This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json) Hash identifier: PZOl1P+UiHpGA/w8yHOCgz4NDOBp8vCA5ve3IQPfn6c= Subject key identifier: 45:CF:AA:37:4F:C2:48:DE:BB:63:D8:C2:EF:65:CA:CA:70:F1:82:CF Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e Certificate serial: 019AF23F7B240C12D7B477C0ED06414FD672 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 06:00:37 +0000 Manifest this update: Sat 06 Dec 2025 06:00:37 +0000 Manifest next update: Sun 07 Dec 2025 06:00:37 +0000 Files and hashes: 1: 1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa (hash: eIRoaJMdc/l4AU70hG0PC/LPtYaLw4xgou2xPhRFPhE=) 2: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: 04nWuhFkMoa7tm2K6BhuogJzpVHLQDxXMMxC60cVFAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7b:24:0c:12:d7:b4:77:c0:ed:06:41:4f:d6:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e Validity Not Before: Dec 6 06:00:37 2025 GMT Not After : Dec 7 06:00:37 2025 GMT Subject: CN=45cfaa374fc248debb63d8c2ef65caca70f182cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:41:79:1e:ae:73:1e:00:ea:bb:c1:9c:4a: 1b:c2:1f:c1:59:a9:60:1c:e2:91:64:71:7e:a2:3f: bd:7e:fa:a5:32:96:ed:fd:2b:7e:40:40:28:bb:9e: 42:d7:52:3a:bc:16:46:f6:44:0e:13:cf:ad:d4:fd: 62:b2:23:d9:fd:a8:a4:56:7d:e2:66:21:11:9a:b2: 7f:1f:ed:e8:0c:15:3b:65:b3:e6:5f:9c:04:e5:80: 0b:a7:c5:58:48:96:70:2e:1f:82:55:ed:a0:6d:0d: 3c:57:10:c6:53:45:2c:c3:5f:e8:17:6c:95:6e:03: 91:9b:79:34:40:96:d6:12:ef:7d:9b:ae:80:4d:ad: da:f2:2d:5c:f8:13:e6:95:5b:66:47:48:53:1b:0c: ee:0e:71:39:f6:e2:39:d6:4c:a3:5f:87:60:27:a2: fb:57:2c:15:ed:c8:6e:39:98:b1:8d:3a:61:d9:3e: e6:1b:43:87:9a:a2:62:46:41:e3:f1:c5:0a:5e:08: c0:4c:4e:40:a8:a3:cd:4a:fa:5f:72:9f:f5:67:25: 1d:1a:ba:4a:fd:3e:37:d7:31:ec:d4:dc:65:95:04: 53:73:26:b0:4f:65:92:ec:8e:b6:f0:d1:89:5c:67: 9b:60:3c:9f:a1:6c:1f:a6:12:75:84:41:b2:b2:8d: c6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CF:AA:37:4F:C2:48:DE:BB:63:D8:C2:EF:65:CA:CA:70:F1:82:CF X509v3 Authority Key Identifier: keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:86:43:e4:12:1b:da:c2:f3:7d:57:b1:62:5a:15:d6:c6:e3: 0b:d2:1c:1d:02:99:3b:dd:a9:9f:d0:7b:db:89:68:2f:c6:08: 70:03:af:53:da:9e:f1:21:d8:7b:1f:d7:cb:67:31:60:78:05: 97:62:c3:f6:09:23:91:6f:de:9a:00:ce:f1:9a:a4:81:61:94: 8d:74:9d:0f:d3:cc:c4:dc:e5:56:e4:d0:3a:8e:30:b6:95:20: 7b:1d:82:5a:6e:06:3e:c3:e4:34:8f:a2:9e:d7:be:08:74:13: c4:1f:9c:e7:f7:20:68:d5:f9:9e:2d:f0:dd:6f:c3:8e:12:18: 3b:d3:14:39:1d:0a:54:10:49:ad:fa:33:ab:12:21:7e:47:bb: d6:c7:2b:b2:1a:8b:5d:64:ba:3a:59:07:50:a5:c2:43:38:f9: 8f:36:01:81:7b:9e:dd:0f:98:48:29:c3:0c:5b:6e:f3:75:2d: 8b:6c:3c:09:3d:9d:07:9a:12:61:43:ab:39:85:a5:c4:97:2a: 64:22:b7:d8:bf:c8:e5:42:75:ee:f6:85:7a:20:1c:59:6e:e1: 1b:43:50:36:75:c9:0b:ed:38:40:90:fc:24:31:69:41:0f:5d: e6:32:6f:8a:ab:8f:31:6f:60:43:2e:7a:e3:98:a0:44:87:06: b3:34:0b:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3skDBLXtHfA7QZBT9ZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2I0YTA1NGE3MjFhMGZkYTYwMTI5MDdjYzViNTZlODEy MGE3M2UwHhcNMjUxMjA2MDYwMDM3WhcNMjUxMjA3MDYwMDM3WjAzMTEwLwYDVQQD Eyg0NWNmYWEzNzRmYzI0OGRlYmI2M2Q4YzJlZjY1Y2FjYTcwZjE4MmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6dBeR6ucx4A6rvBnEobwh/BWalg HOKRZHF+oj+9fvqlMpbt/St+QEAou55C11I6vBZG9kQOE8+t1P1isiPZ/aikVn3i ZiERmrJ/H+3oDBU7ZbPmX5wE5YALp8VYSJZwLh+CVe2gbQ08VxDGU0Usw1/oF2yV bgORm3k0QJbWEu99m66ATa3a8i1c+BPmlVtmR0hTGwzuDnE59uI51kyjX4dgJ6L7 VywV7chuOZixjTph2T7mG0OHmqJiRkHj8cUKXgjATE5AqKPNSvpfcp/1ZyUdGrpK /T431zHs1NxllQRTcyawT2WS7I628NGJXGebYDyfoWwfphJ1hEGyso3GKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXPqjdPwkjeu2PYwu9lyspw8YLPMB8GA1UdIwQY MBaAFGt7SgVKchoP2mASkHzFtW6BIKc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YWJlMWQtMzAzNi00MmI4LWJlMzYt ZTc5OWVmNTRmMGM0LzEvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80YWJlMWQtMzAzNi00MmI4LWJlMzYtZTc5OWVmNTRmMGM0 LzEvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIZD5BIb 2sLzfVexYloV1sbjC9IcHQKZO92pn9B724loL8YIcAOvU9qe8SHYex/Xy2cxYHgF l2LD9gkjkW/emgDO8ZqkgWGUjXSdD9PMxNzlVuTQOo4wtpUgex2CWm4GPsPkNI+i nte+CHQTxB+c5/cgaNX5ni3w3W/DjhIYO9MUOR0KVBBJrfozqxIhfke71scrshqL XWS6OlkHUKXCQzj5jzYBgXue3Q+YSCnDDFtu83Uti2w8CT2dB5oSYUOrOYWlxJcq ZCK32L/I5UJ17vaFeiAcWW7hG0NQNnXJC+04QJD8JDFpQQ9d5jJviquPMW9gQy56 45igRIcGszQLkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:49 2025 by rpki-client