This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json) Hash identifier: imWIjJ+j8smP7+uuoMAL6Cjf8kEWbWfCPCgVAc3X/e0= Subject key identifier: B4:E8:44:25:FF:18:F6:D9:7C:E7:1B:29:9E:62:D4:AE:B0:07:85:F0 Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca Certificate serial: 019B3EA394F3DB82BEEE0E1CBDFCF3DB15EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft Manifest number: 1793 Signing time: Sun 21 Dec 2025 02:01:06 +0000 Manifest this update: Sun 21 Dec 2025 02:01:06 +0000 Manifest next update: Mon 22 Dec 2025 02:01:06 +0000 Files and hashes: 1: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (hash: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=) 2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: tFSruZ9uRqnu+wwQLfwzoqjjjqGRyr2+roYGtAMlp1E=) 3: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (hash: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:94:f3:db:82:be:ee:0e:1c:bd:fc:f3:db:15:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca Validity Not Before: Dec 21 02:01:06 2025 GMT Not After : Dec 22 02:01:06 2025 GMT Subject: CN=b4e84425ff18f6d97ce71b299e62d4aeb00785f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:7e:5c:56:50:09:c4:e2:fe:fc:1b:d4:ef: 5f:df:4d:4e:80:60:af:8f:41:db:49:2f:9b:fe:69: b8:6c:80:a3:2f:f8:17:5d:06:5a:ff:79:41:a1:51: 21:6f:84:1c:a8:51:5d:58:86:04:aa:bc:b0:6d:9c: cf:c4:d6:7e:05:2f:eb:75:4e:a3:01:7e:f5:18:c4: 4a:30:a2:71:bd:9f:f1:36:8e:62:f7:58:56:f6:fb: 1a:66:80:a5:e5:d7:71:4d:a9:c7:04:13:4c:71:a8: 84:e8:27:ac:07:c3:b5:65:57:ea:07:ae:b2:69:b1: 7a:81:15:4a:28:91:fa:92:95:56:5c:8e:8a:e1:e2: c1:6d:fa:ca:24:3e:3c:c9:2e:81:54:7d:1e:c0:dd: ce:a8:5c:c5:a7:bb:8c:f4:02:ba:b6:d1:06:5b:d0: 1d:a3:52:2f:97:6a:ee:1e:80:4f:07:81:65:60:b4: 5b:45:66:d6:0a:a7:3f:16:88:a6:99:e4:78:5a:54: 49:31:28:9d:5c:d2:b9:ed:e6:9f:53:47:55:e4:ca: 93:0b:fb:da:dc:18:ab:0d:4a:e6:c6:3b:9e:22:0f: ce:2c:e9:22:7d:d6:45:c0:0f:09:57:cc:3b:b9:70: e3:a7:54:67:e2:fd:e4:bb:e7:b5:fc:7f:16:4f:f5: c8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E8:44:25:FF:18:F6:D9:7C:E7:1B:29:9E:62:D4:AE:B0:07:85:F0 X509v3 Authority Key Identifier: keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:52:bd:24:03:d7:5e:87:32:19:5a:eb:6f:7e:e1:4f:ce:cf: 42:f4:30:b3:c5:62:25:99:ca:2f:b2:05:e7:79:11:99:31:d4: 22:d5:bf:33:b0:88:97:41:30:60:df:da:ce:9a:0d:48:d3:0e: c5:d6:68:04:e1:e9:79:20:ce:3b:bc:a3:f0:92:0d:51:2c:9b: c2:78:ff:f4:cf:31:8a:b0:4a:4a:19:cf:ad:cc:f3:7f:02:f6: 2a:b2:6d:de:53:85:93:d8:cc:70:1e:7e:fd:b1:e9:2e:13:88: 57:1c:f8:84:5e:2b:93:f5:fa:64:9d:0d:7d:16:5c:25:60:d1: 60:27:36:b9:07:28:62:9e:1b:c0:2f:91:1e:88:47:d9:ee:12: 50:b1:ca:2f:c2:b0:c7:7d:a6:77:97:3f:5b:ce:0a:69:6c:0a: 23:fc:1a:83:f5:a2:c8:42:ea:2c:be:c3:a1:2c:da:f9:e0:cb: 90:ae:b2:2c:c4:f7:76:d8:c7:c2:63:9f:f8:de:87:0f:ea:b3: 42:47:10:2e:34:56:74:84:e0:04:59:fb:f5:ce:8e:83:27:bc: 2d:91:15:6d:d1:c1:d7:d9:59:b7:46:d5:26:9d:8b:a7:64:6d: 4e:c1:19:a0:58:d4:eb:b9:97:6f:9f:a9:6a:75:5e:e3:8f:6d: c3:5b:33:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o5Tz24K+7g4cvfzz2xXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNzM5ZDIxM2E0MzhmNjc4YjMyMmE4ZjhmODRlMmQ4Yzc4 MTRhY2EwHhcNMjUxMjIxMDIwMTA2WhcNMjUxMjIyMDIwMTA2WjAzMTEwLwYDVQQD EyhiNGU4NDQyNWZmMThmNmQ5N2NlNzFiMjk5ZTYyZDRhZWIwMDc4NWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbx+XFZQCcTi/vwb1O9f301OgGCv j0HbSS+b/mm4bICjL/gXXQZa/3lBoVEhb4QcqFFdWIYEqrywbZzPxNZ+BS/rdU6j AX71GMRKMKJxvZ/xNo5i91hW9vsaZoCl5ddxTanHBBNMcaiE6CesB8O1ZVfqB66y abF6gRVKKJH6kpVWXI6K4eLBbfrKJD48yS6BVH0ewN3OqFzFp7uM9AK6ttEGW9Ad o1Ivl2ruHoBPB4FlYLRbRWbWCqc/FoimmeR4WlRJMSidXNK57eafU0dV5MqTC/va 3BirDUrmxjueIg/OLOkifdZFwA8JV8w7uXDjp1Rn4v3ku+e1/H8WT/XIGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLToRCX/GPbZfOcbKZ5i1K6wB4XwMB8GA1UdIwQY MBaAFB9znSE6Q49nizIqj4+E4tjHgUrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEt MzkyZTA1YTg0Mjc3LzEvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEtMzkyZTA1YTg0Mjc3 LzEvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVK9JAPX XocyGVrrb37hT87PQvQws8ViJZnKL7IF53kRmTHUItW/M7CIl0EwYN/azpoNSNMO xdZoBOHpeSDOO7yj8JINUSybwnj/9M8xirBKShnPrczzfwL2KrJt3lOFk9jMcB5+ /bHpLhOIVxz4hF4rk/X6ZJ0NfRZcJWDRYCc2uQcoYp4bwC+RHohH2e4SULHKL8Kw x32md5c/W84KaWwKI/wag/WiyELqLL7DoSza+eDLkK6yLMT3dtjHwmOf+N6HD+qz QkcQLjRWdITgBFn79c6Ogye8LZEVbdHB19lZt0bVJp2Lp2RtTsEZoFjU67mXb5+p anVe449tw1szsA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:29:23 2025 by rpki-client