This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft File: h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json) Hash identifier: cxrQy8/f1J5yuq5to5lykTP8NsRWHu51HOLg5x26YsM= Subject key identifier: AB:E8:13:C1:C0:CA:65:63:87:27:FF:32:04:51:E2:F5:0F:2C:18:42 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019AF2E43B62CBDF0CDAD108080648BD9E44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft Manifest number: 177F Signing time: Sat 06 Dec 2025 09:00:34 +0000 Manifest this update: Sat 06 Dec 2025 09:00:34 +0000 Manifest next update: Sun 07 Dec 2025 09:00:34 +0000 Files and hashes: 1: 3VQFHIG_0NRiYGSMTzNDYelPmMs.roa (hash: T8N7lYcGBn0m7uBQBcevnqsWbvysQD6cxVHO1RDwUvg=) 2: 41kwTSa8H9b9pjrkUzwf85FQ470.roa (hash: 6DgsyUX2uyntOPFl8yDMIgTXXXs0mzyQ219673BzCzU=) 3: CdQNI5gcW0_1cf24cLvP-tL_omw.roa (hash: fyArCRfx7SbzhmzmpSevkzJflw0c7SkqK2TimwbjqzM=) 4: RXJMzhMtehSuCCi6uqljNw1_L-s.roa (hash: Xot9S/JUju+/cZl9baS7ZUR4Rh18U5S5qk4hiX6txpg=) 5: TpqMtUwJukfz53BZIUdbM-kP9dU.roa (hash: sJ+1FquCHUKBx1oFow8K9ca95AgoJ61IjnusPLlcDN8=) 6: WEKuOaRTTX2rTln9asflqP9Y2Os.roa (hash: EcqtEEKcbvmbmPvboEcXGauHM+e7HHmS4JSP0Le2t4o=) 7: XmOvv05xULfAWuDqrX7juNO-0qI.roa (hash: eJeMTOSpJLyqSZNQmSL2OZUvlINOSkmPnV9aTneLjHg=) 8: Xzib8AfEYqY2cHmuuM-ww_w5sW0.roa (hash: 6XHRFIs5VNl1aw2+x8Rz4IQniQIfYw9CyiplPPtk5bE=) 9: aMv6gEqWxpGKwwWm6t5nV_iaM3Q.roa (hash: +a48j1hsLG2vzEIY2MRVBswlr1+jm51V+Dk+4EhL/9Y=) 10: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: qQL6KTitoVD5scL8qE7KJW2wf3HtjPAVmHlR1W9z+Dg=) 11: jF6aKXBNyHTawjaz9GVexS6_Vps.roa (hash: FiDTfOMoZak8gOhtJT/8yhL0tIdZjUn13AvzOxfMN0E=) 12: s6XbpS6zvG-OGcqP78qsGOOoOlQ.roa (hash: vai/46FuXyssCtnAk+MIcYY2mUqRBxwISqAf2lFmzsg=) 13: vsuobB7Q7M7H0d2b7icsBX46rF8.roa (hash: 7WzZ613I/LXa4Zefx9tEqY2ZhSRre3hj1QC98fA5RuY=) 14: xP11eIeQX9x-FJdxDPaYbALauGA.roa (hash: X/B/3lK+XxCa5BQgDlvPLTFtIiO9rYw/6L5OCGSXKQE=) 15: xT7aM3kUy4b46Qb4CAkkSam9t5g.roa (hash: Rfd0mKt9HyiAqh5+s2geHZ1SUFHa0fSNkwoTUgmAYpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:3b:62:cb:df:0c:da:d1:08:08:06:48:bd:9e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Dec 6 09:00:34 2025 GMT Not After : Dec 7 09:00:34 2025 GMT Subject: CN=abe813c1c0ca65638727ff320451e2f50f2c1842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:68:e1:8a:82:65:a7:3c:54:58:77:8d:d7:a8: 57:af:b2:fd:1a:b6:44:e2:7c:69:dc:4b:ca:a4:10: c6:29:cb:da:5c:35:84:00:17:cf:04:3b:c9:9f:cd: 91:2d:3e:3c:10:1b:53:c6:84:7e:7a:e3:71:06:07: bd:c2:78:b4:c6:0e:4b:10:de:bd:34:42:a6:05:d9: a5:23:ee:d8:d5:f5:6d:c1:6a:fa:d9:ff:f1:ed:78: ef:c7:c8:12:0b:15:8e:21:3b:29:16:6b:4f:37:5c: c6:d9:f7:d2:ca:fa:9d:38:5b:56:cf:5b:b8:8d:4f: 9a:92:28:45:bc:e9:83:da:0c:27:d4:e5:06:33:73: 49:6f:75:5a:a3:d4:bb:99:43:e6:f7:97:8c:40:b8: 14:df:cc:4a:c6:e9:bf:62:7b:05:66:86:5a:9e:32: 73:f7:53:31:c2:01:82:48:34:79:40:5d:60:1e:d1: 83:ff:36:eb:4e:5f:f0:20:66:35:cd:27:de:49:b2: 25:5a:89:52:df:99:eb:d7:06:1e:92:9d:eb:35:71: 7d:e4:26:79:a2:04:0b:12:de:4c:5c:70:f8:87:b9: 2f:e9:39:81:2a:1f:5a:5c:0d:ca:ed:8e:09:56:8c: 49:e0:1c:38:2d:bc:c6:cd:eb:42:a9:84:d2:15:e1: 15:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E8:13:C1:C0:CA:65:63:87:27:FF:32:04:51:E2:F5:0F:2C:18:42 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ba:f6:c5:82:a8:48:01:ae:95:b0:3b:2c:40:8f:6f:93:3d: 27:e7:28:12:2f:47:11:e6:96:6b:8d:15:f2:c2:60:a8:e6:df: b1:3f:7c:99:24:23:f9:bd:8f:85:1c:27:c3:83:f2:b8:ae:a4: a1:2d:7a:05:38:ac:cd:e1:9b:81:a6:6a:c9:4b:3f:9f:1f:af: 3c:b7:19:8a:82:fc:99:76:49:f9:79:72:61:8a:90:dc:61:ab: 08:9a:89:5f:7d:fe:38:3e:e0:9b:2e:db:42:83:57:09:79:b5: 9e:25:a5:db:d9:40:d0:1a:19:5e:08:ee:16:39:3d:8d:f0:bc: b8:d4:5e:aa:ba:e6:18:83:53:d4:ec:c6:7c:22:6b:33:01:2d: 07:10:74:9c:65:c4:19:33:02:ce:f9:ed:79:d9:94:9c:80:ff: 2f:d6:8f:0f:0b:9c:77:d8:94:f6:70:22:48:43:3a:19:8b:b0: a2:18:ee:af:a8:d6:29:1f:26:6f:30:39:65:15:9b:f5:bf:24: 3d:3b:f5:f6:b1:cb:95:e7:44:aa:61:57:0e:fa:11:33:af:4d: da:81:ea:c6:64:8a:1f:97:38:6c:8c:e8:6d:3b:17:b4:27:37: b9:a3:66:c7:ea:f3:b4:44:5d:30:15:49:8f:2a:e9:68:2c:10: e4:a6:41:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5Dtiy98M2tEICAZIvZ5EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjUxMjA2MDkwMDM0WhcNMjUxMjA3MDkwMDM0WjAzMTEwLwYDVQQD EyhhYmU4MTNjMWMwY2E2NTYzODcyN2ZmMzIwNDUxZTJmNTBmMmMxODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWjhioJlpzxUWHeN16hXr7L9GrZE 4nxp3EvKpBDGKcvaXDWEABfPBDvJn82RLT48EBtTxoR+euNxBge9wni0xg5LEN69 NEKmBdmlI+7Y1fVtwWr62f/x7Xjvx8gSCxWOITspFmtPN1zG2ffSyvqdOFtWz1u4 jU+akihFvOmD2gwn1OUGM3NJb3Vao9S7mUPm95eMQLgU38xKxum/YnsFZoZanjJz 91MxwgGCSDR5QF1gHtGD/zbrTl/wIGY1zSfeSbIlWolS35nr1wYekp3rNXF95CZ5 ogQLEt5MXHD4h7kv6TmBKh9aXA3K7Y4JVoxJ4Bw4LbzGzetCqYTSFeEVOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvoE8HAymVjhyf/MgRR4vUPLBhCMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbr2xYKo SAGulbA7LECPb5M9J+coEi9HEeaWa40V8sJgqObfsT98mSQj+b2PhRwnw4PyuK6k oS16BTiszeGbgaZqyUs/nx+vPLcZioL8mXZJ+XlyYYqQ3GGrCJqJX33+OD7gmy7b QoNXCXm1niWl29lA0BoZXgjuFjk9jfC8uNReqrrmGINT1OzGfCJrMwEtBxB0nGXE GTMCzvntedmUnID/L9aPDwucd9iU9nAiSEM6GYuwohjur6jWKR8mbzA5ZRWb9b8k PTv19rHLledEqmFXDvoRM69N2oHqxmSKH5c4bIzobTsXtCc3uaNmx+rztERdMBVJ jyrpaCwQ5KZBsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:54:29 2025 by rpki-client