This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft File: t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json) Hash identifier: Gsp1wF/GwuLyhxquhC8598PiBCelNpqXEqGulPQ5WXM= Subject key identifier: 8F:B8:CF:88:2E:BC:AA:8A:DD:33:1D:92:8C:1D:50:94:2C:9C:10:8B Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7 Certificate issuer: /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7 Certificate serial: 019AF3F7D086EBE9E00819CD727818A03C15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft Manifest number: 0665 Signing time: Sat 06 Dec 2025 14:01:35 +0000 Manifest this update: Sat 06 Dec 2025 14:01:35 +0000 Manifest next update: Sun 07 Dec 2025 14:01:35 +0000 Files and hashes: 1: CrtWfCL7i9NVihI1TfWhriARtZk.roa (hash: GvkPNrJjcp+5LqZSEnG2rMaRPFf5goGwB+oAHuiRPHA=) 2: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: vzIQRzYL62c3ivYDDHBOsWlvegZpE9QNRMmK9gndmhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:d0:86:eb:e9:e0:08:19:cd:72:78:18:a0:3c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7 Validity Not Before: Dec 6 14:01:35 2025 GMT Not After : Dec 7 14:01:35 2025 GMT Subject: CN=8fb8cf882ebcaa8add331d928c1d50942c9c108b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:55:23:f1:2b:53:6a:56:18:ef:78:6d:64:b1: 52:bc:83:80:62:94:58:15:06:15:f4:b6:1d:92:78: 1f:0e:16:19:55:ec:8a:13:97:fc:08:c8:be:e7:67: 19:41:45:bc:8e:bb:de:5f:ed:c6:13:da:a0:9b:91: 04:3e:41:d9:32:a4:6e:fd:24:68:5c:f9:9e:89:e6: 80:7d:cd:e8:97:fe:34:e8:80:6d:12:45:32:f4:3b: 08:c2:f4:62:b1:4c:f9:17:f7:a0:04:7f:83:5e:e4: 6b:f4:38:4a:00:7a:2a:19:2f:e9:79:2d:d8:06:31: e3:2b:42:e3:fc:5a:88:81:b1:e8:4a:2e:0a:e1:f7: a4:3f:d2:bf:66:15:51:b3:e2:64:4d:c9:35:1c:89: cb:f7:e8:45:76:83:a4:2e:3d:80:65:09:f2:e8:11: f2:cf:35:42:91:4b:cd:16:1f:62:f5:ad:14:a1:2e: c8:30:d3:b2:5d:b6:c5:b9:01:e1:65:ab:6a:a3:71: f2:ef:aa:5d:cb:85:54:de:0d:cc:83:f3:26:5f:b2: c2:a4:13:6a:0c:05:3d:52:a0:08:1b:ef:5c:d2:85: 33:18:58:c9:e5:c5:7e:40:88:7f:de:a5:77:8c:d6: 96:bd:48:93:ac:84:15:09:5a:50:30:0c:2e:22:fa: 01:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B8:CF:88:2E:BC:AA:8A:DD:33:1D:92:8C:1D:50:94:2C:9C:10:8B X509v3 Authority Key Identifier: keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:d1:99:cf:3b:62:20:3a:cd:7c:69:37:d9:94:f3:65:74:4c: 90:be:1b:17:59:13:71:ce:94:7f:17:11:b6:1f:63:2a:fc:8b: f5:f7:4f:bd:01:c3:ec:01:c0:8f:8c:d1:51:38:4b:0f:16:e0: 86:2d:86:a7:79:6a:90:29:8f:22:39:63:ee:a0:2f:ed:ad:78: b6:de:4a:ec:fd:d6:53:39:2c:35:07:42:1f:d3:75:db:18:83: 7b:16:cf:83:c1:ed:96:fd:dc:dd:20:17:9b:84:67:ac:2f:6d: 90:44:92:de:87:32:e4:39:2c:82:5b:93:e1:47:45:e7:ad:81: e2:38:46:9f:85:e9:60:31:10:e9:bf:b5:ee:88:65:1d:aa:26: 19:97:71:31:9e:e1:7c:e4:75:f6:5a:e5:02:64:a7:a1:0f:a7: ea:7f:06:9f:09:08:ab:42:cd:28:14:15:82:46:bd:1a:86:ac: ff:4f:7f:d7:88:17:09:0e:5e:b5:a5:0e:78:b4:92:ea:dd:26: 75:7a:a1:12:e6:26:1b:48:9b:ef:c7:c0:5b:fd:fa:b7:24:21: 98:d0:c0:36:d5:46:de:d8:ae:d1:37:8e:c2:bb:4f:10:28:7f: aa:4d:84:92:6a:ef:62:44:74:78:b3:ea:af:4c:08:03:d2:1a: 2b:b2:6a:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99CG6+ngCBnNcngYoDwVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzMwYzgzMjIxMThjODFjYTg0YmFiMWI3ZTA4OTBhOWM4 NWU5ZjcwHhcNMjUxMjA2MTQwMTM1WhcNMjUxMjA3MTQwMTM1WjAzMTEwLwYDVQQD Eyg4ZmI4Y2Y4ODJlYmNhYThhZGQzMzFkOTI4YzFkNTA5NDJjOWMxMDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01Uj8StTalYY73htZLFSvIOAYpRY FQYV9LYdkngfDhYZVeyKE5f8CMi+52cZQUW8jrveX+3GE9qgm5EEPkHZMqRu/SRo XPmeieaAfc3ol/406IBtEkUy9DsIwvRisUz5F/egBH+DXuRr9DhKAHoqGS/peS3Y BjHjK0Lj/FqIgbHoSi4K4fekP9K/ZhVRs+JkTck1HInL9+hFdoOkLj2AZQny6BHy zzVCkUvNFh9i9a0UoS7IMNOyXbbFuQHhZatqo3Hy76pdy4VU3g3Mg/MmX7LCpBNq DAU9UqAIG+9c0oUzGFjJ5cV+QIh/3qV3jNaWvUiTrIQVCVpQMAwuIvoB5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+4z4guvKqK3TMdkowdUJQsnBCLMB8GA1UdIwQY MBaAFLdzDIMiEYyByoS6sbfgiQqchen3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMzhmZDctOWU2OC00MjZiLWExMDAt MWMwZmQ4OWRiY2I0LzEvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iMzhmZDctOWU2OC00MjZiLWExMDAtMWMwZmQ4OWRiY2I0 LzEvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAudGZzzti IDrNfGk32ZTzZXRMkL4bF1kTcc6UfxcRth9jKvyL9fdPvQHD7AHAj4zRUThLDxbg hi2Gp3lqkCmPIjlj7qAv7a14tt5K7P3WUzksNQdCH9N12xiDexbPg8Htlv3c3SAX m4RnrC9tkESS3ocy5DksgluT4UdF562B4jhGn4XpYDEQ6b+17ohlHaomGZdxMZ7h fOR19lrlAmSnoQ+n6n8GnwkIq0LNKBQVgka9Goas/09/14gXCQ5etaUOeLSS6t0m dXqhEuYmG0ib78fAW/36tyQhmNDANtVG3tiu0TeOwrtPECh/qk2EkmrvYkR0eLPq r0wIA9IaK7Jqbw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:53:30 2025 by rpki-client