This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json) Hash identifier: X40osjeK5VyeckQVFK9yWEFefLV3UZI4HBRDvNerC88= Subject key identifier: A4:30:E3:83:EC:25:27:3C:20:A6:96:3D:4D:0F:C0:F2:D6:26:A6:D7 Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d Certificate serial: 019B58632F0FF56813115B03A3A6A0D9B5FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 02:00:53 +0000 Manifest this update: Fri 26 Dec 2025 02:00:53 +0000 Manifest next update: Sat 27 Dec 2025 02:00:53 +0000 Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: AnxiTJ8yjQuJ6NWuoVJi5pmdbQ6iYvS1I0b/6agwU0o=) 2: 7ZfxbTG5XE7d3U698g7DhphadTg.roa (hash: Pr0+WF0lvDtFnCz/0c70Eot8c7E9jRvKLuNSr3PuDSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:63:2f:0f:f5:68:13:11:5b:03:a3:a6:a0:d9:b5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d Validity Not Before: Dec 26 02:00:53 2025 GMT Not After : Dec 27 02:00:53 2025 GMT Subject: CN=a430e383ec25273c20a6963d4d0fc0f2d626a6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:6d:7c:ae:88:ac:7b:74:86:23:45:c3:df: 68:b6:f1:79:0c:f1:d4:98:7e:5c:6d:0c:34:89:be: f8:55:2b:83:86:15:8c:33:40:73:9a:9c:6c:d0:94: 12:75:77:95:5a:f8:9b:8b:23:3a:33:1f:b9:c9:a9: 78:e6:43:20:0f:fd:58:63:b1:f0:a1:7a:97:ca:4b: 79:49:4f:0e:04:d0:15:f2:d9:2a:84:6a:74:e8:a7: be:1b:fe:3f:04:bc:50:d1:4b:73:ea:a1:3c:79:4d: 4d:3a:6a:6b:3d:59:f7:92:c5:a2:1c:0f:7c:5f:8d: 31:96:00:51:b7:44:f4:ab:69:67:92:59:29:1f:69: 72:e3:d4:10:7b:89:31:21:f8:9e:5a:3e:d9:aa:b7: 9d:1c:ab:4e:67:2f:38:62:63:75:92:80:e8:86:53: b1:2b:54:f5:b7:f6:a4:7d:64:17:0b:84:b5:84:95: d9:10:c1:15:d0:f3:09:89:a7:a4:c4:56:98:1d:7a: b9:7a:52:5e:d4:3a:c2:b1:15:c4:cd:ac:06:85:54: 43:d2:2e:d1:2d:2e:f4:8d:f0:88:60:45:73:da:36: 8a:02:eb:79:38:cb:a0:50:9a:d7:58:d4:46:97:b1: b2:da:dc:80:4f:f7:40:f9:aa:dc:8d:e1:30:98:8b: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:30:E3:83:EC:25:27:3C:20:A6:96:3D:4D:0F:C0:F2:D6:26:A6:D7 X509v3 Authority Key Identifier: keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8b:41:34:66:72:42:50:c9:4c:fa:63:2c:11:5f:ea:0b:b7: 0e:4a:aa:ce:28:98:e0:2f:1d:bc:50:e5:3b:66:b2:a4:a1:e0: f1:4f:11:e0:9b:e8:42:23:dd:1d:4f:15:be:c8:24:f7:3c:49: 06:74:7d:e6:20:80:bb:98:7c:27:2e:a1:37:6c:c6:70:4f:4d: d7:21:3e:b2:a0:19:60:d3:5e:74:b8:f7:b2:1c:97:69:fe:b6: f6:07:25:97:f8:1e:e5:ac:8b:15:61:dc:f4:2e:f2:d1:35:e3: 39:21:3e:6c:10:4e:91:4c:14:28:7e:ed:08:24:d2:32:5b:0e: 1d:39:ce:a0:4d:8b:14:77:df:6c:6b:6a:81:b0:dd:00:38:09: d6:ee:d1:cf:54:0d:f2:e9:bf:a3:fc:89:e7:0d:7d:5b:6f:6a: 27:21:81:27:3a:b2:34:00:f8:9c:35:36:2e:9a:22:b2:19:f6: 17:c5:34:d8:ed:ad:38:3d:48:a9:3e:36:12:3c:b6:36:ef:92: 88:fe:1d:7e:ad:dc:e8:2c:9d:61:30:5e:b8:fa:83:d0:e7:8f: 12:0b:37:52:1b:23:7e:70:35:47:26:05:83:24:48:4a:a9:5f: f6:4a:10:30:a8:74:20:52:b8:fe:95:67:73:91:54:c3:94:52: ad:78:a6:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYYy8P9WgTEVsDo6ag2bX+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2RmZjU0N2VhY2JlODFkYzM0NjU1OTg0NDZkM2IwMjdk Y2I3NmQwHhcNMjUxMjI2MDIwMDUzWhcNMjUxMjI3MDIwMDUzWjAzMTEwLwYDVQQD EyhhNDMwZTM4M2VjMjUyNzNjMjBhNjk2M2Q0ZDBmYzBmMmQ2MjZhNmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVptfK6IrHt0hiNFw99otvF5DPHU mH5cbQw0ib74VSuDhhWMM0Bzmpxs0JQSdXeVWvibiyM6Mx+5yal45kMgD/1YY7Hw oXqXykt5SU8OBNAV8tkqhGp06Ke+G/4/BLxQ0Utz6qE8eU1NOmprPVn3ksWiHA98 X40xlgBRt0T0q2lnklkpH2ly49QQe4kxIfieWj7ZqredHKtOZy84YmN1koDohlOx K1T1t/akfWQXC4S1hJXZEMEV0PMJiaekxFaYHXq5elJe1DrCsRXEzawGhVRD0i7R LS70jfCIYEVz2jaKAut5OMugUJrXWNRGl7Gy2tyAT/dA+arcjeEwmIuU6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQw44PsJSc8IKaWPU0PwPLWJqbXMB8GA1UdIwQY MBaAFNB9/1R+rL6B3DRlWYRG07An3LdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgt Nzg1YWMxOTFiMzFhLzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgtNzg1YWMxOTFiMzFh LzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYtBNGZy QlDJTPpjLBFf6gu3DkqqziiY4C8dvFDlO2aypKHg8U8R4JvoQiPdHU8Vvsgk9zxJ BnR95iCAu5h8Jy6hN2zGcE9N1yE+sqAZYNNedLj3shyXaf629gcll/ge5ayLFWHc 9C7y0TXjOSE+bBBOkUwUKH7tCCTSMlsOHTnOoE2LFHffbGtqgbDdADgJ1u7Rz1QN 8um/o/yJ5w19W29qJyGBJzqyNAD4nDU2Lpoishn2F8U02O2tOD1IqT42Ejy2Nu+S iP4dfq3c6CydYTBeuPqD0OePEgs3UhsjfnA1RyYFgyRISqlf9koQMKh0IFK4/pVn c5FUw5RSrXimvA== -----END CERTIFICATE-----Generated at Fri Dec 26 09:35:58 2025 by rpki-client