This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json) Hash identifier: pc7WNzLxLR4dsgBQ5CfAhdvQnWInphOdhUf/kYvoihY= Subject key identifier: 73:18:B9:0E:5A:CB:B9:FD:D7:11:BF:3D:4C:CD:7F:16:7D:0A:57:A9 Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d Certificate serial: 019B31C3D5C30DFBDF214A0B7953AA575079 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft Manifest number: 1438 Signing time: Thu 18 Dec 2025 14:01:16 +0000 Manifest this update: Thu 18 Dec 2025 14:01:16 +0000 Manifest next update: Fri 19 Dec 2025 14:01:16 +0000 Files and hashes: 1: d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa (hash: cERcZw5Z94F+CMFJAljz3XdDY1JrRkuGSpDxJHDgzq8=) 2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: 9nLBIk1UMp2YaAkEE5+aS7BqlBYoCwKQN7NWqXku2Ik=) 3: vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa (hash: AhPFv/8nWSRXANQRSY1wzdZ4XMNkwwYufrm8inXx3Rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:d5:c3:0d:fb:df:21:4a:0b:79:53:aa:57:50:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d Validity Not Before: Dec 18 14:01:16 2025 GMT Not After : Dec 19 14:01:16 2025 GMT Subject: CN=7318b90e5acbb9fdd711bf3d4ccd7f167d0a57a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:75:94:d9:16:a2:29:06:16:9c:6c:94:f6: 41:6a:db:b0:8e:45:5f:40:3d:37:07:9d:d8:53:fe: 8e:ec:38:01:a2:b2:94:4d:64:5d:45:60:bc:1e:bc: 05:c5:2d:10:bf:a6:a3:5a:4c:a1:af:84:d8:2c:31: cf:d2:d8:a1:97:08:d3:6a:74:2b:cd:54:83:fe:f9: 40:19:be:60:69:81:6b:46:f2:7e:41:38:ad:4d:f1: d8:9d:0d:42:a7:74:b8:ae:68:fe:b1:53:66:2b:20: 43:ce:c0:0f:df:df:70:ac:e2:9c:89:f1:95:19:3d: 06:5a:27:77:8e:df:24:e1:f1:31:d2:27:b1:58:db: ed:fa:7f:e3:83:5b:b5:04:a7:4e:5b:69:b2:4f:af: d0:ea:65:18:54:45:f0:0f:ee:e8:43:92:f7:cb:eb: 91:97:90:5f:bc:02:d2:ee:54:63:be:ac:89:6d:17: 74:10:5c:82:52:49:9d:67:70:4a:19:f1:2d:b7:7d: 04:01:b4:68:97:e4:6e:30:9c:7e:8a:e2:10:31:e5: 82:03:c5:3b:90:57:d6:89:06:bc:88:5f:93:b1:6b: bb:68:4c:df:e9:eb:34:ac:14:45:33:fa:09:3f:1b: 2d:21:1d:49:7c:a8:42:18:52:c5:94:8a:3c:64:89: b5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:18:B9:0E:5A:CB:B9:FD:D7:11:BF:3D:4C:CD:7F:16:7D:0A:57:A9 X509v3 Authority Key Identifier: keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:33:8c:30:f7:1c:0b:58:7a:da:00:54:26:53:d8:5f:f8:82: ed:9c:53:6e:41:14:a8:2c:1e:8e:39:88:57:b7:8e:25:0d:01: e2:ef:54:48:5b:e7:e6:97:bb:e7:ea:41:ee:43:be:36:e4:5b: 8c:40:55:35:0c:ba:ce:1e:eb:0c:dc:6c:b2:32:92:59:b7:ab: 77:18:17:9e:b1:c7:b2:5d:56:cc:de:ea:94:57:47:5a:06:a5: 0b:dd:c4:5a:f1:a4:8d:a7:a6:e4:0d:45:e4:db:61:11:a7:7c: d3:f1:06:f6:98:7a:96:0d:f0:79:7a:0b:e6:49:ee:3d:16:b1: 4a:8e:64:37:42:9d:cf:01:cb:72:7e:55:10:b8:33:66:b5:19: 84:e1:1f:19:64:b7:d9:92:c1:8f:a4:29:11:98:82:19:98:2c: e2:12:36:9e:32:d9:c6:5f:40:c7:17:81:29:93:98:9c:0c:53: 1a:c8:b0:c8:63:c1:f3:a0:b9:d3:dd:8d:ac:e9:fd:f0:e4:b3: 9b:a0:9b:1a:eb:74:bd:ea:be:ab:ab:4c:ca:8b:23:9b:c3:34: a9:2f:52:ae:5e:c4:78:ae:99:0a:12:75:24:3f:1c:74:fd:62: 48:35:7c:6e:b2:77:16:7e:42:b3:4d:d3:e9:b6:85:49:d1:07: a1:f3:38:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw9XDDfvfIUoLeVOqV1B5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MmRjMGQwOTk4YjgxMjZiYWJiOTc3NWFiNDBjMTYyZWY5 NmZhMmQwHhcNMjUxMjE4MTQwMTE2WhcNMjUxMjE5MTQwMTE2WjAzMTEwLwYDVQQD Eyg3MzE4YjkwZTVhY2JiOWZkZDcxMWJmM2Q0Y2NkN2YxNjdkMGE1N2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgN1lNkWoikGFpxslPZBatuwjkVf QD03B53YU/6O7DgBorKUTWRdRWC8HrwFxS0Qv6ajWkyhr4TYLDHP0tihlwjTanQr zVSD/vlAGb5gaYFrRvJ+QTitTfHYnQ1Cp3S4rmj+sVNmKyBDzsAP399wrOKcifGV GT0GWid3jt8k4fEx0iexWNvt+n/jg1u1BKdOW2myT6/Q6mUYVEXwD+7oQ5L3y+uR l5BfvALS7lRjvqyJbRd0EFyCUkmdZ3BKGfEtt30EAbRol+RuMJx+iuIQMeWCA8U7 kFfWiQa8iF+TsWu7aEzf6es0rBRFM/oJPxstIR1JfKhCGFLFlIo8ZIm1iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMYuQ5ay7n91xG/PUzNfxZ9ClepMB8GA1UdIwQY MBaAFIUtwNCZi4EmuruXdatAwWLvlvotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQt ZDMyZTU2ZDc5YjJhLzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQtZDMyZTU2ZDc5YjJh LzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzOMMPcc C1h62gBUJlPYX/iC7ZxTbkEUqCwejjmIV7eOJQ0B4u9USFvn5pe75+pB7kO+NuRb jEBVNQy6zh7rDNxssjKSWberdxgXnrHHsl1WzN7qlFdHWgalC93EWvGkjaem5A1F 5NthEad80/EG9ph6lg3weXoL5knuPRaxSo5kN0KdzwHLcn5VELgzZrUZhOEfGWS3 2ZLBj6QpEZiCGZgs4hI2njLZxl9AxxeBKZOYnAxTGsiwyGPB86C5092NrOn98OSz m6CbGut0veq+q6tMyosjm8M0qS9Srl7EeK6ZChJ1JD8cdP1iSDV8brJ3Fn5Cs03T 6baFSdEHofM4qg== -----END CERTIFICATE-----Generated at Thu Dec 18 19:10:53 2025 by rpki-client