This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft File: t3gT9sVnClhoatw9SVV0QpXdFBk.mft (raw, json) Hash identifier: CuzWUkn+iUEf4Md9OtKkKR4pNjtNqMa8ihZhyUTO/U4= Subject key identifier: 6C:BD:45:F7:A5:DE:8C:1F:89:AB:C4:76:62:71:88:95:F7:22:0B:50 Authority key identifier: B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19 Certificate issuer: /CN=b77813f6c5670a58686adc3d4955744295dd1419 Certificate serial: 019AF389078178D1AFBABFF54D9CBEA4C3ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft Manifest number: 103A Signing time: Sat 06 Dec 2025 12:00:35 +0000 Manifest this update: Sat 06 Dec 2025 12:00:35 +0000 Manifest next update: Sun 07 Dec 2025 12:00:35 +0000 Files and hashes: 1: t3gT9sVnClhoatw9SVV0QpXdFBk.crl (hash: q0UEOBuW33J4cNM3ogwIhzDNCzAC+u3UOwRKVEsZgQM=) 2: xy0ayvCMPxVGUij5mpyeTNFKRNw.roa (hash: tXbOwwPUAQhZJRCjintnYpclKOHIFWoxy2lUX1RBhtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:07:81:78:d1:af:ba:bf:f5:4d:9c:be:a4:c3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b77813f6c5670a58686adc3d4955744295dd1419 Validity Not Before: Dec 6 12:00:35 2025 GMT Not After : Dec 7 12:00:35 2025 GMT Subject: CN=6cbd45f7a5de8c1f89abc47662718895f7220b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:67:69:8a:25:68:18:86:dd:0d:88:51:53: 3b:09:24:87:0e:f3:aa:b9:47:42:0d:82:bd:98:ce: 9d:3e:a6:89:1c:ec:9f:b1:fa:e1:2e:7c:97:1f:83: 48:64:8a:32:c6:7c:1a:9c:9c:ce:57:54:df:66:22: d1:02:5d:b9:e7:93:f9:a0:cb:b0:c8:70:15:f7:4e: 33:79:72:3c:d5:2f:8d:d1:f3:08:06:43:06:b1:74: 1a:92:e4:52:7a:f9:20:8f:61:e3:8a:dc:80:4b:9e: 52:6e:dd:e1:2c:dd:d0:a2:3e:a5:8f:06:30:1a:13: 5e:07:88:ca:13:af:3e:a0:75:8c:aa:25:25:20:31: 3a:d4:06:22:97:6f:dc:ea:48:4c:90:db:76:fa:fc: 81:5d:87:5e:a9:d2:40:1f:b4:9d:b8:ae:a9:1d:a0: 18:65:83:2d:22:c6:1a:53:2e:37:b8:89:4b:59:8b: 4e:72:95:c4:f7:28:9d:ea:32:c4:64:ae:c8:d7:98: d4:90:5a:6d:e2:30:4f:18:bf:b7:75:96:0a:c2:0c: df:44:8f:92:a9:cc:83:d0:e1:82:47:f8:40:c4:a7: 72:f2:e0:4e:9c:6a:5f:1e:81:77:0e:24:91:78:50: 9a:05:94:9d:b3:72:19:2f:f9:75:a6:ad:af:0b:5e: 0f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BD:45:F7:A5:DE:8C:1F:89:AB:C4:76:62:71:88:95:F7:22:0B:50 X509v3 Authority Key Identifier: keyid:B7:78:13:F6:C5:67:0A:58:68:6A:DC:3D:49:55:74:42:95:DD:14:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3gT9sVnClhoatw9SVV0QpXdFBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1f57d5-99c2-4ca9-9350-17735e2c255f/1/t3gT9sVnClhoatw9SVV0QpXdFBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:eb:1c:80:73:c5:e4:68:37:c0:40:bc:22:e8:89:7c:ec:8c: 20:83:2b:a5:3d:6d:61:37:04:8a:18:a4:de:dc:0a:52:94:49: a9:1c:8f:2d:c9:79:94:27:bd:c9:5e:c1:29:07:ca:59:c8:89: e6:b7:7c:b4:3c:11:19:22:a6:ae:b4:5a:35:23:94:ad:99:16: 4d:0a:2d:94:ef:ba:e2:7e:1f:1e:41:8d:bf:80:ed:af:32:1c: 8b:f4:76:11:4c:31:1d:fd:8d:6d:d6:91:1a:52:59:82:e7:06: c0:92:7c:e2:4a:70:8e:74:f3:42:ca:70:a1:7b:c1:11:a1:a7: aa:4b:f0:f4:96:17:3f:2f:d1:e1:e7:f0:1c:73:54:1a:ff:7e: eb:b6:40:6d:72:e4:a6:b4:65:44:c1:cf:22:25:77:d6:3a:d1: dc:9c:93:cf:15:ff:e4:b5:a3:11:08:99:7b:2e:fa:06:bd:3b: a2:df:ad:7a:19:94:39:46:88:47:48:3c:f0:69:af:38:71:d9: 40:72:cc:22:2d:9f:33:fb:08:49:95:6f:53:23:2b:b7:8b:6f: 25:1b:34:fe:b9:7f:e2:df:52:65:7a:85:04:0d:fd:e9:a1:51: 20:e5:d2:b0:e8:a7:9f:9e:6d:a6:47:1a:c7:51:20:67:22:04: 7a:b5:7c:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQeBeNGvur/1TZy+pMPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzgxM2Y2YzU2NzBhNTg2ODZhZGMzZDQ5NTU3NDQyOTVk ZDE0MTkwHhcNMjUxMjA2MTIwMDM1WhcNMjUxMjA3MTIwMDM1WjAzMTEwLwYDVQQD Eyg2Y2JkNDVmN2E1ZGU4YzFmODlhYmM0NzY2MjcxODg5NWY3MjIwYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUFnaYolaBiG3Q2IUVM7CSSHDvOq uUdCDYK9mM6dPqaJHOyfsfrhLnyXH4NIZIoyxnwanJzOV1TfZiLRAl2555P5oMuw yHAV904zeXI81S+N0fMIBkMGsXQakuRSevkgj2HjityAS55Sbt3hLN3Qoj6ljwYw GhNeB4jKE68+oHWMqiUlIDE61AYil2/c6khMkNt2+vyBXYdeqdJAH7SduK6pHaAY ZYMtIsYaUy43uIlLWYtOcpXE9yid6jLEZK7I15jUkFpt4jBPGL+3dZYKwgzfRI+S qcyD0OGCR/hAxKdy8uBOnGpfHoF3DiSReFCaBZSds3IZL/l1pq2vC14P2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGy9Rfel3owfiavEdmJxiJX3IgtQMB8GA1UdIwQY MBaAFLd4E/bFZwpYaGrcPUlVdEKV3RQZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNnVDlzVm5DbGhvYXR3OVNWVjBRcFhkRkJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xZjU3ZDUtOTljMi00Y2E5LTkzNTAt MTc3MzVlMmMyNTVmLzEvdDNnVDlzVm5DbGhvYXR3OVNWVjBRcFhkRkJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xZjU3ZDUtOTljMi00Y2E5LTkzNTAtMTc3MzVlMmMyNTVm LzEvdDNnVDlzVm5DbGhvYXR3OVNWVjBRcFhkRkJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmescgHPF 5Gg3wEC8IuiJfOyMIIMrpT1tYTcEihik3twKUpRJqRyPLcl5lCe9yV7BKQfKWciJ 5rd8tDwRGSKmrrRaNSOUrZkWTQotlO+64n4fHkGNv4DtrzIci/R2EUwxHf2NbdaR GlJZgucGwJJ84kpwjnTzQspwoXvBEaGnqkvw9JYXPy/R4efwHHNUGv9+67ZAbXLk prRlRMHPIiV31jrR3JyTzxX/5LWjEQiZey76Br07ot+tehmUOUaIR0g88GmvOHHZ QHLMIi2fM/sISZVvUyMrt4tvJRs0/rl/4t9SZXqFBA396aFRIOXSsOinn55tpkca x1EgZyIEerV8ng== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:15 2025 by rpki-client