This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json) Hash identifier: pSaKH38neU7obt+0hs8LTqaptA7Zz78V3FXVeMlcc4Y= Subject key identifier: 95:59:23:00:AE:F3:49:5C:7B:17:69:E3:18:5E:21:34:94:8D:91:1A Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6 Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6 Certificate serial: 019AF1D22B964A0B35268A261512A9A6D4CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft Manifest number: 0B7B Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: xCZV2AKGTs+ZqcDmjk5jbWgYDz6lL3YLMJwpdwFJrac=) 2: iHSrTbxet8j5uaWQ6yDr02jRxjY.roa (hash: oCfYmcjvyzUP7DhCDsHSSh72gSgXxnVFLGRLc0v5Xfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2b:96:4a:0b:35:26:8a:26:15:12:a9:a6:d4:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6 Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=95592300aef3495c7b1769e3185e2134948d911a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f4:6a:ea:8a:63:f6:68:eb:c1:d5:ae:ee:29: 78:75:bc:e8:61:bf:35:68:a7:89:ae:3e:d1:84:02: 1b:44:30:f4:c3:5d:39:25:5f:d1:23:26:db:33:01: 1f:e1:8a:ba:39:4e:62:eb:7a:f7:d6:93:2b:c6:68: 85:c5:8b:51:5c:47:ab:dd:7c:06:e8:fe:32:47:bb: eb:07:39:79:45:fd:f0:ef:4c:c7:66:4b:0c:52:9c: e6:3a:77:80:90:0a:c4:23:8e:58:af:57:23:60:60: 9f:01:04:6a:b5:90:89:61:c1:e4:c6:9b:8b:3f:47: aa:a5:af:e8:f7:54:b7:db:8d:19:0c:e1:8e:8b:4f: af:54:e0:05:fd:f6:77:d2:29:16:f6:a4:68:3f:8e: 3c:c8:c2:28:47:b2:39:50:17:7f:6d:15:62:ce:c8: 22:2e:44:d0:28:f6:d8:67:49:7d:fc:f9:99:69:fe: d2:0f:72:72:15:a6:5f:cf:b5:2c:0e:7c:fb:22:ea: 69:0b:be:39:70:8b:ee:7f:4e:d1:66:00:42:36:03: 42:6f:16:69:89:53:eb:85:c5:01:9e:c3:36:3a:d6: 75:4b:a7:39:cb:6f:b6:94:d2:fa:79:9c:39:94:ff: af:d6:ae:50:b9:de:bc:9b:1d:83:0d:5e:22:82:70: a2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:59:23:00:AE:F3:49:5C:7B:17:69:E3:18:5E:21:34:94:8D:91:1A X509v3 Authority Key Identifier: keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:76:ae:ae:2c:b3:8b:56:f8:b0:43:f0:e3:84:e3:ad:f5:c5: 35:40:0a:11:c7:37:c4:71:1e:d2:7a:ee:db:b6:b4:7d:b9:88: df:55:44:64:1a:0e:84:99:b0:92:ca:60:fd:3b:90:1d:34:47: eb:1c:13:ad:5c:4c:c1:db:68:29:28:d0:a7:d7:d0:93:d5:9f: 02:d1:ed:50:ee:f1:62:3d:20:55:cd:14:9e:41:6b:01:a3:6b: f1:79:e3:94:05:41:56:f7:79:96:9e:fb:f9:6b:10:98:26:cc: 16:01:45:c5:22:94:ec:3f:66:0c:b8:19:6b:5d:77:51:48:d7: 66:71:be:aa:8e:50:9a:52:26:b7:d1:6b:20:96:03:8c:9c:03: 87:81:51:f0:38:f6:3b:8c:ae:a0:4e:8b:80:5a:df:79:1f:22: d8:1d:74:3c:ae:9f:d6:1b:c5:26:bb:74:8f:3e:b2:36:46:dc: 27:39:3c:4d:5f:fb:6a:dd:8a:37:08:f6:df:57:29:ac:ae:42: 65:85:6e:1b:3c:25:9d:fc:48:11:b5:98:5f:4a:eb:6f:95:76: 77:3e:e2:f1:44:d7:88:38:3c:b1:dc:ae:54:6b:99:6f:01:a9: af:ca:bb:4f:e3:4c:e5:04:5b:fe:cc:1d:bb:5d:5d:4f:85:11: ca:25:86:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iuWSgs1JoomFRKpptTPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNzE0MmI0NWI1Y2UzOTAxNmUyNWUwOWIyZmVkNTc5YTli ZDc3ZDYwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD Eyg5NTU5MjMwMGFlZjM0OTVjN2IxNzY5ZTMxODVlMjEzNDk0OGQ5MTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/Rq6opj9mjrwdWu7il4dbzoYb81 aKeJrj7RhAIbRDD0w105JV/RIybbMwEf4Yq6OU5i63r31pMrxmiFxYtRXEer3XwG 6P4yR7vrBzl5Rf3w70zHZksMUpzmOneAkArEI45Yr1cjYGCfAQRqtZCJYcHkxpuL P0eqpa/o91S3240ZDOGOi0+vVOAF/fZ30ikW9qRoP448yMIoR7I5UBd/bRVizsgi LkTQKPbYZ0l9/PmZaf7SD3JyFaZfz7UsDnz7IuppC745cIvuf07RZgBCNgNCbxZp iVPrhcUBnsM2OtZ1S6c5y2+2lNL6eZw5lP+v1q5Qud68mx2DDV4ignCi7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVZIwCu80lcexdp4xheITSUjZEaMB8GA1UdIwQY MBaAFB9xQrRbXOOQFuJeCbL+1XmpvXfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZmVhZDctNTg2YS00YjM1LWIxOTkt ZGZlNDVmNjcyZjgxLzEvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kZmVhZDctNTg2YS00YjM1LWIxOTktZGZlNDVmNjcyZjgx LzEvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3auriyz i1b4sEPw44TjrfXFNUAKEcc3xHEe0nru27a0fbmI31VEZBoOhJmwkspg/TuQHTRH 6xwTrVxMwdtoKSjQp9fQk9WfAtHtUO7xYj0gVc0UnkFrAaNr8XnjlAVBVvd5lp77 +WsQmCbMFgFFxSKU7D9mDLgZa113UUjXZnG+qo5QmlImt9FrIJYDjJwDh4FR8Dj2 O4yuoE6LgFrfeR8i2B10PK6f1hvFJrt0jz6yNkbcJzk8TV/7at2KNwj231cprK5C ZYVuGzwlnfxIEbWYX0rrb5V2dz7i8UTXiDg8sdyuVGuZbwGpr8q7T+NM5QRb/swd u11dT4URyiWG7w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:56 2025 by rpki-client