This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json) Hash identifier: z0ZXM8mjObCrCuLDttFc5ixR/KBLGje5DKTEHnSXz1M= Subject key identifier: D2:AD:A4:95:2E:97:42:51:27:29:4C:65:46:64:46:85:CF:EC:DD:51 Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd Certificate serial: 019B3CEC2EE845F75EADF68017CFA5EF9C7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft Manifest number: 11C3 Signing time: Sat 20 Dec 2025 18:01:09 +0000 Manifest this update: Sat 20 Dec 2025 18:01:09 +0000 Manifest next update: Sun 21 Dec 2025 18:01:09 +0000 Files and hashes: 1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: tS+hAn3a+2JTYU3IV+rIqu5bcuRMs9Hy/olLPFo8VnU=) 2: CxdvJgaBCDsMJJ7rmp_FkjyGGBc.roa (hash: kGWbGJP+QaDIG7japCWL0D50y3BN0c80v2/YEyl6DZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:2e:e8:45:f7:5e:ad:f6:80:17:cf:a5:ef:9c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd Validity Not Before: Dec 20 18:01:09 2025 GMT Not After : Dec 21 18:01:09 2025 GMT Subject: CN=d2ada4952e97425127294c6546644685cfecdd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:27:58:d6:17:00:8e:dd:d5:f1:36:26:4b: d0:68:e8:e6:45:26:2b:16:88:aa:7a:13:5e:3e:97: 12:70:b5:46:c5:c5:07:be:b4:20:69:44:f7:34:b3: 71:0f:8f:8f:93:f3:a0:88:5a:17:7c:33:6e:3f:0e: f2:f9:78:bd:7b:39:2e:10:e3:1c:4d:bf:b0:9b:20: e6:dd:ec:7a:cc:ac:03:68:bc:69:a1:14:11:c4:34: 99:96:4b:b2:e8:f2:de:c8:b5:54:d6:49:78:c4:67: 10:43:81:0c:76:7c:20:bf:e2:f4:4f:88:bc:74:10: 17:a0:37:9d:6d:d9:1c:0f:f2:02:7d:92:e3:f1:77: a3:55:be:1f:3f:67:d7:ee:36:fb:4a:a3:e4:10:1e: 31:8a:b1:68:58:71:92:cf:63:71:7e:00:eb:75:b6: c2:eb:1a:c6:f4:c1:85:31:01:16:57:dc:95:38:9f: 26:a5:87:c4:67:f6:42:2c:06:e0:32:27:78:b9:f7: cd:6c:c8:08:f3:d7:9d:e3:e6:bb:c2:fe:2d:f2:95: 0d:44:0c:e3:a6:71:a4:04:79:6f:54:54:e5:e5:25: d5:89:b3:f0:e3:86:c4:ff:e2:8b:c9:68:74:f4:1d: 49:f5:c1:0c:71:2a:6a:06:4f:b6:7b:d3:f3:9f:a2: f1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AD:A4:95:2E:97:42:51:27:29:4C:65:46:64:46:85:CF:EC:DD:51 X509v3 Authority Key Identifier: keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:53:b8:af:99:04:31:f1:6b:97:60:f1:8b:eb:6b:df:7e:39: 4d:46:d8:98:5f:14:93:f3:27:60:5c:57:80:17:65:ff:c9:ee: 36:90:3c:fd:0e:96:be:f4:20:5d:84:f9:34:52:9b:54:47:bc: 60:82:30:1a:bb:6a:d9:cb:4c:ac:05:44:2c:a7:85:b5:71:7e: 82:83:3e:ce:f4:2f:cf:c1:1c:02:98:ce:53:95:41:1b:96:d0: 81:f2:74:0f:11:b3:3c:67:5a:de:47:3b:5b:8b:7e:12:34:01: 09:87:91:c0:b2:e4:af:34:ac:a7:9b:ed:e9:d3:60:2e:7b:10: 53:f6:0a:48:61:31:4b:8d:2b:43:8f:55:f5:f8:2f:70:ef:ca: e8:8d:40:e2:9b:ce:f8:5d:2a:8f:7d:85:c4:a5:8b:b7:ef:53: 26:74:b3:8a:a3:c8:ca:8a:91:2b:e3:ea:4d:de:e2:66:a9:3b: fd:e9:ae:dd:2c:49:f9:7d:14:90:12:b5:76:f1:78:9f:f4:f7: 64:48:22:fc:31:86:e4:24:60:8d:51:83:00:b1:66:14:6f:e5: 4b:db:54:91:fb:62:89:95:57:33:ea:c7:03:79:03:89:90:b8: 38:60:13:67:6e:e9:b7:60:c3:55:df:dc:38:e7:f8:12:25:9e: 37:af:03:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87C7oRfderfaAF8+l75x6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NWRmZjFmNmJkODgxM2RlNWZmOWFmMTY3MjQ3Zjc4Yjg4 NDM5YmQwHhcNMjUxMjIwMTgwMTA5WhcNMjUxMjIxMTgwMTA5WjAzMTEwLwYDVQQD EyhkMmFkYTQ5NTJlOTc0MjUxMjcyOTRjNjU0NjY0NDY4NWNmZWNkZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt10nWNYXAI7d1fE2JkvQaOjmRSYr FoiqehNePpcScLVGxcUHvrQgaUT3NLNxD4+Pk/OgiFoXfDNuPw7y+Xi9ezkuEOMc Tb+wmyDm3ex6zKwDaLxpoRQRxDSZlkuy6PLeyLVU1kl4xGcQQ4EMdnwgv+L0T4i8 dBAXoDedbdkcD/ICfZLj8XejVb4fP2fX7jb7SqPkEB4xirFoWHGSz2NxfgDrdbbC 6xrG9MGFMQEWV9yVOJ8mpYfEZ/ZCLAbgMid4uffNbMgI89ed4+a7wv4t8pUNRAzj pnGkBHlvVFTl5SXVibPw44bE/+KLyWh09B1J9cEMcSpqBk+2e9Pzn6LxqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKtpJUul0JRJylMZUZkRoXP7N1RMB8GA1UdIwQY MBaAFAld/x9r2IE95f+a8Wckf3i4hDm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81ZDAyNzgtMjE2ZS00NzEyLTk0ODct MTliM2QxNTQ0YzM5LzEvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81ZDAyNzgtMjE2ZS00NzEyLTk0ODctMTliM2QxNTQ0YzM5 LzEvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFO4r5kE MfFrl2Dxi+tr3345TUbYmF8Uk/MnYFxXgBdl/8nuNpA8/Q6WvvQgXYT5NFKbVEe8 YIIwGrtq2ctMrAVELKeFtXF+goM+zvQvz8EcApjOU5VBG5bQgfJ0DxGzPGda3kc7 W4t+EjQBCYeRwLLkrzSsp5vt6dNgLnsQU/YKSGExS40rQ49V9fgvcO/K6I1A4pvO +F0qj32FxKWLt+9TJnSziqPIyoqRK+PqTd7iZqk7/emu3SxJ+X0UkBK1dvF4n/T3 ZEgi/DGG5CRgjVGDALFmFG/lS9tUkftiiZVXM+rHA3kDiZC4OGATZ27pt2DDVd/c OOf4EiWeN68D0g== -----END CERTIFICATE-----Generated at Sat Dec 20 20:25:23 2025 by rpki-client