This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft (raw, json) Hash identifier: tkZPC+DaXquPZ1YAYgiVeUvYwRNMdCyQnA93YPisUMU= Subject key identifier: 47:11:56:84:4C:38:30:41:9B:01:69:D4:E3:74:EA:3F:54:E7:0E:7D Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32 Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32 Certificate serial: 019AF2767FD3E7181BECE7F59876533AEF1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft Manifest number: 033D Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: JY1Ry82sD4kNWhz4gQuDnSIFpN8.roa (hash: 8elrrlaE2J0H4bGnc8sBg7PwEFKBgdvohUzIrvCFh2E=) 2: h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl (hash: xdZIO+kNU9cTC9vzC3KFGtqYIWALVjz4oIz6/xDxJOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7f:d3:e7:18:1b:ec:e7:f5:98:76:53:3a:ef:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32 Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=471156844c3830419b0169d4e374ea3f54e70e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cd:32:47:76:0f:23:4a:4d:c4:d8:7b:15:21: c0:cd:ce:aa:a0:71:09:bf:bc:9c:70:d4:6f:a9:bc: 99:eb:88:00:da:c8:cd:f8:45:f6:d4:3f:bb:c0:1d: 04:a1:dc:db:8f:b7:20:45:b0:73:db:4f:4d:5e:4d: b5:00:24:3d:7a:eb:ac:cd:ff:a0:d8:d9:bb:ae:a7: 04:3f:0e:4f:60:b7:d8:8f:9d:06:f8:fc:66:b9:c9: 69:f2:f6:e0:89:d6:65:22:2e:b7:0a:97:c5:39:99: 7f:63:b9:e9:91:4f:41:57:cc:0a:6f:a3:d9:1d:ae: ab:23:9b:3e:3f:18:c6:fe:ee:e6:b7:bf:ff:ad:4c: db:16:42:25:5b:1d:3d:0d:6e:32:d9:4a:34:9c:7d: 00:aa:8e:6d:4e:8d:79:02:d4:71:b5:3b:f4:35:e2: 8e:69:ff:ff:c9:89:54:ab:d8:36:48:13:7f:9f:3f: 13:be:03:9c:4e:d9:80:2a:b4:d6:ed:9f:22:08:9d: 6d:fb:7b:12:0b:e1:17:0f:e1:03:3f:d0:48:1c:2a: f1:73:be:ac:76:8c:b8:f6:6c:26:7a:2a:eb:eb:41: 86:0a:99:f1:35:a7:95:6f:de:ee:40:d2:fe:4b:77: f2:c3:71:b2:9c:c8:22:49:7d:e4:ab:3f:58:84:80: 86:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:11:56:84:4C:38:30:41:9B:01:69:D4:E3:74:EA:3F:54:E7:0E:7D X509v3 Authority Key Identifier: keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:45:b1:bd:89:e4:8f:e3:ff:3e:93:d9:e6:92:f9:e9:86:5e: 85:a5:3a:0d:30:d0:fe:84:8b:fa:7c:02:dc:fd:24:0f:2e:9e: 78:8c:ee:a7:a2:9f:18:fe:b8:40:11:74:0c:04:dd:51:1f:81: 43:7b:2a:04:ea:73:93:20:35:3f:65:dd:56:7f:57:a2:47:3a: 10:3f:a6:84:18:0b:16:cf:eb:89:1a:7c:00:b2:6a:b4:76:9d: a0:8d:d1:01:45:d8:36:28:22:64:83:e4:43:94:4e:94:c0:a5: 73:6f:34:ca:73:dc:e0:90:c4:0b:60:1d:0c:4d:dd:fe:8e:df: bb:10:6e:fc:8e:e6:55:b3:d9:fe:a8:a7:aa:2a:fd:43:43:72: d0:40:f8:e1:fa:ae:4d:00:cf:01:37:f2:9a:b6:13:78:77:39: 7f:2c:01:a1:39:da:39:8c:8b:13:58:16:62:a5:09:9c:36:0c: 4b:19:68:4c:9e:5e:8f:34:d1:8f:b5:1c:87:85:54:c2:59:c3: 80:ec:d6:f3:42:76:7f:d2:50:26:b5:46:e6:16:fc:07:eb:ee: be:2e:c6:fc:46:7d:12:f4:06:4a:12:de:24:7a:2d:22:c2:5e: 02:8b:eb:f3:99:8e:91:2c:20:49:db:4c:ec:d6:d0:56:a2:98: 80:0e:18:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydn/T5xgb7Of1mHZTOu8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzVlNjQwOGI4ZTA1YWE5MTRiODc0NjM1YTQ3YjdiODIw YzZjMzIwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD Eyg0NzExNTY4NDRjMzgzMDQxOWIwMTY5ZDRlMzc0ZWEzZjU0ZTcwZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc0yR3YPI0pNxNh7FSHAzc6qoHEJ v7yccNRvqbyZ64gA2sjN+EX21D+7wB0Eodzbj7cgRbBz209NXk21ACQ9euuszf+g 2Nm7rqcEPw5PYLfYj50G+Pxmuclp8vbgidZlIi63CpfFOZl/Y7npkU9BV8wKb6PZ Ha6rI5s+PxjG/u7mt7//rUzbFkIlWx09DW4y2Uo0nH0Aqo5tTo15AtRxtTv0NeKO af//yYlUq9g2SBN/nz8TvgOcTtmAKrTW7Z8iCJ1t+3sSC+EXD+EDP9BIHCrxc76s doy49mwmeirr60GGCpnxNaeVb97uQNL+S3fyw3GynMgiSX3kqz9YhICG+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcRVoRMODBBmwFp1ON06j9U5w59MB8GA1UdIwQY MBaAFId15kCLjgWqkUuHRjWke3uCDGwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDct NjFlNTRjZmMyYWJjLzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDctNjFlNTRjZmMyYWJj LzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEWxvYnk j+P/PpPZ5pL56YZehaU6DTDQ/oSL+nwC3P0kDy6eeIzup6KfGP64QBF0DATdUR+B Q3sqBOpzkyA1P2XdVn9Xokc6ED+mhBgLFs/riRp8ALJqtHadoI3RAUXYNigiZIPk Q5ROlMClc280ynPc4JDEC2AdDE3d/o7fuxBu/I7mVbPZ/qinqir9Q0Ny0ED44fqu TQDPATfymrYTeHc5fywBoTnaOYyLE1gWYqUJnDYMSxloTJ5ejzTRj7Uch4VUwlnD gOzW80J2f9JQJrVG5hb8B+vuvi7G/EZ9EvQGShLeJHotIsJeAovr85mOkSwgSdtM 7NbQVqKYgA4YyA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:54 2025 by rpki-client