This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json) Hash identifier: hEldA4fRZagH3RJge78H0AEdSXWuPAySH3HgELXNv+k= Subject key identifier: 8F:9A:50:C2:18:40:C2:EF:2A:CA:06:AC:AE:EC:54:A7:0E:8C:0D:51 Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65 Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765 Certificate serial: 019AF23F6245954D3891FCF42EC600E2A36E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:31 +0000 Manifest this update: Sat 06 Dec 2025 06:00:31 +0000 Manifest next update: Sun 07 Dec 2025 06:00:31 +0000 Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: +Wr9u+VMUK7HSogFJcDt7RyIZ/DI9z8fJVBNd4Ut+Bs=) 2: JExy0vnBpyXtQRXrczW-rXsvlvc.roa (hash: uayvEFxY8m7ytIfb/FnA/i1VKT8AyOarqBsheJam/Mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:62:45:95:4d:38:91:fc:f4:2e:c6:00:e2:a3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f74988332069e1835246a85a1094125152b3765 Validity Not Before: Dec 6 06:00:31 2025 GMT Not After : Dec 7 06:00:31 2025 GMT Subject: CN=8f9a50c21840c2ef2aca06acaeec54a70e8c0d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:92:ad:b2:21:f5:4f:52:eb:8e:87:63:3d:1f: 0d:65:e3:4b:a9:8f:47:7a:f7:51:ac:61:c0:35:23: a9:f6:14:2f:4a:33:04:17:d5:48:dc:67:e8:87:25: 17:52:ff:63:ce:8d:15:b8:11:dd:f8:4a:ca:6c:f1: 5a:be:41:23:f4:2f:66:f0:11:99:2a:7c:8c:69:dd: bf:28:ad:e2:3e:c1:3c:ce:15:09:f7:d1:41:dc:d9: ab:df:9f:13:9b:71:64:d5:3e:80:a8:d0:d9:be:01: ad:a7:b3:7c:8e:a2:ae:52:55:32:df:6d:7a:34:65: 28:4d:c5:c4:96:d9:83:23:39:e6:13:23:d9:7d:c9: 1f:b1:95:13:b7:cf:c5:92:b0:33:fe:0e:48:54:ae: 8e:01:e1:bb:fa:0a:92:2b:f0:3d:c1:60:7a:9e:e8: cd:7b:6b:49:7a:ea:6f:e2:03:fc:17:b0:df:4d:d4: 8e:e0:a6:15:4b:de:11:86:68:04:51:dd:84:bd:b1: 9b:58:c8:a5:19:e4:a5:a7:5e:1a:8e:e7:01:4e:6b: 75:f7:8a:dc:2d:92:35:67:1e:ac:e0:10:a3:f1:9c: 1c:c3:73:80:27:91:da:34:49:40:9a:8d:cf:3d:93: 4e:fe:0a:61:91:ff:f0:81:40:7c:83:25:0d:bc:dc: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9A:50:C2:18:40:C2:EF:2A:CA:06:AC:AE:EC:54:A7:0E:8C:0D:51 X509v3 Authority Key Identifier: keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:53:e1:ad:6e:5a:8d:92:73:2b:6c:3f:c1:d3:eb:87:a0:98: 5d:4b:c1:4b:61:6b:11:cf:69:ae:d8:b2:4d:4e:b9:b3:0b:b8: e0:b8:e0:f5:b5:d0:5c:1e:4c:19:6f:c9:3b:29:30:3c:78:94: e0:e2:3f:8d:32:33:f7:20:99:e0:1c:b4:83:5c:23:96:04:d3: a4:ee:06:c5:df:64:7b:7b:d5:7e:65:d6:28:a4:bc:89:79:3b: bb:52:3c:0d:c9:34:d5:a0:e0:ba:55:cb:a9:51:50:66:be:d6: 72:0c:87:31:ed:9e:65:e3:fd:ab:b7:7f:46:08:0a:2b:c4:98: 79:34:63:26:34:9b:eb:00:e7:1b:2e:2d:4e:ce:33:c9:c2:2c: 4c:65:3a:4b:0a:02:d6:48:96:d1:03:14:02:08:de:57:35:39: a2:2a:ab:c0:f6:e1:ff:df:bf:fe:82:55:2d:7c:2b:d7:f4:1e: 46:26:e6:78:ce:fe:12:e0:e9:b7:2c:aa:79:59:39:a3:a4:ee: 1c:8e:31:29:9f:9f:df:e3:4f:75:da:d2:5c:e3:d4:79:0a:54: 0a:65:20:33:33:02:f7:ce:0a:9e:98:48:46:b5:30:67:cf:27: 74:a4:76:bd:bb:80:5f:1f:26:d6:e1:8f:72:37:11:55:02:e5: 23:f8:97:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2JFlU04kfz0LsYA4qNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNzQ5ODgzMzIwNjllMTgzNTI0NmE4NWExMDk0MTI1MTUy YjM3NjUwHhcNMjUxMjA2MDYwMDMxWhcNMjUxMjA3MDYwMDMxWjAzMTEwLwYDVQQD Eyg4ZjlhNTBjMjE4NDBjMmVmMmFjYTA2YWNhZWVjNTRhNzBlOGMwZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZKtsiH1T1LrjodjPR8NZeNLqY9H evdRrGHANSOp9hQvSjMEF9VI3GfohyUXUv9jzo0VuBHd+ErKbPFavkEj9C9m8BGZ KnyMad2/KK3iPsE8zhUJ99FB3Nmr358Tm3Fk1T6AqNDZvgGtp7N8jqKuUlUy3216 NGUoTcXEltmDIznmEyPZfckfsZUTt8/FkrAz/g5IVK6OAeG7+gqSK/A9wWB6nujN e2tJeupv4gP8F7DfTdSO4KYVS94RhmgEUd2EvbGbWMilGeSlp14ajucBTmt194rc LZI1Zx6s4BCj8Zwcw3OAJ5HaNElAmo3PPZNO/gphkf/wgUB8gyUNvNyVYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+aUMIYQMLvKsoGrK7sVKcOjA1RMB8GA1UdIwQY MBaAFB90mIMyBp4YNSRqhaEJQSUVKzdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDNTWWd6SUduaGcxSkdxRm9RbEJKUlVyTjJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zZmE0NWQtNjFiNi00YTI2LThkN2Yt OGQ5ZDc1MmM0ZjRhLzEvSDNTWWd6SUduaGcxSkdxRm9RbEJKUlVyTjJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8zZmE0NWQtNjFiNi00YTI2LThkN2YtOGQ5ZDc1MmM0ZjRh LzEvSDNTWWd6SUduaGcxSkdxRm9RbEJKUlVyTjJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFPhrW5a jZJzK2w/wdPrh6CYXUvBS2FrEc9prtiyTU65swu44Ljg9bXQXB5MGW/JOykwPHiU 4OI/jTIz9yCZ4By0g1wjlgTTpO4Gxd9ke3vVfmXWKKS8iXk7u1I8Dck01aDgulXL qVFQZr7WcgyHMe2eZeP9q7d/RggKK8SYeTRjJjSb6wDnGy4tTs4zycIsTGU6SwoC 1kiW0QMUAgjeVzU5oiqrwPbh/9+//oJVLXwr1/QeRibmeM7+EuDptyyqeVk5o6Tu HI4xKZ+f3+NPddrSXOPUeQpUCmUgMzMC984KnphIRrUwZ88ndKR2vbuAXx8m1uGP cjcRVQLlI/iXNA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:26 2025 by rpki-client