This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json) Hash identifier: wEUwJzRuq113iCS5KR9mreV9+rhb89L1Hx5cQzBBKrU= Subject key identifier: 27:FA:76:51:20:7D:F4:FD:DF:46:98:62:8A:4E:F5:E4:6C:E9:40:3D Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd Certificate serial: 019AF19B0757B401525CB14ACDA8E13ED32C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft Manifest number: 119C Signing time: Sat 06 Dec 2025 03:01:00 +0000 Manifest this update: Sat 06 Dec 2025 03:01:00 +0000 Manifest next update: Sun 07 Dec 2025 03:01:00 +0000 Files and hashes: 1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: O7UKOPt1BD7IVZqDeL6w77rGbqUTbXsGYfBwr6K8UJ4=) 2: CxdvJgaBCDsMJJ7rmp_FkjyGGBc.roa (hash: kGWbGJP+QaDIG7japCWL0D50y3BN0c80v2/YEyl6DZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:07:57:b4:01:52:5c:b1:4a:cd:a8:e1:3e:d3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd Validity Not Before: Dec 6 03:01:00 2025 GMT Not After : Dec 7 03:01:00 2025 GMT Subject: CN=27fa7651207df4fddf4698628a4ef5e46ce9403d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f6:8f:37:2b:b8:5e:1f:cd:5f:56:3d:4b:da: a2:dc:5b:16:99:71:8c:95:c4:43:00:92:f6:a6:b5: ba:81:b3:dd:2f:96:d5:75:c7:ee:73:77:42:7a:0f: 96:18:8c:3f:ee:ec:1e:2e:6d:19:c3:1b:ce:65:1c: a4:2c:6b:3e:64:be:45:58:b5:53:d1:07:6e:49:a4: dc:67:77:70:95:46:7c:65:ed:9f:8c:38:32:a7:93: 63:a2:55:77:24:f1:8a:06:51:77:bb:6e:37:20:dc: 40:ee:cd:7e:60:57:d5:6e:49:2a:64:cf:d6:cc:f9: b6:1e:42:0f:1f:78:74:f5:fe:95:24:b6:04:de:52: c4:d3:3a:6c:27:e9:4d:82:c4:03:6b:5c:4d:58:62: 8f:b6:5d:62:f0:d3:3c:60:5a:50:57:05:5b:04:cf: bf:dc:ff:44:f2:91:56:f4:88:10:37:c7:23:1f:15: 0f:1e:f6:c7:b6:7c:06:05:6b:d9:9e:db:1c:51:3a: 38:2b:ed:f2:ce:e8:bc:31:ee:a2:59:50:e3:b4:18: 18:24:9c:19:88:ea:8c:43:17:73:19:f5:d3:43:8a: b7:07:74:ce:98:0f:40:a6:45:ef:7e:38:59:a5:13: 1d:1c:33:e7:1f:c9:02:98:24:21:01:72:2b:0d:ff: 92:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FA:76:51:20:7D:F4:FD:DF:46:98:62:8A:4E:F5:E4:6C:E9:40:3D X509v3 Authority Key Identifier: keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:94:0d:33:a0:fc:81:14:5c:c2:3a:f9:1e:f9:fe:6c:06:1b: ef:25:f4:2c:6a:07:22:0e:16:7b:2f:4c:51:4a:6a:71:40:bd: 23:a6:1a:41:04:ae:b5:e4:30:27:5d:f2:64:1b:3e:6f:22:eb: 54:36:a2:2a:ef:3d:36:81:a6:4a:02:06:e9:6f:1a:0e:60:ab: 61:61:a4:a8:46:f3:5c:d3:3c:6e:f7:33:75:f5:11:97:41:c4: 72:58:da:b5:0b:fc:40:6a:bf:3b:9d:f0:b9:88:91:c8:c5:70: 83:01:db:8c:64:66:22:df:7f:7c:cd:73:2d:5e:f1:fe:05:66: cb:16:7c:2d:b2:6b:b5:e6:5f:9f:58:71:71:c3:97:7c:07:e9: e9:91:ad:d3:e6:a8:f0:d3:c2:27:d5:52:f9:e5:4d:7b:73:59: a8:61:05:22:e3:9d:91:77:06:2e:97:5d:cf:69:39:b2:9b:df: 22:f3:aa:fe:f5:33:b1:2a:c4:b0:31:77:31:a5:81:50:3a:f5: a3:a1:97:82:0d:38:fc:d9:b3:7a:ae:47:85:de:06:ec:1a:80: 62:50:07:2a:19:fd:c4:b6:b1:0e:3a:d4:18:e4:e5:55:dc:3d: 30:80:13:bb:56:e9:97:23:b0:7a:f2:82:18:db:51:10:6e:ad: 69:8d:2f:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwdXtAFSXLFKzajhPtMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NWRmZjFmNmJkODgxM2RlNWZmOWFmMTY3MjQ3Zjc4Yjg4 NDM5YmQwHhcNMjUxMjA2MDMwMTAwWhcNMjUxMjA3MDMwMTAwWjAzMTEwLwYDVQQD EygyN2ZhNzY1MTIwN2RmNGZkZGY0Njk4NjI4YTRlZjVlNDZjZTk0MDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvaPNyu4Xh/NX1Y9S9qi3FsWmXGM lcRDAJL2prW6gbPdL5bVdcfuc3dCeg+WGIw/7uweLm0ZwxvOZRykLGs+ZL5FWLVT 0QduSaTcZ3dwlUZ8Ze2fjDgyp5NjolV3JPGKBlF3u243INxA7s1+YFfVbkkqZM/W zPm2HkIPH3h09f6VJLYE3lLE0zpsJ+lNgsQDa1xNWGKPtl1i8NM8YFpQVwVbBM+/ 3P9E8pFW9IgQN8cjHxUPHvbHtnwGBWvZntscUTo4K+3yzui8Me6iWVDjtBgYJJwZ iOqMQxdzGfXTQ4q3B3TOmA9ApkXvfjhZpRMdHDPnH8kCmCQhAXIrDf+SoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCf6dlEgffT930aYYopO9eRs6UA9MB8GA1UdIwQY MBaAFAld/x9r2IE95f+a8Wckf3i4hDm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81ZDAyNzgtMjE2ZS00NzEyLTk0ODct MTliM2QxNTQ0YzM5LzEvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81ZDAyNzgtMjE2ZS00NzEyLTk0ODctMTliM2QxNTQ0YzM5 LzEvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5QNM6D8 gRRcwjr5Hvn+bAYb7yX0LGoHIg4Wey9MUUpqcUC9I6YaQQSuteQwJ13yZBs+byLr VDaiKu89NoGmSgIG6W8aDmCrYWGkqEbzXNM8bvczdfURl0HEcljatQv8QGq/O53w uYiRyMVwgwHbjGRmIt9/fM1zLV7x/gVmyxZ8LbJrteZfn1hxccOXfAfp6ZGt0+ao 8NPCJ9VS+eVNe3NZqGEFIuOdkXcGLpddz2k5spvfIvOq/vUzsSrEsDF3MaWBUDr1 o6GXgg04/Nmzeq5Hhd4G7BqAYlAHKhn9xLaxDjrUGOTlVdw9MIATu1bplyOwevKC GNtREG6taY0vMA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:48 2025 by rpki-client