This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: Qf+vbTphwX7Hk1ylUQTFloelYzZOGOM+R/p0MFsNe4c= Subject key identifier: C7:17:C4:DB:B4:D6:EC:A2:33:02:AF:8B:3E:0A:75:09:D5:10:0D:54 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019AEDF589D142C5228997766C36F35EA004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 1355 Signing time: Fri 05 Dec 2025 10:01:23 +0000 Manifest this update: Fri 05 Dec 2025 10:01:23 +0000 Manifest next update: Sat 06 Dec 2025 10:01:23 +0000 Files and hashes: 1: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=) 2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: GeGfqP0JyTdaIHg/YuNo6om5pYu+JkBTpeqoXa+WSMA=) 3: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=) 4: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=) 5: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=) 6: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=) 7: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (hash: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=) 8: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=) 9: lLTt27CvKVrZ46MtIxZb-bD0JJg.roa (hash: r41CVNzvdr3xjDNcNmmOPnidy7vQT3DjIW3YSNMbicI=) 10: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=) 11: ve4kS1FSpKOZDfPOmvEJot6T9gc.roa (hash: /8G7vYP5BGzfa/caGIr/zNwzv8N1oQfYQzWhKIYfL+g=) 12: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:f5:89:d1:42:c5:22:89:97:76:6c:36:f3:5e:a0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Dec 5 10:01:23 2025 GMT Not After : Dec 6 10:01:23 2025 GMT Subject: CN=c717c4dbb4d6eca23302af8b3e0a7509d5100d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:92:e2:e9:4b:72:f2:84:ee:04:34:e3:7e: 92:88:60:54:ae:09:b6:85:36:43:66:99:97:e7:1c: c0:9e:e0:49:ee:74:48:44:7d:b7:76:10:62:fa:fb: 9b:53:3c:c1:5f:38:c8:3d:c3:1e:ed:43:13:48:e4: 2d:98:50:b5:f8:1c:3b:df:f5:dc:5d:be:eb:0a:c6: 73:f6:0e:6e:97:3a:26:41:0f:f7:57:77:78:ec:dc: b3:34:5a:50:be:9e:91:1d:ff:ce:f2:57:86:3a:04: 5f:cc:b2:65:f3:06:0e:7c:c6:e7:7b:0c:63:66:be: 83:13:b0:8e:6e:cb:ac:22:8f:13:50:23:f1:57:a5: ee:e1:93:fe:d5:d2:e3:f2:21:a0:d2:c1:aa:01:d4: 63:b6:6b:52:9e:65:6a:96:47:fd:57:a9:ef:e0:c2: 3e:1c:a4:bf:f9:8f:cd:38:38:a9:f7:35:b3:26:29: ca:64:19:03:60:bd:bc:15:45:97:82:38:69:6b:fe: 87:b4:55:e4:13:41:b3:4d:55:bf:1d:b4:ac:31:fd: 76:56:5a:3d:6d:6f:72:ef:a8:4b:5c:c0:c0:b2:12: f9:c6:c5:4e:e6:7f:8b:33:49:43:cd:51:21:9d:07: 12:5f:74:ad:66:b5:64:f5:f1:ed:b2:fb:2e:cd:1b: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:17:C4:DB:B4:D6:EC:A2:33:02:AF:8B:3E:0A:75:09:D5:10:0D:54 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2b:2d:29:2f:3a:d1:5b:8a:f7:76:57:c8:a5:54:05:74:9a: 61:2f:85:1e:d9:0d:3b:ca:64:cb:b2:f8:fd:36:f3:fb:eb:7c: d2:8e:a1:3b:39:ca:d5:d7:1f:22:94:1a:aa:57:7f:55:bc:75: b9:5e:d5:88:62:e7:55:1c:14:b4:19:6b:d5:9a:dd:5e:e2:fc: 95:7a:2a:e2:ac:89:1d:e4:1b:08:3c:04:98:09:d3:c1:a1:21: 70:91:fd:9e:dc:7a:91:f2:39:9b:80:37:c9:30:95:48:c6:5f: 8f:bf:2b:9b:b9:cf:b8:29:de:6c:75:e8:9a:b4:d7:82:9b:49: 49:95:bf:c1:b4:b1:22:cd:6e:f9:46:2e:0f:3c:24:ab:bd:27: 60:07:c2:c5:45:0a:dc:f6:1a:e1:0a:3f:e4:80:66:fa:55:5c: d6:f8:8e:b6:16:8b:4e:9d:fc:a5:c2:bb:d8:f5:62:d8:95:92: 79:ff:48:59:ac:25:fc:43:09:cd:99:31:42:e2:11:99:0b:b8: a5:bb:ac:ca:5b:11:c1:c2:c1:d3:32:df:36:ca:e0:fc:6e:72: dc:87:e4:74:22:db:0f:b3:33:1d:6d:d7:45:de:a6:83:96:65: 4a:55:37:54:e4:bb:b3:8e:fc:b0:1c:09:c2:83:e9:28:13:88: d0:d2:e4:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrt9YnRQsUiiZd2bDbzXqAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjUxMjA1MTAwMTIzWhcNMjUxMjA2MTAwMTIzWjAzMTEwLwYDVQQD EyhjNzE3YzRkYmI0ZDZlY2EyMzMwMmFmOGIzZTBhNzUwOWQ1MTAwZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXmS4ulLcvKE7gQ0436SiGBUrgm2 hTZDZpmX5xzAnuBJ7nRIRH23dhBi+vubUzzBXzjIPcMe7UMTSOQtmFC1+Bw73/Xc Xb7rCsZz9g5ulzomQQ/3V3d47NyzNFpQvp6RHf/O8leGOgRfzLJl8wYOfMbnewxj Zr6DE7CObsusIo8TUCPxV6Xu4ZP+1dLj8iGg0sGqAdRjtmtSnmVqlkf9V6nv4MI+ HKS/+Y/NODip9zWzJinKZBkDYL28FUWXgjhpa/6HtFXkE0GzTVW/HbSsMf12Vlo9 bW9y76hLXMDAshL5xsVO5n+LM0lDzVEhnQcSX3StZrVk9fHtsvsuzRtQ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcXxNu01uyiMwKviz4KdQnVEA1UMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSstKS86 0VuK93ZXyKVUBXSaYS+FHtkNO8pky7L4/Tbz++t80o6hOznK1dcfIpQaqld/Vbx1 uV7ViGLnVRwUtBlr1ZrdXuL8lXoq4qyJHeQbCDwEmAnTwaEhcJH9ntx6kfI5m4A3 yTCVSMZfj78rm7nPuCnebHXomrTXgptJSZW/wbSxIs1u+UYuDzwkq70nYAfCxUUK 3PYa4Qo/5IBm+lVc1viOthaLTp38pcK72PVi2JWSef9IWawl/EMJzZkxQuIRmQu4 pbusylsRwcLB0zLfNsrg/G5y3IfkdCLbD7MzHW3XRd6mg5ZlSlU3VOS7s478sBwJ woPpKBOI0NLkow== -----END CERTIFICATE-----Generated at Fri Dec 5 16:56:40 2025 by rpki-client