This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json) Hash identifier: x/WTFyy275S9e5yhjU2VnchIuNjazKteNPfOv7RMo1E= Subject key identifier: DF:15:C4:02:79:C4:73:51:B7:F1:19:16:A0:04:85:F6:32:6C:01:E6 Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33 Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933 Certificate serial: 019AF12D08AFE9D3947EB9DAA818DA3961B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:00:51 +0000 Manifest this update: Sat 06 Dec 2025 01:00:51 +0000 Manifest next update: Sun 07 Dec 2025 01:00:51 +0000 Files and hashes: 1: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: EfIF+hv2cMQ8YI/ejrXLN+kT7vXvQ/gF137uyqIvVNw=) 2: zwiEAg55TtHyIaM_PRVFnX4DSAo.roa (hash: ylKaMThBpY1ZvZheIftHUUCXqnEHukLo3wFRWG0DpZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:08:af:e9:d3:94:7e:b9:da:a8:18:da:39:61:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af782dae3d40caf2223262541c4054e62945d933 Validity Not Before: Dec 6 01:00:51 2025 GMT Not After : Dec 7 01:00:51 2025 GMT Subject: CN=df15c40279c47351b7f11916a00485f6326c01e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:16:89:e6:e3:ea:c0:39:d3:dd:3c:44:71:48: 39:da:f7:c5:1b:24:0f:31:85:52:54:a4:c1:cd:52: ac:bf:54:8e:d0:ce:c4:30:f2:0c:b4:67:ec:4d:00: ee:77:e4:5c:ec:bb:db:ae:b5:8d:48:02:c9:0d:e3: 07:a3:4c:93:cf:99:4d:a9:ae:33:30:d1:08:b7:01: a2:35:e9:76:be:42:08:91:64:f9:a0:df:06:6d:1f: 9f:95:21:17:35:6a:73:c2:23:cc:3e:29:91:c1:f6: ee:ec:2c:f2:39:50:39:96:dd:67:7f:a5:18:29:0c: 5b:ca:7c:fd:44:8c:19:d8:8b:5b:39:d6:a7:49:5d: 01:dd:b1:43:07:5c:91:ba:c6:75:4d:a9:80:45:d4: e4:3a:dd:53:36:1e:0a:07:a7:73:40:f1:5c:54:be: 75:de:62:6d:d8:c5:4f:0f:fd:fb:f2:90:e7:76:72: ac:f4:83:af:02:63:8a:70:89:58:3b:22:1e:b7:f2: c1:10:a8:45:74:7a:be:17:48:ec:22:eb:5b:6f:56: 9d:0a:0a:29:c8:96:b8:f1:6a:be:10:b2:37:28:31: 42:9b:e9:74:44:98:30:9d:75:16:17:cf:9c:50:1f: f6:41:15:e5:37:8a:2d:7e:c5:7a:49:b5:09:f2:71: c4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:15:C4:02:79:C4:73:51:B7:F1:19:16:A0:04:85:F6:32:6C:01:E6 X509v3 Authority Key Identifier: keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:93:38:c0:02:76:dc:1b:d4:85:ae:a1:c7:0b:4c:a4:25:f7: 29:65:ef:6e:d4:26:ac:51:83:ab:25:e0:ab:fe:25:66:b6:44: e2:ff:df:aa:cc:f9:c6:f0:e2:8b:08:f6:54:74:09:d0:73:d3: 68:7d:23:e2:ac:6b:dc:dc:30:b7:db:7c:07:8f:c6:cc:79:de: 7d:df:d2:2e:1d:52:98:dd:7e:3a:45:97:5c:76:99:79:8e:2b: f2:b8:76:73:f0:92:b7:38:58:a2:c0:1c:d9:45:66:3c:83:3a: b3:d0:fd:70:af:29:42:91:ec:8e:d6:f4:3e:7c:e0:c9:cb:d8: 21:ba:4b:a9:06:16:21:83:e6:60:3f:7d:b8:84:c6:a0:33:d5: 42:3b:64:42:50:36:d9:2d:d8:68:d7:57:e5:b2:08:96:97:53: cf:dc:39:a5:ff:82:dd:1a:14:8e:b8:48:3e:a9:94:35:98:fa: de:83:60:73:21:3c:bf:53:42:cc:e6:de:7c:82:39:e6:0e:09: 4c:44:b7:cf:1c:d5:0d:84:80:ce:8f:72:c6:30:d4:4a:bb:a4: b1:e6:7f:a1:33:d3:50:18:f8:66:e0:79:19:f5:4e:8a:4a:b0: 0e:6e:41:ef:be:26:ce:1f:7d:f7:b3:0d:1f:5f:a5:e9:bf:87: 0f:34:3f:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQiv6dOUfrnaqBjaOWGxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzgyZGFlM2Q0MGNhZjIyMjMyNjI1NDFjNDA1NGU2Mjk0 NWQ5MzMwHhcNMjUxMjA2MDEwMDUxWhcNMjUxMjA3MDEwMDUxWjAzMTEwLwYDVQQD EyhkZjE1YzQwMjc5YzQ3MzUxYjdmMTE5MTZhMDA0ODVmNjMyNmMwMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBaJ5uPqwDnT3TxEcUg52vfFGyQP MYVSVKTBzVKsv1SO0M7EMPIMtGfsTQDud+Rc7LvbrrWNSALJDeMHo0yTz5lNqa4z MNEItwGiNel2vkIIkWT5oN8GbR+flSEXNWpzwiPMPimRwfbu7CzyOVA5lt1nf6UY KQxbynz9RIwZ2ItbOdanSV0B3bFDB1yRusZ1TamARdTkOt1TNh4KB6dzQPFcVL51 3mJt2MVPD/378pDndnKs9IOvAmOKcIlYOyIet/LBEKhFdHq+F0jsIutbb1adCgop yJa48Wq+ELI3KDFCm+l0RJgwnXUWF8+cUB/2QRXlN4otfsV6SbUJ8nHEqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8VxAJ5xHNRt/EZFqAEhfYybAHmMB8GA1UdIwQY MBaAFK94La49QMryIjJiVBxAVOYpRdkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kZWU4MzMtZmU1Yi00YzEwLWJiZWMt ZjAxMjVkMDJlMjYyLzEvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kZWU4MzMtZmU1Yi00YzEwLWJiZWMtZjAxMjVkMDJlMjYy LzEvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvJM4wAJ2 3BvUha6hxwtMpCX3KWXvbtQmrFGDqyXgq/4lZrZE4v/fqsz5xvDiiwj2VHQJ0HPT aH0j4qxr3Nwwt9t8B4/GzHnefd/SLh1SmN1+OkWXXHaZeY4r8rh2c/CStzhYosAc 2UVmPIM6s9D9cK8pQpHsjtb0PnzgycvYIbpLqQYWIYPmYD99uITGoDPVQjtkQlA2 2S3YaNdX5bIIlpdTz9w5pf+C3RoUjrhIPqmUNZj63oNgcyE8v1NCzObefII55g4J TES3zxzVDYSAzo9yxjDUSrukseZ/oTPTUBj4ZuB5GfVOikqwDm5B774mzh9997MN H1+l6b+HDzQ/KA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:02 2025 by rpki-client