This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json) Hash identifier: yk4z8jobLVW5kPd8rat5H+QhLuOHP92yKZbd7xRmiEM= Subject key identifier: 26:96:6F:E2:A7:92:4C:CB:31:FE:4B:A6:C2:F0:BD:8D:91:FC:99:72 Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6 Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6 Certificate serial: 019B5AF6296141344B7E3070764887A241F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft Manifest number: 0785 Signing time: Fri 26 Dec 2025 14:00:40 +0000 Manifest this update: Fri 26 Dec 2025 14:00:40 +0000 Manifest next update: Sat 27 Dec 2025 14:00:40 +0000 Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: 5ngqTDXOkWs3ZkpeuBdSUUqT+E94LvUT1ZRKXqQzLO0=) 2: t_S27jbE28k53wPb8BjCMYnQRo4.roa (hash: 6FIsv+jDOzfD9s49oJ3R+IPW0lckCRZ799Q4ILAZx8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:29:61:41:34:4b:7e:30:70:76:48:87:a2:41:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6 Validity Not Before: Dec 26 14:00:40 2025 GMT Not After : Dec 27 14:00:40 2025 GMT Subject: CN=26966fe2a7924ccb31fe4ba6c2f0bd8d91fc9972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:da:32:fe:02:00:a0:7a:cd:68:a1:7d:25: bd:a8:fc:b1:49:b6:59:a2:cc:29:fd:50:9f:21:f8: f4:ba:03:db:d5:b0:95:24:3d:db:24:e5:5c:f2:df: c5:32:2c:0b:41:de:43:54:97:1c:8c:63:f5:67:2e: 48:bb:8b:f9:79:ab:f8:06:98:74:25:c3:fd:73:fb: 62:99:63:fd:35:fc:f6:18:25:b7:75:e9:8d:d3:27: 77:0a:84:55:f0:d3:76:34:e1:43:67:25:f6:af:a4: 2c:a4:4e:d1:f1:93:c8:9d:d1:41:84:36:96:d1:d5: 0a:d0:2c:a7:1c:26:7f:8f:6b:6e:f0:e3:a1:fb:de: de:a0:4b:0f:cd:2d:8f:88:79:ac:04:4a:ef:97:47: 27:82:ab:c2:34:eb:61:c5:04:42:29:83:ee:b5:d7: 20:8e:e2:c0:03:c6:69:07:b3:22:89:18:aa:65:0a: 8e:9b:9e:99:22:43:2b:c1:a2:df:55:11:3e:fb:96: 2c:18:32:b7:4b:a8:97:fb:fd:9f:ac:c8:70:07:dd: 60:d6:20:f3:04:c1:ac:4e:b7:3f:d6:d3:a9:33:31: 3b:33:83:e5:8a:c5:2f:7e:68:14:3d:79:9c:a9:9c: 1f:d5:04:e1:f9:e6:56:a3:ab:90:2b:74:5b:42:9d: 0d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:96:6F:E2:A7:92:4C:CB:31:FE:4B:A6:C2:F0:BD:8D:91:FC:99:72 X509v3 Authority Key Identifier: keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:35:6e:b8:30:49:85:07:70:ae:6f:29:5d:16:db:04:f8:3a: d7:c8:46:48:59:2c:ff:ad:2e:03:9a:c6:3a:a9:62:05:43:ba: d2:be:bc:d0:d8:68:07:18:9f:a5:61:07:04:94:47:bf:eb:c0: 58:f6:cd:d0:6e:1f:bd:95:5c:4a:7f:98:4f:53:d5:02:25:98: 14:09:1e:be:03:f7:a4:91:8a:fa:6e:3e:47:fe:a1:f4:9c:08: 17:45:88:a3:5b:12:21:70:48:10:a4:91:35:bf:3e:b1:e1:8b: 1d:9e:ee:e5:f7:5c:be:9c:36:58:2e:23:87:a0:2e:64:b2:64: 35:8d:a4:83:aa:8f:9e:d4:42:49:7b:92:d7:a1:e0:6f:4d:4e: 11:55:55:ca:c6:73:ad:f2:1e:c4:b6:09:7f:27:c2:61:20:5e: 08:81:a4:80:84:89:67:f5:fd:cf:c9:e9:6d:01:f5:48:46:86: 71:b3:d8:1e:8c:e7:51:1a:a1:80:48:b5:bb:75:97:10:33:f2: 73:4d:17:17:19:54:66:e0:ad:64:36:dc:44:70:3d:e2:62:2a: 1d:81:d4:70:33:9f:35:85:6c:63:9f:5c:ee:a4:0a:5d:3f:52: 76:7d:5a:13:9d:47:7b:5f:c7:20:52:c5:8f:15:43:4c:b1:02: b6:c8:e4:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9ilhQTRLfjBwdkiHokH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjN2ZiZDY3NzQ0MWNiYjVjMGJkNDdiY2QyZjM4YmExOTJh MzM2YTYwHhcNMjUxMjI2MTQwMDQwWhcNMjUxMjI3MTQwMDQwWjAzMTEwLwYDVQQD EygyNjk2NmZlMmE3OTI0Y2NiMzFmZTRiYTZjMmYwYmQ4ZDkxZmM5OTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgPaMv4CAKB6zWihfSW9qPyxSbZZ oswp/VCfIfj0ugPb1bCVJD3bJOVc8t/FMiwLQd5DVJccjGP1Zy5Iu4v5eav4Bph0 JcP9c/timWP9Nfz2GCW3demN0yd3CoRV8NN2NOFDZyX2r6QspE7R8ZPIndFBhDaW 0dUK0CynHCZ/j2tu8OOh+97eoEsPzS2PiHmsBErvl0cngqvCNOthxQRCKYPutdcg juLAA8ZpB7MiiRiqZQqOm56ZIkMrwaLfVRE++5YsGDK3S6iX+/2frMhwB91g1iDz BMGsTrc/1tOpMzE7M4PlisUvfmgUPXmcqZwf1QTh+eZWo6uQK3RbQp0NPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaWb+KnkkzLMf5LpsLwvY2R/JlyMB8GA1UdIwQY MBaAFNx/vWd0Qcu1wL1HvNLzi6GSozamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMt NzZkM2Q0ODBmYTY4LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMtNzZkM2Q0ODBmYTY4 LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDVuuDBJ hQdwrm8pXRbbBPg618hGSFks/60uA5rGOqliBUO60r680NhoBxifpWEHBJRHv+vA WPbN0G4fvZVcSn+YT1PVAiWYFAkevgP3pJGK+m4+R/6h9JwIF0WIo1sSIXBIEKSR Nb8+seGLHZ7u5fdcvpw2WC4jh6AuZLJkNY2kg6qPntRCSXuS16Hgb01OEVVVysZz rfIexLYJfyfCYSBeCIGkgISJZ/X9z8npbQH1SEaGcbPYHoznURqhgEi1u3WXEDPy c00XFxlUZuCtZDbcRHA94mIqHYHUcDOfNYVsY59c7qQKXT9Sdn1aE51He1/HIFLF jxVDTLECtsjkIA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:26 2025 by rpki-client