This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json) Hash identifier: pRhvP3HNUhNz4I+DMoMyHaoJD4CLl2zNXOZ1/BBh7Vg= Subject key identifier: 7B:38:62:4E:24:65:2A:F3:0D:C5:73:D3:57:E9:92:2E:D3:0B:BA:DE Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca Certificate serial: 019B311F21E60DC56FB424A9D63038DA4273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft Manifest number: 178C Signing time: Thu 18 Dec 2025 11:01:22 +0000 Manifest this update: Thu 18 Dec 2025 11:01:22 +0000 Manifest next update: Fri 19 Dec 2025 11:01:22 +0000 Files and hashes: 1: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (hash: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=) 2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: d3I19ZZrpaS85pdc0XonWH64XOggcxhCwsTUP7ICJEA=) 3: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (hash: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1f:21:e6:0d:c5:6f:b4:24:a9:d6:30:38:da:42:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca Validity Not Before: Dec 18 11:01:22 2025 GMT Not After : Dec 19 11:01:22 2025 GMT Subject: CN=7b38624e24652af30dc573d357e9922ed30bbade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:33:82:96:69:61:51:3a:06:be:51:43:c7: 5e:b2:aa:c1:9f:93:d8:d5:d0:13:fa:c1:2b:21:c6: ee:86:f5:f1:8c:97:af:27:76:3f:17:bc:69:f5:05: 60:1e:37:60:ca:5b:d9:f2:e1:f3:3e:03:b3:c4:c3: 2a:82:76:c5:cc:f9:3a:e6:d6:42:dc:59:68:2f:3e: 6d:51:00:29:3c:2b:4e:db:5d:b4:b3:3d:c6:b6:34: 08:e5:35:ce:9f:ea:b8:ac:5e:64:ec:35:ac:65:ec: 1b:51:7b:b4:e7:69:ad:3f:d7:95:8b:e4:bf:62:4a: f2:3f:e9:b8:87:84:72:ee:f4:1e:68:ec:70:2e:31: 52:6d:7f:34:a3:90:df:98:ab:59:b5:90:45:2b:7b: a2:79:40:12:a9:45:f8:3d:e0:82:d2:6e:bb:6a:14: 72:ab:a3:ae:45:eb:b3:3b:34:ed:5a:b6:1c:4e:55: 7b:c4:cd:31:49:48:a1:70:6a:26:5d:9e:c0:84:fa: c7:a0:5d:38:c3:f3:78:a1:14:ff:b9:3e:bb:3c:ea: a5:23:aa:a8:5f:aa:d9:72:ee:b1:0a:68:55:69:d0: 28:5f:98:da:12:ac:44:d5:74:d4:28:69:d8:85:03: 56:53:e8:9f:49:1d:46:18:a6:20:a1:be:33:e9:6c: 92:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:38:62:4E:24:65:2A:F3:0D:C5:73:D3:57:E9:92:2E:D3:0B:BA:DE X509v3 Authority Key Identifier: keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bd:d9:ba:23:36:8e:e8:69:7f:44:41:43:10:1a:a5:c4:cc: 95:f3:1e:64:69:93:36:2d:57:3d:62:5d:f3:d5:ab:78:98:62: 80:61:43:71:a6:36:b6:5a:96:44:14:b1:d5:b5:10:85:40:a2: da:39:7e:36:87:9f:d0:5b:5a:f3:da:f7:47:01:1f:da:46:79: 9a:95:99:5a:b4:5a:d3:12:56:5b:a8:ee:4a:32:0a:7a:cc:87: e7:88:27:95:35:11:8c:00:c0:d1:5e:2b:b1:a5:ee:b6:04:d9: fd:e1:d1:6e:ee:48:c7:50:5e:fc:20:06:ab:7a:a7:fb:7a:f5: 16:4d:81:73:47:29:6d:87:36:c2:e8:7c:a7:3f:82:f3:43:3b: 4d:10:fe:f9:89:85:d5:3d:7e:e6:13:6e:1b:d2:f8:c9:c6:e8: fd:20:f1:ae:f2:27:c0:a5:52:b2:f1:f1:5b:b1:76:3a:57:1c: b7:f7:a7:ec:94:33:42:4b:5e:31:82:12:5a:7d:27:24:82:ad: 2f:48:f2:b7:ba:07:84:40:af:ee:73:70:f2:26:82:63:a2:89: 19:de:f8:e1:31:d9:51:ce:75:c3:71:cd:49:a1:cb:c7:eb:a3: ec:f7:eb:64:02:c2:51:ea:62:8a:37:e9:e0:6a:38:86:5a:86: 77:30:3e:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHyHmDcVvtCSp1jA42kJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNzM5ZDIxM2E0MzhmNjc4YjMyMmE4ZjhmODRlMmQ4Yzc4 MTRhY2EwHhcNMjUxMjE4MTEwMTIyWhcNMjUxMjE5MTEwMTIyWjAzMTEwLwYDVQQD Eyg3YjM4NjI0ZTI0NjUyYWYzMGRjNTczZDM1N2U5OTIyZWQzMGJiYWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsozgpZpYVE6Br5RQ8desqrBn5PY 1dAT+sErIcbuhvXxjJevJ3Y/F7xp9QVgHjdgylvZ8uHzPgOzxMMqgnbFzPk65tZC 3FloLz5tUQApPCtO2120sz3GtjQI5TXOn+q4rF5k7DWsZewbUXu052mtP9eVi+S/ YkryP+m4h4Ry7vQeaOxwLjFSbX80o5DfmKtZtZBFK3uieUASqUX4PeCC0m67ahRy q6OuReuzOzTtWrYcTlV7xM0xSUihcGomXZ7AhPrHoF04w/N4oRT/uT67POqlI6qo X6rZcu6xCmhVadAoX5jaEqxE1XTUKGnYhQNWU+ifSR1GGKYgob4z6WySgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHs4Yk4kZSrzDcVz01fpki7TC7reMB8GA1UdIwQY MBaAFB9znSE6Q49nizIqj4+E4tjHgUrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEt MzkyZTA1YTg0Mjc3LzEvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEtMzkyZTA1YTg0Mjc3 LzEvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbL3ZuiM2 juhpf0RBQxAapcTMlfMeZGmTNi1XPWJd89WreJhigGFDcaY2tlqWRBSx1bUQhUCi 2jl+Noef0Fta89r3RwEf2kZ5mpWZWrRa0xJWW6juSjIKesyH54gnlTURjADA0V4r saXutgTZ/eHRbu5Ix1Be/CAGq3qn+3r1Fk2Bc0cpbYc2wuh8pz+C80M7TRD++YmF 1T1+5hNuG9L4ycbo/SDxrvInwKVSsvHxW7F2Olcct/en7JQzQkteMYISWn0nJIKt L0jyt7oHhECv7nNw8iaCY6KJGd744THZUc51w3HNSaHLx+uj7PfrZALCUepiijfp 4Go4hlqGdzA+pQ== -----END CERTIFICATE-----Generated at Thu Dec 18 19:12:39 2025 by rpki-client