This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: ktX3eEfa8dNjPrD76MPhZDppO5y0sGJlhklF+cVtPMY= Subject key identifier: 61:24:A3:96:A0:D3:21:7D:56:B6:37:54:A9:31:70:5D:52:72:37:E1 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019AF5AE5F49B609959E325139B425D27E57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 1359 Signing time: Sat 06 Dec 2025 22:00:36 +0000 Manifest this update: Sat 06 Dec 2025 22:00:36 +0000 Manifest next update: Sun 07 Dec 2025 22:00:36 +0000 Files and hashes: 1: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=) 2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: prPkI/xT/aAR232bLyuFMuwru0rxcCt3LZaox+9Mpvg=) 3: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=) 4: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=) 5: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=) 6: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=) 7: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (hash: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=) 8: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=) 9: lLTt27CvKVrZ46MtIxZb-bD0JJg.roa (hash: r41CVNzvdr3xjDNcNmmOPnidy7vQT3DjIW3YSNMbicI=) 10: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=) 11: ve4kS1FSpKOZDfPOmvEJot6T9gc.roa (hash: /8G7vYP5BGzfa/caGIr/zNwzv8N1oQfYQzWhKIYfL+g=) 12: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:5f:49:b6:09:95:9e:32:51:39:b4:25:d2:7e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Dec 6 22:00:36 2025 GMT Not After : Dec 7 22:00:36 2025 GMT Subject: CN=6124a396a0d3217d56b63754a931705d527237e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:ed:7b:da:a6:a3:07:3e:79:7c:84:30:45: 61:f7:ca:e6:04:c7:5a:1f:bf:cf:3e:25:26:3e:fe: be:cd:5d:d0:c1:5a:36:77:49:51:45:c2:d3:bd:8f: 9c:2c:78:16:cb:a9:58:ca:8c:f3:f1:fa:06:a3:b9: ce:4d:49:39:a6:d6:b3:bf:e8:fe:cd:88:b6:c5:8c: b1:35:09:f8:42:58:69:97:bb:4d:6b:59:4c:d8:5f: bf:b6:e9:cb:65:33:8c:22:08:f7:60:a9:dd:e3:48: 15:f3:b7:85:d3:30:8c:7b:12:7a:c8:ef:44:05:af: e6:a2:3c:52:23:cd:a8:f8:4a:6d:52:37:91:62:4d: f6:5a:5f:ce:1f:69:df:e3:da:0d:21:b3:a0:06:03: 80:45:a4:92:c1:07:4c:81:9a:b3:87:8b:95:e7:6f: 72:d9:6c:4e:4b:a2:b0:e3:37:94:af:16:46:19:13: 3d:66:ca:15:38:04:f2:da:9a:51:4e:9d:ab:80:2a: 1b:89:5c:ee:a6:98:90:15:8a:2a:54:0b:9e:cf:54: d2:63:94:79:e2:3c:01:68:fd:5f:a8:a1:3c:5d:3f: b9:54:b6:9a:7e:d3:a1:f4:0e:3f:51:39:b6:b3:85: c1:a1:da:aa:4e:89:7f:42:99:fa:af:50:29:a6:a7: f2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:24:A3:96:A0:D3:21:7D:56:B6:37:54:A9:31:70:5D:52:72:37:E1 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6c:ae:bb:dc:77:fd:30:4b:e1:c8:69:52:eb:3b:73:96:cf: 96:46:97:6e:57:2d:75:82:36:e2:d9:31:73:95:bc:cc:0f:8c: 78:59:e5:b6:b6:54:45:57:9d:4e:6f:b1:28:9e:2d:d5:05:2a: df:e2:e9:7f:de:4d:22:b8:3a:9d:16:eb:4e:20:9d:a0:76:ca: 32:19:b0:25:db:a2:38:64:f2:a5:76:ca:7c:1a:88:b6:8a:80: df:07:70:40:af:46:9e:cc:2f:37:e4:8c:c8:b0:57:69:7d:59: ab:13:2e:c6:79:f8:3b:be:09:28:ff:a1:a6:3b:d1:75:ef:62: e8:ad:f1:80:bc:31:ce:99:b9:e3:fe:ff:e1:43:1c:ba:e5:1c: cb:60:bf:a5:93:ee:9d:25:71:c9:29:a7:8e:e2:31:93:55:cc: 49:f6:58:90:ab:eb:ef:24:dc:dc:4f:6d:95:15:90:d9:33:94: 77:fb:cb:0d:30:83:96:35:7b:6d:b8:72:a3:79:0d:2d:72:6c: 8d:31:8d:3a:55:17:e3:fb:1a:25:26:4a:a9:21:27:7f:43:a8: d5:6e:99:ec:73:29:5f:dd:dc:db:0a:42:9d:3f:70:c5:50:0e: 16:46:3a:ad:ae:da:1e:ca:5e:a6:6a:cc:29:f8:b6:b5:f2:bd: 9a:df:0b:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rl9JtgmVnjJRObQl0n5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjUxMjA2MjIwMDM2WhcNMjUxMjA3MjIwMDM2WjAzMTEwLwYDVQQD Eyg2MTI0YTM5NmEwZDMyMTdkNTZiNjM3NTRhOTMxNzA1ZDUyNzIzN2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyDte9qmowc+eXyEMEVh98rmBMda H7/PPiUmPv6+zV3QwVo2d0lRRcLTvY+cLHgWy6lYyozz8foGo7nOTUk5ptazv+j+ zYi2xYyxNQn4Qlhpl7tNa1lM2F+/tunLZTOMIgj3YKnd40gV87eF0zCMexJ6yO9E Ba/mojxSI82o+EptUjeRYk32Wl/OH2nf49oNIbOgBgOARaSSwQdMgZqzh4uV529y 2WxOS6Kw4zeUrxZGGRM9ZsoVOATy2ppRTp2rgCobiVzuppiQFYoqVAuez1TSY5R5 4jwBaP1fqKE8XT+5VLaaftOh9A4/UTm2s4XBodqqTol/Qpn6r1AppqfyfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEko5ag0yF9VrY3VKkxcF1ScjfhMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWyuu9x3 /TBL4chpUus7c5bPlkaXblctdYI24tkxc5W8zA+MeFnltrZURVedTm+xKJ4t1QUq 3+Lpf95NIrg6nRbrTiCdoHbKMhmwJduiOGTypXbKfBqItoqA3wdwQK9GnswvN+SM yLBXaX1ZqxMuxnn4O74JKP+hpjvRde9i6K3xgLwxzpm54/7/4UMcuuUcy2C/pZPu nSVxySmnjuIxk1XMSfZYkKvr7yTc3E9tlRWQ2TOUd/vLDTCDljV7bbhyo3kNLXJs jTGNOlUX4/saJSZKqSEnf0Oo1W6Z7HMpX93c2wpCnT9wxVAOFkY6ra7aHspepmrM Kfi2tfK9mt8Lkg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:59:36 2025 by rpki-client