This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft File: m3RNp58FMac61vS68IN-k-toAbE.mft (raw, json) Hash identifier: vXyhC2Rre2QwbPJLD1C8cDf4Tx/3bO8qxTpQM5zEAP0= Subject key identifier: 04:AD:9E:E4:ED:6D:9A:53:EC:7C:4D:C5:DB:2A:7A:19:A6:7C:10:2E Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 Certificate issuer: /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1 Certificate serial: 019AF2AD58DD4CC01D04B40F336301F1DA52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft Manifest number: 31 Signing time: Sat 06 Dec 2025 08:00:37 +0000 Manifest this update: Sat 06 Dec 2025 08:00:37 +0000 Manifest next update: Sun 07 Dec 2025 08:00:37 +0000 Files and hashes: 1: 0OeNkvd-8MMdjkKEPWgT5tWh42M.roa (hash: 14QSl+lc6zLbErHcCROg/UYo6UZFnpjBPJYqshbFvSQ=) 2: FOViJa71bONBPbhwdf8cY26xpGw.roa (hash: acfz9cNHyt0g2+N/TsWc9s6Ju/Ql+2/s0NXKkyXco/4=) 3: m3RNp58FMac61vS68IN-k-toAbE.crl (hash: anp1TPZ1jRu6GMXEE5nF2vzk6ccOsG9j3sSQpJ/t+70=) 4: x_RVWVMpfqFCU9C8fHlsYzNg98Y.roa (hash: HSJMhqY1VPTAA+uSdO1W+IOvhtrhwbuUBVftKZHkGTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:58:dd:4c:c0:1d:04:b4:0f:33:63:01:f1:da:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1 Validity Not Before: Dec 6 08:00:37 2025 GMT Not After : Dec 7 08:00:37 2025 GMT Subject: CN=04ad9ee4ed6d9a53ec7c4dc5db2a7a19a67c102e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:e9:c0:d4:68:96:99:58:82:5a:62:d6:bc: 17:1b:bb:71:a0:52:96:6a:d1:c8:af:6b:0d:3a:6d: 6a:38:21:5d:b1:05:58:c5:ef:2b:3f:f8:05:bb:2a: ce:ac:62:79:7a:0b:ad:ba:6b:53:c4:a6:75:5d:cd: f2:57:5d:48:68:2b:32:16:34:d3:81:c4:64:bf:c1: b2:6e:8e:3a:12:da:76:7e:ea:75:f3:86:43:71:ff: 84:79:e4:17:93:f5:fc:1a:96:ef:06:08:48:3b:b8: 66:d9:9b:b1:92:81:c7:53:ec:5b:d0:f5:88:a4:c0: 41:4b:e0:e4:38:d6:a6:e2:2f:17:bb:e9:e7:ec:62: 31:be:49:72:88:9d:20:e6:56:a0:be:e5:c2:a8:98: 83:0e:0a:c5:df:b4:c3:93:2b:53:72:7b:d9:13:e6: 74:a4:7c:b7:5b:b5:9f:98:a5:96:14:12:63:bc:10: 8f:90:b2:29:be:e5:6f:16:91:67:18:ff:49:91:85: 35:03:5e:92:72:d7:8f:80:80:98:13:50:2f:fe:7b: eb:ee:ff:4a:80:97:be:02:c9:0e:3e:50:76:69:e0: 19:eb:e8:12:18:68:8f:48:54:08:72:1f:5d:13:ce: 83:8b:58:c7:d3:c4:fa:e3:e8:b0:7c:72:09:70:7f: d8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AD:9E:E4:ED:6D:9A:53:EC:7C:4D:C5:DB:2A:7A:19:A6:7C:10:2E X509v3 Authority Key Identifier: keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:62:49:f4:ec:06:67:a1:cf:70:00:d0:50:46:db:27:53:26: 32:9f:b9:26:a3:51:f2:b9:91:98:41:01:d2:95:d2:0c:6b:54: 3f:03:aa:a8:95:d7:e5:35:7d:53:ea:58:ea:5a:c3:e0:c3:71: 87:e1:3a:d8:a0:2d:b9:d5:56:01:13:e6:db:9b:69:4b:0d:a4: c5:bf:bf:bc:21:81:f8:6f:cc:d1:3a:91:30:d4:55:16:f9:9e: bd:dd:f4:11:32:f0:f8:53:38:c5:96:f7:8d:0d:c5:b5:aa:83: 9f:07:23:48:ee:b1:f5:aa:ec:a3:01:08:76:58:bd:18:5e:1f: b9:ef:45:af:89:f2:ab:a6:69:a0:97:00:ea:f2:b4:3f:d6:55: 0f:0b:1b:17:b8:b3:6a:70:ab:01:44:7f:7e:76:6b:c8:a4:99: 1c:25:e7:34:83:d0:e4:8f:08:80:28:f2:1e:bf:20:62:ba:be: ed:f5:30:d3:3b:f5:32:52:7f:7d:b7:da:80:38:1d:4e:f9:4f: 87:47:c9:c9:e5:63:fe:42:b3:74:24:6d:73:05:f7:29:37:2f: 09:07:3a:fb:af:02:46:ef:c9:f0:ca:3d:8d:1a:7d:8a:05:9c: 3e:39:1f:42:61:c4:cd:bd:aa:53:01:a9:3d:db:25:cc:14:2d: f8:05:5d:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVjdTMAdBLQPM2MB8dpSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNzQ0ZGE3OWYwNTMxYTczYWQ2ZjRiYWYwODM3ZTkzZWI2 ODAxYjEwHhcNMjUxMjA2MDgwMDM3WhcNMjUxMjA3MDgwMDM3WjAzMTEwLwYDVQQD EygwNGFkOWVlNGVkNmQ5YTUzZWM3YzRkYzVkYjJhN2ExOWE2N2MxMDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfzpwNRolplYglpi1rwXG7txoFKW atHIr2sNOm1qOCFdsQVYxe8rP/gFuyrOrGJ5egutumtTxKZ1Xc3yV11IaCsyFjTT gcRkv8Gybo46Etp2fup184ZDcf+EeeQXk/X8GpbvBghIO7hm2ZuxkoHHU+xb0PWI pMBBS+DkONam4i8Xu+nn7GIxvklyiJ0g5lagvuXCqJiDDgrF37TDkytTcnvZE+Z0 pHy3W7WfmKWWFBJjvBCPkLIpvuVvFpFnGP9JkYU1A16SctePgICYE1Av/nvr7v9K gJe+AskOPlB2aeAZ6+gSGGiPSFQIch9dE86Di1jH08T64+iwfHIJcH/YSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAStnuTtbZpT7HxNxdsqehmmfBAuMB8GA1UdIwQY MBaAFJt0TaefBTGnOtb0uvCDfpPraAGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNSTnA1OEZNYWM2MXZTNjhJTi1rLXRvQWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zYjE3NDItMzA3NS00Y2M5LThlOGUt OTJhYjgwZTJlZmQ1LzEvbTNSTnA1OEZNYWM2MXZTNjhJTi1rLXRvQWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zYjE3NDItMzA3NS00Y2M5LThlOGUtOTJhYjgwZTJlZmQ1 LzEvbTNSTnA1OEZNYWM2MXZTNjhJTi1rLXRvQWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmJJ9OwG Z6HPcADQUEbbJ1MmMp+5JqNR8rmRmEEB0pXSDGtUPwOqqJXX5TV9U+pY6lrD4MNx h+E62KAtudVWARPm25tpSw2kxb+/vCGB+G/M0TqRMNRVFvmevd30ETLw+FM4xZb3 jQ3FtaqDnwcjSO6x9arsowEIdli9GF4fue9Fr4nyq6ZpoJcA6vK0P9ZVDwsbF7iz anCrAUR/fnZryKSZHCXnNIPQ5I8IgCjyHr8gYrq+7fUw0zv1MlJ/fbfagDgdTvlP h0fJyeVj/kKzdCRtcwX3KTcvCQc6+68CRu/J8Mo9jRp9igWcPjkfQmHEzb2qUwGp PdslzBQt+AVdXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:03 2025 by rpki-client