This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json) Hash identifier: se9aXutv3oR+UTJ/tOUBayMkwUmQLVMhFmJA8s82Mr4= Subject key identifier: 41:3A:C8:C8:F9:CB:00:D8:7A:CE:A1:88:7D:39:71:37:C0:86:CD:77 Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29 Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29 Certificate serial: 019B318C6946EFD5344A32C670F5A3EA59CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 13:00:44 +0000 Manifest this update: Thu 18 Dec 2025 13:00:44 +0000 Manifest next update: Fri 19 Dec 2025 13:00:44 +0000 Files and hashes: 1: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: cbY1W4pJMQ/cND6+UnGfmRtDisQdQGRJXzaL0g282nk=) 2: cB2GV3lhDMXOaIXUex8JR9eH0nE.roa (hash: mFtVuvigR9Qf1WYXi/PECacALAmiDcjnPr9gUNHSYfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:69:46:ef:d5:34:4a:32:c6:70:f5:a3:ea:59:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29 Validity Not Before: Dec 18 13:00:44 2025 GMT Not After : Dec 19 13:00:44 2025 GMT Subject: CN=413ac8c8f9cb00d87acea1887d397137c086cd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:65:06:8c:b7:58:4a:8b:02:53:0c:9f:63: f8:a9:b8:a9:1e:e1:e9:7d:49:74:d7:0a:f1:b4:05: f5:b2:66:e4:d0:f6:ed:4e:88:9e:73:80:c6:20:ba: ba:5d:bd:7c:f0:b5:5f:42:31:3e:73:5c:25:03:59: 40:51:71:34:f3:7d:e7:5d:73:4c:13:75:cc:ec:23: 3d:9f:82:ac:53:e3:3a:f5:97:f8:66:5b:dc:e7:14: 32:a9:e7:24:88:9c:29:a3:30:06:d3:dd:05:d9:3a: 76:bf:48:c4:ed:81:6d:b6:73:ec:54:ba:cf:cd:19: f8:ca:af:b5:96:eb:e0:89:09:d1:a1:7d:2b:2b:5f: a6:cc:8c:df:71:be:9b:18:1b:f7:6b:29:9c:68:5e: e8:03:d6:02:3f:ee:22:1e:88:1a:ca:61:d7:f5:bc: c2:77:73:e0:a5:aa:24:9e:35:63:dd:84:58:a7:95: 4f:eb:bb:09:5d:93:4d:29:ed:e3:6a:4c:5e:69:39: d0:ab:87:d4:a1:66:b8:6a:26:e7:d7:3c:74:9d:5f: 1b:e8:cd:ce:16:08:85:4d:22:f6:b0:8b:05:74:81: c9:9a:6b:22:f0:fe:e4:df:29:12:e5:70:c6:21:1c: 74:7d:7f:9e:53:91:44:ce:51:7c:4b:ad:93:69:a1: 15:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3A:C8:C8:F9:CB:00:D8:7A:CE:A1:88:7D:39:71:37:C0:86:CD:77 X509v3 Authority Key Identifier: keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:0d:72:3b:7e:ff:d9:69:c0:49:fb:0b:e5:92:36:6e:ff:73: 85:01:6b:d1:5f:c1:5c:f0:54:70:b6:d8:7b:1c:8b:a2:3d:b9: 09:12:62:4d:49:61:41:ed:07:e4:72:9d:d7:ce:c1:06:ed:3a: 0b:f5:b1:c1:c5:68:1d:ce:81:57:7b:3b:dd:10:8d:5d:dd:5a: 76:a4:10:69:5f:5a:26:84:0c:04:2b:69:f5:22:85:e1:39:65: 79:80:f7:f3:b3:3a:9a:b7:2e:6a:51:51:9a:13:e0:e6:8e:92: 67:25:a0:d6:2e:99:4d:f6:5f:e6:66:e0:46:e0:cf:7a:1b:6b: 35:a5:aa:89:6c:52:13:53:b2:62:32:13:3f:d0:db:b7:ba:b6: 78:b8:92:34:16:e4:ad:17:01:ff:83:bf:2c:e4:d1:fd:3e:de: b5:31:e9:8c:f7:ef:16:85:4b:0a:d9:bf:ee:c5:b6:70:c0:73: f7:4d:7d:23:e9:24:59:d5:0d:f9:ea:0a:4b:6b:04:72:f9:d8: 1e:a0:8d:7d:b6:4a:db:90:e8:4a:ef:50:0b:49:e2:54:a9:c5: 14:8d:ce:03:f6:a8:5e:7a:ab:fe:46:ea:8a:2d:d1:4a:d8:b5: 8f:38:f7:04:18:42:2b:1e:90:a4:ec:fc:7b:96:3c:9e:31:a1: 8c:be:c3:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjGlG79U0SjLGcPWj6lnNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMjczZTFlMjE4NDFjZTJjMzM1ZmUxYzk2MWNlNzY4MDE3 ZWVlMjkwHhcNMjUxMjE4MTMwMDQ0WhcNMjUxMjE5MTMwMDQ0WjAzMTEwLwYDVQQD Eyg0MTNhYzhjOGY5Y2IwMGQ4N2FjZWExODg3ZDM5NzEzN2MwODZjZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomBlBoy3WEqLAlMMn2P4qbipHuHp fUl01wrxtAX1smbk0PbtToiec4DGILq6Xb188LVfQjE+c1wlA1lAUXE0833nXXNM E3XM7CM9n4KsU+M69Zf4Zlvc5xQyqeckiJwpozAG090F2Tp2v0jE7YFttnPsVLrP zRn4yq+1luvgiQnRoX0rK1+mzIzfcb6bGBv3aymcaF7oA9YCP+4iHogaymHX9bzC d3PgpaoknjVj3YRYp5VP67sJXZNNKe3jakxeaTnQq4fUoWa4aibn1zx0nV8b6M3O FgiFTSL2sIsFdIHJmmsi8P7k3ykS5XDGIRx0fX+eU5FEzlF8S62TaaEVxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEE6yMj5ywDYes6hiH05cTfAhs13MB8GA1UdIwQY MBaAFNwnPh4hhBziwzX+HJYc52gBfu4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iNGE3MWEtZWIzNy00NjlhLThiYjUt Mjc4NDFmNTA3NzM1LzEvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iNGE3MWEtZWIzNy00NjlhLThiYjUtMjc4NDFmNTA3NzM1 LzEvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMA1yO37/ 2WnASfsL5ZI2bv9zhQFr0V/BXPBUcLbYexyLoj25CRJiTUlhQe0H5HKd187BBu06 C/WxwcVoHc6BV3s73RCNXd1adqQQaV9aJoQMBCtp9SKF4TlleYD387M6mrcualFR mhPg5o6SZyWg1i6ZTfZf5mbgRuDPehtrNaWqiWxSE1OyYjITP9Dbt7q2eLiSNBbk rRcB/4O/LOTR/T7etTHpjPfvFoVLCtm/7sW2cMBz9019I+kkWdUN+eoKS2sEcvnY HqCNfbZK25DoSu9QC0niVKnFFI3OA/aoXnqr/kbqii3RSti1jzj3BBhCKx6QpOz8 e5Y8njGhjL7DPw== -----END CERTIFICATE-----Generated at Thu Dec 18 15:41:03 2025 by rpki-client