This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json) Hash identifier: C9CBd+ekCWeExs6szpTLLsRlpXAFYuGEJ+NK7/wv1vg= Subject key identifier: 70:E1:13:39:EB:FA:97:27:8B:BA:59:AF:2C:41:7A:6E:3B:DD:BA:1E Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef Certificate serial: 019AF12F2F184E05366D33155EF3F325B022 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:03:12 +0000 Manifest this update: Sat 06 Dec 2025 01:03:12 +0000 Manifest next update: Sun 07 Dec 2025 01:03:12 +0000 Files and hashes: 1: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: nhQzTpnf7XtjpVFEVyn8agASJZs9hRC/4RlYIrJKceA=) 2: KW800OmJGIdT7uikc0QcQ975IG4.roa (hash: dwHKNqVSICACPiCia+yUDPbsR26gug+E9f0Pra0zV6s=) 3: cEC9bPBmfz9Z43qJKU1IUGSC0lI.roa (hash: 4mEdeYIHzDK/DCJ4cVdrdS7DkgcRn2OeioiYgUbofOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:2f:18:4e:05:36:6d:33:15:5e:f3:f3:25:b0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef Validity Not Before: Dec 6 01:03:12 2025 GMT Not After : Dec 7 01:03:12 2025 GMT Subject: CN=70e11339ebfa97278bba59af2c417a6e3bddba1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ea:c5:c6:ec:9d:3a:b1:04:c4:cd:ba:b5:6b: 49:6b:9c:8d:05:cc:cd:e0:81:62:14:a6:b8:bb:e8: e3:e8:10:89:6a:c7:ea:e6:00:e7:71:38:28:1a:03: bf:2a:6e:3d:25:f0:3d:9f:94:9f:53:bb:7b:75:f9: 77:ef:6a:f2:fc:63:26:9a:2d:a6:60:40:70:26:9b: 57:47:25:a8:49:6f:7e:8d:ff:d3:08:d5:6f:0b:30: 21:1e:5f:1c:b1:a0:28:37:ba:2b:3d:e8:19:78:15: b3:07:04:f1:dd:da:84:ae:77:ef:c5:5f:dc:07:8c: e0:f4:7d:32:54:95:8a:c2:f2:9c:eb:34:a0:5a:01: 16:05:89:12:af:2d:ce:f2:7b:b8:18:ef:77:ac:09: 7b:a8:ff:ba:04:ee:47:2c:c0:78:94:54:3b:04:30: 32:a9:b4:d4:10:fd:63:be:9f:5c:e7:6c:9a:a4:ac: 18:d0:4e:2a:ba:70:3e:7c:ec:19:ee:1a:de:ca:ce: ca:f2:23:b9:57:d2:5e:0a:33:fc:2d:66:c1:2c:f9: 6d:8c:95:ec:76:52:c2:a8:e2:ff:90:e0:4d:be:76: c4:5e:fd:fd:7f:62:ed:d8:53:e7:54:2d:65:c1:2a: 9f:b2:98:b0:aa:27:27:42:c6:0c:b6:b3:9c:43:36: fd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E1:13:39:EB:FA:97:27:8B:BA:59:AF:2C:41:7A:6E:3B:DD:BA:1E X509v3 Authority Key Identifier: keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ac:44:c2:f5:a6:30:08:b2:bb:58:5f:91:67:c9:31:97:00: f7:23:e9:1f:a1:30:6c:ce:b7:f9:b1:23:5f:4e:14:23:7a:f4: 99:0a:3e:a7:78:61:4a:ec:44:68:29:aa:27:26:00:c9:33:26: 23:ae:e4:78:2a:65:99:81:08:a0:85:5b:bf:5f:b7:f1:62:d8: 04:1a:94:48:ca:2c:6e:73:ee:9a:d9:21:52:66:40:61:cf:ad: 8d:ed:90:3a:a6:e7:c9:79:65:28:fa:c3:e9:b2:0a:2e:bd:f1: 9f:75:6c:a2:ae:ab:c8:52:de:b2:4e:23:b4:f3:c7:79:7a:d1: 6f:da:11:3a:93:ff:b6:a1:02:e4:2e:d4:32:0c:b0:76:17:28: b2:09:1c:ee:b7:04:66:80:65:20:3b:7b:bf:be:61:48:30:95: fe:71:22:ba:f3:27:50:92:86:c0:85:3b:21:73:67:4a:dc:5c: e8:61:92:38:7a:bc:f1:e7:d9:5e:49:e0:dc:02:9b:a4:46:84: a4:7e:4f:69:44:fb:75:2f:57:b8:44:2e:60:da:40:cb:c8:85: 0a:88:94:4c:0c:79:4b:c0:f3:6e:8e:41:0b:5f:b8:09:e1:9a: 2d:81:74:5e:26:5a:d4:15:32:66:b5:bd:37:fe:60:76:00:f1: d7:d3:50:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLy8YTgU2bTMVXvPzJbAiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTliYWE4Yzg4MGE5NDU5ZGM1ZjQ0ZDY3NWRlYTRlZjk2 ZGJkZWYwHhcNMjUxMjA2MDEwMzEyWhcNMjUxMjA3MDEwMzEyWjAzMTEwLwYDVQQD Eyg3MGUxMTMzOWViZmE5NzI3OGJiYTU5YWYyYzQxN2E2ZTNiZGRiYTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqerFxuydOrEExM26tWtJa5yNBczN 4IFiFKa4u+jj6BCJasfq5gDncTgoGgO/Km49JfA9n5SfU7t7dfl372ry/GMmmi2m YEBwJptXRyWoSW9+jf/TCNVvCzAhHl8csaAoN7orPegZeBWzBwTx3dqErnfvxV/c B4zg9H0yVJWKwvKc6zSgWgEWBYkSry3O8nu4GO93rAl7qP+6BO5HLMB4lFQ7BDAy qbTUEP1jvp9c52yapKwY0E4qunA+fOwZ7hreys7K8iO5V9JeCjP8LWbBLPltjJXs dlLCqOL/kOBNvnbEXv39f2Lt2FPnVC1lwSqfspiwqicnQsYMtrOcQzb9RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDhEznr+pcni7pZryxBem473boeMB8GA1UdIwQY MBaAFN4ZuqjIgKlFncX0TWdd6k75bb3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjct ODk0OWU3NTFiMjE5LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjctODk0OWU3NTFiMjE5 LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqxEwvWm MAiyu1hfkWfJMZcA9yPpH6EwbM63+bEjX04UI3r0mQo+p3hhSuxEaCmqJyYAyTMm I67keCplmYEIoIVbv1+38WLYBBqUSMosbnPumtkhUmZAYc+tje2QOqbnyXllKPrD 6bIKLr3xn3Vsoq6ryFLesk4jtPPHeXrRb9oROpP/tqEC5C7UMgywdhcosgkc7rcE ZoBlIDt7v75hSDCV/nEiuvMnUJKGwIU7IXNnStxc6GGSOHq88efZXkng3AKbpEaE pH5PaUT7dS9XuEQuYNpAy8iFCoiUTAx5S8Dzbo5BC1+4CeGaLYF0XiZa1BUyZrW9 N/5gdgDx19NQbw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:20 2025 by rpki-client