This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json) Hash identifier: /RsG5IAO5pFdlDQqgoAUxQn3NfFxt+xqAlpnBhqoqPk= Subject key identifier: AB:84:8B:CC:7A:8D:24:EA:FD:AD:8F:6E:EE:BD:92:71:D0:C6:4B:EF Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6 Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6 Certificate serial: 019B337AE9ACAD7EDB5A1AFF2A85991B5750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft Manifest number: 0B9D Signing time: Thu 18 Dec 2025 22:00:51 +0000 Manifest this update: Thu 18 Dec 2025 22:00:51 +0000 Manifest next update: Fri 19 Dec 2025 22:00:51 +0000 Files and hashes: 1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: i4+MuTr/ke2Kq6bBslHBT80jXY8j0BGSi2NvKRFTwqI=) 2: iHSrTbxet8j5uaWQ6yDr02jRxjY.roa (hash: oCfYmcjvyzUP7DhCDsHSSh72gSgXxnVFLGRLc0v5Xfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:e9:ac:ad:7e:db:5a:1a:ff:2a:85:99:1b:57:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6 Validity Not Before: Dec 18 22:00:51 2025 GMT Not After : Dec 19 22:00:51 2025 GMT Subject: CN=ab848bcc7a8d24eafdad8f6eeebd9271d0c64bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:fb:e2:3e:bb:f6:bb:28:de:0b:93:e1:97: fd:92:aa:33:d7:54:05:fc:a9:2e:e8:bc:98:e8:a0: 16:9e:24:c1:de:78:b9:91:d4:8d:b6:e4:c7:68:98: c2:21:2d:ab:3b:43:d6:bc:27:ce:f9:e6:01:88:21: a2:61:ce:59:d2:86:64:ac:5d:78:58:52:d8:d9:cd: c6:e4:4e:92:2a:5d:9c:17:24:1b:8b:99:76:32:cb: f6:32:38:a8:cb:ac:d6:bc:05:8c:d7:f6:a3:4a:37: 44:aa:8a:23:87:32:63:bd:f6:14:61:b4:09:42:0b: 48:88:4e:3f:22:fc:f7:a2:fc:fb:f1:10:f7:10:37: cc:27:3a:91:6f:13:d1:21:43:c4:cc:03:55:72:91: ba:5a:e3:27:e8:1b:c8:d3:e5:46:ec:a8:0d:b8:dc: b7:31:81:35:ac:e1:f8:ad:9a:28:73:95:51:3d:e5: 3d:87:91:d0:30:df:fc:f9:07:90:f6:54:81:ec:5d: 82:e5:fb:bd:68:1d:6a:29:24:7e:93:d9:c9:d3:76: 84:1f:a1:b8:90:34:d1:fc:fb:46:3f:82:b5:88:ac: 2e:df:50:16:16:cb:ec:3a:40:13:d4:f3:0a:03:7a: 06:88:c8:46:f2:c2:c3:16:c0:16:2a:7b:ef:60:25: 91:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:84:8B:CC:7A:8D:24:EA:FD:AD:8F:6E:EE:BD:92:71:D0:C6:4B:EF X509v3 Authority Key Identifier: keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:25:5f:6f:74:c1:cb:55:cd:c9:36:63:06:a8:91:e1:d3:2b: 0e:79:17:3e:08:66:51:c1:3d:08:3e:8b:13:2a:5c:af:70:1d: 66:32:b3:47:4b:b5:88:01:e5:9f:11:71:5c:cb:a0:f6:f8:bb: 28:7b:27:c5:94:71:7e:42:49:be:2f:74:91:17:8c:db:e3:9a: cf:44:e1:a0:27:41:48:8b:54:a7:f8:71:17:0d:89:5c:f2:55: bb:0b:d6:db:e0:49:e2:5e:ea:ff:4d:46:bc:60:8e:e6:09:90: c4:0e:f9:46:54:57:f0:d6:c1:1b:b5:6b:de:13:cd:2d:9b:97: d0:8c:69:22:79:02:fe:ea:b4:cb:aa:bb:a5:e2:c8:1a:7a:f0: 35:21:a7:c3:87:31:29:61:4c:96:a8:68:27:b5:b9:91:d0:86: 71:75:88:8d:6f:a6:33:4f:25:5c:bc:a7:22:7c:45:39:b6:ca: a8:63:0d:b7:39:a6:ef:c0:11:dc:11:97:a5:3c:23:cc:c1:92: 20:b6:65:75:ac:da:1d:09:d3:65:34:11:fa:53:40:d3:7e:99: 16:eb:f6:28:03:4f:03:d1:0d:33:15:ae:a4:21:a4:ac:2d:bc: 63:9b:cc:46:92:00:b0:85:45:e4:07:4e:8e:f0:1b:97:10:c3: c6:ab:85:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeumsrX7bWhr/KoWZG1dQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNzE0MmI0NWI1Y2UzOTAxNmUyNWUwOWIyZmVkNTc5YTli ZDc3ZDYwHhcNMjUxMjE4MjIwMDUxWhcNMjUxMjE5MjIwMDUxWjAzMTEwLwYDVQQD EyhhYjg0OGJjYzdhOGQyNGVhZmRhZDhmNmVlZWJkOTI3MWQwYzY0YmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eX74j679rso3guT4Zf9kqoz11QF /Kku6LyY6KAWniTB3ni5kdSNtuTHaJjCIS2rO0PWvCfO+eYBiCGiYc5Z0oZkrF14 WFLY2c3G5E6SKl2cFyQbi5l2Msv2Mjioy6zWvAWM1/ajSjdEqoojhzJjvfYUYbQJ QgtIiE4/Ivz3ovz78RD3EDfMJzqRbxPRIUPEzANVcpG6WuMn6BvI0+VG7KgNuNy3 MYE1rOH4rZooc5VRPeU9h5HQMN/8+QeQ9lSB7F2C5fu9aB1qKSR+k9nJ03aEH6G4 kDTR/PtGP4K1iKwu31AWFsvsOkAT1PMKA3oGiMhG8sLDFsAWKnvvYCWRPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuEi8x6jSTq/a2Pbu69knHQxkvvMB8GA1UdIwQY MBaAFB9xQrRbXOOQFuJeCbL+1XmpvXfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZmVhZDctNTg2YS00YjM1LWIxOTkt ZGZlNDVmNjcyZjgxLzEvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kZmVhZDctNTg2YS00YjM1LWIxOTktZGZlNDVmNjcyZjgx LzEvSDNGQ3RGdGM0NUFXNGw0SnN2N1ZlYW05ZDlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCVfb3TB y1XNyTZjBqiR4dMrDnkXPghmUcE9CD6LEypcr3AdZjKzR0u1iAHlnxFxXMug9vi7 KHsnxZRxfkJJvi90kReM2+Oaz0ThoCdBSItUp/hxFw2JXPJVuwvW2+BJ4l7q/01G vGCO5gmQxA75RlRX8NbBG7Vr3hPNLZuX0IxpInkC/uq0y6q7peLIGnrwNSGnw4cx KWFMlqhoJ7W5kdCGcXWIjW+mM08lXLynInxFObbKqGMNtzmm78AR3BGXpTwjzMGS ILZldazaHQnTZTQR+lNA036ZFuv2KANPA9ENMxWupCGkrC28Y5vMRpIAsIVF5AdO jvAblxDDxquFIg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:45:02 2025 by rpki-client