This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft File: 9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft (raw, json) Hash identifier: AtFf5Ueoazgqv/3atcl7dTAi0S5xKHf+xgVtHDhcBJ8= Subject key identifier: 2F:A6:E1:AD:BC:67:2D:3C:8B:1A:C2:27:87:DE:CA:F0:2D:B9:23:0E Authority key identifier: F5:19:77:AA:22:77:72:5E:D1:0E:B5:67:4D:5D:A1:D6:62:2F:41:B7 Certificate issuer: /CN=f51977aa2277725ed10eb5674d5da1d6622f41b7 Certificate serial: 019AF1642C8E1501DCC814F581D16C054F43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft Manifest number: 3C Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: 9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.crl (hash: XRxLgNGxOWMGeuY8ztWEfessGp1BM9JS7qm2S638nwM=) 2: VPTnxDq1yxj21KAMEyNJXCnV97k.roa (hash: oMhWVkQ76OyXPdwoLbpkiQAp4FEu2WM8nljd52fsJxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft rsync://rpki.ripe.net/repository/DEFAULT/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2c:8e:15:01:dc:c8:14:f5:81:d1:6c:05:4f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51977aa2277725ed10eb5674d5da1d6622f41b7 Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=2fa6e1adbc672d3c8b1ac22787decaf02db9230e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:ac:d2:b7:92:23:f5:02:7a:c8:b4:f7:ce: f5:bc:8b:f2:f5:14:a6:40:0f:f0:90:30:45:26:dc: 2a:e2:ac:b7:92:90:ba:7c:18:40:1b:01:07:d9:37: f0:93:26:f4:0a:39:08:0f:f5:6f:51:fa:ca:e9:72: 15:8e:8e:dd:85:ad:4e:95:7c:ff:16:68:d9:75:67: 2b:9a:5e:c8:e8:69:ce:5b:dd:9e:cb:04:d8:04:8d: c4:ba:56:5d:bf:cf:95:b6:2d:24:cf:cb:3e:ea:4b: e3:3d:8d:dd:da:d0:68:73:1b:7f:80:c1:35:61:76: 09:bd:9d:e9:c2:e7:53:07:51:51:27:e2:c7:e0:ee: fb:75:1b:ca:4c:4d:49:b1:0a:dc:5c:fa:91:6e:8b: 7e:50:00:59:47:7e:85:cc:41:9a:ae:be:2e:2a:82: b0:b3:3e:c1:1e:bf:50:6f:9a:5e:3b:ce:5d:67:92: ed:aa:4e:b6:3f:3e:3f:5a:b6:db:df:80:b9:e8:b4: bc:78:5c:9b:db:7a:f2:d4:62:f9:5b:df:27:df:24: 5b:10:99:08:ab:ce:f5:32:ac:b0:de:9a:80:a1:9d: c2:1f:02:79:17:d1:20:af:91:2c:27:50:0c:f7:6c: 6e:54:83:11:52:a0:b3:f0:18:ac:29:18:9f:6a:e4: aa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A6:E1:AD:BC:67:2D:3C:8B:1A:C2:27:87:DE:CA:F0:2D:B9:23:0E X509v3 Authority Key Identifier: keyid:F5:19:77:AA:22:77:72:5E:D1:0E:B5:67:4D:5D:A1:D6:62:2F:41:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b8:8a:38:48:eb:c8:58:7a:77:d9:0d:e0:3d:55:93:a5:7b: b5:71:ca:86:2e:58:80:f3:3e:3a:85:e5:55:9d:af:1d:65:e1: 77:eb:26:18:44:eb:0d:0a:2b:79:af:53:2e:37:9a:c9:bf:d6: f3:ee:6e:d1:bb:5d:29:cf:5e:34:fa:9a:07:bd:fe:e9:1d:41: ad:d1:80:5c:2d:7f:9c:46:02:ea:03:06:67:9f:de:e2:75:ef: ae:df:6f:f5:84:af:25:54:cb:99:73:6e:65:f1:22:39:d8:59: b5:ed:77:32:45:92:61:53:1c:7c:2e:0c:f4:cd:0f:f9:19:29: 5d:da:12:f7:7a:14:40:9d:72:8b:c8:5c:c8:fc:39:c9:66:be: f3:1a:ba:71:3e:bd:b9:43:3a:6d:56:6d:89:bf:95:f0:d5:8e: fa:1d:a6:02:86:6c:1a:21:50:6c:6a:3b:17:14:77:5f:47:5a: 52:13:62:2d:f4:da:ae:71:3b:ef:04:f2:10:ff:e1:df:12:78: db:7b:08:e4:40:ea:ce:21:6c:83:2a:10:16:f2:ec:31:ca:dd: fc:f5:85:67:30:29:bc:c7:34:3e:60:4d:2c:dc:7c:53:63:71: 4a:7d:85:39:db:54:09:e0:e3:9d:13:2d:a4:b2:f3:2d:8f:98: 21:56:77:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCyOFQHcyBT1gdFsBU9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTk3N2FhMjI3NzcyNWVkMTBlYjU2NzRkNWRhMWQ2NjIy ZjQxYjcwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD EygyZmE2ZTFhZGJjNjcyZDNjOGIxYWMyMjc4N2RlY2FmMDJkYjkyMzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0+s0reSI/UCesi09871vIvy9RSm QA/wkDBFJtwq4qy3kpC6fBhAGwEH2Tfwkyb0CjkID/VvUfrK6XIVjo7dha1OlXz/ FmjZdWcrml7I6GnOW92eywTYBI3EulZdv8+Vti0kz8s+6kvjPY3d2tBocxt/gME1 YXYJvZ3pwudTB1FRJ+LH4O77dRvKTE1JsQrcXPqRbot+UABZR36FzEGarr4uKoKw sz7BHr9Qb5peO85dZ5Ltqk62Pz4/Wrbb34C56LS8eFyb23ry1GL5W98n3yRbEJkI q871Mqyw3pqAoZ3CHwJ5F9Egr5EsJ1AM92xuVIMRUqCz8BisKRifauSq3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+m4a28Zy08ixrCJ4feyvAtuSMOMB8GA1UdIwQY MBaAFPUZd6oid3Je0Q61Z01dodZiL0G3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJsM3FpSjNjbDdSRHJWblRWMmgxbUl2UWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80NmVlYzEtODZlMy00NzliLTkzY2Yt MTAzNWRjYzlkNDg5LzEvOVJsM3FpSjNjbDdSRHJWblRWMmgxbUl2UWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80NmVlYzEtODZlMy00NzliLTkzY2YtMTAzNWRjYzlkNDg5 LzEvOVJsM3FpSjNjbDdSRHJWblRWMmgxbUl2UWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbiKOEjr yFh6d9kN4D1Vk6V7tXHKhi5YgPM+OoXlVZ2vHWXhd+smGETrDQorea9TLjeayb/W 8+5u0btdKc9eNPqaB73+6R1BrdGAXC1/nEYC6gMGZ5/e4nXvrt9v9YSvJVTLmXNu ZfEiOdhZte13MkWSYVMcfC4M9M0P+RkpXdoS93oUQJ1yi8hcyPw5yWa+8xq6cT69 uUM6bVZtib+V8NWO+h2mAoZsGiFQbGo7FxR3X0daUhNiLfTarnE77wTyEP/h3xJ4 23sI5EDqziFsgyoQFvLsMcrd/PWFZzApvMc0PmBNLNx8U2NxSn2FOdtUCeDjnRMt pLLzLY+YIVZ3MQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:17 2025 by rpki-client