This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json) Hash identifier: bgZMFYfkAkGn8ny2/v40w83k4uGFp1UWUFhZcpl7oWw= Subject key identifier: BB:8D:56:CB:57:37:79:FD:DB:23:5F:33:B3:E9:77:AD:F4:73:9C:9D Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Certificate serial: 019AF3C05925B82CC49FB80239FF650EB950 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 13:01:00 +0000 Manifest this update: Sat 06 Dec 2025 13:01:00 +0000 Manifest next update: Sun 07 Dec 2025 13:01:00 +0000 Files and hashes: 1: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: Jw42zzJg4fGXGdiA+thODuMdiyiAh43ARF5gAeHR0Ho=) 2: Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa (hash: jrXo/rmKfJlmke1E58p0Fv3ALUTTjd9LLG6tbA+jiaw=) 3: V04OCx0o1Bg0TgD8MO6kNsFMhog.roa (hash: 3a02UAIxWYHpz8tUKE7mHvONTRM/Wnqwu/RQszMGhpw=) 4: js9oNFtAP6uoXkguET2ifOtGxFk.roa (hash: xlI8bBSGf/iOY2KLlBGfTCvLGclFsfTElrxGe6FfxvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:59:25:b8:2c:c4:9f:b8:02:39:ff:65:0e:b9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Validity Not Before: Dec 6 13:01:00 2025 GMT Not After : Dec 7 13:01:00 2025 GMT Subject: CN=bb8d56cb573779fddb235f33b3e977adf4739c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0c:4d:4f:ea:e1:5e:4b:63:2e:bd:16:25:6c: db:69:bf:b4:65:14:c8:a6:bd:ec:ca:25:42:d3:7e: 75:a9:f4:cd:cf:25:c2:b5:59:f3:9d:83:80:7a:f3: 47:db:b4:5e:1c:cc:1e:4e:de:c0:16:cc:79:6b:a8: 97:f0:1b:58:5f:70:b1:3b:f5:7b:0b:ed:0b:a4:a2: a9:60:aa:33:d9:c2:52:fe:98:f2:22:1f:4c:1f:ab: 7a:4e:54:31:6b:e0:25:c7:e7:62:4f:34:9a:9f:6e: e9:06:87:6c:ef:99:89:a9:df:9e:fa:13:be:85:6e: 52:d2:a2:88:91:fd:f4:3b:d1:10:ac:46:75:7d:24: 71:7b:ba:72:8a:80:e4:27:f5:cb:71:98:b7:13:15: 20:ef:6f:e8:36:84:2b:07:e1:b2:40:09:e8:6e:6b: 15:8a:57:75:77:da:74:b3:4c:b9:34:c1:e0:f1:44: 1c:96:9d:1a:36:ce:b4:e1:04:e5:71:e4:27:5f:ae: c3:72:e2:00:14:fd:e5:d7:85:f1:de:4e:8e:96:58: 93:41:34:05:28:93:dd:1c:81:76:32:2d:18:80:be: c0:c9:ec:99:14:5b:a2:35:c0:d2:b8:67:ff:16:c0: 72:fa:22:8c:3d:df:4f:87:38:b5:83:83:84:74:99: 01:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8D:56:CB:57:37:79:FD:DB:23:5F:33:B3:E9:77:AD:F4:73:9C:9D X509v3 Authority Key Identifier: keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:16:d6:47:1d:8a:d5:a1:b5:47:b3:d2:05:53:4f:be:08:55: 82:96:08:00:fa:1d:27:75:22:15:86:f2:fc:8f:1c:11:c7:23: 33:bc:52:e2:5b:92:a7:7b:7d:be:22:aa:ed:97:f3:e5:83:bf: 6e:05:c8:ab:e6:30:29:d0:1c:ca:6b:6b:ab:4f:be:64:70:c1: 4e:d0:7c:6e:7b:17:db:7a:fb:c3:a7:2e:20:de:13:6c:a7:a1: 4d:be:9f:d0:4a:3f:22:46:24:e3:99:7a:d9:9a:9f:4c:18:5d: ed:27:6a:d5:74:41:f7:27:2c:e8:65:a1:6f:e5:05:48:90:70: ed:f7:b3:fb:a2:aa:38:ef:57:45:5c:fb:5c:7b:fe:37:d1:f2: c0:69:8f:5b:b6:c6:f4:70:2b:6e:d1:6a:99:b9:e3:d9:c5:53: 8d:fb:4b:35:c1:2f:45:31:51:e6:8b:ff:44:b3:87:a7:8c:11: 56:89:cb:50:be:ba:c4:92:ee:7a:d7:43:fb:34:0b:9f:18:82: 65:60:81:8d:b5:2a:7b:3e:2b:1a:f6:d3:67:3c:80:ed:ea:86: 34:58:9c:3a:67:46:25:31:44:16:45:10:79:9b:74:1b:16:a8: 84:36:67:72:ed:5a:f7:2f:da:c3:8d:ce:71:99:b8:3f:f3:97: c9:88:01:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwFkluCzEn7gCOf9lDrlQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGRlM2FkMThkZDBhZTE0MzYyZDBlODRkZWMwNDNkMzc5 Y2MyNDIwHhcNMjUxMjA2MTMwMTAwWhcNMjUxMjA3MTMwMTAwWjAzMTEwLwYDVQQD EyhiYjhkNTZjYjU3Mzc3OWZkZGIyMzVmMzNiM2U5NzdhZGY0NzM5YzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigxNT+rhXktjLr0WJWzbab+0ZRTI pr3syiVC0351qfTNzyXCtVnznYOAevNH27ReHMweTt7AFsx5a6iX8BtYX3CxO/V7 C+0LpKKpYKoz2cJS/pjyIh9MH6t6TlQxa+Alx+diTzSan27pBods75mJqd+e+hO+ hW5S0qKIkf30O9EQrEZ1fSRxe7pyioDkJ/XLcZi3ExUg72/oNoQrB+GyQAnobmsV ild1d9p0s0y5NMHg8UQclp0aNs604QTlceQnX67DcuIAFP3l14Xx3k6OlliTQTQF KJPdHIF2Mi0YgL7AyeyZFFuiNcDSuGf/FsBy+iKMPd9Phzi1g4OEdJkBvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuNVstXN3n92yNfM7Ppd630c5ydMB8GA1UdIwQY MBaAFCCN460Y3QrhQ2LQ6E3sBD03nMJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjIt YmRmNmU0Mjk0YzJlLzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjItYmRmNmU0Mjk0YzJl LzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxbWRx2K 1aG1R7PSBVNPvghVgpYIAPodJ3UiFYby/I8cEccjM7xS4luSp3t9viKq7Zfz5YO/ bgXIq+YwKdAcymtrq0++ZHDBTtB8bnsX23r7w6cuIN4TbKehTb6f0Eo/IkYk45l6 2ZqfTBhd7Sdq1XRB9ycs6GWhb+UFSJBw7fez+6KqOO9XRVz7XHv+N9HywGmPW7bG 9HArbtFqmbnj2cVTjftLNcEvRTFR5ov/RLOHp4wRVonLUL66xJLuetdD+zQLnxiC ZWCBjbUqez4rGvbTZzyA7eqGNFicOmdGJTFEFkUQeZt0GxaohDZncu1a9y/aw43O cZm4P/OXyYgBOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:18 2025 by rpki-client