This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json) Hash identifier: qYqvsMVa7fd0/VwIRA4ZtBXT3guoz/R4a3Ni2Y9OCJk= Subject key identifier: 3F:D5:FC:A8:00:7C:F8:8A:94:DD:05:DD:30:A9:72:ED:D3:66:56:55 Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0 Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0 Certificate serial: 019AF12DAFED287830B6F7D49EFA8B5F6EA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:01:34 +0000 Manifest this update: Sat 06 Dec 2025 01:01:34 +0000 Manifest next update: Sun 07 Dec 2025 01:01:34 +0000 Files and hashes: 1: JlKwrg5m2lqERiKY6JmlhVBin6Y.roa (hash: BkRh9N3Osfkv0XYuGUi4VGfe9yFTNu672Q4bahAacS8=) 2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: 4A3jvpoN1gfsVCGW6qJGXVWw9fJmZh/4qY8XwMODZxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:af:ed:28:78:30:b6:f7:d4:9e:fa:8b:5f:6e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0 Validity Not Before: Dec 6 01:01:34 2025 GMT Not After : Dec 7 01:01:34 2025 GMT Subject: CN=3fd5fca8007cf88a94dd05dd30a972edd3665655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:dd:97:f7:f8:c3:7f:41:df:f9:94:00:20: 7b:e0:78:bc:b8:f7:f8:5f:32:06:35:ce:76:7c:08: 39:99:c3:82:a5:af:53:25:ea:1c:04:40:b1:b5:7d: 48:94:bf:0c:b4:63:fc:ee:46:09:87:cf:4b:f4:d7: be:75:ad:32:fe:b6:dc:50:bc:d7:1d:4f:f1:28:87: 01:1b:8a:13:7e:51:cb:18:77:27:26:85:af:2e:02: 53:0f:af:4f:91:a0:a4:65:47:66:0d:fa:b4:b7:63: 7e:b0:5c:31:6d:b6:06:21:2b:04:c1:4c:92:bb:b0: 55:a0:b0:fa:33:e4:34:b1:bc:af:d7:bc:d9:ad:53: 24:a6:a1:6c:db:90:02:49:e8:9a:b1:b3:93:73:3f: c3:ee:58:48:53:af:68:d4:d1:cb:9b:17:dd:6f:62: da:55:31:d6:a5:4c:66:e6:4c:c7:ad:42:0c:ee:a9: c7:76:b4:fd:9d:49:60:65:1e:fe:db:7e:16:d7:9e: 76:bf:6a:2b:a3:b3:d1:8e:e3:2b:33:3c:98:41:7d: ce:78:eb:20:51:70:3f:fa:ad:75:63:63:d4:f1:d0: a1:41:a2:be:a6:5c:8b:21:9b:0a:10:42:1d:20:40: a8:ac:de:0e:fc:01:ac:cb:ae:d6:79:2f:a7:6c:97: 80:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D5:FC:A8:00:7C:F8:8A:94:DD:05:DD:30:A9:72:ED:D3:66:56:55 X509v3 Authority Key Identifier: keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e4:a9:44:bd:9a:81:ae:27:cf:6b:67:33:42:5f:97:30:9c: 7f:7f:c2:13:25:63:c3:93:ff:ea:64:32:0a:a9:8a:f0:80:07: 7e:61:86:71:b8:1e:ef:ca:9c:50:d4:75:82:33:4b:64:0f:45: 7f:ed:97:83:65:1b:cc:30:76:26:f4:1d:c5:b7:aa:4d:3b:42: 9f:0e:9a:42:4e:b8:98:81:9a:1f:24:98:ff:c2:b1:48:2c:04: 31:77:48:28:7c:ac:4b:96:5a:91:71:a3:16:9d:16:11:02:13: 8c:e5:ad:78:8f:91:58:20:e6:c4:42:1c:b0:ae:66:e2:04:4d: dc:1c:41:c9:b9:a5:46:13:4d:47:8d:79:dd:3e:e2:51:3e:73: 85:c4:c5:fb:44:dc:97:c6:e3:f8:54:cd:82:34:fd:3d:be:a7: 5a:a1:9f:9b:5a:68:bc:5d:dd:ea:e6:30:a3:24:df:ac:88:3d: cc:e5:37:fe:42:8c:c8:63:d7:fa:3e:92:7c:16:ab:91:51:d5: 33:8d:b5:d1:93:be:bc:2b:94:25:b4:64:bf:48:2e:1c:52:f3: 82:10:d9:1b:3d:38:18:da:b3:38:ee:0d:36:05:f5:81:41:32: da:67:2b:68:62:81:db:f7:9b:62:4a:99:94:6f:fe:b2:2d:32: 27:98:39:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLa/tKHgwtvfUnvqLX26oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNzQ5ZWExYjk5NzliZmYyY2QzMDY2OTQ4ZjgzNWRkNTRj ZWRlYzAwHhcNMjUxMjA2MDEwMTM0WhcNMjUxMjA3MDEwMTM0WjAzMTEwLwYDVQQD EygzZmQ1ZmNhODAwN2NmODhhOTRkZDA1ZGQzMGE5NzJlZGQzNjY1NjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4zdl/f4w39B3/mUACB74Hi8uPf4 XzIGNc52fAg5mcOCpa9TJeocBECxtX1IlL8MtGP87kYJh89L9Ne+da0y/rbcULzX HU/xKIcBG4oTflHLGHcnJoWvLgJTD69PkaCkZUdmDfq0t2N+sFwxbbYGISsEwUyS u7BVoLD6M+Q0sbyv17zZrVMkpqFs25ACSeiasbOTcz/D7lhIU69o1NHLmxfdb2La VTHWpUxm5kzHrUIM7qnHdrT9nUlgZR7+234W1552v2oro7PRjuMrMzyYQX3OeOsg UXA/+q11Y2PU8dChQaK+plyLIZsKEEIdIECorN4O/AGsy67WeS+nbJeA8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/V/KgAfPiKlN0F3TCpcu3TZlZVMB8GA1UdIwQY MBaAFLN0nqG5l5v/LNMGaUj4Nd1Uzt7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hYzM3YzMtY2M0Zi00NDU2LWI5NTgt ZTM1OTA5MDE4YTMzLzEvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9hYzM3YzMtY2M0Zi00NDU2LWI5NTgtZTM1OTA5MDE4YTMz LzEvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoeSpRL2a ga4nz2tnM0JflzCcf3/CEyVjw5P/6mQyCqmK8IAHfmGGcbge78qcUNR1gjNLZA9F f+2Xg2UbzDB2JvQdxbeqTTtCnw6aQk64mIGaHySY/8KxSCwEMXdIKHysS5ZakXGj Fp0WEQITjOWteI+RWCDmxEIcsK5m4gRN3BxBybmlRhNNR4153T7iUT5zhcTF+0Tc l8bj+FTNgjT9Pb6nWqGfm1povF3d6uYwoyTfrIg9zOU3/kKMyGPX+j6SfBarkVHV M4210ZO+vCuUJbRkv0guHFLzghDZGz04GNqzOO4NNgX1gUEy2mcraGKB2/ebYkqZ lG/+si0yJ5g5MQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:48 2025 by rpki-client