This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json) Hash identifier: hCcnGPL1MZYVWlxziwjSuzjgiY/n9SwGdCNYLp39dis= Subject key identifier: 0C:30:08:20:54:C9:76:C5:37:B8:65:B7:ED:AE:6D:FC:2F:23:FF:0F Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1 Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1 Certificate serial: 019AF3C0053A6FCFC6E293F022C7E4649945 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft Manifest number: 1316 Signing time: Sat 06 Dec 2025 13:00:38 +0000 Manifest this update: Sat 06 Dec 2025 13:00:38 +0000 Manifest next update: Sun 07 Dec 2025 13:00:38 +0000 Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: yx97hmQolQ6s8Lwa7uHBhPDtQY3z6mTUVeDDEaY8NMs=) 2: jrzKo-lt5J6MsHDsEMxREvgxfZ8.roa (hash: NadiGgxjhYXuzdbS81cV9tBbpe6k6vvKuOl8KjAS3hU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:05:3a:6f:cf:c6:e2:93:f0:22:c7:e4:64:99:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1 Validity Not Before: Dec 6 13:00:38 2025 GMT Not After : Dec 7 13:00:38 2025 GMT Subject: CN=0c30082054c976c537b865b7edae6dfc2f23ff0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fd:0d:e7:4d:f9:56:ac:ac:79:da:01:7c:7c: 56:1b:c5:95:02:ad:23:d5:54:98:03:2e:52:c2:c6: 47:a3:33:f7:6c:7d:dc:f3:6a:c7:e6:00:39:44:44: 5f:8c:ac:e7:75:13:5e:ba:78:57:aa:c1:e9:20:5d: e1:32:99:a3:39:b6:53:00:6c:f9:a4:7d:b9:3d:43: 32:4b:9e:7e:7d:00:e5:b5:e3:0e:16:1b:ec:35:3e: 49:f4:14:a4:75:c6:8f:ec:b7:d1:0a:ce:f3:52:54: b6:d1:06:f3:05:46:bc:36:00:cd:52:fc:eb:97:cb: 9c:b8:7a:be:8c:19:b4:9a:44:1b:7f:64:16:e0:6a: e6:2e:5f:0a:4e:dc:a7:83:af:ff:bc:ef:59:8a:50: 58:b4:fd:12:28:01:86:d3:02:81:e7:33:4a:e7:2f: 6a:03:8b:fb:03:c2:63:1d:bb:e5:9d:5a:08:4f:c1: e1:87:bd:61:89:32:9a:80:4c:69:e1:8a:5e:b7:5c: 47:4e:66:72:3e:de:d8:38:a0:f1:ac:87:13:d5:95: d1:5e:7b:46:cd:14:61:7a:4a:1b:7c:5b:b4:9b:9c: 65:f8:d2:30:92:42:e8:59:f2:fa:ac:c2:4a:87:d5: 0d:0c:40:92:e9:46:74:fa:8b:9e:a9:ae:5a:17:ab: 06:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:30:08:20:54:C9:76:C5:37:B8:65:B7:ED:AE:6D:FC:2F:23:FF:0F X509v3 Authority Key Identifier: keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:db:d0:b2:87:44:dd:d1:a0:54:0f:df:a6:23:5e:19:68:e9: 42:66:42:89:e1:f3:66:4a:aa:eb:85:70:11:95:6a:8b:73:cf: 05:25:be:78:63:26:78:27:b8:d2:95:c5:ee:f8:93:24:3d:54: 3a:de:0c:f3:b0:d7:95:2e:aa:23:04:f5:d4:63:4b:57:e0:ae: a8:e4:55:fb:ec:7e:79:59:ea:60:b4:cf:18:94:c4:17:d5:00: 8b:25:ec:77:8c:db:c1:53:ed:3c:b0:0d:75:7a:7b:de:87:af: 95:66:c3:3c:db:93:a6:4e:ae:e3:db:34:45:47:b2:d8:09:67: f2:cd:40:29:2f:bb:41:62:43:6e:87:8c:56:df:ac:54:b5:a6: 1f:94:76:a1:1c:e7:07:52:33:35:5d:41:97:70:e9:06:36:eb: 94:0b:7b:c9:69:f9:fe:19:bc:69:62:d3:c1:9e:a5:32:48:42: 13:3c:1b:d5:df:3f:51:d4:5c:63:1a:4f:bf:29:ac:94:51:b5: 26:d2:12:f9:db:21:02:26:aa:32:26:00:dd:a0:03:8a:db:d0: 60:e8:17:97:f0:0b:7a:7f:03:b3:68:5d:81:ff:b7:0d:c2:4e: 6f:7c:14:3b:e0:1e:b6:71:a0:fc:93:46:40:ef:82:66:da:6f: 83:06:15:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAU6b8/G4pPwIsfkZJlFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjN2Q4ZWQ5ODQ0M2RlNmM2ODhkMTc0ZjFmMDA1NWJlNGRl MTgyYTEwHhcNMjUxMjA2MTMwMDM4WhcNMjUxMjA3MTMwMDM4WjAzMTEwLwYDVQQD EygwYzMwMDgyMDU0Yzk3NmM1MzdiODY1YjdlZGFlNmRmYzJmMjNmZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP0N5035VqysedoBfHxWG8WVAq0j 1VSYAy5SwsZHozP3bH3c82rH5gA5RERfjKzndRNeunhXqsHpIF3hMpmjObZTAGz5 pH25PUMyS55+fQDlteMOFhvsNT5J9BSkdcaP7LfRCs7zUlS20QbzBUa8NgDNUvzr l8ucuHq+jBm0mkQbf2QW4GrmLl8KTtyng6//vO9ZilBYtP0SKAGG0wKB5zNK5y9q A4v7A8JjHbvlnVoIT8Hhh71hiTKagExp4Ypet1xHTmZyPt7YOKDxrIcT1ZXRXntG zRRhekobfFu0m5xl+NIwkkLoWfL6rMJKh9UNDECS6UZ0+oueqa5aF6sGUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwwCCBUyXbFN7hlt+2ubfwvI/8PMB8GA1UdIwQY MBaAFNx9jtmEQ95saI0XTx8AVb5N4YKhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYt YjgwMjA1MjgzMmNmLzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYtYjgwMjA1MjgzMmNm LzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvNvQsodE 3dGgVA/fpiNeGWjpQmZCieHzZkqq64VwEZVqi3PPBSW+eGMmeCe40pXF7viTJD1U Ot4M87DXlS6qIwT11GNLV+CuqORV++x+eVnqYLTPGJTEF9UAiyXsd4zbwVPtPLAN dXp73oevlWbDPNuTpk6u49s0RUey2Aln8s1AKS+7QWJDboeMVt+sVLWmH5R2oRzn B1IzNV1Bl3DpBjbrlAt7yWn5/hm8aWLTwZ6lMkhCEzwb1d8/UdRcYxpPvymslFG1 JtIS+dshAiaqMiYA3aADitvQYOgXl/ALen8Ds2hdgf+3DcJOb3wUO+AetnGg/JNG QO+CZtpvgwYVkA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:49:09 2025 by rpki-client