This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft File: 0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json) Hash identifier: 480zyfhQe4/7Erl/FBmsNTKiGUKmwqtoH2+MhqDmOLM= Subject key identifier: 96:CC:A3:F0:B5:3F:52:81:D4:E2:F6:A2:7A:84:E3:23:CF:30:D5:20 Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62 Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262 Certificate serial: 019AF49C2C9D5D308019952AA212AA77D2F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:01:06 +0000 Manifest this update: Sat 06 Dec 2025 17:01:06 +0000 Manifest next update: Sun 07 Dec 2025 17:01:06 +0000 Files and hashes: 1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: sDCzFnwojgt4eO9EKvAwKQ62n4xeVJRIfZTSk1Zk4bY=) 2: UtfGmlfffX0cIYFRWQAmKmCxHBQ.roa (hash: eIoevFtzl4KgjvBzeT/oQJHdGPIhlQ4d3q4XFG6eYig=) 3: pkGGNBdhq4ZpQRqIZMsggNSolf0.roa (hash: y34zQyNQE6Dt9rgo+TKZCABmiXucQM6cXI6cZVCrI5E=) 4: qMKz0iOTV-AipsqG6OSykAqBmcw.roa (hash: evn2bcSDR90liMyPkIBPgdH2fICEje6rbDEpXsqQ5bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:2c:9d:5d:30:80:19:95:2a:a2:12:aa:77:d2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262 Validity Not Before: Dec 6 17:01:06 2025 GMT Not After : Dec 7 17:01:06 2025 GMT Subject: CN=96cca3f0b53f5281d4e2f6a27a84e323cf30d520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:e1:8b:d8:eb:3a:72:ae:0d:11:79:cd:b8: bf:78:1d:9a:fc:3c:de:2b:ff:56:a2:62:50:ef:ae: 87:31:25:2c:07:1d:a3:50:47:1b:3a:6d:42:e1:69: ee:33:72:f1:e7:b9:43:fd:93:a8:63:bf:36:8a:0b: 88:88:d4:f6:30:34:ae:14:4c:5a:f4:d8:21:00:ef: aa:40:72:04:70:88:73:9b:2e:5c:11:e1:bf:fa:60: 72:26:e2:46:c4:61:71:13:c7:cd:f7:b5:3d:ef:51: 87:af:35:70:11:45:b0:7b:5f:0f:3d:51:a6:46:79: 55:0e:ce:84:e4:c1:a0:32:99:41:51:a6:52:28:d0: fe:87:b4:f6:bb:91:61:68:c3:e2:cc:d0:0c:3e:3a: 68:14:3c:fd:82:b8:f5:53:0e:6b:f7:f2:2b:43:ac: a1:5d:93:09:4d:02:03:3d:3c:c1:1b:44:ae:6d:6d: 93:42:04:11:4c:c2:2c:a1:3d:d4:44:d2:72:9c:c9: b6:c8:7a:b7:49:11:03:e8:a0:e4:4a:60:36:07:4f: 19:2d:ce:fc:f2:a6:be:ad:1a:e5:79:35:4e:be:d2: 24:77:6c:af:78:54:d1:ed:a9:e3:ac:dc:02:c6:76: 58:7d:43:bb:37:ed:11:20:ef:34:37:39:f2:d3:52: 5c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CC:A3:F0:B5:3F:52:81:D4:E2:F6:A2:7A:84:E3:23:CF:30:D5:20 X509v3 Authority Key Identifier: keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d1:19:f1:4d:c7:9e:bc:3f:bf:b4:ea:08:12:9c:82:f3:93: 2e:85:f5:e3:41:31:31:22:38:e9:90:f5:46:43:c1:b4:3f:85: 16:e6:10:49:02:43:f7:93:9b:08:93:4e:19:cb:db:8c:c4:36: 53:dc:c3:90:80:9c:4c:3f:eb:4d:c2:bc:b6:b8:ac:d6:a0:fc: 9b:eb:b8:48:e1:cd:c4:0c:df:d8:f3:9b:c8:d0:d6:1b:5c:13: 4e:18:d9:75:60:d6:b5:17:e4:3b:30:56:ab:f9:99:52:7d:2b: 31:3e:60:52:24:12:ca:22:f8:91:2f:67:e0:3d:73:d5:f5:50: 4a:28:83:7d:01:85:20:ca:01:4c:b2:34:aa:c0:fb:60:64:80: 8e:af:ff:e3:fe:2e:37:d1:38:33:74:2d:f5:8e:3f:2e:b8:db: 75:be:4a:e3:f2:e0:08:eb:ff:b9:de:81:87:d5:27:86:6d:df: 6f:17:87:b4:08:e3:56:11:2e:44:75:8e:75:3b:29:72:8c:c4: a5:3d:31:98:4b:fd:f8:24:64:28:57:48:bc:b4:c6:ae:d9:76: 35:20:fa:ac:e3:32:22:49:71:df:99:95:82:b0:67:99:c1:59: d8:4e:10:5d:b6:4b:28:13:44:7d:48:ea:c9:b1:52:29:e5:b0: 61:b2:91:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nCydXTCAGZUqohKqd9L3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2RjMzVlYmNkODhkZDBlMmE4ZGIzYTVhMDg2NTRiYzNi ZTAyNjIwHhcNMjUxMjA2MTcwMTA2WhcNMjUxMjA3MTcwMTA2WjAzMTEwLwYDVQQD Eyg5NmNjYTNmMGI1M2Y1MjgxZDRlMmY2YTI3YTg0ZTMyM2NmMzBkNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6vhi9jrOnKuDRF5zbi/eB2a/Dze K/9WomJQ766HMSUsBx2jUEcbOm1C4WnuM3Lx57lD/ZOoY782iguIiNT2MDSuFExa 9NghAO+qQHIEcIhzmy5cEeG/+mByJuJGxGFxE8fN97U971GHrzVwEUWwe18PPVGm RnlVDs6E5MGgMplBUaZSKND+h7T2u5FhaMPizNAMPjpoFDz9grj1Uw5r9/IrQ6yh XZMJTQIDPTzBG0SubW2TQgQRTMIsoT3URNJynMm2yHq3SRED6KDkSmA2B08ZLc78 8qa+rRrleTVOvtIkd2yveFTR7anjrNwCxnZYfUO7N+0RIO80Nzny01JcKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbMo/C1P1KB1OL2onqE4yPPMNUgMB8GA1UdIwQY MBaAFNB9w1682I3Q4qjbOloIZUvDvgJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xYzcxOGQtZTdhMC00MGFjLWExODEt Y2JhYTQyYTYyNzI3LzEvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8xYzcxOGQtZTdhMC00MGFjLWExODEtY2JhYTQyYTYyNzI3 LzEvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9EZ8U3H nrw/v7TqCBKcgvOTLoX140ExMSI46ZD1RkPBtD+FFuYQSQJD95ObCJNOGcvbjMQ2 U9zDkICcTD/rTcK8tris1qD8m+u4SOHNxAzf2PObyNDWG1wTThjZdWDWtRfkOzBW q/mZUn0rMT5gUiQSyiL4kS9n4D1z1fVQSiiDfQGFIMoBTLI0qsD7YGSAjq//4/4u N9E4M3Qt9Y4/Lrjbdb5K4/LgCOv/ud6Bh9Unhm3fbxeHtAjjVhEuRHWOdTspcozE pT0xmEv9+CRkKFdIvLTGrtl2NSD6rOMyIklx35mVgrBnmcFZ2E4QXbZLKBNEfUjq ybFSKeWwYbKRgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:34:33 2025 by rpki-client