This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json) Hash identifier: Um/xHSqAla7zCh3pkL7SSOK7u6pU1pvnJKt6lIgUAoY= Subject key identifier: C4:F9:E1:EF:ED:38:EF:74:61:25:60:78:2E:D2:F3:59:47:2A:2A:1A Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b Certificate serial: 019B4E845465ACD44E584FAF98FAE02E2DD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 04:00:53 +0000 Manifest this update: Wed 24 Dec 2025 04:00:53 +0000 Manifest next update: Thu 25 Dec 2025 04:00:53 +0000 Files and hashes: 1: NwkZh_DNuB_iBInY9wDbpyHdLgE.roa (hash: 5w+s5Rk1602R4y1zX8F10ZF0iAVWkGEzyROrjF/5dqE=) 2: SeFxeccbo68KLvP3eAvdIgxyzVI.roa (hash: KKPafx1oDtZuIFD9Wnd6TukbFDgA1SpzCeh9Ci09gpw=) 3: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: k1cPFqiujpSHF9UmwJNglY81dC2piHeeaExb/ZqeZCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:54:65:ac:d4:4e:58:4f:af:98:fa:e0:2e:2d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b Validity Not Before: Dec 24 04:00:53 2025 GMT Not After : Dec 25 04:00:53 2025 GMT Subject: CN=c4f9e1efed38ef74612560782ed2f359472a2a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7c:ea:13:7b:10:61:43:41:53:e3:19:0c:2c: 35:b8:f7:b8:ed:9d:a8:b1:a5:c4:0e:0f:1a:03:e7: 49:45:79:7d:3d:78:96:cf:f9:42:ac:1c:79:45:b1: b7:6c:ae:df:8a:59:27:fe:97:a0:b7:64:d0:75:63: 16:bd:d5:6b:a0:b1:5a:c0:09:3e:df:2c:a5:b4:86: bc:dc:b6:ce:9e:e3:e5:38:6a:f4:7f:69:e7:a9:f3: b4:9b:9c:58:42:c5:0c:e4:3a:0a:ec:dd:92:32:87: d3:08:6e:bf:08:f0:6e:4b:a1:5f:45:3a:c5:b1:09: e7:71:03:f4:75:d7:26:99:77:b2:72:2b:f0:1a:70: e2:77:d8:9c:2b:8c:d5:b3:5d:19:0d:88:99:e3:30: 03:16:d0:fa:8d:22:56:bc:ac:0d:9e:b7:b1:d9:27: 9c:73:1a:90:aa:3d:90:31:dc:66:ee:1e:c4:fc:a9: 02:6d:b5:bc:b0:c3:b7:27:eb:8a:a7:6b:e8:8c:8d: fd:0e:1e:30:b7:77:6d:db:29:b4:06:5a:ce:04:ed: 94:45:06:f2:cd:06:51:ca:5a:52:5f:c8:36:92:c7: f1:9d:c6:db:0b:44:24:37:0e:e8:9e:a1:15:70:fb: b8:52:41:ab:ea:85:25:25:e0:18:93:f6:36:5c:52: d4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F9:E1:EF:ED:38:EF:74:61:25:60:78:2E:D2:F3:59:47:2A:2A:1A X509v3 Authority Key Identifier: keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d3:88:82:a0:b8:66:62:6b:74:0a:40:b0:c5:48:88:eb:dd: 92:f9:b7:fd:85:95:0e:72:a4:6f:38:57:a6:73:5b:10:ca:10: b8:7d:79:e7:3b:ca:1c:ee:9b:a4:11:a5:36:e1:fc:98:76:31: 14:e5:d0:71:81:3b:e1:5e:2a:52:fa:f8:88:75:5b:54:7b:ad: 24:43:70:32:75:14:17:4f:75:7e:06:79:bf:93:51:ab:72:d5: a8:42:36:be:b5:12:ca:85:6b:68:f0:36:f3:a7:84:29:6e:1a: 50:36:f8:42:69:08:5d:b8:93:13:1e:fd:8e:0d:7e:be:e0:5e: 7f:22:ed:e4:ff:3a:31:d5:35:96:19:21:89:3a:8a:9e:e5:8d: 66:07:b7:f2:40:c0:7f:b2:5c:01:24:af:f0:d4:a7:6d:72:7e: be:60:f1:db:47:b4:69:b7:07:37:ba:e7:55:cd:2b:76:df:82: 7d:ac:dc:73:01:43:f5:21:7f:a7:11:ae:ee:f5:89:1b:1e:fd: 41:5d:41:57:2d:26:c0:1b:87:07:18:25:38:99:48:4e:9f:60: fc:f2:2b:bb:97:ef:23:e8:3f:af:c8:eb:bb:d7:63:36:48:f3: 3e:f5:d9:2d:a4:e7:b6:0d:ba:20:62:cd:69:bc:50:33:fa:2e: 3b:50:e3:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhFRlrNROWE+vmPrgLi3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3N2MyMDczNzExNmJjNmQ1ZTViMjI0OTMxY2YxM2RkN2Y3 OWY5NWIwHhcNMjUxMjI0MDQwMDUzWhcNMjUxMjI1MDQwMDUzWjAzMTEwLwYDVQQD EyhjNGY5ZTFlZmVkMzhlZjc0NjEyNTYwNzgyZWQyZjM1OTQ3MmEyYTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXzqE3sQYUNBU+MZDCw1uPe47Z2o saXEDg8aA+dJRXl9PXiWz/lCrBx5RbG3bK7filkn/pegt2TQdWMWvdVroLFawAk+ 3yyltIa83LbOnuPlOGr0f2nnqfO0m5xYQsUM5DoK7N2SMofTCG6/CPBuS6FfRTrF sQnncQP0ddcmmXeycivwGnDid9icK4zVs10ZDYiZ4zADFtD6jSJWvKwNnrex2Sec cxqQqj2QMdxm7h7E/KkCbbW8sMO3J+uKp2vojI39Dh4wt3dt2ym0BlrOBO2URQby zQZRylpSX8g2ksfxncbbC0QkNw7onqEVcPu4UkGr6oUlJeAYk/Y2XFLUwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMT54e/tOO90YSVgeC7S81lHKioaMB8GA1UdIwQY MBaAFId8IHNxFrxtXlsiSTHPE91/eflbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgt ZTcyMzJmODQ0OGIwLzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgtZTcyMzJmODQ0OGIw LzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNOIgqC4 ZmJrdApAsMVIiOvdkvm3/YWVDnKkbzhXpnNbEMoQuH155zvKHO6bpBGlNuH8mHYx FOXQcYE74V4qUvr4iHVbVHutJENwMnUUF091fgZ5v5NRq3LVqEI2vrUSyoVraPA2 86eEKW4aUDb4QmkIXbiTEx79jg1+vuBefyLt5P86MdU1lhkhiTqKnuWNZge38kDA f7JcASSv8NSnbXJ+vmDx20e0abcHN7rnVc0rdt+CfazccwFD9SF/pxGu7vWJGx79 QV1BVy0mwBuHBxglOJlITp9g/PIru5fvI+g/r8jru9djNkjzPvXZLaTntg26IGLN abxQM/ouO1DjHg== -----END CERTIFICATE-----Generated at Wed Dec 24 11:26:49 2025 by rpki-client