This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft (raw, json) Hash identifier: oaqMsA5WWUPSKzkrK2Aj+5uUDiDFU5/SK8K3yaH9VZY= Subject key identifier: 26:0F:65:18:29:24:6B:F1:6D:D1:A2:8F:5F:96:E7:52:6B:72:BC:99 Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32 Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32 Certificate serial: 019B58D12940781733C82177C35792927547 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft Manifest number: 0372 Signing time: Fri 26 Dec 2025 04:01:01 +0000 Manifest this update: Fri 26 Dec 2025 04:01:01 +0000 Manifest next update: Sat 27 Dec 2025 04:01:01 +0000 Files and hashes: 1: JY1Ry82sD4kNWhz4gQuDnSIFpN8.roa (hash: 8elrrlaE2J0H4bGnc8sBg7PwEFKBgdvohUzIrvCFh2E=) 2: h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl (hash: 03RnZamayIm3rNvKLHOKHvsYmWjqwV+8ND9gY2PK1wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:29:40:78:17:33:c8:21:77:c3:57:92:92:75:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32 Validity Not Before: Dec 26 04:01:01 2025 GMT Not After : Dec 27 04:01:01 2025 GMT Subject: CN=260f651829246bf16dd1a28f5f96e7526b72bc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:56:07:dc:39:53:c0:d9:d0:f1:10:7a:62:c2: 05:ec:73:f5:e5:e2:8c:34:25:7e:90:03:43:ae:55: a0:f0:d9:10:db:c2:e3:0e:5d:4f:1d:45:4d:cb:1c: 55:a2:b4:ca:69:dd:0f:ac:54:88:d2:d8:3b:74:99: c5:5d:33:ff:8b:11:ff:cc:0e:04:0a:e9:49:70:45: 95:0e:55:f8:d7:e7:8b:dc:dd:65:31:61:d0:44:45: 74:75:ce:5a:e2:6f:33:1e:ec:88:81:6e:b1:fd:3d: 01:45:62:09:59:ad:81:3e:b4:f5:90:92:dd:cd:89: 47:ba:6c:42:2a:04:ab:2f:21:1f:e6:2e:e3:e4:3b: ff:61:5e:34:40:f6:b4:11:dd:17:06:60:fc:e6:85: 88:ef:3d:92:43:78:9c:2a:c8:87:98:bb:56:95:83: cd:c3:c1:60:be:7c:19:27:b2:7b:ce:ba:09:bb:d5: 8d:b0:f0:1e:05:94:3d:90:95:da:8a:b8:98:88:d7: e9:f5:d6:72:ba:ec:b4:12:5c:71:e5:d2:1b:39:d0: c8:dd:8e:3b:13:2d:7f:88:56:28:fd:50:02:fe:f9: 4a:a4:76:d4:e7:b8:f9:0c:3f:6f:17:c2:8d:14:84: df:8f:20:59:2b:00:ba:a0:17:30:03:e4:94:d1:77: f0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0F:65:18:29:24:6B:F1:6D:D1:A2:8F:5F:96:E7:52:6B:72:BC:99 X509v3 Authority Key Identifier: keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:02:75:c6:e3:df:55:6a:c1:ca:ca:22:47:8c:58:b7:5b:e8: b2:f1:49:47:77:6e:8c:de:3d:68:b3:5b:21:4c:2c:0f:9c:f6: c5:ee:ac:b4:bb:97:4b:1f:ef:ac:47:7a:88:b1:c6:4c:62:d9: d2:55:06:61:ca:8d:7b:0f:a8:c6:9a:c7:4a:1c:c9:31:fb:cb: 81:b8:86:ab:06:a2:c4:24:93:9d:73:03:59:c3:c7:10:51:77: db:19:00:9b:b1:9d:a8:d5:a5:1f:c8:1e:6e:ee:d9:3b:8a:88: 78:44:e0:c5:a7:e1:21:76:e9:8b:ef:9e:32:29:4a:09:a3:cd: d6:f3:29:11:eb:44:d4:4e:30:b9:a3:e3:59:c2:f5:b6:ba:87: 92:76:a1:a8:06:7e:61:f3:ec:a8:12:cc:34:77:f4:80:b7:03: df:12:a0:de:16:57:f3:cb:f9:59:61:63:5a:69:48:4c:18:23: d9:12:df:cd:2a:d6:e5:0d:50:fd:4d:0e:3e:36:c6:33:77:81: 5a:03:94:ae:62:93:1c:16:80:6d:e1:5e:fc:ed:ef:b1:55:3b: ad:2d:6c:c6:4a:35:99:0c:eb:c2:cb:8b:37:bc:ed:30:b0:60: b2:52:74:90:d4:d2:18:11:e5:d0:9a:de:15:93:24:fa:8f:5a: 38:fa:fb:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0SlAeBczyCF3w1eSknVHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzVlNjQwOGI4ZTA1YWE5MTRiODc0NjM1YTQ3YjdiODIw YzZjMzIwHhcNMjUxMjI2MDQwMTAxWhcNMjUxMjI3MDQwMTAxWjAzMTEwLwYDVQQD EygyNjBmNjUxODI5MjQ2YmYxNmRkMWEyOGY1Zjk2ZTc1MjZiNzJiYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lYH3DlTwNnQ8RB6YsIF7HP15eKM NCV+kANDrlWg8NkQ28LjDl1PHUVNyxxVorTKad0PrFSI0tg7dJnFXTP/ixH/zA4E CulJcEWVDlX41+eL3N1lMWHQREV0dc5a4m8zHuyIgW6x/T0BRWIJWa2BPrT1kJLd zYlHumxCKgSrLyEf5i7j5Dv/YV40QPa0Ed0XBmD85oWI7z2SQ3icKsiHmLtWlYPN w8FgvnwZJ7J7zroJu9WNsPAeBZQ9kJXairiYiNfp9dZyuuy0Elxx5dIbOdDI3Y47 Ey1/iFYo/VAC/vlKpHbU57j5DD9vF8KNFITfjyBZKwC6oBcwA+SU0XfwsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYPZRgpJGvxbdGij1+W51JrcryZMB8GA1UdIwQY MBaAFId15kCLjgWqkUuHRjWke3uCDGwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDct NjFlNTRjZmMyYWJjLzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDctNjFlNTRjZmMyYWJj LzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwJ1xuPf VWrBysoiR4xYt1vosvFJR3dujN49aLNbIUwsD5z2xe6stLuXSx/vrEd6iLHGTGLZ 0lUGYcqNew+oxprHShzJMfvLgbiGqwaixCSTnXMDWcPHEFF32xkAm7GdqNWlH8ge bu7ZO4qIeETgxafhIXbpi++eMilKCaPN1vMpEetE1E4wuaPjWcL1trqHknahqAZ+ YfPsqBLMNHf0gLcD3xKg3hZX88v5WWFjWmlITBgj2RLfzSrW5Q1Q/U0OPjbGM3eB WgOUrmKTHBaAbeFe/O3vsVU7rS1sxko1mQzrwsuLN7ztMLBgslJ0kNTSGBHl0Jre FZMk+o9aOPr7cQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:22 2025 by rpki-client