This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json) Hash identifier: V85GniuGAmPhgKOn7HLJvAi/FpvbN7ZZ964wZ5ce+JA= Subject key identifier: 71:3F:7B:33:43:C6:18:3E:E0:C2:AA:81:E3:7E:EA:4E:B5:50:CB:B4 Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b Certificate serial: 019B46CA99850C31409FA71DA2662062D599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 16:00:41 +0000 Manifest this update: Mon 22 Dec 2025 16:00:41 +0000 Manifest next update: Tue 23 Dec 2025 16:00:41 +0000 Files and hashes: 1: NwkZh_DNuB_iBInY9wDbpyHdLgE.roa (hash: 5w+s5Rk1602R4y1zX8F10ZF0iAVWkGEzyROrjF/5dqE=) 2: SeFxeccbo68KLvP3eAvdIgxyzVI.roa (hash: KKPafx1oDtZuIFD9Wnd6TukbFDgA1SpzCeh9Ci09gpw=) 3: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: pRiG/Hn2kwD2soeFvuZiEhqPBCePOsvY/DyxmAI/e/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:99:85:0c:31:40:9f:a7:1d:a2:66:20:62:d5:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b Validity Not Before: Dec 22 16:00:41 2025 GMT Not After : Dec 23 16:00:41 2025 GMT Subject: CN=713f7b3343c6183ee0c2aa81e37eea4eb550cbb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:17:00:b7:53:92:88:e1:2c:88:c5:35:0e:c8: a6:08:6d:b9:a7:d2:71:ba:a0:1b:81:ad:6b:af:63: 18:fe:ab:66:16:49:30:73:5d:f1:96:ed:4a:96:ca: f7:2e:bb:01:d0:7b:1e:e4:9a:ab:12:9e:be:6e:a7: 4d:06:64:bd:23:26:a1:6b:fb:4f:f5:de:a5:12:6c: 62:b0:4b:f7:38:a3:cf:9c:67:40:e3:00:cc:f4:2c: 97:96:11:c4:88:7b:83:f2:cd:9c:d5:10:b7:e0:99: 45:e4:f7:7f:bd:97:9e:e1:27:e7:96:9b:cc:1a:f7: 67:90:b6:1f:e4:eb:71:c7:cd:a8:8d:3e:c5:35:67: 7e:c3:e3:de:c2:1d:95:0c:f8:9d:9c:fa:1e:ba:e4: 90:f0:b4:b1:64:39:80:cb:2d:34:b6:03:6d:90:b6: 88:20:a0:58:2f:fb:91:0d:8f:04:f3:e8:df:fe:cd: e9:d7:76:c5:02:cd:16:14:20:e1:22:28:35:3f:54: 47:9d:00:a6:0b:33:d1:73:2e:76:94:c1:fd:3b:b1: d9:1e:1f:e5:51:91:bc:3b:cb:1a:ec:d1:de:8e:ab: 6c:92:01:ae:c0:8a:20:04:a2:e7:af:aa:cf:e2:80: 61:00:5e:b8:56:b0:90:28:20:85:11:67:0e:1d:92: d9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3F:7B:33:43:C6:18:3E:E0:C2:AA:81:E3:7E:EA:4E:B5:50:CB:B4 X509v3 Authority Key Identifier: keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:56:3d:99:90:f7:31:8b:ff:a5:72:66:c4:8b:c3:be:2b:a8: f0:d8:67:23:ea:6d:69:64:1a:7e:5b:00:cc:4a:ca:7c:9c:e6: b9:13:cd:00:54:13:fb:0f:b0:8e:56:15:d7:e6:33:87:c7:1f: ed:99:e6:72:c5:b2:d2:a8:10:68:4f:c2:c2:15:a8:8c:63:6c: 06:b9:2f:51:f5:22:12:5d:1a:ce:bf:f7:d5:d1:2c:c7:c1:68: 2f:0f:f4:8d:74:b8:47:22:cd:32:48:3d:d5:a3:f4:13:ec:aa: 23:45:24:9e:c9:01:9e:ac:73:85:23:54:7f:3c:c3:6f:ca:d0: 66:ff:86:2c:35:f0:1a:73:fd:91:5d:7c:25:77:b2:fe:e0:6c: 35:1a:70:71:c0:ca:63:5f:4e:08:f7:cc:49:13:dc:a2:8f:69: e5:ae:b0:71:db:4f:b8:15:ca:34:59:d3:a0:42:e1:f6:6b:1c: a7:e6:c3:6d:aa:5c:b8:1b:d1:ca:79:d5:7c:43:f1:73:46:48: 9f:bf:59:b5:71:d9:60:ec:8f:87:b2:2b:77:c8:73:78:74:0d: ad:b6:f3:28:45:5f:c6:38:5e:fe:bf:1b:46:15:ec:f2:1c:3d: 3f:df:a6:1c:93:0e:8c:34:97:8d:dd:67:f3:cb:28:bb:e6:19: 81:f7:88:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGypmFDDFAn6cdomYgYtWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3N2MyMDczNzExNmJjNmQ1ZTViMjI0OTMxY2YxM2RkN2Y3 OWY5NWIwHhcNMjUxMjIyMTYwMDQxWhcNMjUxMjIzMTYwMDQxWjAzMTEwLwYDVQQD Eyg3MTNmN2IzMzQzYzYxODNlZTBjMmFhODFlMzdlZWE0ZWI1NTBjYmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxcAt1OSiOEsiMU1DsimCG25p9Jx uqAbga1rr2MY/qtmFkkwc13xlu1Klsr3LrsB0Hse5JqrEp6+bqdNBmS9Iyaha/tP 9d6lEmxisEv3OKPPnGdA4wDM9CyXlhHEiHuD8s2c1RC34JlF5Pd/vZee4SfnlpvM GvdnkLYf5Otxx82ojT7FNWd+w+Pewh2VDPidnPoeuuSQ8LSxZDmAyy00tgNtkLaI IKBYL/uRDY8E8+jf/s3p13bFAs0WFCDhIig1P1RHnQCmCzPRcy52lMH9O7HZHh/l UZG8O8sa7NHejqtskgGuwIogBKLnr6rP4oBhAF64VrCQKCCFEWcOHZLZYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHE/ezNDxhg+4MKqgeN+6k61UMu0MB8GA1UdIwQY MBaAFId8IHNxFrxtXlsiSTHPE91/eflbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgt ZTcyMzJmODQ0OGIwLzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgtZTcyMzJmODQ0OGIw LzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFY9mZD3 MYv/pXJmxIvDviuo8NhnI+ptaWQaflsAzErKfJzmuRPNAFQT+w+wjlYV1+Yzh8cf 7ZnmcsWy0qgQaE/CwhWojGNsBrkvUfUiEl0azr/31dEsx8FoLw/0jXS4RyLNMkg9 1aP0E+yqI0UknskBnqxzhSNUfzzDb8rQZv+GLDXwGnP9kV18JXey/uBsNRpwccDK Y19OCPfMSRPcoo9p5a6wcdtPuBXKNFnToELh9mscp+bDbapcuBvRynnVfEPxc0ZI n79ZtXHZYOyPh7Ird8hzeHQNrbbzKEVfxjhe/r8bRhXs8hw9P9+mHJMOjDSXjd1n 88sou+YZgfeI6Q== -----END CERTIFICATE-----Generated at Tue Dec 23 00:01:15 2025 by rpki-client