This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json) Hash identifier: KTEStH/zqWirJd39jni4TtXjnyzUoIkmof8zLndJ1qM= Subject key identifier: 42:E7:4C:18:22:74:55:5B:E7:6B:7E:98:AF:EF:5C:51:46:F3:7A:4B Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98 Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98 Certificate serial: 019AF240074BB46C206E40B2BBF734A6F73C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft Manifest number: 0FBF Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: ms+oR053oYmG+YDeFoBjTaC+SPEybG+50o08U9cwhMU=) 2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:07:4b:b4:6c:20:6e:40:b2:bb:f7:34:a6:f7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98 Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=42e74c182274555be76b7e98afef5c5146f37a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8e:df:0c:06:58:fb:ff:88:de:3d:c2:72:8e: 1d:1a:8d:6e:25:f5:f2:cc:6b:49:a9:5a:42:8b:c7: ec:4f:c8:72:c0:ec:2b:7e:90:83:0f:3f:6f:13:0e: d9:08:c2:7b:3a:78:34:bb:e5:61:45:19:5a:5f:9a: a7:0d:60:25:d1:ba:6f:ae:32:9a:30:3f:ec:7d:bf: c4:5d:0b:23:7a:01:c7:2d:4b:33:e7:07:fa:c3:fb: c6:c0:94:63:8e:e3:88:69:3c:12:ad:ac:e3:0a:30: 05:41:4c:3a:bc:4c:c8:f6:18:2d:27:e7:63:97:62: 59:14:63:a5:63:3d:93:4d:37:ae:5e:e3:30:d4:2c: fc:6f:01:c8:a3:50:e5:34:aa:23:d2:93:f2:46:7c: d3:fb:22:9b:82:6b:f4:80:7c:23:79:b2:7d:0f:2d: 1b:52:2a:42:26:77:8f:03:ac:fd:82:5c:65:c4:dd: 36:06:84:d3:c2:e2:99:f9:95:21:ec:a7:be:b0:bd: ad:28:a4:c3:bd:f3:0b:c1:81:b1:a0:84:e4:df:a1: 63:88:6b:64:5b:4f:59:76:9b:e9:90:47:14:16:e2: 90:15:1e:b9:df:55:a1:cc:60:4b:d7:6e:1e:68:79: 35:05:9c:bf:c6:60:b2:c4:a5:56:ab:f0:35:39:2f: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E7:4C:18:22:74:55:5B:E7:6B:7E:98:AF:EF:5C:51:46:F3:7A:4B X509v3 Authority Key Identifier: keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ae:c1:7b:25:19:04:2d:16:7a:21:10:8c:44:ff:e7:5d:84: 17:ae:f1:61:1b:a7:d1:74:75:05:77:18:05:e8:e2:97:f6:2d: f3:b1:35:24:2e:d1:b4:7b:60:5e:83:80:8e:c3:c4:25:79:38: ae:d7:f1:29:99:52:d9:d4:0d:fb:0a:8f:bc:2e:15:08:b3:36: c9:cf:d6:12:75:f1:b4:61:79:1f:7d:d5:7b:9a:71:6f:a4:b5: 09:3f:fd:6f:8c:e8:9d:bc:5f:22:64:be:b4:4e:92:1c:2b:bc: 84:94:56:7a:14:b4:71:26:b6:ab:49:56:fe:24:a9:19:78:68: b7:8c:b6:d8:f6:7b:4e:94:aa:ad:4b:59:32:a5:1e:86:ba:7b: ff:4f:0f:5d:f4:dc:16:3e:0f:5b:a7:5d:44:e5:af:ff:cd:1d: 10:f9:47:9d:5c:19:07:23:22:ae:e8:6c:54:1e:c9:d9:4f:9b: ec:f1:64:34:1f:e8:fe:3d:93:8c:7b:78:c0:a0:69:02:9a:09: ea:8e:b8:b4:c6:1b:35:78:1d:8d:42:3e:7f:4e:bf:65:d4:26: 24:54:70:3e:7d:8e:1b:10:30:a7:5c:ec:f4:21:df:b7:5a:7f: ff:e7:ab:dc:22:26:f1:4d:54:79:d6:1e:a8:a8:5a:9c:55:de: 98:6a:ca:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAdLtGwgbkCyu/c0pvc8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzliOTVkOGE1OGZjY2E2YTgxMmU3NzdlN2VmNjk0NTNm OGFjOTgwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD Eyg0MmU3NGMxODIyNzQ1NTViZTc2YjdlOThhZmVmNWM1MTQ2ZjM3YTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo7fDAZY+/+I3j3Cco4dGo1uJfXy zGtJqVpCi8fsT8hywOwrfpCDDz9vEw7ZCMJ7Ong0u+VhRRlaX5qnDWAl0bpvrjKa MD/sfb/EXQsjegHHLUsz5wf6w/vGwJRjjuOIaTwSrazjCjAFQUw6vEzI9hgtJ+dj l2JZFGOlYz2TTTeuXuMw1Cz8bwHIo1DlNKoj0pPyRnzT+yKbgmv0gHwjebJ9Dy0b UipCJnePA6z9glxlxN02BoTTwuKZ+ZUh7Ke+sL2tKKTDvfMLwYGxoITk36FjiGtk W09ZdpvpkEcUFuKQFR6531WhzGBL124eaHk1BZy/xmCyxKVWq/A1OS9ohwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELnTBgidFVb52t+mK/vXFFG83pLMB8GA1UdIwQY MBaAFBd5uV2KWPzKaoEud35+9pRT+KyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYt NDA3ZTNmZTYzOTQ1LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYtNDA3ZTNmZTYzOTQ1 LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmq7BeyUZ BC0WeiEQjET/512EF67xYRun0XR1BXcYBejil/Yt87E1JC7RtHtgXoOAjsPEJXk4 rtfxKZlS2dQN+wqPvC4VCLM2yc/WEnXxtGF5H33Ve5pxb6S1CT/9b4zonbxfImS+ tE6SHCu8hJRWehS0cSa2q0lW/iSpGXhot4y22PZ7TpSqrUtZMqUehrp7/08PXfTc Fj4PW6ddROWv/80dEPlHnVwZByMiruhsVB7J2U+b7PFkNB/o/j2TjHt4wKBpApoJ 6o64tMYbNXgdjUI+f06/ZdQmJFRwPn2OGxAwp1zs9CHft1p//+er3CIm8U1UedYe qKhanFXemGrK/A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:36 2025 by rpki-client