This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft File: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft (raw, json) Hash identifier: 94bp2Zl7yVUlsfFBdRoAw9cjrzJZ2aViEAfDI77H0Jc= Subject key identifier: 58:D9:A7:77:ED:C0:F8:39:81:9B:ED:ED:2A:70:70:F7:28:95:77:B2 Authority key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6 Certificate issuer: /CN=dc73be387af552970cf62f69517e3f3c9c12d2f6 Certificate serial: 019AF3F81DA4B192EE7873CFEFF16390A14F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft Manifest number: 1064 Signing time: Sat 06 Dec 2025 14:01:54 +0000 Manifest this update: Sat 06 Dec 2025 14:01:54 +0000 Manifest next update: Sun 07 Dec 2025 14:01:54 +0000 Files and hashes: 1: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl (hash: VUiwMccVBCG4tcbrpBe7O9V82LDhp7uz/LCYPug9o4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:1d:a4:b1:92:ee:78:73:cf:ef:f1:63:90:a1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6 Validity Not Before: Dec 6 14:01:54 2025 GMT Not After : Dec 7 14:01:54 2025 GMT Subject: CN=58d9a777edc0f839819beded2a7070f7289577b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:8c:11:28:87:da:f9:d6:8f:50:bc:f0:84: 6d:f4:49:04:66:b5:8d:b6:01:9a:1a:22:a0:b4:c4: 74:ee:64:de:11:04:92:f9:13:03:46:6a:ff:67:14: a1:23:20:0e:3e:d8:36:6d:b1:6b:e5:28:0b:0d:67: fb:61:2f:a0:d2:29:6b:bb:8f:71:b3:88:95:b6:93: 2d:46:ae:e3:04:f6:b9:18:3d:b6:22:29:b0:54:83: 34:d2:c6:1d:0a:6b:e0:a2:2d:95:2c:ab:6d:23:3a: 3e:80:a4:60:95:ef:de:2a:d4:0a:ef:fd:64:cd:c5: eb:de:0c:44:ab:78:ac:44:ba:03:32:4a:6b:55:92: 64:1b:d2:7a:03:84:33:05:37:52:8e:28:c9:db:d7: 98:12:26:a6:4c:3c:8f:d2:af:9a:b3:2a:59:db:a1: cd:f4:55:2f:32:5f:6b:c9:10:e0:60:f5:07:aa:fb: fe:dd:0a:4a:4a:a5:e5:62:12:42:79:4e:62:7f:f0: b5:26:65:1b:71:9d:a0:2e:4b:51:6b:eb:c5:44:4a: e6:63:20:3a:df:9d:93:b4:48:da:40:c3:3d:ff:ed: 45:60:7f:37:22:d5:57:a3:9f:8d:8d:98:2c:3f:43: c4:85:15:c1:6c:27:66:05:a5:bb:6b:db:b7:50:8b: 78:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D9:A7:77:ED:C0:F8:39:81:9B:ED:ED:2A:70:70:F7:28:95:77:B2 X509v3 Authority Key Identifier: keyid:DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2a:2a:9b:2a:9d:c3:94:af:77:9e:9d:7e:c6:16:18:51:84: eb:cd:62:41:87:15:73:8d:ad:df:62:0a:7a:36:cc:14:ff:c6: 23:c0:1c:1f:8c:c9:f8:80:28:c5:4a:fb:04:1a:64:98:7c:c7: e5:bf:0d:16:8c:2f:bc:77:35:65:1f:be:bb:2c:43:3d:06:e6: c2:3d:42:78:d1:ec:62:e3:5c:dd:14:53:ca:1a:06:3c:c3:e0: 66:dd:f6:da:00:98:1d:16:3d:48:f9:8c:72:24:02:15:28:ce: 01:1a:ab:80:e4:dd:19:85:68:a7:e4:15:e4:1f:41:48:4e:4b: 66:23:01:29:7f:2a:f4:e4:97:fc:81:40:86:19:7a:29:7a:73: a7:bc:c3:bf:4b:81:92:81:da:5e:0d:d1:42:a7:0d:32:1f:95: 63:4e:f8:68:aa:d3:10:58:46:63:f8:d7:4b:18:83:9c:65:05: ae:db:9f:d1:0d:41:1c:b1:72:4d:5a:19:36:fd:94:6d:56:c4: 82:0a:38:a0:26:be:c2:fb:d3:e5:58:99:a7:b7:20:aa:b2:0d: 76:51:39:4b:76:72:1a:0e:11:a1:54:65:3a:95:fe:fe:52:05: 98:c6:3e:6e:1c:df:fb:5d:ba:d6:3d:43:61:98:fe:ad:4b:6a: 8d:42:c5:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+B2ksZLueHPP7/FjkKFPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNzNiZTM4N2FmNTUyOTcwY2Y2MmY2OTUxN2UzZjNjOWMx MmQyZjYwHhcNMjUxMjA2MTQwMTU0WhcNMjUxMjA3MTQwMTU0WjAzMTEwLwYDVQQD Eyg1OGQ5YTc3N2VkYzBmODM5ODE5YmVkZWQyYTcwNzBmNzI4OTU3N2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIOMESiH2vnWj1C88IRt9EkEZrWN tgGaGiKgtMR07mTeEQSS+RMDRmr/ZxShIyAOPtg2bbFr5SgLDWf7YS+g0ilru49x s4iVtpMtRq7jBPa5GD22IimwVIM00sYdCmvgoi2VLKttIzo+gKRgle/eKtQK7/1k zcXr3gxEq3isRLoDMkprVZJkG9J6A4QzBTdSjijJ29eYEiamTDyP0q+asypZ26HN 9FUvMl9ryRDgYPUHqvv+3QpKSqXlYhJCeU5if/C1JmUbcZ2gLktRa+vFRErmYyA6 352TtEjaQMM9/+1FYH83ItVXo5+NjZgsP0PEhRXBbCdmBaW7a9u3UIt4UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjZp3ftwPg5gZvt7SpwcPcolXeyMB8GA1UdIwQY MBaAFNxzvjh69VKXDPYvaVF+PzycEtL2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0hPLU9IcjFVcGNNOWk5cFVYNF9QSndTMHZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81YmJkMzItYTU0MC00NzA4LTk5MjUt YzcxZjE3YWZjNzQ5LzEvM0hPLU9IcjFVcGNNOWk5cFVYNF9QSndTMHZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC81YmJkMzItYTU0MC00NzA4LTk5MjUtYzcxZjE3YWZjNzQ5 LzEvM0hPLU9IcjFVcGNNOWk5cFVYNF9QSndTMHZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCoqmyqd w5Svd56dfsYWGFGE681iQYcVc42t32IKejbMFP/GI8AcH4zJ+IAoxUr7BBpkmHzH 5b8NFowvvHc1ZR++uyxDPQbmwj1CeNHsYuNc3RRTyhoGPMPgZt322gCYHRY9SPmM ciQCFSjOARqrgOTdGYVop+QV5B9BSE5LZiMBKX8q9OSX/IFAhhl6KXpzp7zDv0uB koHaXg3RQqcNMh+VY074aKrTEFhGY/jXSxiDnGUFrtuf0Q1BHLFyTVoZNv2UbVbE ggo4oCa+wvvT5ViZp7cgqrINdlE5S3ZyGg4RoVRlOpX+/lIFmMY+bhzf+1261j1D YZj+rUtqjULFxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:24 2025 by rpki-client