This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json) Hash identifier: mPDe96Fuop2my6rvOVoS359StSQ6p9/jBjH3sfYwKzM= Subject key identifier: D7:65:2A:E2:EC:CB:92:3C:7D:9E:63:66:56:15:06:41:60:7E:92:FA Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8 Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8 Certificate serial: 019B7034CC4B45A2625D9F29097041C809DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 17:01:06 +0000 Manifest this update: Tue 30 Dec 2025 17:01:06 +0000 Manifest next update: Wed 31 Dec 2025 17:01:06 +0000 Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=) 2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=) 3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: xKWln4lc+QWNG9jK7NY/ZmygX8StuHRaI5ELGBjHbOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:34:cc:4b:45:a2:62:5d:9f:29:09:70:41:c8:09:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8 Validity Not Before: Dec 30 17:01:06 2025 GMT Not After : Dec 31 17:01:06 2025 GMT Subject: CN=d7652ae2eccb923c7d9e636656150641607e92fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:ed:4e:08:aa:0d:35:d5:e5:3b:38:03:20: 43:c1:f7:bd:12:8c:26:65:13:dc:18:69:b2:7b:19: 37:6b:18:b0:89:52:07:a6:d8:18:c1:e9:19:4f:8c: 6a:17:d5:72:9a:b6:79:b3:90:7f:cf:0b:02:03:f6: cf:ef:fe:90:61:12:54:2a:dc:83:53:aa:34:eb:74: d5:91:72:2b:45:7d:ff:95:c4:52:ac:35:f8:ee:22: 7d:28:45:2b:da:fd:de:b6:e3:63:89:aa:dc:d7:2b: 66:cd:da:da:fc:d8:da:ba:36:82:f2:e4:d7:2a:b8: 1a:ab:0e:cb:c1:08:fb:9b:d5:56:ac:09:03:13:82: 03:1f:60:24:f1:8f:1c:d5:65:32:16:dc:6f:39:de: 96:c5:51:eb:7c:f7:6c:ae:42:bb:d5:92:bb:09:d3: 2f:1f:d9:ea:9c:a9:e1:8b:5b:42:ec:90:e6:1f:c7: 7b:2c:70:60:ec:39:1e:0c:b8:b0:19:1a:ea:cb:14: 0a:27:4a:a7:5e:04:29:91:47:17:3e:3b:e6:55:b1: dc:2b:e4:f0:dd:13:3c:df:d1:9e:14:7a:a9:b9:16: 75:84:e3:5d:20:b4:af:a0:bb:de:aa:f8:cc:16:e0: e1:82:c9:dd:92:90:0e:d3:a9:75:ab:f0:cd:16:31: 06:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:65:2A:E2:EC:CB:92:3C:7D:9E:63:66:56:15:06:41:60:7E:92:FA X509v3 Authority Key Identifier: keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:20:86:11:67:86:78:59:1e:48:b1:d2:60:9e:23:b8:e0:b7: 14:3a:b6:ea:1a:9e:d3:1e:54:a6:f2:87:3c:7e:73:06:f4:3e: 00:83:55:21:dd:de:9c:f7:4e:cb:80:93:01:24:0c:b3:11:8a: e8:e0:9f:52:a3:21:50:cf:f7:69:2c:ff:52:06:9f:81:9f:34: e7:af:db:ed:6d:90:f7:69:a1:4f:cc:a3:d0:69:ab:2a:a3:2c: f9:ae:99:1c:71:39:c2:0c:3c:22:b9:8a:4f:48:69:3f:a1:5c: b6:3b:f4:84:33:bc:74:e1:d8:96:8e:0e:7d:05:57:16:ae:21: db:08:2a:99:67:79:c2:d8:58:d9:7e:10:c0:ce:a1:d3:cc:3d: d1:6e:00:dd:9d:58:49:01:a3:cc:86:27:39:fe:96:06:c5:ac: 66:98:6a:45:6b:29:bb:c4:f9:b9:f6:90:e3:dd:2e:c2:84:37: fd:65:dc:51:63:d8:98:dd:99:cb:3d:20:9b:64:1e:56:1c:51: 39:74:7f:05:9b:54:7b:c7:fe:64:2e:18:d0:9d:82:c9:f5:8b: 3b:19:ee:7b:7a:1a:a9:3a:36:32:c0:fd:3f:b5:16:9a:f1:29: cc:ec:eb:26:c5:cf:40:1b:de:ec:e8:77:bf:2a:16:cf:e9:e9: 0c:c9:06:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwNMxLRaJiXZ8pCXBByAnbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMWRjMThhNGIxZmJmZTJjMmJhYmQ4YmJiNDdmZTFmZDFj ZjIyZjgwHhcNMjUxMjMwMTcwMTA2WhcNMjUxMjMxMTcwMTA2WjAzMTEwLwYDVQQD EyhkNzY1MmFlMmVjY2I5MjNjN2Q5ZTYzNjY1NjE1MDY0MTYwN2U5MmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUvtTgiqDTXV5Ts4AyBDwfe9Eowm ZRPcGGmyexk3axiwiVIHptgYwekZT4xqF9VymrZ5s5B/zwsCA/bP7/6QYRJUKtyD U6o063TVkXIrRX3/lcRSrDX47iJ9KEUr2v3etuNjiarc1ytmzdra/NjaujaC8uTX Krgaqw7LwQj7m9VWrAkDE4IDH2Ak8Y8c1WUyFtxvOd6WxVHrfPdsrkK71ZK7CdMv H9nqnKnhi1tC7JDmH8d7LHBg7DkeDLiwGRrqyxQKJ0qnXgQpkUcXPjvmVbHcK+Tw 3RM839GeFHqpuRZ1hONdILSvoLveqvjMFuDhgsndkpAO06l1q/DNFjEGRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdlKuLsy5I8fZ5jZlYVBkFgfpL6MB8GA1UdIwQY MBaAFK4dwYpLH7/iwrq9i7tH/h/RzyL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMt OGU3MTQ5ZjA0YTRlLzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMtOGU3MTQ5ZjA0YTRl LzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeiCGEWeG eFkeSLHSYJ4juOC3FDq26hqe0x5UpvKHPH5zBvQ+AINVId3enPdOy4CTASQMsxGK 6OCfUqMhUM/3aSz/UgafgZ8056/b7W2Q92mhT8yj0GmrKqMs+a6ZHHE5wgw8IrmK T0hpP6Fctjv0hDO8dOHYlo4OfQVXFq4h2wgqmWd5wthY2X4QwM6h08w90W4A3Z1Y SQGjzIYnOf6WBsWsZphqRWspu8T5ufaQ490uwoQ3/WXcUWPYmN2Zyz0gm2QeVhxR OXR/BZtUe8f+ZC4Y0J2CyfWLOxnue3oaqTo2MsD9P7UWmvEpzOzrJsXPQBve7Oh3 vyoWz+npDMkG2Q== -----END CERTIFICATE-----Generated at Wed Dec 31 00:08:43 2025 by rpki-client