This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft File: R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json) Hash identifier: /uVhZZUrIhzLJDps+VnJcDDLPGsfTuCBbQBUgH0aUic= Subject key identifier: B9:A9:CC:7D:5E:31:8A:06:B5:DC:31:C0:85:3E:82:B8:4F:53:8A:D4 Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f Certificate serial: 019AF23FE21653327180067B9F9680EEB96B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: K4szTGDgWu8YAkp3B3AunTFhsNY.roa (hash: ZlMWPu4zKIGTz35MfDokFAisIKFFE+qRN3bSmh9wdso=) 2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: Vpmoi5uvgIU6OOUMhkDP33Lx3CuTdK4VSiNYwBggnVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e2:16:53:32:71:80:06:7b:9f:96:80:ee:b9:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=b9a9cc7d5e318a06b5dc31c0853e82b84f538ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:64:e4:8b:b9:3d:ff:46:15:12:c0:f3:77: 45:f6:d0:45:ec:ee:2a:63:db:6e:e1:17:5b:47:3a: d1:69:9d:5f:90:e7:f6:6a:41:df:32:99:2e:03:ea: dd:72:db:83:20:8f:b1:45:ec:a5:9e:92:7b:23:26: 6c:5b:e6:1e:49:33:32:8c:7e:62:57:ff:b5:2b:32: 35:18:74:6e:e7:7e:a4:8c:23:9c:7c:5f:bc:2f:b9: 5d:52:1b:3b:21:61:3a:19:ad:6a:6c:30:cc:c4:77: 66:a8:b0:ef:8a:90:08:3c:ca:4c:71:de:5e:f0:80: da:36:fc:32:d3:47:03:51:01:84:6d:5e:ab:21:d6: 44:0b:7c:ee:5d:6a:26:ed:f1:49:e3:b3:b0:46:79: d6:05:7c:b5:5c:65:71:3e:3a:7f:5c:f0:91:38:de: aa:e5:a7:a2:5a:5c:2d:77:f8:b9:be:9a:78:5e:31: 0d:96:b8:b4:f6:00:ad:4a:3c:19:39:7f:bb:39:a1: a5:9d:e0:43:ed:61:cc:5e:5c:6c:b8:bb:ef:f2:0a: be:5d:36:4d:aa:40:f5:15:10:7b:42:55:fb:b6:7d: b8:f2:00:a4:5a:d6:84:52:8e:37:53:68:a4:ff:9a: 76:a5:98:2e:9a:98:61:57:f3:3c:d4:11:85:d3:73: 0b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A9:CC:7D:5E:31:8A:06:B5:DC:31:C0:85:3E:82:B8:4F:53:8A:D4 X509v3 Authority Key Identifier: keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:19:56:cc:e8:53:97:d7:81:35:e9:64:f1:79:33:c6:64:24: 42:d5:dc:22:a8:75:15:94:8f:be:9e:ff:1c:3b:a3:75:30:ba: d2:be:00:f4:4f:04:95:c0:20:ee:ce:cf:0c:0f:d5:c7:76:86: 2f:31:e0:8c:63:f6:5a:d5:f2:dd:3c:30:78:92:c5:93:bf:8e: 9b:a1:54:21:49:73:46:72:e8:23:50:87:4c:5a:6a:b1:32:43: de:7d:c5:e2:51:ee:d3:38:eb:85:57:30:a4:7d:8f:f0:8e:9b: 74:bc:92:83:45:49:ac:92:c6:ef:5f:89:d1:78:77:89:9c:f5: 2f:ab:65:bb:f1:b4:c7:02:41:3a:a2:73:f9:2e:ac:bf:81:87: 96:07:4a:22:0e:24:8f:0d:d5:98:d4:8b:84:66:47:64:ae:bd: 36:af:98:6b:c0:7f:e4:8a:07:7a:6f:63:bc:67:1a:90:c0:c1: d6:8d:69:01:30:a8:21:0a:72:53:88:c3:4d:0c:f0:55:b6:27: ba:6e:1d:9c:bd:1b:bc:d0:b3:3c:1b:71:75:97:5a:fa:c4:fa: bd:da:32:ad:61:ba:6a:1a:f9:65:6a:0a:f0:ce:46:37:97:f0: b4:d1:df:e2:54:95:17:74:6d:62:77:91:ae:e2:90:43:f8:0a: 8f:22:5e:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+IWUzJxgAZ7n5aA7rlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzQxZTdjNzU4ZDQ4MDQxM2I1ZjFiMDA2MDYxMTI5N2U0 NDAzNmYwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD EyhiOWE5Y2M3ZDVlMzE4YTA2YjVkYzMxYzA4NTNlODJiODRmNTM4YWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuThk5Iu5Pf9GFRLA83dF9tBF7O4q Y9tu4RdbRzrRaZ1fkOf2akHfMpkuA+rdctuDII+xReylnpJ7IyZsW+YeSTMyjH5i V/+1KzI1GHRu536kjCOcfF+8L7ldUhs7IWE6Ga1qbDDMxHdmqLDvipAIPMpMcd5e 8IDaNvwy00cDUQGEbV6rIdZEC3zuXWom7fFJ47OwRnnWBXy1XGVxPjp/XPCRON6q 5aeiWlwtd/i5vpp4XjENlri09gCtSjwZOX+7OaGlneBD7WHMXlxsuLvv8gq+XTZN qkD1FRB7QlX7tn248gCkWtaEUo43U2ik/5p2pZgumphhV/M81BGF03MLAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmpzH1eMYoGtdwxwIU+grhPU4rUMB8GA1UdIwQY MBaAFEd0Hnx1jUgEE7XxsAYGESl+RANvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81MDI5NGQtOGNjNS00OWQzLTkzMTIt NzI3YjFiNTgzZWI2LzEvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy81MDI5NGQtOGNjNS00OWQzLTkzMTItNzI3YjFiNTgzZWI2 LzEvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxlWzOhT l9eBNelk8XkzxmQkQtXcIqh1FZSPvp7/HDujdTC60r4A9E8ElcAg7s7PDA/Vx3aG LzHgjGP2WtXy3TwweJLFk7+Om6FUIUlzRnLoI1CHTFpqsTJD3n3F4lHu0zjrhVcw pH2P8I6bdLySg0VJrJLG71+J0Xh3iZz1L6tlu/G0xwJBOqJz+S6sv4GHlgdKIg4k jw3VmNSLhGZHZK69Nq+Ya8B/5IoHem9jvGcakMDB1o1pATCoIQpyU4jDTQzwVbYn um4dnL0bvNCzPBtxdZda+sT6vdoyrWG6ahr5ZWoK8M5GN5fwtNHf4lSVF3RtYneR ruKQQ/gKjyJerg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:34:46 2025 by rpki-client