This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft File: 3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json) Hash identifier: BffTmHlqNbYSYmtVaxU8b8H4/g2TNKowT8BGihHfeMs= Subject key identifier: 01:0E:46:0B:44:5C:A2:AD:6E:68:D1:0E:7D:D2:D7:A9:7E:C6:13:6E Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Certificate serial: 019AF2AD424CBA9DD29C09184898BA6D7002 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft Manifest number: 16C9 Signing time: Sat 06 Dec 2025 08:00:32 +0000 Manifest this update: Sat 06 Dec 2025 08:00:32 +0000 Manifest next update: Sun 07 Dec 2025 08:00:32 +0000 Files and hashes: 1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: /x0/UynOI5GUdaTrMRmW+vxXNAM3Nsn1YTK3aCgvw8A=) 2: 8FvfLLhDVksryfiQvcQGH50S9l8.roa (hash: Y6ZwtPZ/qOYxX0Ope9ofTfvB4VJme9ynbG6C6Iyw774=) 3: al8koS69bS-s8w2qJPy0DIH-LdM.roa (hash: 8dyaX5bVUEeKp0uMU4rnBV4TQ+sOGF79J4YeMsznYDw=) 4: iB-5Gh1pHVkAWY83mt70GWf7F_k.roa (hash: cjAD02BpLiwlKz0QWbmdYPtsy/2NR9/61nPXd4hWOkU=) 5: lICq0eo5P-Axsog5Hx6FXYSQY4k.roa (hash: JlcFYpOXnqLTDv9/pwm19BH50eR0rn9KZzLrCOo3RLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:42:4c:ba:9d:d2:9c:09:18:48:98:ba:6d:70:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Validity Not Before: Dec 6 08:00:32 2025 GMT Not After : Dec 7 08:00:32 2025 GMT Subject: CN=010e460b445ca2ad6e68d10e7dd2d7a97ec6136e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:00:8a:9d:36:6d:80:fe:ad:50:0c:ae:35:be: 9a:fd:52:cd:8d:92:cf:4c:28:f2:2e:e8:a7:ef:6b: dd:d3:18:cb:3f:2c:1c:93:bf:52:22:1e:5d:78:31: fd:be:d9:6d:90:89:4a:f2:46:3d:6d:ca:51:6e:f6: b1:12:04:9e:ee:ac:03:e8:dc:dd:e3:20:12:57:d7: ec:88:ae:eb:82:ec:d8:fd:44:31:d3:63:9b:20:cd: b9:cf:ae:14:1a:75:d4:62:f6:1c:d1:25:f1:7f:3f: a0:10:18:93:25:48:01:04:71:07:90:b0:28:7f:f7: d5:24:30:6f:d0:48:54:92:27:c8:d2:56:b9:74:24: 8b:c1:37:45:c3:da:ee:d3:53:90:53:b0:ab:8b:26: d3:11:03:fd:dc:f6:1e:c4:1d:b4:1d:a2:d4:b3:14: 28:ca:0c:c9:5c:22:8f:6e:1e:e3:be:19:7a:48:c6: 82:76:0f:d9:bf:c5:fe:62:45:2a:4f:19:e8:ae:e4: 08:45:9d:09:67:a2:02:b7:17:81:03:66:12:ff:af: a4:50:c1:13:25:3d:c0:93:6c:e2:16:ec:46:83:00: a3:f5:b3:95:c3:f1:28:69:88:14:6d:69:03:00:7c: 1c:e7:3a:ca:a6:ba:09:d9:de:24:1b:7e:20:49:0c: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0E:46:0B:44:5C:A2:AD:6E:68:D1:0E:7D:D2:D7:A9:7E:C6:13:6E X509v3 Authority Key Identifier: keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c3:3b:4e:4d:1f:ba:09:ac:4f:ff:88:af:c9:41:9d:30:38: eb:d9:93:2d:9c:00:1e:d7:e8:23:fb:fc:9b:79:3f:01:59:2d: ca:b0:8d:6f:4b:89:65:5c:e9:76:0a:85:5e:20:67:8c:6a:9f: a1:93:06:ba:d2:c2:c9:70:13:a0:a7:30:3c:ed:ee:4a:f4:70: d7:06:44:e1:d8:9a:81:b9:8d:67:a3:ef:9c:58:23:0e:c9:e1: db:b6:1d:01:e7:a8:3e:5b:4c:5b:24:aa:40:fa:a8:13:e7:c1: c8:fb:ef:85:b8:3b:df:19:d9:08:ba:8a:ea:80:6d:8a:77:dc: 28:f4:9e:eb:29:14:99:e6:0b:bc:ea:14:7b:01:f1:bc:b6:db: 42:87:ba:ea:d8:6e:d3:1c:1b:72:a2:50:80:5b:e6:26:3e:ae: a8:1e:5f:b3:05:65:8a:0c:d9:2e:2a:2a:bc:cc:c3:17:b1:2d: 7b:ea:aa:23:75:a5:ad:0e:58:53:c8:ee:fa:61:b1:72:8f:a8: 5b:8a:a5:c5:fe:40:ae:91:02:06:a3:8b:04:81:e1:28:d1:07: be:01:4f:91:85:3a:68:77:fa:2b:7b:94:ea:ef:48:68:0b:88: d5:e0:d9:8f:1c:85:27:63:3c:0c:01:9b:ec:c0:e2:31:af:bb: da:47:5e:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUJMup3SnAkYSJi6bXACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk NzExNTUwHhcNMjUxMjA2MDgwMDMyWhcNMjUxMjA3MDgwMDMyWjAzMTEwLwYDVQQD EygwMTBlNDYwYjQ0NWNhMmFkNmU2OGQxMGU3ZGQyZDdhOTdlYzYxMzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgCKnTZtgP6tUAyuNb6a/VLNjZLP TCjyLuin72vd0xjLPywck79SIh5deDH9vtltkIlK8kY9bcpRbvaxEgSe7qwD6Nzd 4yASV9fsiK7rguzY/UQx02ObIM25z64UGnXUYvYc0SXxfz+gEBiTJUgBBHEHkLAo f/fVJDBv0EhUkifI0la5dCSLwTdFw9ru01OQU7CriybTEQP93PYexB20HaLUsxQo ygzJXCKPbh7jvhl6SMaCdg/Zv8X+YkUqTxnoruQIRZ0JZ6ICtxeBA2YS/6+kUMET JT3Ak2ziFuxGgwCj9bOVw/EoaYgUbWkDAHwc5zrKproJ2d4kG34gSQxEEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEORgtEXKKtbmjRDn3S16l+xhNuMB8GA1UdIwQY MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt NjUyNDljYmM1NzNjLzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsM7Tk0f ugmsT/+Ir8lBnTA469mTLZwAHtfoI/v8m3k/AVktyrCNb0uJZVzpdgqFXiBnjGqf oZMGutLCyXAToKcwPO3uSvRw1wZE4diagbmNZ6PvnFgjDsnh27YdAeeoPltMWySq QPqoE+fByPvvhbg73xnZCLqK6oBtinfcKPSe6ykUmeYLvOoUewHxvLbbQoe66thu 0xwbcqJQgFvmJj6uqB5fswVligzZLioqvMzDF7Ete+qqI3WlrQ5YU8ju+mGxco+o W4qlxf5ArpECBqOLBIHhKNEHvgFPkYU6aHf6K3uU6u9IaAuI1eDZjxyFJ2M8DAGb 7MDiMa+72kdelQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:27 2025 by rpki-client