This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json) Hash identifier: /71qIyjSNF4C71n6jyE93XOS4oi+COa5C2/bylVqc4Q= Subject key identifier: A8:E9:52:AF:DE:80:CF:C6:95:A9:3E:05:7C:62:6F:DC:45:7B:99:B9 Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d Certificate serial: 019B6BB2D59C6CC684E707D455C41016B78E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 20:00:40 +0000 Manifest this update: Mon 29 Dec 2025 20:00:40 +0000 Manifest next update: Tue 30 Dec 2025 20:00:40 +0000 Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: WL4rGe8MXdZ1vVTivRUxZq/kSMkzy6sls3UOmrMZHOk=) 2: 7ZfxbTG5XE7d3U698g7DhphadTg.roa (hash: Pr0+WF0lvDtFnCz/0c70Eot8c7E9jRvKLuNSr3PuDSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b2:d5:9c:6c:c6:84:e7:07:d4:55:c4:10:16:b7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d Validity Not Before: Dec 29 20:00:40 2025 GMT Not After : Dec 30 20:00:40 2025 GMT Subject: CN=a8e952afde80cfc695a93e057c626fdc457b99b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:04:4d:c7:33:68:ce:aa:b4:ec:56:ac:9b:41: 5d:b2:db:77:6c:21:25:41:54:31:5d:4f:08:a5:eb: 2d:56:33:0e:c7:b6:1b:89:0c:4c:d0:10:dc:e2:b1: d8:28:35:de:6c:c4:5d:ed:be:1a:fb:d4:cd:9e:8b: 82:4f:cf:f2:c2:8d:8c:66:77:49:bc:b5:11:2c:6c: df:d7:fb:99:ef:1e:7d:64:dc:10:4f:2b:72:d9:32: ec:1c:be:c2:28:c7:ba:bc:8c:5e:93:96:91:b1:d6: 01:71:1a:4e:73:ff:6e:52:b0:d6:2f:cb:48:24:33: 7d:b9:30:97:fc:cc:fc:0c:e0:a5:56:3b:54:32:a2: eb:10:6d:31:df:6a:2a:a8:58:f6:41:9e:b3:e1:1b: 91:f1:0d:9e:b9:e4:8c:e5:68:b2:9e:61:6a:74:fb: ee:0d:1b:63:ec:c4:2b:49:4b:99:b8:da:48:20:b4: b1:40:4c:7f:a8:e8:49:98:ad:01:4a:ae:2d:18:7f: c2:24:ea:ae:d8:20:de:cb:b9:4a:b2:7a:e3:8c:15: 43:e4:7e:6b:c9:ab:ba:88:4d:a3:36:29:5f:7a:26: 4b:96:1c:af:09:f8:b9:37:2e:16:d1:05:17:b0:f2: 46:c3:f5:96:06:61:33:11:e4:c6:6a:8c:03:d7:65: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E9:52:AF:DE:80:CF:C6:95:A9:3E:05:7C:62:6F:DC:45:7B:99:B9 X509v3 Authority Key Identifier: keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:75:c8:db:80:95:23:2b:16:22:93:6b:2e:dc:0e:d2:78:b3: 04:9c:e2:7f:44:79:25:df:01:f4:ef:75:9a:97:6c:a9:c2:dd: 39:61:0c:a8:11:07:8d:5a:93:bd:49:d5:c6:c5:52:a3:4e:cd: 1a:7c:43:1c:5e:ea:89:57:b4:c2:30:b6:49:e3:98:86:40:9b: 0d:a1:2e:37:5a:6a:94:84:45:d2:5b:80:c1:2a:11:c3:5a:d8: 58:be:1a:2f:4c:9d:ba:2f:ed:c5:ee:2d:5e:62:92:1e:2a:d2: d3:f7:eb:5b:3a:02:35:26:c3:10:b2:55:7a:fd:4b:08:57:a8: ac:06:59:d5:53:f5:51:33:92:72:1e:5b:2f:71:f4:d1:43:ec: 12:5e:8a:e4:ec:aa:bb:22:da:bd:9a:c9:d8:d0:e1:ca:66:16: ad:07:dc:e6:9d:d4:6e:37:26:25:b2:29:c7:53:46:40:8d:d8: cd:c3:87:89:97:8b:70:c3:84:93:0f:93:43:2c:e4:b2:64:38: c7:b7:a5:82:03:ef:85:cc:c2:72:25:f3:5e:41:3c:42:7f:40: 4c:b7:04:9b:81:43:c4:47:26:c0:4f:ac:6a:24:46:39:da:0d: c8:a1:d2:2d:e1:25:d7:fa:7d:8c:de:9e:8c:70:51:bb:3d:af: 32:47:06:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrstWcbMaE5wfUVcQQFreOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2RmZjU0N2VhY2JlODFkYzM0NjU1OTg0NDZkM2IwMjdk Y2I3NmQwHhcNMjUxMjI5MjAwMDQwWhcNMjUxMjMwMjAwMDQwWjAzMTEwLwYDVQQD EyhhOGU5NTJhZmRlODBjZmM2OTVhOTNlMDU3YzYyNmZkYzQ1N2I5OWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QRNxzNozqq07Fasm0Fdstt3bCEl QVQxXU8IpestVjMOx7YbiQxM0BDc4rHYKDXebMRd7b4a+9TNnouCT8/ywo2MZndJ vLURLGzf1/uZ7x59ZNwQTyty2TLsHL7CKMe6vIxek5aRsdYBcRpOc/9uUrDWL8tI JDN9uTCX/Mz8DOClVjtUMqLrEG0x32oqqFj2QZ6z4RuR8Q2eueSM5WiynmFqdPvu DRtj7MQrSUuZuNpIILSxQEx/qOhJmK0BSq4tGH/CJOqu2CDey7lKsnrjjBVD5H5r yau6iE2jNilfeiZLlhyvCfi5Ny4W0QUXsPJGw/WWBmEzEeTGaowD12XCJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjpUq/egM/Glak+BXxib9xFe5m5MB8GA1UdIwQY MBaAFNB9/1R+rL6B3DRlWYRG07An3LdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgt Nzg1YWMxOTFiMzFhLzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9lMGU4MjktMTI4NC00ZGIxLWJhNDgtNzg1YWMxOTFiMzFh LzEvMEgzX1ZINnN2b0hjTkdWWmhFYlRzQ2ZjdDIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXXI24CV IysWIpNrLtwO0nizBJzif0R5Jd8B9O91mpdsqcLdOWEMqBEHjVqTvUnVxsVSo07N GnxDHF7qiVe0wjC2SeOYhkCbDaEuN1pqlIRF0luAwSoRw1rYWL4aL0ydui/txe4t XmKSHirS0/frWzoCNSbDELJVev1LCFeorAZZ1VP1UTOSch5bL3H00UPsEl6K5Oyq uyLavZrJ2NDhymYWrQfc5p3UbjcmJbIpx1NGQI3YzcOHiZeLcMOEkw+TQyzksmQ4 x7elggPvhczCciXzXkE8Qn9ATLcEm4FDxEcmwE+saiRGOdoNyKHSLeEl1/p9jN6e jHBRuz2vMkcGug== -----END CERTIFICATE-----Generated at Tue Dec 30 01:31:58 2025 by rpki-client