This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: EsCzq7iu1ifbUxTbLMec0XgxyyqlatIAw/C+5JimZqY= Subject key identifier: 0E:2E:AC:DA:21:FB:0D:93:9C:03:BB:81:92:06:36:A5:0D:6E:7E:D6 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019B3C7EE5BDEFAE1FE6D86E7FC0E017276F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 1795 Signing time: Sat 20 Dec 2025 16:01:47 +0000 Manifest this update: Sat 20 Dec 2025 16:01:47 +0000 Manifest next update: Sun 21 Dec 2025 16:01:47 +0000 Files and hashes: 1: A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa (hash: VUYWyhNS6ep9E7uE71FApUlIqX9LiZIrh4n1ahAsDso=) 2: TWqw0MHPHKoktRTg5xIAtx78yEM.roa (hash: PUFyi4vEY3nAKmSSQP1jmjE/95RjFLcOq0y69mlpJOM=) 3: V8TNai625jKsZmcQ_WZGrCSKrE4.roa (hash: vysxGoIRN63RAVmh7o1GuXI9idOSf2H3bNvDZcwjEdY=) 4: e6_LhXTjf-f7BeHN6H1yNQzFGts.roa (hash: li+C+e/TyH8gT/zIILB28hzFIhULplGnnZiYiHV9ZRc=) 5: gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa (hash: vU4Z2mH5UQmCsli4v0J2JenJSa7jKRcKq2cUWRszffQ=) 6: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: 30YskGVbK5+fChGNL8BUiireCx3SpTs/f5KpCXBvlyM=) 7: i0jLZUHWlEbTjItngq0hMz6l6J0.roa (hash: +fs8xaq1rUOg67Y/1DC1FdTxOQepuB3UaDQqJ+epLzo=) 8: mYsvImsoUU3Ub9pNivjve1CZzdk.roa (hash: 6hty2hcbqDF/bBkU2gmepu7xCrLxFUdqyzgzAZcFQt8=) 9: mcMvNLDOLrmNQ78kKv9_JRA7DZE.roa (hash: VPPZszck1h4O1z0bSD4PbxyUsa9F/mGv1ZkFIvAMZag=) 10: rIHZb_5Mc64A87xwROb5WoKPTaQ.roa (hash: h28IpYVJGdPeChoNExuao8goV9hXIxbKmOle/GHbji8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:e5:bd:ef:ae:1f:e6:d8:6e:7f:c0:e0:17:27:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Dec 20 16:01:47 2025 GMT Not After : Dec 21 16:01:47 2025 GMT Subject: CN=0e2eacda21fb0d939c03bb81920636a50d6e7ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:0c:d6:36:1b:f7:b2:68:5a:ca:a7:29:70: ec:94:09:1a:90:d9:8b:c2:f5:94:c7:14:47:3a:21: 2d:fa:e6:8e:7a:c2:16:35:1a:4e:f8:46:16:8f:bb: 06:63:a2:c9:b7:dc:4c:5e:2e:83:63:75:70:67:1b: 2d:05:44:79:16:da:fd:1a:87:32:ed:cf:8f:b5:dd: f4:f6:9e:07:eb:a3:4b:a8:45:54:8d:e4:85:78:7b: 6c:c7:1b:ae:06:19:20:44:79:54:ab:e4:54:78:9a: 02:00:25:f4:4b:46:ae:c4:c7:86:97:c9:e0:63:53: d8:5f:49:69:42:99:6c:af:3d:b9:94:c5:9a:54:e0: 69:a0:e7:45:26:ce:da:7f:c0:3c:32:d9:59:d8:22: 7f:c0:76:f4:c0:5a:cf:0d:66:0e:96:25:16:3d:25: 94:ce:e6:e4:e9:c1:a6:0d:3b:d5:fa:ec:b2:2e:83: 92:e4:ea:56:9b:8e:d5:8c:48:0b:fe:b2:b0:f4:0a: 3c:13:ee:da:bd:7b:80:2c:1c:2d:b7:b2:d3:a1:15: 8b:5a:62:7e:ae:6d:6a:d6:7c:93:25:77:1b:65:1d: 82:bb:bb:52:f2:54:bc:14:e3:5c:56:38:2a:5d:27: 8c:2a:47:84:a8:73:de:8c:12:c3:51:d4:07:28:e2: 61:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2E:AC:DA:21:FB:0D:93:9C:03:BB:81:92:06:36:A5:0D:6E:7E:D6 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:93:22:b3:40:ae:44:b5:f7:ed:57:91:6e:b2:84:55:fd:1d: 2e:25:f2:52:c7:7c:8c:18:6b:63:90:f8:c4:d4:56:9f:85:d2: 3a:11:a0:9a:2b:64:39:9f:44:01:31:de:2e:ca:bd:2d:5f:bb: 07:4f:0c:e3:8e:d3:cd:6e:84:51:4e:62:cf:00:50:83:fe:1e: 59:0e:8c:40:f3:0d:74:9f:9a:5b:80:6a:34:e3:33:e6:e5:80: 14:30:a7:0d:a0:80:73:a4:1a:ac:9b:b7:9d:39:b7:9c:01:12: b3:7d:c1:b9:a7:ee:2c:11:d6:fb:03:98:da:a0:70:4b:87:ca: 18:a7:12:44:18:cf:67:5d:3e:f9:d2:37:ed:77:01:e4:69:02: 33:e5:3a:0f:f2:3e:c7:2b:ab:25:e2:d9:df:3e:0a:6f:74:b4: a2:62:e3:77:e2:f3:49:36:c2:12:39:65:be:87:a9:db:17:31: c6:1d:24:ea:89:ff:1b:05:02:57:98:e6:f1:a6:a1:af:0e:f2: e1:37:73:5d:77:ba:62:38:06:b8:bb:ff:25:d7:85:e5:70:df: 9f:e4:20:e4:5f:89:25:6d:d3:80:8d:ff:40:4c:90:94:77:99: d1:7e:9e:e0:e6:c5:7d:10:a3:6f:cc:52:55:79:93:cd:30:77: e5:a2:c4:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fuW9764f5thuf8DgFydvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjUxMjIwMTYwMTQ3WhcNMjUxMjIxMTYwMTQ3WjAzMTEwLwYDVQQD EygwZTJlYWNkYTIxZmIwZDkzOWMwM2JiODE5MjA2MzZhNTBkNmU3ZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqcM1jYb97JoWsqnKXDslAkakNmL wvWUxxRHOiEt+uaOesIWNRpO+EYWj7sGY6LJt9xMXi6DY3VwZxstBUR5Ftr9Gocy 7c+Ptd309p4H66NLqEVUjeSFeHtsxxuuBhkgRHlUq+RUeJoCACX0S0auxMeGl8ng Y1PYX0lpQplsrz25lMWaVOBpoOdFJs7af8A8MtlZ2CJ/wHb0wFrPDWYOliUWPSWU zubk6cGmDTvV+uyyLoOS5OpWm47VjEgL/rKw9Ao8E+7avXuALBwtt7LToRWLWmJ+ rm1q1nyTJXcbZR2Cu7tS8lS8FONcVjgqXSeMKkeEqHPejBLDUdQHKOJhDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4urNoh+w2TnAO7gZIGNqUNbn7WMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZMis0Cu RLX37VeRbrKEVf0dLiXyUsd8jBhrY5D4xNRWn4XSOhGgmitkOZ9EATHeLsq9LV+7 B08M447TzW6EUU5izwBQg/4eWQ6MQPMNdJ+aW4BqNOMz5uWAFDCnDaCAc6QarJu3 nTm3nAESs33BuafuLBHW+wOY2qBwS4fKGKcSRBjPZ10++dI37XcB5GkCM+U6D/I+ xyurJeLZ3z4Kb3S0omLjd+LzSTbCEjllvoep2xcxxh0k6on/GwUCV5jm8aahrw7y 4TdzXXe6YjgGuLv/JdeF5XDfn+Qg5F+JJW3TgI3/QEyQlHeZ0X6e4ObFfRCjb8xS VXmTzTB35aLEIA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:25 2025 by rpki-client