This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: qnaUqJQH9sVyexxmMpipwaCh40GwtL6HW+xfnvjHHd4= Subject key identifier: EA:64:2D:C9:F4:B8:1A:19:25:0D:7A:2B:A0:DD:F3:EE:23:DA:F3:2E Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019B3231D2DF93E93E07C132763B60F2BFC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 1379 Signing time: Thu 18 Dec 2025 16:01:24 +0000 Manifest this update: Thu 18 Dec 2025 16:01:24 +0000 Manifest next update: Fri 19 Dec 2025 16:01:24 +0000 Files and hashes: 1: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=) 2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: Ezl3zRLKAqzvp0fDTKr0i9zIgCuhLj+gzVULLCVW8bs=) 3: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=) 4: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=) 5: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=) 6: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=) 7: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (hash: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=) 8: _e2YDlluO4ii6abU70i7zZECU8k.roa (hash: 6oy05tlA8tClzLGbOUWPjvHzeRzF67vUfYvBUhmRD90=) 9: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=) 10: lLTt27CvKVrZ46MtIxZb-bD0JJg.roa (hash: r41CVNzvdr3xjDNcNmmOPnidy7vQT3DjIW3YSNMbicI=) 11: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=) 12: ve4kS1FSpKOZDfPOmvEJot6T9gc.roa (hash: /8G7vYP5BGzfa/caGIr/zNwzv8N1oQfYQzWhKIYfL+g=) 13: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:d2:df:93:e9:3e:07:c1:32:76:3b:60:f2:bf:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Dec 18 16:01:24 2025 GMT Not After : Dec 19 16:01:24 2025 GMT Subject: CN=ea642dc9f4b81a19250d7a2ba0ddf3ee23daf32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:d1:bb:dd:a0:66:dc:9c:e7:4d:d2:a9:f4: 6e:24:8c:60:ba:fa:23:6c:48:86:b3:d6:b1:2b:07: 9d:2f:7d:c9:7b:74:4c:44:ce:70:98:f0:a9:2a:a4: 00:fc:10:26:83:5b:ae:20:4a:69:fe:6e:94:2b:b3: 2f:a3:6b:4a:c9:5f:ea:59:a0:58:78:27:61:c1:de: c5:2f:40:5e:d5:77:a7:68:4d:df:16:63:39:cf:94: 69:46:40:4b:75:ec:85:ba:78:24:5a:ed:0a:d5:69: dd:f2:da:1a:c9:93:5b:2d:2d:30:10:3e:82:26:1b: 05:e0:1c:4f:b6:97:45:dc:4f:3a:69:12:d2:d0:27: eb:b1:e0:42:74:91:3a:d9:ea:c3:88:a8:b6:ad:16: 8b:5d:ff:1b:85:d7:8c:91:67:dc:88:ab:6d:06:33: f0:34:5d:8c:81:9c:1c:a5:a7:8c:2f:78:a3:c4:92: 98:c9:2b:44:40:12:27:9f:67:ee:51:95:29:7a:10: 49:f5:c7:1e:f4:a5:50:73:85:60:b6:cd:ae:c2:89: db:97:68:97:8c:74:32:01:f4:00:40:48:7c:08:9a: d9:40:ea:5d:ce:ee:cf:79:34:d2:8c:27:0b:f7:94: a8:08:9a:5a:c3:8a:d9:56:35:35:55:14:9c:8a:6e: 40:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:64:2D:C9:F4:B8:1A:19:25:0D:7A:2B:A0:DD:F3:EE:23:DA:F3:2E X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:55:2b:4c:a0:59:2f:dd:e4:17:2d:ce:12:42:c8:b8:1a:d5: 4a:95:42:11:52:c6:07:63:b0:7b:40:04:b5:b9:18:ce:c6:29: 95:95:b4:3c:8d:56:29:f7:e3:91:9a:fd:22:eb:2e:6c:ae:3c: 81:f4:e7:5f:13:bc:c4:47:39:c2:98:72:4e:b9:b1:30:c7:bb: d8:a5:8c:e1:62:b3:d8:d0:c4:6b:53:4d:1b:e2:3d:3d:2b:53: 99:4b:9c:4f:b0:d3:48:5e:9b:7a:b7:e6:3e:5e:70:4e:ed:f4: 6e:42:b0:a9:69:5c:91:76:5a:26:11:98:ba:2d:9f:58:e3:1c: e1:cd:cb:f3:d3:80:9a:a7:89:18:f0:fb:3b:28:28:46:23:a6: d6:fc:f8:b3:7f:41:02:42:12:41:ee:68:c3:a8:48:e8:b0:26: 03:b7:45:b2:ff:63:e6:cb:ed:de:d2:a4:21:1a:1f:c1:6c:20: 58:3f:cc:d7:fd:9b:89:b8:c5:b9:94:81:0b:e4:d7:f9:28:9f: e9:1e:aa:4c:9c:25:a6:e9:69:0e:c3:f9:40:e1:13:4e:69:4e: ff:ac:ac:77:99:2a:d8:05:6b:12:84:fc:42:fc:98:34:9b:a9: ae:d4:95:bb:e8:1f:ad:0e:7e:4e:e6:ad:e6:82:ea:ad:82:62: 0b:55:69:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMdLfk+k+B8Eydjtg8r/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjUxMjE4MTYwMTI0WhcNMjUxMjE5MTYwMTI0WjAzMTEwLwYDVQQD EyhlYTY0MmRjOWY0YjgxYTE5MjUwZDdhMmJhMGRkZjNlZTIzZGFmMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7jRu92gZtyc503SqfRuJIxguvoj bEiGs9axKwedL33Je3RMRM5wmPCpKqQA/BAmg1uuIEpp/m6UK7Mvo2tKyV/qWaBY eCdhwd7FL0Be1XenaE3fFmM5z5RpRkBLdeyFungkWu0K1Wnd8toayZNbLS0wED6C JhsF4BxPtpdF3E86aRLS0CfrseBCdJE62erDiKi2rRaLXf8bhdeMkWfciKttBjPw NF2MgZwcpaeML3ijxJKYyStEQBInn2fuUZUpehBJ9cce9KVQc4Vgts2uwonbl2iX jHQyAfQAQEh8CJrZQOpdzu7PeTTSjCcL95SoCJpaw4rZVjU1VRScim5AGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpkLcn0uBoZJQ16K6Dd8+4j2vMuMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFUrTKBZ L93kFy3OEkLIuBrVSpVCEVLGB2Owe0AEtbkYzsYplZW0PI1WKffjkZr9IusubK48 gfTnXxO8xEc5wphyTrmxMMe72KWM4WKz2NDEa1NNG+I9PStTmUucT7DTSF6berfm Pl5wTu30bkKwqWlckXZaJhGYui2fWOMc4c3L89OAmqeJGPD7OygoRiOm1vz4s39B AkISQe5ow6hI6LAmA7dFsv9j5svt3tKkIRofwWwgWD/M1/2bibjFuZSBC+TX+Sif 6R6qTJwlpulpDsP5QOETTmlO/6ysd5kq2AVrEoT8QvyYNJuprtSVu+gfrQ5+Tuat 5oLqrYJiC1VpOw== -----END CERTIFICATE-----Generated at Thu Dec 18 20:38:19 2025 by rpki-client