This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft File: 3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json) Hash identifier: c41U+1SDEsYOTDxoOc8Gi50FoCB0SuDi5roqy8ztnOE= Subject key identifier: 96:FD:EB:C5:5B:92:AD:E6:11:9E:E7:C6:54:2D:52:71:87:00:44:DF Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c Certificate serial: 019AF3F782FB1AAA1A578B50C95FD91D16F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft Manifest number: 10C0 Signing time: Sat 06 Dec 2025 14:01:15 +0000 Manifest this update: Sat 06 Dec 2025 14:01:15 +0000 Manifest next update: Sun 07 Dec 2025 14:01:15 +0000 Files and hashes: 1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: KCPp7kY7w97UXeiuloQnKppDLAsZUOWWsybh1Lj/AyQ=) 2: NO2hwXxk6AiYVNho9DdnmakKibo.roa (hash: KjRA6xm9G+dFvFvEr1pRfwpBhmr4/09q+ZWaH5ApdDY=) 3: On6R4nNTZ0YYv_0GBGytm6COqe8.roa (hash: bNbiiOOyNE6FHV7YY8Nd3d02QHZTqUZthKpv3jqVHn4=) 4: _UiUxv0oU2Vs8vl9aQlqGT-rguM.roa (hash: EibngS/6U5WbywdZke7WcdMlnrfByt82mvGn2UMi818=) 5: qnHwx7ZjqkHGMQ3UL_6iH_ZiPZ0.roa (hash: v6x8FXcAuZgdOrpOuZAffsHlmhE2j1MwJFDVe05keHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:82:fb:1a:aa:1a:57:8b:50:c9:5f:d9:1d:16:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c Validity Not Before: Dec 6 14:01:15 2025 GMT Not After : Dec 7 14:01:15 2025 GMT Subject: CN=96fdebc55b92ade6119ee7c6542d5271870044df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:55:95:8b:11:b1:c5:2b:c1:93:db:05:aa: 9d:7d:90:3a:05:30:ff:47:3c:65:a9:f6:7d:28:94: ea:42:3b:89:e8:ef:00:35:ee:ff:b0:9c:40:de:b4: 51:36:59:ae:8e:31:3c:1b:e0:74:45:b1:a5:d0:a4: 16:6c:d4:1b:d1:5f:68:93:d1:6d:23:37:5c:ab:0c: f0:7a:f7:7e:d1:9f:33:e3:d0:0b:44:a1:9d:e1:d7: 82:5a:e7:c8:e5:4f:58:01:ee:b6:1d:08:34:e1:b6: 6b:94:11:07:41:8c:fb:d7:08:de:5b:e0:b6:ac:64: 2b:b4:fc:af:44:e4:23:6b:c8:ec:02:10:cd:e5:26: ed:35:41:7d:a1:1a:05:f9:04:5c:45:b8:d3:6c:18: 35:58:10:33:01:87:7d:f9:2c:d0:f3:9d:6c:b1:c5: 7f:13:80:dd:21:eb:36:cd:19:ce:01:88:2f:30:ea: 9b:48:b1:d0:2d:e7:f4:aa:f6:80:1b:4b:91:41:ec: 33:fb:1e:22:ae:41:3e:e4:91:98:55:c4:37:77:8e: c6:31:51:21:6c:2e:2b:05:b5:13:2f:9e:fb:ad:47: 30:23:ee:d2:4c:b3:e4:2a:55:20:51:c0:95:c5:ab: 84:2e:71:62:30:05:61:6b:0c:8a:15:78:7e:e6:1f: 40:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FD:EB:C5:5B:92:AD:E6:11:9E:E7:C6:54:2D:52:71:87:00:44:DF X509v3 Authority Key Identifier: keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:20:97:96:bf:01:e7:8d:76:c6:9d:d5:43:59:0e:c5:f2:da: de:0f:c0:8d:b8:30:63:25:85:49:2c:43:10:64:a9:60:a9:45: 09:fe:51:03:59:7c:5a:b3:ad:9e:7e:85:84:fc:6a:f4:84:23: 15:80:da:27:cc:e9:34:8d:db:d7:68:3e:bb:25:f1:fc:22:d6: 50:4b:8e:80:cd:44:f7:89:82:b1:4e:63:d3:ad:e8:8e:f3:28: 5b:bd:5d:37:68:45:07:e0:00:35:d1:cf:96:b5:ab:c5:3f:71: 8d:9d:4a:cb:ea:ef:44:29:70:ea:e5:b8:b2:54:53:11:a4:32: 0a:5e:3c:c3:2d:5b:ca:1a:63:7f:49:71:71:1e:aa:72:a5:cf: d6:e3:d2:45:e4:20:10:e9:f7:e8:52:25:e5:8e:3f:48:66:a0: e3:b1:bd:6e:2b:c4:fd:27:89:de:7a:4c:57:52:5a:09:d7:58: de:5c:be:37:11:33:00:5f:53:0a:4d:ec:b7:63:78:b2:40:09: cb:b2:1b:ea:2a:15:6e:9d:58:d0:f0:ac:6a:d2:ab:0f:06:1f: 68:ca:bf:d7:03:af:8c:ac:60:14:13:0d:08:3c:81:00:d3:44: 3d:44:80:70:80:5c:02:1c:47:29:56:2f:57:69:53:35:51:fa: eb:2f:8a:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz94L7GqoaV4tQyV/ZHRb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDRlMTllMmJiNGU3MDIzY2MxYmExMGQ0OWI3NGVkZTRi Zjg2NWMwHhcNMjUxMjA2MTQwMTE1WhcNMjUxMjA3MTQwMTE1WjAzMTEwLwYDVQQD Eyg5NmZkZWJjNTViOTJhZGU2MTE5ZWU3YzY1NDJkNTI3MTg3MDA0NGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdJVlYsRscUrwZPbBaqdfZA6BTD/ RzxlqfZ9KJTqQjuJ6O8ANe7/sJxA3rRRNlmujjE8G+B0RbGl0KQWbNQb0V9ok9Ft Izdcqwzwevd+0Z8z49ALRKGd4deCWufI5U9YAe62HQg04bZrlBEHQYz71wjeW+C2 rGQrtPyvROQja8jsAhDN5SbtNUF9oRoF+QRcRbjTbBg1WBAzAYd9+SzQ851sscV/ E4DdIes2zRnOAYgvMOqbSLHQLef0qvaAG0uRQewz+x4irkE+5JGYVcQ3d47GMVEh bC4rBbUTL577rUcwI+7STLPkKlUgUcCVxauELnFiMAVhawyKFXh+5h9A+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJb968Vbkq3mEZ7nxlQtUnGHAETfMB8GA1UdIwQY MBaAFNxE4Z4rtOcCPMG6ENSbdO3kv4ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjIt NGM4MmFjZTcyYzg1LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjItNGM4MmFjZTcyYzg1 LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiCXlr8B 5412xp3VQ1kOxfLa3g/AjbgwYyWFSSxDEGSpYKlFCf5RA1l8WrOtnn6FhPxq9IQj FYDaJ8zpNI3b12g+uyXx/CLWUEuOgM1E94mCsU5j063ojvMoW71dN2hFB+AANdHP lrWrxT9xjZ1Ky+rvRClw6uW4slRTEaQyCl48wy1byhpjf0lxcR6qcqXP1uPSReQg EOn36FIl5Y4/SGag47G9bivE/SeJ3npMV1JaCddY3ly+NxEzAF9TCk3st2N4skAJ y7Ib6ioVbp1Y0PCsatKrDwYfaMq/1wOvjKxgFBMNCDyBANNEPUSAcIBcAhxHKVYv V2lTNVH66y+KOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:39:01 2025 by rpki-client