This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json) Hash identifier: kFDq5Q73c6SV/TietNTCWUNcoPKFBfGODvn2KV+uLKI= Subject key identifier: 14:81:03:01:23:21:E8:A2:DE:00:3F:7D:61:C1:11:E7:4B:F7:A9:26 Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8 Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8 Certificate serial: 019AF0BF8545C732B72B5409F852E5F35D0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 23:01:14 +0000 Manifest this update: Fri 05 Dec 2025 23:01:14 +0000 Manifest next update: Sat 06 Dec 2025 23:01:14 +0000 Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=) 2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=) 3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: qLlye/7w+84m1+efCV8UdcHh5skP2ok/Xeza6BgmX2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:85:45:c7:32:b7:2b:54:09:f8:52:e5:f3:5d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8 Validity Not Before: Dec 5 23:01:14 2025 GMT Not After : Dec 6 23:01:14 2025 GMT Subject: CN=148103012321e8a2de003f7d61c111e74bf7a926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:b8:88:ac:4a:6c:a3:3c:76:13:ec:b9:23: 85:6b:2b:dc:b7:f6:13:76:09:48:a4:17:5a:95:4f: 0e:eb:5a:eb:eb:6f:8d:d4:17:89:69:81:f6:4e:14: 3b:23:97:d6:cf:92:71:22:be:cb:83:0d:9c:7a:91: 6f:58:eb:8a:a6:f1:19:c7:ed:61:50:a7:4e:9a:94: 86:6e:25:c3:4b:0c:91:3f:62:db:61:f6:b2:4c:72: ad:b2:ab:d3:36:be:4c:3d:53:19:0f:be:53:1b:da: 8f:54:a3:ee:fa:01:75:c1:70:bf:76:8d:e5:aa:3b: a7:3e:c8:e7:ce:24:74:58:e0:2f:a0:c7:65:10:96: c2:fa:b4:fc:be:c6:03:3a:e5:ea:8f:06:12:09:9f: ff:3a:5b:54:d2:53:ac:e8:b1:d1:3e:9b:c5:7b:a2: 31:3a:49:ec:8c:71:99:92:11:fe:69:ee:9b:5e:0d: 87:e3:62:08:e1:c7:ce:42:9d:20:38:1d:15:0d:c3: 25:39:f3:64:35:8e:b0:03:f3:5a:f8:91:70:48:e2: aa:a3:cb:0a:1e:c5:01:65:c6:78:f1:55:ea:ea:94: 81:6f:25:02:6e:93:5c:9c:c2:77:db:d2:d5:e0:e4: bc:fb:13:52:2c:e4:92:f3:a8:24:3e:aa:68:57:b9: 50:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:81:03:01:23:21:E8:A2:DE:00:3F:7D:61:C1:11:E7:4B:F7:A9:26 X509v3 Authority Key Identifier: keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:37:e3:93:4e:a4:c8:3a:03:17:be:16:6a:06:83:ff:59:12: d5:cc:b3:4f:d0:11:58:e3:57:fd:e7:f6:9d:d9:7a:d8:cd:05: 01:1a:0a:3b:a8:00:ff:9c:9a:8b:39:b1:60:83:dd:ca:7e:d8: de:e0:8d:ed:01:b0:c5:e1:6e:e5:e7:6f:33:da:25:4f:90:15: 19:13:41:28:d8:a4:20:84:90:13:c2:af:53:bc:d7:8b:3d:21: 5e:b7:20:5c:0c:e4:ff:c0:28:dc:62:1c:fb:10:ab:b6:91:be: 1f:9f:3c:fb:4d:99:d4:9b:60:66:af:da:a5:1c:43:98:de:0f: 11:69:ea:af:79:8b:b0:80:b4:cb:4e:38:7d:41:27:be:1e:93: 79:a0:7f:b2:2a:b6:93:d9:8e:3d:7d:82:8c:f0:5a:fb:39:dc: ea:23:3d:78:3e:61:22:4c:b5:b3:97:0e:35:ce:72:1b:4e:c1: 7c:a1:eb:27:a2:bb:55:af:0a:a1:e8:4e:3d:b9:db:87:2d:9c: ce:46:ec:8b:62:05:c6:f4:13:2d:18:08:9b:3c:3d:d4:f7:20: 0f:fb:0f:fc:45:ba:da:3e:36:92:10:15:1a:17:b7:56:ff:ae: 7f:64:1f:d3:9c:a0:7e:e7:87:73:df:cd:b3:48:d9:f1:8c:fd: f9:bb:08:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4VFxzK3K1QJ+FLl810LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMWRjMThhNGIxZmJmZTJjMmJhYmQ4YmJiNDdmZTFmZDFj ZjIyZjgwHhcNMjUxMjA1MjMwMTE0WhcNMjUxMjA2MjMwMTE0WjAzMTEwLwYDVQQD EygxNDgxMDMwMTIzMjFlOGEyZGUwMDNmN2Q2MWMxMTFlNzRiZjdhOTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvi4iKxKbKM8dhPsuSOFayvct/YT dglIpBdalU8O61rr62+N1BeJaYH2ThQ7I5fWz5JxIr7Lgw2cepFvWOuKpvEZx+1h UKdOmpSGbiXDSwyRP2LbYfayTHKtsqvTNr5MPVMZD75TG9qPVKPu+gF1wXC/do3l qjunPsjnziR0WOAvoMdlEJbC+rT8vsYDOuXqjwYSCZ//OltU0lOs6LHRPpvFe6Ix OknsjHGZkhH+ae6bXg2H42II4cfOQp0gOB0VDcMlOfNkNY6wA/Na+JFwSOKqo8sK HsUBZcZ48VXq6pSBbyUCbpNcnMJ329LV4OS8+xNSLOSS86gkPqpoV7lQYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSBAwEjIeii3gA/fWHBEedL96kmMB8GA1UdIwQY MBaAFK4dwYpLH7/iwrq9i7tH/h/RzyL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMt OGU3MTQ5ZjA0YTRlLzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMtOGU3MTQ5ZjA0YTRl LzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTfjk06k yDoDF74WagaD/1kS1cyzT9ARWONX/ef2ndl62M0FARoKO6gA/5yaizmxYIPdyn7Y 3uCN7QGwxeFu5edvM9olT5AVGRNBKNikIISQE8KvU7zXiz0hXrcgXAzk/8Ao3GIc +xCrtpG+H588+02Z1JtgZq/apRxDmN4PEWnqr3mLsIC0y044fUEnvh6TeaB/siq2 k9mOPX2CjPBa+znc6iM9eD5hIky1s5cONc5yG07BfKHrJ6K7Va8KoehOPbnbhy2c zkbsi2IFxvQTLRgImzw91PcgD/sP/EW62j42khAVGhe3Vv+uf2Qf05ygfueHc9/N s0jZ8Yz9+bsIMg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:54 2025 by rpki-client