This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft File: RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json) Hash identifier: TWmn3spRlZXsPDiC+cpLLwSEZu9+qN0omjYbuCev/xA= Subject key identifier: FF:3B:00:D3:08:E3:BB:D3:57:FB:C8:0D:4E:9B:6C:85:78:CC:90:FF Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0 Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0 Certificate serial: 019AF208BC2B88B36710E04453337017D085 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: 6Ch2BA4EBBViUCewGb6Paaan7YI.roa (hash: WRYMr3XPQ7z0oDRXKp9hN0X+086fzEIRzfg0NuzfPNE=) 2: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: FEMXEWyqDWKUkuANPOrvUEXIDOdRTvIuZfbzYOMRCbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bc:2b:88:b3:67:10:e0:44:53:33:70:17:d0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0 Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=ff3b00d308e3bbd357fbc80d4e9b6c8578cc90ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:70:c6:b7:d2:b7:4b:d7:bd:e5:30:23:4c: cf:3f:03:e8:c3:5c:17:96:e2:9b:68:4d:a1:af:b2: d5:a7:71:90:15:ce:22:db:c7:23:25:b1:62:78:67: b3:42:27:ae:c6:da:55:5c:45:2c:41:64:31:a1:bf: 69:fc:5d:c3:25:fd:c4:ae:e4:c6:61:2e:14:83:a5: 57:c5:af:e5:01:18:9e:de:ed:ec:45:bc:37:b1:dc: 74:8f:81:b0:00:7d:26:e8:75:f5:69:39:e7:56:71: 84:c0:03:96:8c:b1:56:f7:24:60:0b:af:18:3a:1e: 67:ba:92:8c:d6:67:1b:a2:7b:92:05:70:5c:1b:b9: 47:3a:cb:78:2c:d7:61:b6:58:93:50:87:1a:7d:4c: 9c:a2:4a:47:49:dc:d1:de:c1:09:69:a2:3f:b6:4a: 33:46:54:e1:7c:97:22:2f:7d:a6:e1:50:88:0b:bc: cb:ba:d1:be:48:a2:c0:12:a4:38:9b:71:38:e2:92: 95:86:8c:fe:9e:47:28:04:20:0e:43:cb:ba:6d:77: 97:f6:1c:d5:e0:d4:4d:7a:e2:9c:8d:c1:ab:91:e0: 7a:c5:a5:99:4d:26:58:24:52:5b:db:1c:8d:71:a8: a1:e0:3b:8e:57:ef:30:56:0c:c3:c7:8d:c5:f9:76: 3f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3B:00:D3:08:E3:BB:D3:57:FB:C8:0D:4E:9B:6C:85:78:CC:90:FF X509v3 Authority Key Identifier: keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b5:3c:2d:ce:0f:5b:c4:4f:ec:8c:5f:06:39:37:58:99:10: b7:1d:fa:85:0b:e5:b0:17:81:57:7f:f8:c6:01:ed:75:d7:bc: 89:c7:af:4d:9b:d4:5d:41:cc:06:5a:a2:64:e1:cf:97:cf:eb: 21:3f:59:e3:e7:99:86:38:a3:a1:62:80:2f:b2:4d:31:99:dc: cc:3d:37:54:69:e8:4b:cc:fc:e2:61:c0:99:d8:06:7b:25:d8: cc:08:9d:f3:43:56:57:22:41:4e:eb:e4:6e:77:08:f8:3f:69: 3a:78:a4:24:dc:3e:4c:eb:ca:14:2b:1c:88:16:16:cf:12:6e: 61:9f:08:2c:44:64:2e:bf:f9:45:7d:c5:02:8f:72:33:35:3e: a4:66:f7:e5:f2:8f:2c:a1:43:17:f0:79:71:95:be:e2:79:34: 01:33:74:9b:26:6d:c3:11:fc:bf:f7:79:98:5f:1f:58:47:04: 81:d9:cc:f9:13:d3:1a:24:8c:83:c2:ba:1a:a1:1d:6c:a3:d4: 75:31:8f:3b:54:87:a5:28:5e:b2:9c:a4:7d:01:e5:94:78:99: cf:06:45:e3:d5:95:c6:90:79:09:56:b3:26:e3:fd:80:4a:73: 9d:4b:e7:bb:dc:88:93:e4:b5:bd:18:6f:cd:c7:ee:88:ad:07: 5e:62:3d:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLwriLNnEOBEUzNwF9CFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NWRmMTNkMjBmM2I1NzFhNGJhNjEwYjgxZTYzMDNkYjZk MDk5YzAwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD EyhmZjNiMDBkMzA4ZTNiYmQzNTdmYmM4MGQ0ZTliNmM4NTc4Y2M5MGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM5wxrfSt0vXveUwI0zPPwPow1wX luKbaE2hr7LVp3GQFc4i28cjJbFieGezQieuxtpVXEUsQWQxob9p/F3DJf3EruTG YS4Ug6VXxa/lARie3u3sRbw3sdx0j4GwAH0m6HX1aTnnVnGEwAOWjLFW9yRgC68Y Oh5nupKM1mcbonuSBXBcG7lHOst4LNdhtliTUIcafUycokpHSdzR3sEJaaI/tkoz RlThfJciL32m4VCIC7zLutG+SKLAEqQ4m3E44pKVhoz+nkcoBCAOQ8u6bXeX9hzV 4NRNeuKcjcGrkeB6xaWZTSZYJFJb2xyNcaih4DuOV+8wVgzDx43F+XY/owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP87ANMI47vTV/vIDU6bbIV4zJD/MB8GA1UdIwQY MBaAFERd8T0g87VxpLphC4HmMD220JnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTkt NGY1NGFkNzU1YjIwLzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTktNGY1NGFkNzU1YjIw LzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrU8Lc4P W8RP7IxfBjk3WJkQtx36hQvlsBeBV3/4xgHtdde8icevTZvUXUHMBlqiZOHPl8/r IT9Z4+eZhjijoWKAL7JNMZnczD03VGnoS8z84mHAmdgGeyXYzAid80NWVyJBTuvk bncI+D9pOnikJNw+TOvKFCsciBYWzxJuYZ8ILERkLr/5RX3FAo9yMzU+pGb35fKP LKFDF/B5cZW+4nk0ATN0myZtwxH8v/d5mF8fWEcEgdnM+RPTGiSMg8K6GqEdbKPU dTGPO1SHpShespykfQHllHiZzwZF49WVxpB5CVazJuP9gEpznUvnu9yIk+S1vRhv zcfuiK0HXmI9aA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:12 2025 by rpki-client