This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft (raw, json) Hash identifier: Mbcf5tXRZTot4WGYcKqdU1CP2N9u4i1cI25uKoYm36Q= Subject key identifier: A5:7B:9B:C3:93:E1:B6:A7:85:47:AD:97:43:B7:91:89:81:6E:28:DC Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32 Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32 Certificate serial: 019B608A89F7ABE54E149C2668EF540C649D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft Manifest number: 0376 Signing time: Sat 27 Dec 2025 16:00:50 +0000 Manifest this update: Sat 27 Dec 2025 16:00:50 +0000 Manifest next update: Sun 28 Dec 2025 16:00:50 +0000 Files and hashes: 1: JY1Ry82sD4kNWhz4gQuDnSIFpN8.roa (hash: 8elrrlaE2J0H4bGnc8sBg7PwEFKBgdvohUzIrvCFh2E=) 2: h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl (hash: IWvBdJu4RX/hliVsrj+FvcG5F46w/kT7ChKkVXNz20U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:8a:89:f7:ab:e5:4e:14:9c:26:68:ef:54:0c:64:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32 Validity Not Before: Dec 27 16:00:50 2025 GMT Not After : Dec 28 16:00:50 2025 GMT Subject: CN=a57b9bc393e1b6a78547ad9743b79189816e28dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:57:2c:88:27:6f:38:06:82:1b:8b:99:88:1b: 0d:6c:45:cb:04:a5:9f:c4:46:15:bb:7e:c9:0c:f0: c6:86:ee:eb:db:01:3d:7d:f3:dc:6d:4f:38:c1:c4: b6:c4:f5:93:63:4b:0c:6a:9c:7b:90:59:fe:38:cd: ca:27:bf:ca:c0:05:92:e0:23:77:b1:f9:26:48:55: 2c:f6:14:da:d2:83:1a:c3:ce:d0:9a:2d:5a:b0:fb: 16:53:c1:fb:63:d9:59:fd:7c:94:56:b1:bc:94:f7: 5b:4a:90:dc:c8:c5:d9:77:71:00:86:fe:2a:07:df: 1d:45:1d:6d:1f:cc:f4:29:4c:17:9f:7c:62:41:a9: 7f:45:14:98:ac:b2:69:54:bc:3d:3f:00:7c:ef:a6: ed:0f:cb:c5:3f:0b:76:f2:72:48:86:b3:d1:45:3d: e4:59:01:f2:c9:15:93:29:e6:40:98:6d:76:db:a0: 34:43:e2:e2:e6:f8:7d:71:eb:91:e0:4e:cc:39:26: f3:40:f9:bc:20:b1:d9:52:b2:cb:48:ea:a2:56:f0: 22:91:f3:2c:63:c2:e3:56:5f:92:02:29:c6:8a:0e: 0c:4f:1d:85:6a:82:b2:24:30:f7:58:2c:ff:b3:a1: 10:8d:53:24:f5:01:1a:28:a3:7e:02:c7:9d:3b:6d: fc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7B:9B:C3:93:E1:B6:A7:85:47:AD:97:43:B7:91:89:81:6E:28:DC X509v3 Authority Key Identifier: keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ef:7c:34:15:f9:47:0e:60:c4:f5:a2:d1:68:3f:51:b2:56: 8f:8b:d1:3e:d3:2c:25:b0:fd:6d:eb:56:d1:04:52:00:da:b1: 44:4d:b2:fe:3e:64:45:d1:56:53:90:c5:8a:0d:6c:1b:d1:ed: fa:6f:65:76:88:f7:a3:3d:45:84:24:06:7a:82:3c:26:7f:bc: 67:04:47:2b:c6:47:3b:3d:b4:c7:f7:41:46:08:01:d2:3c:ec: b5:ef:cf:71:c8:98:50:b9:fd:a4:64:14:ee:d3:0e:a4:82:d8: e2:b7:c5:c0:bc:dc:4a:cf:f9:9f:f3:77:06:06:29:ca:b6:83: 2f:9a:cf:e7:79:e8:0b:eb:ca:87:ee:c1:07:73:b8:2e:74:50: 2a:25:fe:df:86:91:03:ba:ae:a8:24:4c:8c:e7:83:f0:92:bb: 8a:7d:93:0f:0b:7a:4d:cc:01:67:a9:23:f8:0e:f8:a2:7d:ad: 06:c5:ed:b9:a3:38:cc:31:b2:2b:61:fb:06:54:62:11:7c:c3: 5d:75:05:aa:22:f8:02:ab:e5:ff:d5:ae:74:e5:cc:21:bd:97: e8:de:43:f2:dc:9a:d0:1a:25:06:76:a1:64:da:c1:b1:06:80: c9:ad:66:52:25:36:76:47:3c:a3:18:cb:fb:cd:5b:b6:f5:69: 83:a9:34:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgion3q+VOFJwmaO9UDGSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzVlNjQwOGI4ZTA1YWE5MTRiODc0NjM1YTQ3YjdiODIw YzZjMzIwHhcNMjUxMjI3MTYwMDUwWhcNMjUxMjI4MTYwMDUwWjAzMTEwLwYDVQQD EyhhNTdiOWJjMzkzZTFiNmE3ODU0N2FkOTc0M2I3OTE4OTgxNmUyOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VcsiCdvOAaCG4uZiBsNbEXLBKWf xEYVu37JDPDGhu7r2wE9ffPcbU84wcS2xPWTY0sMapx7kFn+OM3KJ7/KwAWS4CN3 sfkmSFUs9hTa0oMaw87Qmi1asPsWU8H7Y9lZ/XyUVrG8lPdbSpDcyMXZd3EAhv4q B98dRR1tH8z0KUwXn3xiQal/RRSYrLJpVLw9PwB876btD8vFPwt28nJIhrPRRT3k WQHyyRWTKeZAmG1226A0Q+Li5vh9ceuR4E7MOSbzQPm8ILHZUrLLSOqiVvAikfMs Y8LjVl+SAinGig4MTx2FaoKyJDD3WCz/s6EQjVMk9QEaKKN+AsedO238HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKV7m8OT4banhUetl0O3kYmBbijcMB8GA1UdIwQY MBaAFId15kCLjgWqkUuHRjWke3uCDGwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDct NjFlNTRjZmMyYWJjLzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDctNjFlNTRjZmMyYWJj LzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKu98NBX5 Rw5gxPWi0Wg/UbJWj4vRPtMsJbD9betW0QRSANqxRE2y/j5kRdFWU5DFig1sG9Ht +m9ldoj3oz1FhCQGeoI8Jn+8ZwRHK8ZHOz20x/dBRggB0jzste/PcciYULn9pGQU 7tMOpILY4rfFwLzcSs/5n/N3BgYpyraDL5rP53noC+vKh+7BB3O4LnRQKiX+34aR A7quqCRMjOeD8JK7in2TDwt6TcwBZ6kj+A74on2tBsXtuaM4zDGyK2H7BlRiEXzD XXUFqiL4Aqvl/9WudOXMIb2X6N5D8tya0BolBnahZNrBsQaAya1mUiU2dkc8oxjL +81btvVpg6k0hg== -----END CERTIFICATE-----Generated at Sat Dec 27 17:36:23 2025 by rpki-client