This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: /FF3vpzxBh62Q7i9Ye6Wk4+bsroTQsIneWgxJ+3JS4k= Subject key identifier: 12:E3:B9:5A:86:F0:D5:14:99:09:89:09:B0:F5:E8:12:C2:53:16:AB Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019B37FC5E1D12607817307F682ED600B18E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 137C Signing time: Fri 19 Dec 2025 19:00:44 +0000 Manifest this update: Fri 19 Dec 2025 19:00:44 +0000 Manifest next update: Sat 20 Dec 2025 19:00:44 +0000 Files and hashes: 1: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=) 2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: JBppFSRslkASbQMAXbLZ3gAWK257y1G595m7Ei64Z0g=) 3: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=) 4: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=) 5: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=) 6: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=) 7: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (hash: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=) 8: _e2YDlluO4ii6abU70i7zZECU8k.roa (hash: 6oy05tlA8tClzLGbOUWPjvHzeRzF67vUfYvBUhmRD90=) 9: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=) 10: lLTt27CvKVrZ46MtIxZb-bD0JJg.roa (hash: r41CVNzvdr3xjDNcNmmOPnidy7vQT3DjIW3YSNMbicI=) 11: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=) 12: ve4kS1FSpKOZDfPOmvEJot6T9gc.roa (hash: /8G7vYP5BGzfa/caGIr/zNwzv8N1oQfYQzWhKIYfL+g=) 13: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:5e:1d:12:60:78:17:30:7f:68:2e:d6:00:b1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Dec 19 19:00:44 2025 GMT Not After : Dec 20 19:00:44 2025 GMT Subject: CN=12e3b95a86f0d51499098909b0f5e812c25316ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cc:fe:25:a4:15:59:24:18:cf:d9:21:a1:ce: 11:d6:57:1a:43:1b:15:5c:a9:f3:94:c1:c3:b4:26: 55:0f:4e:1d:a9:30:20:5a:88:79:fc:1e:ae:5a:32: 56:1d:46:94:6d:e9:d6:84:06:d0:49:2b:51:ad:1e: f7:08:56:47:ac:fd:e6:b5:6e:bf:12:cf:8c:dd:5b: 35:6b:28:75:5d:37:f1:6b:6a:ca:49:8a:af:15:93: 2d:be:a4:60:45:d5:9d:a9:9d:11:48:0b:e1:e5:cb: 68:6c:4b:40:2f:72:c5:72:af:80:68:87:5c:6c:96: b5:5e:bd:27:f1:6d:76:a0:52:dd:89:ad:85:ac:63: 27:5f:9f:90:9a:fe:6e:8d:46:1b:a9:0f:a7:33:f2: d6:cd:fa:9b:68:06:d9:05:66:c4:1b:f7:d7:a5:f9: 8c:fa:06:86:78:c8:cd:a8:6c:0f:d3:69:86:00:86: 00:99:91:89:f5:6d:c9:a9:da:29:4c:b6:1f:af:9f: 85:12:86:c9:7d:ee:91:f1:62:3c:a3:c3:21:c1:66: 93:03:20:91:4e:08:9e:51:ab:16:11:3e:7a:43:39: 47:32:ea:21:b8:ec:97:81:52:62:2b:b5:38:16:e3: 94:f7:24:f6:fc:2b:78:ae:b5:10:1c:d0:70:3e:a4: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E3:B9:5A:86:F0:D5:14:99:09:89:09:B0:F5:E8:12:C2:53:16:AB X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:56:e6:7a:9c:f0:ea:30:d7:90:2d:2c:df:7c:5d:7e:f8:8d: 20:29:cb:9d:a5:4b:fc:6c:bd:50:e1:f1:64:44:cb:43:b0:e7: a9:53:87:f2:0f:2c:ba:61:a6:37:9c:47:f1:29:45:c2:ca:4c: 98:97:1f:84:6e:71:3f:a6:63:bd:d5:6c:92:cb:9b:5b:b4:44: 74:5a:94:b1:99:4a:fb:16:ac:90:c5:92:60:e1:43:5e:e3:12: e9:4c:ca:87:be:6f:3f:4d:c6:44:2c:cd:74:73:f6:f5:c3:85: 57:49:40:6c:82:d0:74:ef:dc:f1:8b:f4:a9:80:bf:1f:2f:d7: c2:f2:e1:8d:9a:19:29:c0:0d:cd:db:e9:4a:97:68:f6:f2:52: 40:36:fb:58:81:c3:6c:32:a9:a5:4e:1e:c2:36:49:84:09:32: 06:4b:d8:eb:28:35:2b:2f:5c:ba:d7:13:0d:f0:85:1a:7a:21: 83:13:1b:ce:27:f2:1d:e2:02:18:9e:07:96:0f:ce:05:11:78: 6d:14:7b:85:8c:45:15:eb:03:a7:78:42:5c:7f:23:6c:a1:88: bd:f0:ed:19:31:85:30:0f:8f:44:4f:df:74:f7:4a:24:d4:7f: a7:04:2b:f9:c7:eb:fc:7d:cc:a1:e0:9f:4d:f4:4d:e1:17:fa: fe:a0:80:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/F4dEmB4FzB/aC7WALGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjUxMjE5MTkwMDQ0WhcNMjUxMjIwMTkwMDQ0WjAzMTEwLwYDVQQD EygxMmUzYjk1YTg2ZjBkNTE0OTkwOTg5MDliMGY1ZTgxMmMyNTMxNmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8z+JaQVWSQYz9khoc4R1lcaQxsV XKnzlMHDtCZVD04dqTAgWoh5/B6uWjJWHUaUbenWhAbQSStRrR73CFZHrP3mtW6/ Es+M3Vs1ayh1XTfxa2rKSYqvFZMtvqRgRdWdqZ0RSAvh5ctobEtAL3LFcq+AaIdc bJa1Xr0n8W12oFLdia2FrGMnX5+Qmv5ujUYbqQ+nM/LWzfqbaAbZBWbEG/fXpfmM +gaGeMjNqGwP02mGAIYAmZGJ9W3JqdopTLYfr5+FEobJfe6R8WI8o8MhwWaTAyCR TgieUasWET56QzlHMuohuOyXgVJiK7U4FuOU9yT2/Ct4rrUQHNBwPqRqTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLjuVqG8NUUmQmJCbD16BLCUxarMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1bmepzw 6jDXkC0s33xdfviNICnLnaVL/Gy9UOHxZETLQ7DnqVOH8g8sumGmN5xH8SlFwspM mJcfhG5xP6ZjvdVsksubW7REdFqUsZlK+xaskMWSYOFDXuMS6UzKh75vP03GRCzN dHP29cOFV0lAbILQdO/c8Yv0qYC/Hy/XwvLhjZoZKcANzdvpSpdo9vJSQDb7WIHD bDKppU4ewjZJhAkyBkvY6yg1Ky9cutcTDfCFGnohgxMbzifyHeICGJ4Hlg/OBRF4 bRR7hYxFFesDp3hCXH8jbKGIvfDtGTGFMA+PRE/fdPdKJNR/pwQr+cfr/H3MoeCf TfRN4Rf6/qCAuQ== -----END CERTIFICATE-----Generated at Fri Dec 19 21:53:05 2025 by rpki-client