This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json) Hash identifier: /kS7o1vwOYp7/2U98Sr1XPL2CZz8QXDvpRNGiGsH2gw= Subject key identifier: BD:2A:91:41:61:5B:DE:28:01:C7:45:41:C8:15:93:60:89:6D:F2:C5 Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b Certificate serial: 019AF5AE630A4BAC0B5EDE0727AAB5EDDC39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 22:00:37 +0000 Manifest this update: Sat 06 Dec 2025 22:00:37 +0000 Manifest next update: Sun 07 Dec 2025 22:00:37 +0000 Files and hashes: 1: NwkZh_DNuB_iBInY9wDbpyHdLgE.roa (hash: 5w+s5Rk1602R4y1zX8F10ZF0iAVWkGEzyROrjF/5dqE=) 2: SeFxeccbo68KLvP3eAvdIgxyzVI.roa (hash: KKPafx1oDtZuIFD9Wnd6TukbFDgA1SpzCeh9Ci09gpw=) 3: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: 9l5igDJ6+Qri9xrZNy7vucrJ9j5AxWKepsYcFLSHhyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:63:0a:4b:ac:0b:5e:de:07:27:aa:b5:ed:dc:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b Validity Not Before: Dec 6 22:00:37 2025 GMT Not After : Dec 7 22:00:37 2025 GMT Subject: CN=bd2a9141615bde2801c74541c8159360896df2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:1c:c3:73:71:71:26:fd:42:02:d6:17:25: 29:44:c5:41:1b:9f:9d:d9:bc:9d:18:ed:af:26:90: 20:23:69:f4:fc:3b:92:93:04:98:52:76:43:9c:59: b9:e5:a8:7f:1f:45:f3:5f:dc:89:f7:b9:91:ef:08: 47:8e:31:c7:78:6f:c5:71:a4:f8:49:a2:34:7c:3e: ac:47:7c:58:b2:e9:bb:4f:18:91:c7:0c:a6:c1:6b: 06:5d:0c:84:94:9b:cb:b3:a3:85:b5:58:94:a1:65: 0a:ff:50:d1:62:de:09:ea:4e:c7:a0:43:19:f6:39: 69:40:41:b3:22:4f:2c:67:21:25:fd:a2:1a:1a:af: a1:b7:bf:14:0f:5e:fe:36:fe:13:8d:f3:6d:c9:c2: 16:60:ae:ff:ae:ff:2a:b7:f7:40:62:56:df:ad:2b: 17:c0:eb:42:3c:8b:d3:e3:96:1d:7c:3a:e3:0a:fa: 2d:08:b8:d7:1a:76:e5:7a:97:ce:e0:57:49:09:9b: d9:05:38:56:dc:ef:8e:32:6d:93:ba:09:59:2b:bc: 6f:73:6c:2e:cd:c6:3a:c7:d2:1e:d5:d3:7c:e8:17: 3e:e3:b8:7f:09:a9:76:ac:b1:60:fa:89:e3:94:e3: ee:fb:a1:11:2c:31:c9:33:bb:dd:e8:74:0c:d9:3a: 52:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2A:91:41:61:5B:DE:28:01:C7:45:41:C8:15:93:60:89:6D:F2:C5 X509v3 Authority Key Identifier: keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:83:69:cd:26:9c:7d:6e:0c:8c:b6:fc:1c:1e:d3:ae:77:5e: 48:c5:00:d7:48:bd:3b:c1:9e:86:e7:2d:98:76:29:8c:ff:3a: 94:5a:98:9b:7b:35:97:f8:e9:1b:6d:64:f8:71:e4:db:cf:c2: 6b:52:70:b1:74:db:f9:d0:5a:3b:b1:11:4c:50:9c:d8:ef:a7: 99:22:74:8e:7f:47:08:dc:99:3b:71:84:a9:16:36:7a:f1:9a: cf:6d:bb:fe:09:1b:74:73:62:62:5e:96:e3:c8:27:9a:1e:9e: 82:89:f7:1d:2d:54:01:65:65:e5:4e:45:c0:43:72:40:43:92: 37:fa:1c:d4:b9:32:01:cc:e2:4a:bd:df:fe:6d:bd:d6:60:cc: b0:13:a7:5f:3c:4a:b4:e3:f6:27:f2:51:71:c9:8e:a7:29:4f: d3:1a:19:d2:bd:bf:b7:4d:f9:c7:74:65:30:75:16:74:2d:2b: ea:7a:6a:fe:0a:53:ff:9a:e4:81:1c:b2:1d:7c:c8:41:72:96: 8e:47:30:dc:ef:4d:11:8e:37:5c:bd:8a:69:1e:4b:d0:af:49: 2a:5e:12:17:ad:14:fe:8f:60:8b:fd:9c:eb:8a:20:8e:3f:de: 9b:4a:33:9a:cd:52:de:01:84:9d:de:ef:7d:01:52:af:0d:65: b9:3a:86:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rmMKS6wLXt4HJ6q17dw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3N2MyMDczNzExNmJjNmQ1ZTViMjI0OTMxY2YxM2RkN2Y3 OWY5NWIwHhcNMjUxMjA2MjIwMDM3WhcNMjUxMjA3MjIwMDM3WjAzMTEwLwYDVQQD EyhiZDJhOTE0MTYxNWJkZTI4MDFjNzQ1NDFjODE1OTM2MDg5NmRmMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3Icw3NxcSb9QgLWFyUpRMVBG5+d 2bydGO2vJpAgI2n0/DuSkwSYUnZDnFm55ah/H0XzX9yJ97mR7whHjjHHeG/FcaT4 SaI0fD6sR3xYsum7TxiRxwymwWsGXQyElJvLs6OFtViUoWUK/1DRYt4J6k7HoEMZ 9jlpQEGzIk8sZyEl/aIaGq+ht78UD17+Nv4TjfNtycIWYK7/rv8qt/dAYlbfrSsX wOtCPIvT45YdfDrjCvotCLjXGnblepfO4FdJCZvZBThW3O+OMm2TuglZK7xvc2wu zcY6x9Ie1dN86Bc+47h/Cal2rLFg+onjlOPu+6ERLDHJM7vd6HQM2TpS3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0qkUFhW94oAcdFQcgVk2CJbfLFMB8GA1UdIwQY MBaAFId8IHNxFrxtXlsiSTHPE91/eflbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgt ZTcyMzJmODQ0OGIwLzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgtZTcyMzJmODQ0OGIw LzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4NpzSac fW4MjLb8HB7TrndeSMUA10i9O8GehuctmHYpjP86lFqYm3s1l/jpG21k+HHk28/C a1JwsXTb+dBaO7ERTFCc2O+nmSJ0jn9HCNyZO3GEqRY2evGaz227/gkbdHNiYl6W 48gnmh6egon3HS1UAWVl5U5FwENyQEOSN/oc1LkyAcziSr3f/m291mDMsBOnXzxK tOP2J/JRccmOpylP0xoZ0r2/t035x3RlMHUWdC0r6npq/gpT/5rkgRyyHXzIQXKW jkcw3O9NEY43XL2KaR5L0K9JKl4SF60U/o9gi/2c64ogjj/em0ozms1S3gGEnd7v fQFSrw1luTqGMg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:21 2025 by rpki-client