This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft File: V3zQhta4KSWruLuBXmWIUlIuCSE.mft (raw, json) Hash identifier: 5lhLFg63yoTDrEwbhFRpXYyJ9aarCoPz8y1jWbf1j7E= Subject key identifier: 4A:03:E2:25:F5:8C:C7:13:26:9F:1A:78:2E:92:84:D2:F6:64:0E:D0 Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21 Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921 Certificate serial: 019AF35266CF494ED84DCA22668D2E3EACBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 11:00:54 +0000 Manifest this update: Sat 06 Dec 2025 11:00:54 +0000 Manifest next update: Sun 07 Dec 2025 11:00:54 +0000 Files and hashes: 1: 2rRfCyoNB-FJKFhJjElIAYCjuZM.roa (hash: BxYRtCrYD8JZ1KlROq/oLLjDfPXIXRywkgLQEAE4Bdo=) 2: V3zQhta4KSWruLuBXmWIUlIuCSE.crl (hash: 669nwQ5hxYHBGhLSDJ0jILopD+ZYnwyVgpI9p461H78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:66:cf:49:4e:d8:4d:ca:22:66:8d:2e:3e:ac:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921 Validity Not Before: Dec 6 11:00:54 2025 GMT Not After : Dec 7 11:00:54 2025 GMT Subject: CN=4a03e225f58cc713269f1a782e9284d2f6640ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:b7:a3:59:47:76:a9:5d:f3:f7:dd:da:2a: ad:5e:e3:6d:a4:a0:8d:73:50:af:eb:71:fd:19:cd: 30:8d:21:7c:a0:8b:a5:f5:48:fd:fd:54:3c:b4:a3: d0:e8:26:83:e4:9a:a7:ae:6c:ad:5e:d0:5d:51:f8: 06:c7:1e:7c:39:34:d0:c1:30:1e:53:99:87:06:80: 98:e5:e8:2f:c8:b1:ef:7a:68:1c:8e:83:c3:9a:3b: d1:77:5d:17:56:39:5a:6f:7b:2b:6a:b6:75:1b:a4: b0:b9:fb:d6:3f:21:52:ff:83:ee:26:4e:20:e7:2c: 31:64:33:3f:c6:9b:10:a3:a0:ac:f9:08:ba:62:07: 60:30:87:46:4d:17:be:75:f2:31:7d:71:b2:34:9e: d0:4f:ee:af:00:45:25:49:79:05:e5:1f:cb:a0:29: 65:af:3d:b4:a4:79:f8:ff:f9:4e:b7:a1:f1:43:07: f6:ea:6b:a2:b7:73:f8:e3:ed:18:ff:a0:a8:9b:1e: cc:e3:60:da:62:05:46:2a:0c:09:27:2c:80:bf:5e: 1e:ee:82:4a:ab:55:c9:08:53:52:4c:b4:b2:b3:ca: bc:16:a2:52:ca:04:7a:4f:62:35:5a:a3:7a:73:64: 49:41:74:6f:f8:67:96:c9:d3:19:36:df:73:e6:a4: 47:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:03:E2:25:F5:8C:C7:13:26:9F:1A:78:2E:92:84:D2:F6:64:0E:D0 X509v3 Authority Key Identifier: keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e0:d7:af:f0:e6:bf:85:ed:a1:13:91:af:fb:0d:5c:fa:16: 53:35:d0:47:3d:05:f0:86:de:b9:f9:1d:48:b3:6c:ef:c8:0e: c7:39:5f:e7:e4:88:3d:13:32:5f:d9:c3:00:0b:7d:42:61:84: 34:97:80:7e:dd:f2:09:9b:cf:83:29:03:dd:f0:02:ea:09:7f: 6a:21:63:e6:67:63:0d:7b:36:f4:20:41:4b:87:f6:f0:2e:0d: fb:aa:74:e2:3a:c2:d4:0c:a0:e6:8c:aa:99:94:3e:45:5b:d6: 0f:e1:b3:e8:92:18:0b:ef:43:6b:ee:4c:ad:fc:8f:cc:0a:d2: ab:ce:67:1a:5a:fe:de:1d:2f:2e:48:96:70:04:7f:9a:86:fa: 93:66:bf:10:af:15:75:bc:9c:ef:50:98:cc:c5:44:be:e5:70: e0:7e:d2:9a:d4:40:bc:b1:fb:f7:fb:65:09:48:42:3b:a7:63: 5d:f1:16:31:f5:75:91:35:8d:b9:42:dd:c5:77:36:39:07:3d: cf:05:14:cc:2d:f6:8a:fd:7c:3c:f2:83:4c:4a:e0:42:7c:5e: 1c:20:87:14:13:4b:c4:cd:eb:18:8a:01:26:ef:0f:d9:a9:83: 5f:fe:94:2e:93:d0:a4:49:cb:b4:32:1e:19:c3:20:13:41:7e: 16:ec:1b:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUmbPSU7YTcoiZo0uPqy7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3N2NkMDg2ZDZiODI5MjVhYmI4YmI4MTVlNjU4ODUyNTIy ZTA5MjEwHhcNMjUxMjA2MTEwMDU0WhcNMjUxMjA3MTEwMDU0WjAzMTEwLwYDVQQD Eyg0YTAzZTIyNWY1OGNjNzEzMjY5ZjFhNzgyZTkyODRkMmY2NjQwZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbq3o1lHdqld8/fd2iqtXuNtpKCN c1Cv63H9Gc0wjSF8oIul9Uj9/VQ8tKPQ6CaD5JqnrmytXtBdUfgGxx58OTTQwTAe U5mHBoCY5egvyLHvemgcjoPDmjvRd10XVjlab3srarZ1G6SwufvWPyFS/4PuJk4g 5ywxZDM/xpsQo6Cs+Qi6YgdgMIdGTRe+dfIxfXGyNJ7QT+6vAEUlSXkF5R/LoCll rz20pHn4//lOt6HxQwf26muit3P44+0Y/6Comx7M42DaYgVGKgwJJyyAv14e7oJK q1XJCFNSTLSys8q8FqJSygR6T2I1WqN6c2RJQXRv+GeWydMZNt9z5qRHAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoD4iX1jMcTJp8aeC6ShNL2ZA7QMB8GA1UdIwQY MBaAFFd80IbWuCklq7i7gV5liFJSLgkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjkt NzIwOGNkOThkODgxLzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjktNzIwOGNkOThkODgx LzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuDXr/Dm v4XtoRORr/sNXPoWUzXQRz0F8IbeufkdSLNs78gOxzlf5+SIPRMyX9nDAAt9QmGE NJeAft3yCZvPgykD3fAC6gl/aiFj5mdjDXs29CBBS4f28C4N+6p04jrC1Ayg5oyq mZQ+RVvWD+Gz6JIYC+9Da+5MrfyPzArSq85nGlr+3h0vLkiWcAR/mob6k2a/EK8V dbyc71CYzMVEvuVw4H7SmtRAvLH79/tlCUhCO6djXfEWMfV1kTWNuULdxXc2OQc9 zwUUzC32iv18PPKDTErgQnxeHCCHFBNLxM3rGIoBJu8P2amDX/6ULpPQpEnLtDIe GcMgE0F+Fuwbzg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:20 2025 by rpki-client