This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft File: 0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json) Hash identifier: nswaE0qGwA8nV3ma5mggS9+PESXN06+9VYpZqoTNodY= Subject key identifier: 2C:E4:EC:BA:CA:EC:37:2D:4B:5E:84:DE:67:2E:64:B8:99:10:87:37 Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62 Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262 Certificate serial: 019B38333E16FCE579DD8AFF0BB64B726237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 20:00:40 +0000 Manifest this update: Fri 19 Dec 2025 20:00:40 +0000 Manifest next update: Sat 20 Dec 2025 20:00:40 +0000 Files and hashes: 1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: +0EGz62oM0jYbpiGrBMAq9n3WaS3/KefUKJNbmIDMWA=) 2: UtfGmlfffX0cIYFRWQAmKmCxHBQ.roa (hash: eIoevFtzl4KgjvBzeT/oQJHdGPIhlQ4d3q4XFG6eYig=) 3: pkGGNBdhq4ZpQRqIZMsggNSolf0.roa (hash: y34zQyNQE6Dt9rgo+TKZCABmiXucQM6cXI6cZVCrI5E=) 4: qMKz0iOTV-AipsqG6OSykAqBmcw.roa (hash: evn2bcSDR90liMyPkIBPgdH2fICEje6rbDEpXsqQ5bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:3e:16:fc:e5:79:dd:8a:ff:0b:b6:4b:72:62:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262 Validity Not Before: Dec 19 20:00:40 2025 GMT Not After : Dec 20 20:00:40 2025 GMT Subject: CN=2ce4ecbacaec372d4b5e84de672e64b899108737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ee:b5:f9:04:ee:8b:5b:57:36:0b:7b:66:d2: 88:63:07:2a:8a:e0:e7:6c:ae:75:cb:22:d6:32:01: a2:d1:c3:35:0b:69:9d:49:8f:b7:d0:6e:4b:62:93: ce:38:01:4c:0d:70:00:1b:94:8c:3c:74:b3:5b:91: ba:a0:15:b4:b6:57:c6:b6:42:53:02:db:d4:e4:64: e4:22:61:bd:8f:52:14:b1:d5:8f:9f:21:7c:2e:52: 03:64:75:c0:9c:a1:1e:e0:a3:cb:30:21:26:07:10: 3d:48:06:e4:49:fb:27:f4:10:65:b6:20:2e:fc:11: d6:0b:84:6c:f4:d7:15:84:ec:d2:5a:91:13:b4:3b: d8:0f:35:e0:99:de:5e:6f:59:54:3a:4f:d4:ef:2b: 4a:54:17:05:7c:42:ed:3b:18:0f:1a:b6:46:da:3c: b9:c4:17:fb:90:ee:a0:0c:99:e9:99:ac:90:eb:ff: a2:3a:cc:52:01:a0:85:70:38:99:01:a0:4a:bd:41: 16:9e:07:81:20:38:c4:fb:f1:d7:48:ed:75:fd:2d: 58:af:4a:7f:72:a0:cf:02:62:a4:bf:7e:33:24:50: 7a:98:fb:ec:91:25:f1:da:77:14:44:3b:93:0a:dc: 0a:3d:18:b7:df:94:7c:ed:37:ee:c9:7b:7f:0f:a9: 4a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E4:EC:BA:CA:EC:37:2D:4B:5E:84:DE:67:2E:64:B8:99:10:87:37 X509v3 Authority Key Identifier: keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4c:06:84:14:c4:9c:b2:43:c2:c6:97:b1:87:5d:52:a3:18: 06:79:18:9e:6d:1a:56:88:5a:c0:31:d5:55:7f:5e:b0:62:02: fc:5b:a6:f8:7c:6d:ad:85:64:a3:a5:32:54:d0:65:6d:91:37: 6b:c0:22:ad:98:1c:fb:da:76:f2:e8:49:4a:6d:1c:4f:8c:d2: db:4a:19:4b:6c:72:ed:39:42:1e:b4:10:e7:3d:1d:8d:5e:11: 44:5e:5c:59:15:88:cf:25:82:af:a9:14:23:66:dd:4f:dd:0b: d1:24:57:01:30:39:51:4f:19:8d:60:82:e4:21:5b:08:f9:d7: bf:76:34:b4:c3:be:f6:8b:c5:83:44:ed:7f:4c:97:6d:08:7e: 8d:f8:ae:e7:29:de:80:57:82:09:cb:6f:b9:09:8a:09:d1:a2: 56:40:69:35:ff:b5:7b:b5:fa:93:6f:4b:ea:70:35:ee:1f:87: 24:47:a8:ed:65:f1:48:20:b1:3b:e0:41:19:6b:4d:0e:f9:1e: 63:4d:12:1b:ca:cc:18:04:35:26:dd:dc:7f:1e:40:b8:65:82: 49:e4:51:74:bf:26:bf:92:6d:f2:17:c0:fc:e6:c5:81:39:d8: c6:cb:ff:d5:ac:a6:66:ab:c5:a9:e4:f3:a0:30:97:35:f6:e9: b7:f5:7f:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4Mz4W/OV53Yr/C7ZLcmI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2RjMzVlYmNkODhkZDBlMmE4ZGIzYTVhMDg2NTRiYzNi ZTAyNjIwHhcNMjUxMjE5MjAwMDQwWhcNMjUxMjIwMjAwMDQwWjAzMTEwLwYDVQQD EygyY2U0ZWNiYWNhZWMzNzJkNGI1ZTg0ZGU2NzJlNjRiODk5MTA4NzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O61+QTui1tXNgt7ZtKIYwcqiuDn bK51yyLWMgGi0cM1C2mdSY+30G5LYpPOOAFMDXAAG5SMPHSzW5G6oBW0tlfGtkJT AtvU5GTkImG9j1IUsdWPnyF8LlIDZHXAnKEe4KPLMCEmBxA9SAbkSfsn9BBltiAu /BHWC4Rs9NcVhOzSWpETtDvYDzXgmd5eb1lUOk/U7ytKVBcFfELtOxgPGrZG2jy5 xBf7kO6gDJnpmayQ6/+iOsxSAaCFcDiZAaBKvUEWngeBIDjE+/HXSO11/S1Yr0p/ cqDPAmKkv34zJFB6mPvskSXx2ncURDuTCtwKPRi335R87TfuyXt/D6lKJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzk7LrK7DctS16E3mcuZLiZEIc3MB8GA1UdIwQY MBaAFNB9w1682I3Q4qjbOloIZUvDvgJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xYzcxOGQtZTdhMC00MGFjLWExODEt Y2JhYTQyYTYyNzI3LzEvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8xYzcxOGQtZTdhMC00MGFjLWExODEtY2JhYTQyYTYyNzI3 LzEvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUwGhBTE nLJDwsaXsYddUqMYBnkYnm0aVohawDHVVX9esGIC/Fum+HxtrYVko6UyVNBlbZE3 a8AirZgc+9p28uhJSm0cT4zS20oZS2xy7TlCHrQQ5z0djV4RRF5cWRWIzyWCr6kU I2bdT90L0SRXATA5UU8ZjWCC5CFbCPnXv3Y0tMO+9ovFg0Ttf0yXbQh+jfiu5yne gFeCCctvuQmKCdGiVkBpNf+1e7X6k29L6nA17h+HJEeo7WXxSCCxO+BBGWtNDvke Y00SG8rMGAQ1Jt3cfx5AuGWCSeRRdL8mv5Jt8hfA/ObFgTnYxsv/1aymZqvFqeTz oDCXNfbpt/V/Wg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:23:51 2025 by rpki-client