This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json) Hash identifier: uSicH8Q7UGny+cwLHfaWA/nhC+26awUXWF11AnHRRM0= Subject key identifier: D6:EA:20:E8:76:92:72:0A:7D:D8:7A:0D:5C:AF:28:C9:B4:B4:21:ED Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8 Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8 Certificate serial: 019B3C1023A1122585D5EE660EDBF1B53667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 14:00:49 +0000 Manifest this update: Sat 20 Dec 2025 14:00:49 +0000 Manifest next update: Sun 21 Dec 2025 14:00:49 +0000 Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=) 2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=) 3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: /oZPtEp9GSCb2MRJlqbyhZVTx/kmk5NMDahxUd5J0wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:23:a1:12:25:85:d5:ee:66:0e:db:f1:b5:36:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8 Validity Not Before: Dec 20 14:00:49 2025 GMT Not After : Dec 21 14:00:49 2025 GMT Subject: CN=d6ea20e87692720a7dd87a0d5caf28c9b4b421ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0d:92:a1:09:44:56:fe:4f:60:c6:64:6a:9a: 5c:d5:0f:14:aa:c2:f0:de:1b:a0:46:ca:73:d1:28: 60:21:1c:da:a6:9e:a2:9d:d0:1a:b7:0d:73:34:b4: 36:30:6f:f2:44:96:27:bf:fa:af:dd:12:24:f9:da: 94:2f:0c:5b:d8:26:5a:76:d4:42:7d:09:dc:7c:e3: 27:b0:4f:ae:0f:41:c7:6b:32:6d:5d:5f:0a:48:64: a7:97:91:c1:64:85:1c:c1:67:c9:91:c6:3c:9e:05: a1:df:23:36:b8:d5:01:2f:00:f7:28:4d:e5:7b:f4: b5:0d:6b:ac:1a:a1:fc:00:e7:8a:26:dc:6c:36:6f: d7:3b:fe:b6:52:de:10:5d:a2:4f:05:a4:00:62:ea: 47:24:0b:d4:ae:96:05:43:2c:f2:a2:8b:f5:8f:be: 8c:c4:1b:8d:fd:ce:cc:92:02:f0:55:8c:05:1e:9b: 57:9c:b3:bf:f0:bf:7e:3d:20:0d:68:8e:7c:26:77: 93:21:4d:1a:26:2b:2f:96:7a:60:6a:91:ea:21:2d: be:f0:ac:f2:6c:ce:eb:62:a4:66:a6:b0:fa:b8:81: f8:ce:8c:21:90:0a:42:d2:1f:8f:56:8e:a5:ce:00: 84:23:83:e4:8f:93:0e:d1:58:36:d0:b5:8d:52:0c: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EA:20:E8:76:92:72:0A:7D:D8:7A:0D:5C:AF:28:C9:B4:B4:21:ED X509v3 Authority Key Identifier: keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ff:6c:ca:25:56:c9:f2:42:c5:9f:46:6b:60:6f:3b:32:6e: 8f:a0:3d:09:2d:ad:c9:34:d3:43:5e:69:25:9c:d6:83:9c:6a: db:2f:9f:2b:80:50:cf:1f:e7:3a:fc:3b:c2:32:7e:51:2b:2b: 4b:f9:e4:f4:66:70:67:d5:7c:e9:f3:6c:6d:b3:62:a1:7e:be: 28:8d:87:b5:41:67:ba:3a:bb:32:35:82:33:cc:fb:9a:b1:c8: 21:87:db:a1:43:f2:8c:9e:8a:ae:85:a6:78:a1:29:dc:72:02: c6:1f:99:bc:50:1e:56:be:e0:71:b6:55:32:a6:6d:e0:7d:df: 57:61:84:d2:d2:bf:a7:4a:55:a8:3f:31:2d:d9:13:9e:da:a6: d4:79:82:58:1d:65:9a:9b:62:03:0d:f8:62:f8:43:e3:82:d4: 59:62:ad:bf:75:57:b2:aa:00:5c:9e:c2:93:3e:57:b2:dd:58: 9b:3c:a3:54:52:aa:f7:13:7e:ab:9a:d6:7e:f2:5c:93:cd:4a: 83:2e:58:f0:e2:67:45:28:ab:00:71:a0:32:e8:94:76:13:91: 5f:30:44:bc:f6:7a:e6:78:e0:35:96:80:4a:ec:1d:03:ad:01: 76:a6:06:f3:6a:01:f2:c8:13:c4:b6:94:1f:d5:8f:48:8c:d8: cc:b2:a3:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ECOhEiWF1e5mDtvxtTZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMWRjMThhNGIxZmJmZTJjMmJhYmQ4YmJiNDdmZTFmZDFj ZjIyZjgwHhcNMjUxMjIwMTQwMDQ5WhcNMjUxMjIxMTQwMDQ5WjAzMTEwLwYDVQQD EyhkNmVhMjBlODc2OTI3MjBhN2RkODdhMGQ1Y2FmMjhjOWI0YjQyMWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w2SoQlEVv5PYMZkappc1Q8UqsLw 3hugRspz0ShgIRzapp6indAatw1zNLQ2MG/yRJYnv/qv3RIk+dqULwxb2CZadtRC fQncfOMnsE+uD0HHazJtXV8KSGSnl5HBZIUcwWfJkcY8ngWh3yM2uNUBLwD3KE3l e/S1DWusGqH8AOeKJtxsNm/XO/62Ut4QXaJPBaQAYupHJAvUrpYFQyzyoov1j76M xBuN/c7MkgLwVYwFHptXnLO/8L9+PSANaI58JneTIU0aJisvlnpgapHqIS2+8Kzy bM7rYqRmprD6uIH4zowhkApC0h+PVo6lzgCEI4Pkj5MO0Vg20LWNUgzTkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbqIOh2knIKfdh6DVyvKMm0tCHtMB8GA1UdIwQY MBaAFK4dwYpLH7/iwrq9i7tH/h/RzyL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMt OGU3MTQ5ZjA0YTRlLzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMtOGU3MTQ5ZjA0YTRl LzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArP9syiVW yfJCxZ9Ga2BvOzJuj6A9CS2tyTTTQ15pJZzWg5xq2y+fK4BQzx/nOvw7wjJ+USsr S/nk9GZwZ9V86fNsbbNioX6+KI2HtUFnujq7MjWCM8z7mrHIIYfboUPyjJ6KroWm eKEp3HICxh+ZvFAeVr7gcbZVMqZt4H3fV2GE0tK/p0pVqD8xLdkTntqm1HmCWB1l mptiAw34YvhD44LUWWKtv3VXsqoAXJ7Ckz5Xst1YmzyjVFKq9xN+q5rWfvJck81K gy5Y8OJnRSirAHGgMuiUdhORXzBEvPZ65njgNZaASuwdA60BdqYG82oB8sgTxLaU H9WPSIzYzLKjoA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:32:28 2025 by rpki-client