This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft File: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json) Hash identifier: UkwJxCPCxGZ65W+Y2PRnciWtdGdprk6k2UDHE0byDWU= Subject key identifier: E8:23:70:7C:20:A8:5A:28:6D:95:D5:09:1B:19:EB:6C:BC:7F:94:0E Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6 Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6 Certificate serial: 019AF54109E5036096AF828652FC9113A266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft Manifest number: 07DD Signing time: Sat 06 Dec 2025 20:01:11 +0000 Manifest this update: Sat 06 Dec 2025 20:01:11 +0000 Manifest next update: Sun 07 Dec 2025 20:01:11 +0000 Files and hashes: 1: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: +H8ChLZDGYasL9JUXWk1DzkiWPGUUakqvX1eCxiSPhE=) 2: stpDfm6iNdDYaLxAEW54ErOGA3g.roa (hash: 0TvfMldTzQqqOzNlOoBnIsJUFfnXCRYAaac2mQAq9jQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:09:e5:03:60:96:af:82:86:52:fc:91:13:a2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6 Validity Not Before: Dec 6 20:01:11 2025 GMT Not After : Dec 7 20:01:11 2025 GMT Subject: CN=e823707c20a85a286d95d5091b19eb6cbc7f940e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cc:ef:55:78:df:9d:01:8e:dd:8d:97:23:ab: 1d:84:ca:15:31:8f:fe:c4:7d:1b:af:ea:f5:7a:e2: f6:4d:5d:b1:16:c3:24:04:a1:fb:d6:23:8e:5e:88: 52:40:89:bf:b1:d4:3c:23:7a:9e:f4:da:71:ce:e7: 31:cc:e7:62:07:18:f6:fb:53:58:45:bb:8e:52:e4: 50:ed:01:19:79:ba:99:8d:93:6c:a0:1f:dc:72:39: 8d:f9:1b:a7:fc:48:0a:c0:8c:47:ad:83:be:b8:a5: e2:da:85:3d:bf:61:7c:61:52:7c:6a:7f:be:27:3d: 7c:21:44:f9:f4:c9:b2:30:b7:a0:07:8c:19:02:ab: b3:6e:bc:4b:f4:fd:06:f5:7c:34:9b:b0:17:67:aa: e9:11:2b:d2:3e:c6:f2:52:ec:c4:60:80:e7:ef:93: 56:ed:18:b7:fb:95:d0:99:f6:bc:e0:c6:4a:09:8d: 27:5f:7a:57:6a:e1:62:f0:e2:b1:3e:5b:cb:d5:9d: 02:1e:4a:de:b2:e7:6d:e7:d8:36:c8:53:be:52:e7: 3f:d4:0e:d5:0e:20:d2:2e:ad:fd:49:0e:03:e1:41: 8e:13:21:c2:26:0d:db:a9:11:f2:58:40:36:6d:aa: 8a:d5:5e:ab:78:d1:e9:b1:6e:99:d4:cf:2c:b0:f7: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:23:70:7C:20:A8:5A:28:6D:95:D5:09:1B:19:EB:6C:BC:7F:94:0E X509v3 Authority Key Identifier: keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0a:a9:ff:4e:0e:26:bf:8c:18:96:5d:e9:96:e5:c3:dc:87: b1:84:3c:50:8f:2c:a3:27:00:21:f3:23:e9:b5:ef:a2:71:11: 39:64:d6:a4:c4:69:e0:33:1a:af:17:2b:84:d2:cf:27:7e:5e: ad:6c:32:13:1b:77:45:2d:9c:09:80:d1:a6:df:83:c3:c2:19: ee:38:fc:f3:0e:96:90:fa:70:2c:d3:02:fd:6e:fb:eb:f7:74: b2:5a:5d:7a:d2:e5:33:32:84:aa:fa:3c:03:0e:1f:b9:b6:ed: 12:cd:6a:af:13:64:3b:6d:9e:c6:40:e5:89:c8:82:a3:ca:00: c2:29:cb:99:0c:14:fd:41:d6:46:de:98:fc:1f:bb:54:fd:4c: 3c:bf:47:e2:c2:dd:b0:16:fc:71:69:3c:b7:41:07:97:f8:2a: 10:dc:88:07:c8:bb:35:0f:bd:f9:44:bf:6c:e2:d8:d5:ac:00: 96:a7:2a:05:d1:db:49:00:72:7a:40:99:0d:4c:a2:d0:4e:0d: a7:b7:b4:d5:e7:d2:db:84:4c:ac:3a:f3:be:fa:30:3c:46:1b: 61:d4:18:11:43:72:10:e1:92:b7:33:d9:b3:61:ee:3e:75:28: e5:78:c8:17:08:44:3c:f1:f1:13:3e:a1:50:b8:7a:ff:0e:da: 73:93:e9:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QQnlA2CWr4KGUvyRE6JmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZWRjNGMxOWUwMzNhMTY3ZTRhZjc5NWQ1NGUzNGI3MWVh MDkzYzYwHhcNMjUxMjA2MjAwMTExWhcNMjUxMjA3MjAwMTExWjAzMTEwLwYDVQQD EyhlODIzNzA3YzIwYTg1YTI4NmQ5NWQ1MDkxYjE5ZWI2Y2JjN2Y5NDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3szvVXjfnQGO3Y2XI6sdhMoVMY/+ xH0br+r1euL2TV2xFsMkBKH71iOOXohSQIm/sdQ8I3qe9NpxzucxzOdiBxj2+1NY RbuOUuRQ7QEZebqZjZNsoB/ccjmN+Run/EgKwIxHrYO+uKXi2oU9v2F8YVJ8an++ Jz18IUT59MmyMLegB4wZAquzbrxL9P0G9Xw0m7AXZ6rpESvSPsbyUuzEYIDn75NW 7Ri3+5XQmfa84MZKCY0nX3pXauFi8OKxPlvL1Z0CHkresudt59g2yFO+Uuc/1A7V DiDSLq39SQ4D4UGOEyHCJg3bqRHyWEA2baqK1V6reNHpsW6Z1M8ssPe7CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgjcHwgqFoobZXVCRsZ62y8f5QOMB8GA1UdIwQY MBaAFB/txMGeAzoWfkr3ldVONLceoJPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kZjkxYzMtZDViOC00YTU4LWFlOWUt MmY4NzliNTc1NGUxLzEvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kZjkxYzMtZDViOC00YTU4LWFlOWUtMmY4NzliNTc1NGUx LzEvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwqp/04O Jr+MGJZd6Zblw9yHsYQ8UI8soycAIfMj6bXvonEROWTWpMRp4DMarxcrhNLPJ35e rWwyExt3RS2cCYDRpt+Dw8IZ7jj88w6WkPpwLNMC/W776/d0slpdetLlMzKEqvo8 Aw4fubbtEs1qrxNkO22exkDliciCo8oAwinLmQwU/UHWRt6Y/B+7VP1MPL9H4sLd sBb8cWk8t0EHl/gqENyIB8i7NQ+9+US/bOLY1awAlqcqBdHbSQByekCZDUyi0E4N p7e01efS24RMrDrzvvowPEYbYdQYEUNyEOGStzPZs2HuPnUo5XjIFwhEPPHxEz6h ULh6/w7ac5PpHQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:30:28 2025 by rpki-client