This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft File: Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json) Hash identifier: I7g2vHP02uoiTskB7b7z92MTxIipNiX1i312N4PrOug= Subject key identifier: 73:9C:C1:DC:3F:C4:B1:FE:43:C9:F6:B9:FD:D0:81:D6:A6:15:CB:CF Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10 Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10 Certificate serial: 019B20D05629363AFD7034DBF8DE341A86BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft Manifest number: 0FC3 Signing time: Mon 15 Dec 2025 07:01:22 +0000 Manifest this update: Mon 15 Dec 2025 07:01:22 +0000 Manifest next update: Tue 16 Dec 2025 07:01:22 +0000 Files and hashes: 1: 1-veQxSzqgnwuwyzarzzUI6GU1Vo.roa (hash: bIWGmao73L88A9Mc0bEmGHNF/q2XxTrM/cwuMLwX1wg=) 2: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: IRbjaHWAVH/feuFaE13tpP4+LsgrCYX1fJuSWyGJJJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:56:29:36:3a:fd:70:34:db:f8:de:34:1a:86:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10 Validity Not Before: Dec 15 07:01:22 2025 GMT Not After : Dec 16 07:01:22 2025 GMT Subject: CN=739cc1dc3fc4b1fe43c9f6b9fdd081d6a615cbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:84:57:68:7a:65:6e:51:b8:8a:af:6a:21: ca:64:73:08:5c:29:0c:33:e3:7a:b1:90:b1:40:d6: a0:3f:42:06:ad:89:78:c1:c2:22:3f:29:11:8b:72: 44:7a:50:52:a1:eb:de:bd:da:fb:4c:ba:53:8f:87: 64:39:98:03:79:96:9e:1f:0a:58:b0:86:0a:11:a5: 4b:11:fe:48:ef:b2:74:d6:03:d3:9e:89:b9:50:22: 33:6b:3e:77:ef:e9:a7:66:9f:af:5f:a8:c5:fa:d8: 82:83:29:dd:ae:ae:05:a5:1a:b4:17:03:03:2e:64: c8:98:93:77:6b:8d:0c:d3:ce:da:62:9d:a3:0c:bd: ee:1c:af:16:4c:1a:f8:e6:b9:d6:a6:8f:18:ba:1b: b9:e1:54:0d:e6:4b:bc:1f:4b:5c:01:1e:16:25:60: 11:08:c5:c3:5e:47:53:08:b5:0a:b1:ae:7b:e7:15: e6:a9:00:a6:d1:ca:e1:08:b7:f8:02:bb:a9:4d:a3: 5a:e2:61:ee:17:ea:31:59:2b:d6:51:a5:0b:4a:a9: 28:5f:ab:c2:74:f3:b4:4c:2f:93:5b:54:76:4b:52: 6c:ad:a1:83:ef:f7:82:0a:e4:f5:61:d7:58:0c:2e: 6a:48:c6:ef:96:17:12:83:18:01:07:74:ee:64:59: 3d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9C:C1:DC:3F:C4:B1:FE:43:C9:F6:B9:FD:D0:81:D6:A6:15:CB:CF X509v3 Authority Key Identifier: keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e8:aa:dd:65:ed:f7:c8:13:6e:74:03:ce:9b:39:42:a9:b0: 2e:d3:dc:88:94:49:1d:d6:50:0f:9e:1d:e4:1f:ed:ec:4d:79: 11:9c:91:70:3b:07:68:ce:07:01:d0:a1:7c:ee:13:8c:dd:5d: 05:a3:5e:0b:62:12:ae:98:34:eb:12:94:02:dd:63:f5:61:9e: b7:92:57:e2:83:b5:fb:e0:84:f2:4d:11:86:2c:1b:46:6f:51: f3:44:b2:38:f3:ee:07:a4:5a:08:69:d5:77:53:5e:9a:40:85: b0:47:18:23:90:f4:c5:af:61:ef:3b:6d:11:9c:03:26:b7:09: 68:da:af:6a:f2:58:ec:d6:f1:ea:35:36:a0:82:bc:58:3c:6b: 33:6b:6f:32:47:65:c4:9c:1f:0f:77:f8:62:1f:fa:d0:0e:af: 1f:07:f5:c1:ea:bd:aa:49:6e:52:24:3d:e7:c6:f7:bb:16:86: 65:b6:73:cf:c7:b7:d4:db:9d:18:2f:6f:ef:45:40:37:4a:47: 8d:c7:6c:f5:4e:0e:ec:d4:4a:21:74:3b:32:fb:2e:34:46:9d: f7:41:b2:10:50:1b:3d:e2:3c:ff:06:6c:42:b1:52:43:ba:9c: d9:75:13:ce:5b:ac:4b:6a:7a:dd:2e:ff:10:4a:6b:7c:aa:ae: 0d:31:5e:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0FYpNjr9cDTb+N40Goa8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMWRlOTM2ZmYxNzg0Yjc4Mjk2YjhiYzRiNGIwMzgxYjI5 M2VkMTAwHhcNMjUxMjE1MDcwMTIyWhcNMjUxMjE2MDcwMTIyWjAzMTEwLwYDVQQD Eyg3MzljYzFkYzNmYzRiMWZlNDNjOWY2YjlmZGQwODFkNmE2MTVjYmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8eEV2h6ZW5RuIqvaiHKZHMIXCkM M+N6sZCxQNagP0IGrYl4wcIiPykRi3JEelBSoevevdr7TLpTj4dkOZgDeZaeHwpY sIYKEaVLEf5I77J01gPTnom5UCIzaz537+mnZp+vX6jF+tiCgyndrq4FpRq0FwMD LmTImJN3a40M087aYp2jDL3uHK8WTBr45rnWpo8Yuhu54VQN5ku8H0tcAR4WJWAR CMXDXkdTCLUKsa575xXmqQCm0crhCLf4ArupTaNa4mHuF+oxWSvWUaULSqkoX6vC dPO0TC+TW1R2S1JsraGD7/eCCuT1YddYDC5qSMbvlhcSgxgBB3TuZFk9MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOcwdw/xLH+Q8n2uf3QgdamFcvPMB8GA1UdIwQY MBaAFB8d6Tb/F4S3gpa4vEtLA4Gyk+0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHgzcE52OFhoTGVDbHJpOFMwc0RnYktUN1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80NDlhZTYtNTk0My00NmQwLWIwMGMt OTI3Yjg2MzU2ZmE3LzEvSHgzcE52OFhoTGVDbHJpOFMwc0RnYktUN1JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi80NDlhZTYtNTk0My00NmQwLWIwMGMtOTI3Yjg2MzU2ZmE3 LzEvSHgzcE52OFhoTGVDbHJpOFMwc0RnYktUN1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeiq3WXt 98gTbnQDzps5QqmwLtPciJRJHdZQD54d5B/t7E15EZyRcDsHaM4HAdChfO4TjN1d BaNeC2ISrpg06xKUAt1j9WGet5JX4oO1++CE8k0RhiwbRm9R80SyOPPuB6RaCGnV d1NemkCFsEcYI5D0xa9h7zttEZwDJrcJaNqvavJY7Nbx6jU2oIK8WDxrM2tvMkdl xJwfD3f4Yh/60A6vHwf1weq9qkluUiQ958b3uxaGZbZzz8e31NudGC9v70VAN0pH jcds9U4O7NRKIXQ7MvsuNEad90GyEFAbPeI8/wZsQrFSQ7qc2XUTzlusS2p63S7/ EEprfKquDTFelg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:14:42 2025 by rpki-client