This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: 1OWp5dIBYKS2kV9PZDWANbUlnTaXw2hmMhxtW8FU3dc= Subject key identifier: 40:43:5B:E8:97:8F:11:E7:DB:2F:52:C0:37:1E:CE:46:B9:DC:77:99 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019AF277312D69CFED512F2E6ED176C5F5DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 0199 Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: 1-AUGKVpaUI8EZ6hHXShhxJpWyTo.roa (hash: YXWwbGUmP1DPllntzNeKp7cmAtpZjKD8wzMqEST5hD8=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: qpp8xWdGIe784azYgwAdW7sJvXjDAHwmRl6hJSooiho=) 3: CN_bapZXIkvKBuYkpK0A9Fhg1yE.roa (hash: ql+OkdfFafxxT0hXtF/ZDCWRkBrIRJfL/o6QiI+ud4Y=) 4: J0-ksWlOwS4VhcDNypkLf6r80js.roa (hash: s3k/AMUOv/daPeObJ+uaRC8+83NMlgcUejkDs+RsAHg=) 5: KRbV-MNWRxAjm7Ctjhzy8C1XgVQ.roa (hash: C/hBs+kMg4joqqgJdT9WQAAShLEFg3fI49RXJ2R8ftg=) 6: NUqvibQu6dWh6Eo5e0WkTVgiAOs.roa (hash: rpCYWQAUZby9hvUsdkbZ1E+JsPoOrGo+9DJrYWN/+/Y=) 7: QAjbbxJkwWP6mtvrf816lbgaTpE.roa (hash: BE3I5u9iuuHjxCqTUslvbILWdwNCS8MnbabYgEyaLMg=) 8: QfNuRUcCBKSF0-llqlDeTnSTdBw.roa (hash: cT+qPcXBj4mhMwi4f87rXl9hFtMvmkw8RVAHgC21LE8=) 9: elNM6G6dpmEHLuSUHCZ2S_uUwRw.roa (hash: ty6P7Tg9xGsXu6Rck5+usg5S6KFjiIRCpar611wI2Uk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:31:2d:69:cf:ed:51:2f:2e:6e:d1:76:c5:f5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=40435be8978f11e7db2f52c0371ece46b9dc7799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fe:76:99:17:67:ac:3f:ff:ac:8f:b7:7d:7e: c3:de:b4:a0:ec:19:67:63:1e:ba:48:b4:e3:9b:39: 81:48:7a:75:c7:c2:7c:05:d2:96:d5:72:7f:40:bb: ae:f3:eb:c5:76:3c:89:c6:ed:b5:36:c2:5d:10:e6: 95:75:f4:5f:28:ee:cf:ec:57:ae:54:01:4b:16:64: 68:a1:cb:6d:fa:42:e8:b7:63:4c:12:1b:ae:96:a3: b3:c5:11:34:08:4a:a9:a0:4d:a7:b8:72:fb:a3:bc: 36:21:d3:d6:b8:8b:c0:77:e2:79:f8:ec:c0:03:a8: b9:3f:c1:82:b7:19:f2:0c:dc:fc:a0:e1:40:15:60: 9a:d6:37:b1:bd:0f:8c:a3:a0:f5:d5:bb:b0:6b:eb: 2f:43:d1:4e:89:4d:34:43:74:51:14:20:6b:80:ed: cd:88:a5:ca:7d:68:d9:65:25:91:61:e0:8a:c4:ca: 35:46:fb:2e:37:58:4a:61:d9:c8:ef:06:dc:2c:cc: 20:02:e4:d4:43:44:81:83:bb:db:22:66:3c:62:62: de:d4:37:3d:49:09:3a:05:f2:31:10:57:0a:bf:84: 64:8e:c9:40:e6:28:c1:5a:4c:5e:f7:b6:5f:a8:26: 57:72:fd:6f:54:37:ff:4a:6b:56:03:51:9e:53:6f: 01:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:43:5B:E8:97:8F:11:E7:DB:2F:52:C0:37:1E:CE:46:B9:DC:77:99 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:92:78:0b:f5:ca:b6:02:80:63:15:dd:11:6b:1f:ba:05:82: aa:b8:dc:35:8b:6b:d7:7c:c3:a5:e3:cc:25:5e:73:17:fe:c3: 3c:16:ef:c2:30:08:67:09:cc:51:84:92:5c:11:d5:ad:be:fe: 62:f8:78:bf:8c:7c:b4:d5:95:26:5d:74:24:ec:61:f7:0e:e2: 97:c7:7f:58:f7:18:9c:88:52:71:06:4a:c7:88:93:72:ab:3f: 91:e5:b1:6d:4c:08:c7:d1:6f:d5:96:18:d7:39:e5:d7:f6:a3: 9e:49:4d:95:12:30:53:c0:d6:ec:e4:73:85:a5:10:0e:3b:c6: 14:51:e9:10:97:bd:03:b0:b4:95:06:c1:91:f6:74:f4:89:1b: 87:c0:84:f0:81:a6:1e:01:58:5b:f5:7b:00:70:26:9f:40:04: f2:e5:fb:d7:69:dd:1a:bd:42:21:39:92:ed:e5:c6:98:c8:a2: 84:4d:c8:78:5f:1c:c2:6d:47:30:37:4e:c8:ef:2a:c2:3e:67: 80:4f:d8:1c:be:de:6f:97:bc:15:1a:76:9b:76:e3:31:f7:aa: c1:11:ab:21:17:c3:65:5e:04:cd:22:a2:0d:79:e7:25:33:a5: a9:96:93:20:8a:6b:f3:ac:90:e0:8d:28:df:9a:b9:3d:47:ca: 41:75:d9:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzEtac/tUS8ubtF2xfXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD Eyg0MDQzNWJlODk3OGYxMWU3ZGIyZjUyYzAzNzFlY2U0NmI5ZGM3Nzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f52mRdnrD//rI+3fX7D3rSg7Bln Yx66SLTjmzmBSHp1x8J8BdKW1XJ/QLuu8+vFdjyJxu21NsJdEOaVdfRfKO7P7Feu VAFLFmRooctt+kLot2NMEhuulqOzxRE0CEqpoE2nuHL7o7w2IdPWuIvAd+J5+OzA A6i5P8GCtxnyDNz8oOFAFWCa1jexvQ+Mo6D11buwa+svQ9FOiU00Q3RRFCBrgO3N iKXKfWjZZSWRYeCKxMo1RvsuN1hKYdnI7wbcLMwgAuTUQ0SBg7vbImY8YmLe1Dc9 SQk6BfIxEFcKv4RkjslA5ijBWkxe97ZfqCZXcv1vVDf/SmtWA1GeU28BmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBDW+iXjxHn2y9SwDcezka53HeZMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5J4C/XK tgKAYxXdEWsfugWCqrjcNYtr13zDpePMJV5zF/7DPBbvwjAIZwnMUYSSXBHVrb7+ Yvh4v4x8tNWVJl10JOxh9w7il8d/WPcYnIhScQZKx4iTcqs/keWxbUwIx9Fv1ZYY 1znl1/ajnklNlRIwU8DW7ORzhaUQDjvGFFHpEJe9A7C0lQbBkfZ09Ikbh8CE8IGm HgFYW/V7AHAmn0AE8uX712ndGr1CITmS7eXGmMiihE3IeF8cwm1HMDdOyO8qwj5n gE/YHL7eb5e8FRp2m3bjMfeqwRGrIRfDZV4EzSKiDXnnJTOlqZaTIIpr86yQ4I0o 35q5PUfKQXXZ+g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:18 2025 by rpki-client