This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json) Hash identifier: CYFe9h6lkYlXsOITC84jdCXVMQ9xBelzhuo3YmaKJNg= Subject key identifier: 2D:96:8D:94:03:D6:F0:75:1B:24:09:44:78:3F:A0:EC:C1:A0:6C:86 Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b Certificate serial: 019B35694EF81CF319C10BF1486D07B59329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 07:00:52 +0000 Manifest this update: Fri 19 Dec 2025 07:00:52 +0000 Manifest next update: Sat 20 Dec 2025 07:00:52 +0000 Files and hashes: 1: NwkZh_DNuB_iBInY9wDbpyHdLgE.roa (hash: 5w+s5Rk1602R4y1zX8F10ZF0iAVWkGEzyROrjF/5dqE=) 2: SeFxeccbo68KLvP3eAvdIgxyzVI.roa (hash: KKPafx1oDtZuIFD9Wnd6TukbFDgA1SpzCeh9Ci09gpw=) 3: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: mptmG5Tf+6LnC90028wULJcYPoImjLWLkSebaVZJyv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:4e:f8:1c:f3:19:c1:0b:f1:48:6d:07:b5:93:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b Validity Not Before: Dec 19 07:00:52 2025 GMT Not After : Dec 20 07:00:52 2025 GMT Subject: CN=2d968d9403d6f0751b240944783fa0ecc1a06c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:1b:ca:89:41:71:04:bf:5c:79:b7:8e:29: 9b:d9:3a:05:44:6b:84:ca:28:89:0f:71:dc:2d:bc: cc:23:e2:f5:d3:2e:19:f3:8e:96:a9:1c:11:16:9f: 1b:42:3c:7e:39:18:5c:fe:e5:b7:6b:08:25:9b:3b: e6:94:e0:78:c7:26:ec:8f:00:e7:39:e0:f8:13:4f: ac:ac:2a:91:44:af:ad:b1:94:cb:62:69:d4:16:9d: 3a:5a:12:bb:f6:8f:e4:33:dd:a5:dc:e0:15:b5:f0: 0f:0a:d2:8f:78:56:fd:fb:b6:c0:03:33:e0:72:62: 7e:39:78:41:19:ac:78:4c:a0:dd:a0:71:e2:ae:6f: bf:53:a1:2a:15:77:3a:88:93:14:9e:93:bc:64:a1: 75:5b:fe:6c:f4:ae:00:0f:c8:04:88:9d:fd:42:8a: 16:70:e5:de:de:d6:59:d3:50:7a:3a:28:3e:b7:9f: d7:00:73:bf:32:bb:ca:e0:55:61:9b:12:89:be:9c: 64:9f:b9:f2:e8:cd:56:e5:29:19:e5:74:ab:f3:2d: 0d:7f:ff:95:fc:cf:8b:9e:25:5c:01:bb:bf:d6:4b: 88:b3:de:b5:f8:14:d8:48:73:e0:d6:c6:58:66:61: a9:48:58:d9:83:a9:c3:c7:9f:37:97:11:04:db:54: 57:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:96:8D:94:03:D6:F0:75:1B:24:09:44:78:3F:A0:EC:C1:A0:6C:86 X509v3 Authority Key Identifier: keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c0:e7:da:ab:07:ff:78:89:24:ab:b8:e4:c9:08:14:01:1c: bb:15:fc:ef:ad:f3:9f:77:24:ce:8e:6e:dc:6e:62:e6:95:33: 3b:3b:19:cc:68:b0:b2:a3:82:e0:04:cc:f7:f3:68:89:2d:e3: 5d:71:1b:22:11:f5:7c:15:2b:85:be:4f:d4:e7:d6:35:a4:af: bf:b7:d3:a7:8f:e8:b6:dc:89:04:f6:9a:cd:31:bc:34:c7:e5: 9a:a7:e3:16:a9:fc:eb:84:ba:a6:32:f1:4c:29:68:f9:bb:cc: cf:5f:1e:51:09:dc:b8:45:ac:e4:4a:ae:aa:04:eb:df:36:82: b0:eb:ef:e7:bf:c1:2c:23:26:58:19:a5:64:8d:7a:29:84:d0: d1:c8:f0:2f:73:8d:1a:92:9a:e7:90:dd:0e:9a:66:3c:d7:0a: 8b:ab:85:db:bb:2b:eb:a8:81:70:0e:c3:49:64:dd:f3:07:d3: dc:c4:e2:6f:6e:4c:0d:63:60:8d:00:5c:8b:13:13:d1:bd:aa: 91:45:03:be:06:af:d7:11:d4:2e:cc:45:a4:7a:e4:69:f8:4a: 8a:b8:f0:5e:9f:0e:37:47:5e:2e:37:77:c3:9c:81:4e:6f:fd: e0:67:75:26:7d:de:c3:5f:cc:fa:01:4d:97:ef:31:42:c8:99: b3:8b:b1:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aU74HPMZwQvxSG0HtZMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3N2MyMDczNzExNmJjNmQ1ZTViMjI0OTMxY2YxM2RkN2Y3 OWY5NWIwHhcNMjUxMjE5MDcwMDUyWhcNMjUxMjIwMDcwMDUyWjAzMTEwLwYDVQQD EygyZDk2OGQ5NDAzZDZmMDc1MWIyNDA5NDQ3ODNmYTBlY2MxYTA2Yzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYUbyolBcQS/XHm3jimb2ToFRGuE yiiJD3HcLbzMI+L10y4Z846WqRwRFp8bQjx+ORhc/uW3awglmzvmlOB4xybsjwDn OeD4E0+srCqRRK+tsZTLYmnUFp06WhK79o/kM92l3OAVtfAPCtKPeFb9+7bAAzPg cmJ+OXhBGax4TKDdoHHirm+/U6EqFXc6iJMUnpO8ZKF1W/5s9K4AD8gEiJ39QooW cOXe3tZZ01B6Oig+t5/XAHO/MrvK4FVhmxKJvpxkn7ny6M1W5SkZ5XSr8y0Nf/+V /M+LniVcAbu/1kuIs961+BTYSHPg1sZYZmGpSFjZg6nDx583lxEE21RXkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2WjZQD1vB1GyQJRHg/oOzBoGyGMB8GA1UdIwQY MBaAFId8IHNxFrxtXlsiSTHPE91/eflbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgt ZTcyMzJmODQ0OGIwLzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgtZTcyMzJmODQ0OGIw LzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8Dn2qsH /3iJJKu45MkIFAEcuxX8763zn3ckzo5u3G5i5pUzOzsZzGiwsqOC4ATM9/NoiS3j XXEbIhH1fBUrhb5P1OfWNaSvv7fTp4/ottyJBPaazTG8NMflmqfjFqn864S6pjLx TClo+bvMz18eUQncuEWs5EquqgTr3zaCsOvv57/BLCMmWBmlZI16KYTQ0cjwL3ON GpKa55DdDppmPNcKi6uF27sr66iBcA7DSWTd8wfT3MTib25MDWNgjQBcixMT0b2q kUUDvgav1xHULsxFpHrkafhKirjwXp8ON0deLjd3w5yBTm/94Gd1Jn3ew1/M+gFN l+8xQsiZs4uxpw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:24 2025 by rpki-client