This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft File: 1-3R7GNuDDz6-M4b8n8jaldkyetg.mft (raw, json) Hash identifier: RTF+ODX3/dj4UcL8JhWXbHRSBl3n4Puxj9QTJPigcc0= Subject key identifier: E5:D4:FF:A9:B8:1E:43:5D:D0:4B:47:2C:BD:12:AE:17:08:AE:30:98 Authority key identifier: FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8 Certificate issuer: /CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8 Certificate serial: 019AF277460EBF05F80066EAF3FBFEE23235 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft Manifest number: 0372 Signing time: Sat 06 Dec 2025 07:01:34 +0000 Manifest this update: Sat 06 Dec 2025 07:01:34 +0000 Manifest next update: Sun 07 Dec 2025 07:01:34 +0000 Files and hashes: 1: 1-3R7GNuDDz6-M4b8n8jaldkyetg.crl (hash: sNAGpf25e4Z43A+cgWWtorZJUSluifl+Yn0uhH1EAt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:46:0e:bf:05:f8:00:66:ea:f3:fb:fe:e2:32:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8 Validity Not Before: Dec 6 07:01:34 2025 GMT Not After : Dec 7 07:01:34 2025 GMT Subject: CN=e5d4ffa9b81e435dd04b472cbd12ae1708ae3098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e4:e5:36:00:8f:1e:ea:ec:c8:4a:ae:77:8f: 0e:a6:a8:d1:ce:52:60:b0:3e:18:65:09:a7:62:f9: c9:2a:76:b6:9c:d6:89:f8:0e:c5:1b:83:78:de:c1: 98:69:53:79:5f:a9:2b:b8:a9:94:26:ca:44:58:da: e0:16:5f:16:d6:7f:64:a6:0f:66:1e:f7:d5:b0:8b: e5:35:60:66:d4:e3:0f:ce:68:82:db:d8:5b:16:c8: 8d:72:c0:0a:e6:d7:fc:fc:20:92:a2:92:c4:d3:73: d7:b0:f7:ad:55:12:ed:19:a1:a2:59:be:e0:db:32: 17:72:98:a6:c6:80:49:63:e8:5b:5e:ac:0c:36:7c: 7a:37:9a:b3:07:cc:69:57:93:49:53:60:b8:0e:21: 29:a3:2e:8d:ab:97:c7:a3:92:06:89:d0:5d:58:bb: cd:72:7b:f4:56:b1:c8:8b:60:2b:0f:9c:0a:5c:38: fa:5a:bc:5e:c1:4d:43:85:87:d0:c9:aa:73:c8:04: 54:60:c6:c9:61:1f:d8:36:40:1a:15:ff:2f:57:ab: 7a:23:c8:71:85:b8:de:f6:63:a5:11:6f:59:04:cb: 09:60:46:47:8d:21:17:87:71:72:b6:5f:22:29:87: 65:f2:25:57:18:a3:20:3c:79:10:9c:9c:bf:ab:c1: 60:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D4:FF:A9:B8:1E:43:5D:D0:4B:47:2C:BD:12:AE:17:08:AE:30:98 X509v3 Authority Key Identifier: keyid:FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1a:f3:d5:d3:c4:1b:46:91:d8:c8:6a:93:eb:8a:c4:76:d8: 10:52:e7:12:5e:7c:1a:af:23:79:3c:e8:74:d8:4e:12:65:c8: 77:8f:c8:a1:8a:5f:7b:e3:a2:98:2d:5f:03:3f:15:78:aa:0d: 4e:e1:d5:69:a9:54:cc:24:bb:be:e1:af:cb:79:ee:29:4e:18: d0:ab:17:36:7a:1c:48:c0:28:9f:b1:c4:3f:fe:65:c3:82:80: 84:f8:4e:ef:05:8f:61:8f:99:f4:a4:f8:b1:cf:45:10:23:16: 97:9b:15:f9:e6:92:a9:4b:8c:b5:14:80:14:8d:81:4b:ef:a0: d0:6b:c9:2d:49:35:db:9b:d3:74:0c:ca:e0:7d:94:a3:9d:48: 7d:59:fc:37:a6:52:eb:6f:1d:e5:19:70:df:3c:64:61:fe:b1: 43:49:fe:55:e8:ce:f3:db:6d:64:9b:9d:e3:75:ba:93:1b:34: 94:f7:de:6d:f4:26:97:55:6a:9f:da:c1:73:66:05:c3:37:f0: 59:7e:16:54:62:f7:91:56:de:7c:36:3f:0e:13:d6:34:67:72: 21:82:63:60:fa:d3:dd:52:a6:c5:76:01:17:3e:c6:6b:2c:df: ce:a4:b6:af:4f:77:13:e0:99:0f:f5:11:a1:9b:68:bd:52:bb: 21:7e:06:92 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryd0YOvwX4AGbq8/v+4jI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzQ3YjE4ZGI4MzBmM2ViZTMzODZmYzlmYzhkYTk1ZDkz MjdhZDgwHhcNMjUxMjA2MDcwMTM0WhcNMjUxMjA3MDcwMTM0WjAzMTEwLwYDVQQD EyhlNWQ0ZmZhOWI4MWU0MzVkZDA0YjQ3MmNiZDEyYWUxNzA4YWUzMDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OTlNgCPHursyEqud48OpqjRzlJg sD4YZQmnYvnJKna2nNaJ+A7FG4N43sGYaVN5X6kruKmUJspEWNrgFl8W1n9kpg9m HvfVsIvlNWBm1OMPzmiC29hbFsiNcsAK5tf8/CCSopLE03PXsPetVRLtGaGiWb7g 2zIXcpimxoBJY+hbXqwMNnx6N5qzB8xpV5NJU2C4DiEpoy6Nq5fHo5IGidBdWLvN cnv0VrHIi2ArD5wKXDj6WrxewU1DhYfQyapzyARUYMbJYR/YNkAaFf8vV6t6I8hx hbje9mOlEW9ZBMsJYEZHjSEXh3Fytl8iKYdl8iVXGKMgPHkQnJy/q8FgswIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOXU/6m4HkNd0EtHLL0SrhcIrjCYMB8GA1UdIwQY MBaAFPt0exjbgw8+vjOG/J/I2pXZMnrYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zUjdHTnVERHo2LU00YjhuOGphbGRreWV0Zy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvZjJmOWVmLWQ2N2YtNDk0Yy1iNzJk LWJiZjQ5Yzc3YWYzOC8xLzEtM1I3R051RER6Ni1NNGI4bjhqYWxka3lldGcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzJjL2YyZjllZi1kNjdmLTQ5NGMtYjcyZC1iYmY0OWM3N2Fm MzgvMS8xLTNSN0dOdUREejYtTTRiOG44amFsZGt5ZXRnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhrz 1dPEG0aR2Mhqk+uKxHbYEFLnEl58Gq8jeTzodNhOEmXId4/IoYpfe+OimC1fAz8V eKoNTuHVaalUzCS7vuGvy3nuKU4Y0KsXNnocSMAon7HEP/5lw4KAhPhO7wWPYY+Z 9KT4sc9FECMWl5sV+eaSqUuMtRSAFI2BS++g0GvJLUk125vTdAzK4H2Uo51IfVn8 N6ZS628d5Rlw3zxkYf6xQ0n+VejO89ttZJud43W6kxs0lPfebfQml1Vqn9rBc2YF wzfwWX4WVGL3kVbefDY/DhPWNGdyIYJjYPrT3VKmxXYBFz7GayzfzqS2r093E+CZ D/URoZtovVK7IX4Gkg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:05 2025 by rpki-client