This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json) Hash identifier: UoOBtBCmdCh+B7v56iFFtgtgvmVmzDEOFf4xQyN38CM= Subject key identifier: 2C:58:D8:D5:BE:0E:F2:BE:0C:33:DB:45:22:BC:3D:4E:F6:71:E1:42 Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d Certificate serial: 019AF20906175F501A4C6DED1E4D1ACF1DA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:08 +0000 Manifest this update: Sat 06 Dec 2025 05:01:08 +0000 Manifest next update: Sun 07 Dec 2025 05:01:08 +0000 Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: AXBfTOzxZZrLPFugAlB4WVp3//otjzW6xommeRoX5eQ=) 2: 7ZfxbTG5XE7d3U698g7DhphadTg.roa (hash: Pr0+WF0lvDtFnCz/0c70Eot8c7E9jRvKLuNSr3PuDSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:06:17:5f:50:1a:4c:6d:ed:1e:4d:1a:cf:1d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d Validity Not Before: Dec 6 05:01:08 2025 GMT Not After : Dec 7 05:01:08 2025 GMT Subject: CN=2c58d8d5be0ef2be0c33db4522bc3d4ef671e142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f5:17:10:0c:f7:41:1c:c5:fa:1d:b9:7d:fa: 4e:57:c1:8e:c5:8f:a9:64:56:3f:aa:77:d3:71:3e: bf:d2:43:16:80:45:a9:d6:2e:16:4f:2b:76:ee:80: 0c:de:1d:4a:17:95:4c:f9:eb:e5:bf:de:29:a4:26: 78:68:8b:b6:35:4e:42:c0:41:e1:aa:0f:40:5f:4a: 01:9b:84:b6:24:9a:e0:40:fb:7c:e0:e2:74:6a:2b: ae:44:d7:22:77:9a:98:f9:aa:61:8b:64:c1:8f:55: c2:cd:36:84:ab:90:e7:e0:11:1e:cd:34:62:42:7f: c6:57:7b:40:c0:a2:73:ac:8c:99:12:c1:6b:b2:8e: 5b:cc:9e:d6:df:92:e9:f5:88:03:74:f6:d3:f7:f3: c5:7f:72:e0:51:88:2a:1d:e7:72:6a:f0:11:97:52: 8a:bd:fa:64:a8:3d:15:e6:b1:78:ba:0f:26:73:e0: 77:35:23:00:b8:08:8e:12:7d:59:27:50:48:29:bc: db:f3:f2:03:77:7f:8b:06:90:5a:e1:85:60:42:b2: 1f:35:ad:6e:60:c1:06:6e:04:f5:d9:70:9a:61:94: c5:38:b7:dc:29:e7:63:35:6f:68:66:08:f5:2d:71: a9:ae:fb:d3:95:f7:8c:20:07:4c:b1:9b:38:dc:59: 3c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:58:D8:D5:BE:0E:F2:BE:0C:33:DB:45:22:BC:3D:4E:F6:71:E1:42 X509v3 Authority Key Identifier: keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ba:d8:10:97:81:57:ae:5e:e3:c3:47:e0:a1:0d:67:3b:bb: ff:c9:24:8f:67:18:65:3c:7e:6a:06:16:7d:15:ef:37:1f:af: a4:73:fc:37:6e:84:56:2c:ca:7f:3c:78:85:80:e0:5d:36:24: 5f:8e:2e:62:47:05:48:f7:e0:8a:1a:9a:eb:5b:49:17:89:e4: c0:26:35:0a:01:dc:3d:b1:5b:61:93:7a:6f:3c:a6:f6:a9:d6: f9:cc:05:73:82:1f:06:f0:1f:42:41:fb:36:fd:ca:c8:d4:7e: 34:07:60:79:0b:a9:e8:9d:71:18:f5:db:f8:44:ba:91:ed:33: 08:ce:5d:01:54:02:c2:fc:c0:b4:ae:d7:e1:4d:ee:23:c5:76: 5b:7a:ee:4e:b3:01:a1:1b:80:67:60:c6:7a:5c:60:fc:77:8e: 4e:d8:56:98:ae:d0:a4:42:31:d7:4b:0e:07:9c:d0:b2:10:42: 88:23:9a:02:60:a2:1a:b0:50:25:4e:63:14:e2:a5:3a:41:3c: ee:a1:d9:b1:84:8e:9e:88:74:00:ec:de:48:44:eb:7a:45:d5: e9:68:cf:9a:99:e1:c8:00:fb:55:08:20:0a:64:3b:a9:55:a1: a8:3c:d1:cf:f7:db:88:42:49:33:ae:0d:97:58:5c:58:68:92: 67:58:9a:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQYXX1AaTG3tHk0azx2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2RmZjU0N2VhY2JlODFkYzM0NjU1OTg0NDZkM2IwMjdk Y2I3NmQwHhcNMjUxMjA2MDUwMTA4WhcNMjUxMjA3MDUwMTA4WjAzMTEwLwYDVQQD EygyYzU4ZDhkNWJlMGVmMmJlMGMzM2RiNDUyMmJjM2Q0ZWY2NzFlMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPUXEAz3QRzF+h25ffpOV8GOxY+p ZFY/qnfTcT6/0kMWgEWp1i4WTyt27oAM3h1KF5VM+evlv94ppCZ4aIu2NU5CwEHh qg9AX0oBm4S2JJrgQPt84OJ0aiuuRNcid5qY+aphi2TBj1XCzTaEq5Dn4BEezTRi Qn/GV3tAwKJzrIyZEsFrso5bzJ7W35Lp9YgDdPbT9/PFf3LgUYgqHedyavARl1KK vfpkqD0V5rF4ug8mc+B3NSMAuAiOEn1ZJ1BIKbzb8/IDd3+LBpBa4YVgQrIfNa1u YMEGbgT12XCaYZTFOLfcKedjNW9oZgj1LXGprvvTlfeMIAdMsZs43Fk8vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxY2NW+DvK+DDPbRSK8PU72ceFCMB8GA1UdIwQY MBaAFNB9/1R+rL6B3DRlWYRG07An3LdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgt Nzg1YWMxOTFiMzFhLzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgtNzg1YWMxOTFiMzFh LzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrrYEJeB V65e48NH4KENZzu7/8kkj2cYZTx+agYWfRXvNx+vpHP8N26EVizKfzx4hYDgXTYk X44uYkcFSPfgihqa61tJF4nkwCY1CgHcPbFbYZN6bzym9qnW+cwFc4IfBvAfQkH7 Nv3KyNR+NAdgeQup6J1xGPXb+ES6ke0zCM5dAVQCwvzAtK7X4U3uI8V2W3ruTrMB oRuAZ2DGelxg/HeOTthWmK7QpEIx10sOB5zQshBCiCOaAmCiGrBQJU5jFOKlOkE8 7qHZsYSOnoh0AOzeSETrekXV6WjPmpnhyAD7VQggCmQ7qVWhqDzRz/fbiEJJM64N l1hcWGiSZ1iaIg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:27 2025 by rpki-client