This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json) Hash identifier: q4ye+d21dYaC+0ryamoSM18o9TZPa70Ch2rz0e6nfa0= Subject key identifier: 09:8D:B0:DE:7F:81:83:24:9D:06:96:28:F1:FF:61:23:65:21:6E:E8 Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9 Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9 Certificate serial: 019AF1D18C1C3CB18AF432ECEB172644937C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=) 2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: kXzYK5ovmWYOEqXQvbkUW4OaLKj5OGDHMk9+skyuIUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8c:1c:3c:b1:8a:f4:32:ec:eb:17:26:44:93:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9 Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=098db0de7f8183249d069628f1ff612365216ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:cd:19:44:75:f4:c0:54:96:91:83:10:fb: ed:da:81:61:97:bd:3e:a7:ed:60:30:28:eb:25:1d: 95:13:dc:b8:36:aa:31:3b:76:15:ed:c2:46:c9:d4: 40:b5:65:71:cc:f4:fc:6b:22:ac:c8:69:a7:dd:60: 99:9f:e1:c6:79:73:5b:22:2b:75:99:94:b5:fd:18: cc:4a:11:f0:4a:90:7b:ab:d0:ef:e1:fb:b5:53:e1: 97:4b:7e:0a:25:39:86:27:a8:8a:fa:7e:70:72:8d: a7:c4:ef:13:d4:f6:3e:3a:e3:50:f9:4a:ae:69:6c: 65:68:d2:f6:75:fe:00:fa:98:9f:1a:99:74:bb:23: a1:6f:25:d3:eb:2c:88:b2:a9:87:f1:5d:0a:88:39: 5a:f9:2c:21:2e:a6:f0:6f:2e:bf:fb:dc:60:f6:01: 57:bb:25:5b:9c:f3:08:ea:6a:6a:5d:61:44:fa:8e: 05:7d:39:36:93:1e:71:b0:f8:3b:06:2e:09:0e:44: d3:5b:90:05:b4:ce:98:a2:3e:a0:ad:2f:fa:59:10: 22:3f:11:a1:55:b2:d1:ea:fd:c3:04:c5:d3:56:67: c4:6a:3e:e2:5a:7e:e3:d6:5e:9c:2b:f7:b9:1a:b6: e7:c5:c0:ac:f9:80:dc:4c:3a:53:6c:9a:34:9b:38: 40:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8D:B0:DE:7F:81:83:24:9D:06:96:28:F1:FF:61:23:65:21:6E:E8 X509v3 Authority Key Identifier: keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f5:d4:41:1b:b4:5a:4f:7d:ca:66:a0:a1:6b:61:c5:b3:08: 2d:af:6a:28:74:a0:ae:0d:3c:60:9c:ba:0e:59:03:e4:d1:38: 4c:1e:ad:9c:aa:d1:c7:fe:ab:0f:12:1f:c2:6b:52:20:e6:ed: 94:ff:bf:f0:b3:73:57:f4:b5:6a:48:b5:0a:c0:e8:09:c8:72: 31:f9:2b:34:41:93:bc:46:22:e3:59:89:20:a2:96:70:4c:7e: b3:0c:b2:e2:fa:b9:3b:59:36:62:7d:e7:52:24:49:e0:e7:57: d4:80:8d:93:2e:fa:43:4e:a8:d3:d4:2a:c7:78:eb:ce:58:fb: 2a:da:33:d6:ec:43:ac:da:00:eb:20:eb:5c:63:90:5b:ac:38: 9f:5f:f0:96:c8:60:93:92:7c:aa:87:9d:2c:f8:1d:e0:10:b5: ae:63:57:a5:f2:2f:9d:60:73:32:3b:b8:d9:9c:57:c0:53:b4: b3:be:76:41:19:4e:ed:ad:27:11:9c:07:84:74:42:cd:7b:dd: db:4d:ce:0a:6d:5f:6d:e2:27:6f:d9:c6:0c:a5:04:25:c5:f4: 76:ff:97:f8:e7:45:61:e2:bf:33:70:78:29:df:74:5a:ff:6a: 6f:0c:53:59:04:47:eb:b3:51:9b:eb:50:55:cb:98:de:36:bf: ea:20:73:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YwcPLGK9DLs6xcmRJN8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZjg2MmRmZTBjMzQ4NzQxMjBkMmNjMTY5ZmMzMTQ0OTM4 ZWU4ZDkwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD EygwOThkYjBkZTdmODE4MzI0OWQwNjk2MjhmMWZmNjEyMzY1MjE2ZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotbNGUR19MBUlpGDEPvt2oFhl70+ p+1gMCjrJR2VE9y4NqoxO3YV7cJGydRAtWVxzPT8ayKsyGmn3WCZn+HGeXNbIit1 mZS1/RjMShHwSpB7q9Dv4fu1U+GXS34KJTmGJ6iK+n5wco2nxO8T1PY+OuNQ+Uqu aWxlaNL2df4A+pifGpl0uyOhbyXT6yyIsqmH8V0KiDla+SwhLqbwby6/+9xg9gFX uyVbnPMI6mpqXWFE+o4FfTk2kx5xsPg7Bi4JDkTTW5AFtM6Yoj6grS/6WRAiPxGh VbLR6v3DBMXTVmfEaj7iWn7j1l6cK/e5GrbnxcCs+YDcTDpTbJo0mzhA1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmNsN5/gYMknQaWKPH/YSNlIW7oMB8GA1UdIwQY MBaAFHL4Yt/gw0h0Eg0swWn8MUSTjujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xMzVmYzQtYjM1YS00MmRiLTgxNDEt MjIwNzY0ZGMzNDVjLzEvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8xMzVmYzQtYjM1YS00MmRiLTgxNDEtMjIwNzY0ZGMzNDVj LzEvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/XUQRu0 Wk99ymagoWthxbMILa9qKHSgrg08YJy6DlkD5NE4TB6tnKrRx/6rDxIfwmtSIObt lP+/8LNzV/S1aki1CsDoCchyMfkrNEGTvEYi41mJIKKWcEx+swyy4vq5O1k2Yn3n UiRJ4OdX1ICNky76Q06o09Qqx3jrzlj7Ktoz1uxDrNoA6yDrXGOQW6w4n1/wlshg k5J8qoedLPgd4BC1rmNXpfIvnWBzMju42ZxXwFO0s752QRlO7a0nEZwHhHRCzXvd 203OCm1fbeInb9nGDKUEJcX0dv+X+OdFYeK/M3B4Kd90Wv9qbwxTWQRH67NRm+tQ VcuY3ja/6iBzJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:42 2025 by rpki-client