:d5: 3b:f4:87:48:b7:9b:ff:9f:15:80:9a:0c:5e:a7:3f:77:b6:2c: a1:5b:4c:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZduk5fZbAe8Hy57Irx5FuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzYwNDJhYjdmMDcxOTU5OGViMzllNTNlZjkyZTBhY2Nm YTRmYTMwHhcNMjUxMjI2MDcwMjAzWhcNMjUxMjI3MDcwMjAzWjAzMTEwLwYDVQQD EygzMGE3ZmQzMTU0MDM2NDVkYTY3N2ZmMGU1MzA0ZWQzZGJlYjhjNzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMwfOMKHVDOc1ruFCF7f66vmrtk3 WNVt2yNj+BxVdJXlPUrkpBLproqQdKUbhNOuEXArRyMno6FnPKyHP1aw4icOuHuC m5UkFR+mfCzJAQYBJMa3cyoN2g+Li1/E0akmuBOt6qTqAOZaEZkIGK3SZ/ylXZrj zv3FackdJvcbu/jq8F2HL8gh/GbBKK3U+GqTEJPSlxAOUrWU13651MWJfAX0Njpf zjALCoTAzFcQ3Iv+I8Xi76vELLradBwvQ6vLziWj+4sfyUtsu6eXECkgDxLyIuE6 DipCXmxWWFaKZX4n7ZkxlQXLJaerxZFSxM3wfIGzWe5JJmsUcbYeUDIdzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCn/TFUA2Rdpnf/DlME7T2+uMdlMB8GA1UdIwQY MBaAFId2BCq38HGVmOs55T75LgrM+k+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNZRUtyZndjWldZNnpubFB2a3VDc3o2VDZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85YmRiOGMtZDMwNy00MWY2LWFjODEt ZTNjY2YzZWEzYzRhLzEvaDNZRUtyZndjWldZNnpubFB2a3VDc3o2VDZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC85YmRiOGMtZDMwNy00MWY2LWFjODEtZTNjY2YzZWEzYzRh LzEvaDNZRUtyZndjWldZNnpubFB2a3VDc3o2VDZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJEy2EtB Pzn7QpAidF7eue+KWOZYGETV4wS20SJnM+lak1ooBr7fKsMHUnnOMoEtpgzAnDPr MdrR68sJ99LEjsi9g6IJI0Jgd2FxMUHe+GLyyqK6TnBWYLutQ11SI28HExul5YG6 pm+OMWymAghkoJ7Og08fXL7OoBokEMW0jdj25vlWSCwiPLL2SmVkuqh0in0nlBSn dTMZSaf/mBmSBrMTU+xYnBOOVrStfC2URT6nM8NpwnzPZDlCrCTVNPsRLx5xWS1s SuVdq/ZYDcmcqhTY8Cjw4mkLIjK9PGOKA6ey36dVdfITSTXVO/SHSLeb/58VgJoM Xqc/d7YsoVtM2Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:24 2025 by rpki-client